IBM i versions 7.3 through 7.6 expose their TCP/IP stack to a remotely-triggered denial of service when processing zero-length TCP option fields. Classified as CWE-835 (Loop with Unreachable Exit Condition), the flaw causes the TCP stack to enter an infinite or unrecoverable processing loop upon receipt of malformed TCP options, exhausting CPU or thread resources and disrupting hosted business services. No public exploit code and no confirmed active exploitation (CISA KEV) have been identified at time of analysis, but the AV:N/AC:L/PR:N/UI:N CVSS vector means any network-reachable IBM i system is exploitable without credentials or special conditions.
Memory exhaustion in Red Hat Advanced Cluster Management for Kubernetes 2's search-v2-api component allows unauthenticated remote attackers to crash the search-api pod by submitting HTTP requests with unique random bearer tokens. Each unique token creates a permanent, uncleaned entry in the unbounded tokenReviews cache; sustained submission accumulates entries until the pod exhausts available memory and is killed. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms trivial, unauthenticated exploitability with no prerequisites. No public exploit has been identified and the vulnerability is not listed in the CISA KEV catalog, though the low attack complexity makes automated exploitation straightforward.
Unbounded WebSocket fragment aggregation in http4s-blaze-server allows any client that completes a WebSocket handshake to exhaust the server JVM heap and trigger an OutOfMemoryError, crashing the blaze selector thread. Any Scala application built on BlazeServerBuilder that exposes WebSocket routes is affected without any non-default configuration - the existing maxWebSocketBufferSize setting bounds only individual frames, not the aggregate. No public exploit has been identified at time of analysis, but exploitation is trivially low-complexity: a single connection sending a stream of continuation frames that never assert FIN is sufficient.
Tag-based S3 policy bypass in RustFS distributed object storage allows authenticated users on versions 1.0.0-alpha.64 through pre-rc.1 to circumvent object-level access controls when OPA external authorization is active. The IAM subsystem incorrectly initializes PreparedIamAuth.needs_existing_object_tag for the OPA mode, causing maybe_merge_object_tag_conditions to silently omit s3:ExistingObjectTag/* condition values from policy evaluation - meaning any policy restriction keyed on object tags is effectively ignored. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; a vendor-released fix is available in 1.0.0-rc.1.
Denial of service in IBM Security Verify Access and IBM Verify Identity Access - including container editions - allows remote unauthenticated attackers to crash or indefinitely stall authentication services by triggering an infinite loop (CWE-835). All versions from 10.0 through 10.0.9.2 (Security Verify Access) and 11.0 through 11.0.3 (Verify Identity Access) are affected across both appliance and container deployments. IBM has released a patch; no public exploit code exists and no active exploitation has been recorded by CISA at time of analysis.
SAML response impersonation in JFrog Artifactory (all tracked versions per CPE) permits an attacker who possesses a valid SAML response to assume the identity of another user under specific conditions. Rooted in CWE-347 (Improper Verification of Cryptographic Signature), the flaw indicates Artifactory fails to adequately validate SAML assertion signatures or cryptographic bindings - a class of weakness commonly exploited via XML Signature Wrapping (XSW) or assertion replay attacks. The 'JWT Attack' tag suggests Artifactory may internally convert SAML assertions to JWT tokens, and the signature verification gap may exist at that translation layer. No public exploit code and no CISA KEV listing have been identified at time of analysis.
CryptoPro Secure Disk for BitLocker before v7.7.4 stores initramfs contents in plaintext on disk, allowing a physical attacker to recover cryptographic keys and other secrets without defeating the encryption layer. The vulnerability was publicly disclosed at Black Hat USA 2026 by researcher Burch in a presentation titled 'The Cost of Obscurity,' suggesting the vendor's security model relied on implementation obscurity rather than cryptographic assurance. No public exploit identified at time of analysis; EPSS at 0.17% reflects the physical-access prerequisite that limits widespread automated exploitation.
CryptoPro Secure Disk for BitLocker before v7.7.4 silently falls back to plaintext volume mounting when a decryption error occurs, negating the entire confidentiality guarantee that BitLocker is meant to enforce. Disclosed publicly at Black Hat USA 2026 in research titled 'The Cost of Obscurity' (Burch), the flaw demonstrates how improper error handling in encryption middleware can fully undermine the security layer it wraps. No public exploit code has been identified at time of analysis, though the Black Hat presentation and accompanying whitepaper are publicly available, substantially lowering the knowledge barrier for exploitation; EPSS stands at a low 0.17% but may shift as presentation details circulate.
Request smuggling in Apple ServiceTalk's HTTP/1.x implementation exposes services to request pipeline injection by exploiting improper parsing of malformed Transfer-Encoding headers. All ServiceTalk deployments running versions prior to 0.42.65 are vulnerable, with the CVSS vector confirming unauthenticated network exploitation with high integrity impact. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the EPSS score of 0.14% reflects low but non-zero current exploitation probability.
Boot-stage integrity bypass in CPSD CryptoPro Secure Disk for BitLocker before v7.7.4 allows an attacker who can present a LUKS-encrypted volume during the pre-boot phase to cause bootxsa.efi to skip all CryptoPro file integrity checks, enabling execution of tampered EFI boot components. Publicly disclosed at Black Hat USA 2026 with an accompanying whitepaper, substantially raising the bar for exploit development. No CISA KEV listing and EPSS at the 1st percentile indicate no observed mass exploitation, but the research-quality disclosure significantly reduces attacker effort for targeted campaigns against affected endpoints.
Authorization bypass in Apache Airflow's Backfill API (all versions prior to 3.3.1) allows any authenticated user holding edit permission on a single DAG to read, pause, cancel, and fail backfills belonging to any other DAG. The flaw is a type-parsing mismatch in FastAPI's dependency resolution layer: the authorization dependency parsed the `backfill_id` path parameter with Python's `int()` while the route handler declared `NonNegativeInt` via Pydantic, which in lax mode coerces inputs like `'42.0'` that `int()` rejects-causing the two components to authorize and act on different DAGs. Backfill IDs are sequential, making cross-DAG enumeration trivial; no public exploit code has been identified at time of analysis, though the technique is directly reproducible from the published patch diff.
Header injection in http4s blaze-server allows remote unauthenticated attackers to smuggle arbitrary HTTP headers - including X-Forwarded-For, X-Real-IP, and internal authorization headers - by embedding them in HTTP/1.1 chunked transfer encoding trailer fields, which blaze-server incorrectly merges into Request.headers. Applications deployed behind a proxy that sanitizes request headers but forwards chunked bodies with trailers intact are fully exposed: attackers can spoof client IPs to bypass allow-lists, forge HTTPS scheme indicators, inject internal authentication tokens, or force termination of pooled backend connections via a promoted Connection:close trailer. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.
Authentication bypass in IBM Security Verify Access 10.0-10.0.9.2 and IBM Verify Identity Access 11.0-11.0.3 (including container deployments) allows network-accessible unauthenticated attackers to circumvent the Reverse Proxy component's cryptographic validation of user-supplied data under certain configurations. The CVSS 7.4 (AV:N/AC:H/PR:N) rating reflects high confidentiality and integrity impact with no privilege requirement, though exploitation depends on specific deployment configurations being active. No public exploit code or CISA KEV listing has been identified at time of analysis, positioning this as a targeted rather than mass-exploitation risk.
Remote unauthenticated OS command injection in IBM Informix Dynamic Server 12.10, 14.10, and 15.0 allows network-accessible attackers to execute arbitrary system commands under the Informix service account without any credentials or user interaction. Rooted in CWE-78, the flaw arises from insufficient validation of user-supplied input before it is passed to OS-level execution routines, spanning three major version branches of the product. No CISA KEV listing or public proof-of-concept has been identified at time of analysis; a vendor patch is available via the IBM advisory.
Remote code execution and scheduler-process disruption in Apache Airflow 3.3.0 stems from unguarded deserialization of task instance `next_kwargs` during the scheduler's unconditional `awaiting_input` sweep, a code path introduced as part of the 3.3.0 human-in-the-loop task rewrite. Any authenticated DAG author who can influence task state through the task execution API can supply a crafted payload that causes arbitrary module import and object instantiation inside the scheduler process, or terminate the scheduler job entirely. No public exploit has been identified at time of analysis, but a vendor-released patch exists in 3.3.1; deployments that previously patched CVE-2026-58076 are still vulnerable through this distinct code path and must upgrade.
Incorrect privilege assignment in GitLab Enterprise Edition allows a user with pending group membership to receive permissions granted by a custom role, bypassing the membership approval gate entirely. The flaw spans all GitLab EE versions from 15.6 through 19.2.1 - a window of approximately four years - and is documented via a public HackerOne report, though no active exploitation has been recorded in the CISA KEV catalog. The vendor-assigned CVSS score of 3.3 accurately reflects the narrow exploitation conditions: high attack complexity and high privilege prerequisites constrain real-world impact to partial confidentiality and integrity effects within a single affected group.
Local kernel privilege escalation and denial of service in NetBSD's hdaudio(4) driver arise from two compounding flaws: the /dev/hdaudioN device nodes enforce no access control, allowing any unprivileged local user to invoke HDAUDIO_FGRP_SETCONFIG, and the detach path in hdafg_detach() is not race-safe against concurrent DMA activity. A two-thread attack - one repeatedly reconfiguring the audio function group, one keeping DMA and IRQs live - wins a use-after-free race where a latched DMA interrupt dereferences a freed callback pointer, producing outcomes from audio-subsystem crashes and kernel panics to potential kernel-level privilege escalation. A public proof-of-concept is available, and no specific patched release version has been confirmed, leaving remediation dependent on source-level kernel rebuilds.
Boot partition authentication bypass in CPSD CryptoPro Secure Disk for BitLocker before v7.7.4 allows an attacker who can manipulate disk partition layout to redirect boot-time code execution to a crafted Linux partition. The product fails to cryptographically verify the integrity of the intended boot partition and instead selects the first partition whose type matches a hardcoded value - a logic flaw that allows a spoofed partition to preempt the legitimate boot target and execute arbitrary code at elevated privilege. No public exploit or CISA KEV listing is confirmed at time of analysis, though a Black Hat USA 2026 research presentation by Burch ('The Cost of Obscurity') describes the finding, suggesting detailed technical disclosure has occurred.
Privilege escalation via command injection in IBM Security Verify Access and IBM Verify Identity Access allows an authenticated administrator to execute system commands beyond their authorized scope. Affected products span IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 (including the container variant), with network-accessible administrative interfaces as the attack surface. Full confidentiality, integrity, and availability compromise of the underlying system is possible; no public exploit identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog.
OS command injection in IBM Security Verify Access and IBM Verify Identity Access management interfaces enables already-privileged administrators to execute arbitrary operating system commands beyond their intended scope by submitting crafted HTTP requests to the vulnerable endpoint. Affected deployments span IBM Security Verify Access 10.0-10.0.9.2, IBM Verify Identity Access 11.0-11.0.3, and the containerized variant of the latter - covering both legacy on-premises and modern container-based identity infrastructure. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the full confidentiality, integrity, and availability impact against identity management infrastructure elevates organizational risk well beyond what the PR:H prerequisite might suggest at face value.
Privilege escalation in JFrog Artifactory enables an authenticated Project Resource Manager to acquire broader administrative privileges under unspecified triggering conditions. The flaw, rooted in CWE-269 (Improper Privilege Management), violates role boundary enforcement within Artifactory's access control system, potentially granting full control over repositories, artifacts, and platform configuration. No public exploit code has been identified and the vulnerability is not listed in CISA KEV at the time of analysis, though the CVSS 7.2 High score with full confidentiality, integrity, and availability impact underscores the post-exploitation risk.
Missing authorization in CamaleonCMS exposes four plugin-administration endpoints - attack, front_cache, cama_meta_tag, and cama_contact_form - to any authenticated low-privileged user, entirely bypassing administrator-level access controls. An attacker holding a standard account can modify live plugin configurations, including injecting arbitrary HTML into the contact form's before_html field to plant a persistent XSS payload. When chained, this broken access control enables full account takeover by stealing an administrator session token; a vendor patch is available and no public exploit has been identified at time of analysis.
JFrog Artifactory's JWT handling allows a holder of a valid integration credential to impersonate arbitrary users under specific conditions, exploiting an improper cryptographic signature verification flaw (CWE-347). Any actor in possession of a legitimate integration token - such as a CI/CD service account - can craft or manipulate JWT tokens to assume the identity of other users, including privileged ones, gaining their full access to repositories and administrative functions. No public exploit has been identified at time of analysis, and the vulnerability has not been added to the CISA KEV catalog; however, the full C:H/I:H/A:H CVSS impact profile warrants prompt patching in environments where integration credentials are broadly distributed.
Path traversal in rConfig's file download endpoint exposes arbitrary files readable by the web server process to authenticated users. Affected versions prior to 8.2.13 fail to sanitize the filename GET parameter in the download_export() method, allowing ../ sequences to escape the exports directory. An attacker with valid credentials can exfiltrate sensitive application files including .env files containing encryption keys, database credentials, and mail configuration. No public exploit code or KEV listing has been identified at time of analysis.
Watch API authorization bypass in etcd allows any authenticated low-privilege user to silently read the entire keyspace beyond their granted key. A user holding a READ grant on a single exact key can invoke the Watch gRPC API with clientv3.WithFromKey() to receive streaming events for every key lexicographically greater than or equal to their permitted key - an unbounded confidentiality breach against etcd's RBAC model. Affected versions span etcd prior to 3.5.33, 3.6.0-3.6.13, and 3.7.0 pre-releases; fixes are released as 3.5.33, 3.6.14, and 3.7.1. No public exploit code or CISA KEV listing exists at time of analysis, but the trivial exploit path (a single standard gRPC flag) makes weaponization straightforward for any attacker with valid credentials.
Path traversal in IBM i 7.3 through 7.6 allows remote authenticated attackers to read sensitive files and write or manipulate files outside intended directory boundaries. The vulnerability is reachable over the network with only low-privilege credentials, making it accessible to a broad set of authenticated users in multi-tenant or shared IBM i environments. No active exploitation or public proof-of-concept has been identified at time of analysis, and IBM has released a patch via their support portal.
Improper authorization in Craft CMS 5.0.0-RC1 through 5.10.7 exposes the generic `elements/save` action to silent password manipulation, enabling any authenticated control panel user to reset their own password without confirming their current credentials. More critically, attackers holding the `edit users` permission can silently overwrite passwords for any account on the platform-including administrator accounts-achieving full administrative takeover without requiring the legitimately guarded `Administrate users` privilege. A vendor-released patch exists in version 5.10.8, and no public exploit code is identified at time of analysis, though the GHSA advisory's detailed technical description materially lowers the bar for independent exploitation.
IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 expose an improper authorization flaw in certain database commands, enabling a low-privileged authenticated user to bypass server-side authority checks and directly modify database catalog data. The root cause is CWE-602 (client-side enforcement of server-side security), where authorization validation is not properly enforced at the server layer. No public exploit has been identified and SSVC rates exploitation as none currently, though the high integrity impact against catalog metadata - which governs schema definitions and access control structures - makes this a meaningful patching priority for all affected Db2 deployments.
Out-of-bounds write in the MongoDB BI Connector ODBC Driver allows an authenticated low-privileged user to crash the client application performing data reads through the connector. The driver fails to validate destination buffer size when converting floating-point column values to their string representations, enabling memory corruption when sufficiently large float values are encountered. No public exploit code has been identified at time of analysis, and a vendor-confirmed fix is available in version 1.4.9.
Path traversal via unsanitized upstream ETag and Content-Type headers in Seerr's ImageProxy allows a malicious or compromised Jellyfin or Emby media server—or a network-positioned MITM attacker on a plaintext connection—to write arbitrary files outside the cache directory, overwriting critical application files such as /app/dist/index.js for deferred code execution as the Node.js process user. All Seerr releases prior to 3.4.0 are affected; the unauthenticated /avatarproxy/:jellyfinUserId endpoint is the attack surface and requires no credentials against Seerr itself. No public exploit has been identified at time of analysis, though the fix commit fully documents the vulnerable code path, making reconstruction straightforward.
Authenticated SQL injection in CamaleonCMS 2.9.1 allows low-privileged users holding post creation or editing rights to extract sensitive data - including administrative credentials and configuration values - from the underlying SQLite database via crafted slug payloads. The flaw exists because the post slug field is incorporated into backend database queries without adequate parameterization, enabling boolean- and union-based blind injection techniques over a standard network-accessible web interface. A vendor patch is available via the upstream GitHub repository; no public exploit code or CISA KEV listing has been identified at time of analysis.
Insufficient input validation on the `_handler` POST field in Winter CMS's form postback mechanism allows any authenticated backend user to invoke arbitrary controller methods-including protected and private ones-bypassing role-based permission checks. The Users controller compounded this by conditionally nullifying its `$requiredPermissions` for the `myaccount` action, enabling low-privilege backend users to call administrative methods such as `update_onDelete`, `update_onUnsuspendUser`, and `update_onManualPasswordReset` against any backend user record. No public exploit code or CISA KEV listing has been identified at time of analysis; exploitation is limited to users with active, authenticated backend sessions (CSRF tokens remain enforced).
Authentication bypass in SiYuan's kernel CheckAuth function unconditionally grants administrator privileges (RoleAdministrator) to any HTTP request whose RemoteAddr is 127.0.0.1, affecting a specific set of endpoints including /api/system/exit, /assets/*, and /export/*, even when an access auth code is explicitly configured. All versions up to and including v3.7.2 are affected; v3.7.4 contains the vendor-released patch. The fixed-port reverse proxy forwards requests to the kernel over loopback without injecting authentication tokens or configuring trusted proxy headers, creating a theoretical remote unauthenticated attack path if the proxy is bound to a network-accessible interface - though per the advisory this remote scenario was established only by code inspection and was not reproduced end-to-end. No public exploit code exists and this CVE is not listed in the CISA KEV catalog.
IBM i Access Client Solutions versions 1.1.2.0 through 1.1.9.13 expose a publicly writable truststore, allowing a local authenticated attacker to inject a rogue certificate authority and subsequently intercept or manipulate TLS-protected communications. The writable truststore breaks the chain of trust at the client level, enabling man-in-the-middle attacks against sessions the client believes are cryptographically secured. No public exploit or active exploitation has been identified at time of analysis, and EPSS probability is extremely low at 0.09%.
Path traversal in SSH.NET's ScpClient.Download() enables a malicious, compromised, or man-in-the-middle SCP server to write arbitrary files anywhere the client process has write access during recursive directory downloads. All SSH.NET NuGet package versions up to and including 2025.1.0 are affected; the vulnerability is analogous to CVE-2019-6111 in OpenSSH but extends to directory traversal. No public exploit code or CISA KEV listing has been identified at time of analysis, though the integrity impact is high given the file-write primitive can overwrite SSH authorized keys, shell rc files, or application binaries.
Authentication bypass in SiYuan's publish layer exposes password-protected attribute view data to unauthenticated remote users across all versions before v3.7.4. The FilterViewByPublishAccess filter omits its password enforcement on the renderAttributeView code path, allowing arbitrary callers to retrieve structured database rows - including document titles, block IDs, and column values - from documents the owner intended to gate with a publish password. No active exploitation is confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis; vendor patch is available at v3.7.4.
Information disclosure in SiYuan before v3.7.4 exposes administrator workspace state to unauthenticated network attackers via an improperly protected getConf API endpoint. The UILayout filter fails to enforce authorization boundaries between publish readers and the administrative configuration layer, leaking open document names, recent search terms, notebook directory paths, and private asset locations. No public exploit code or CISA KEV listing exists at time of analysis; however, the unauthenticated network vector makes the flaw trivially reachable on any internet-exposed SiYuan instance with publish features active.
PDF annotation content in SiYuan through v3.7.2 is exposed without authorization via the /api/asset/getFileAnnotation endpoint, which applies only the generic CheckAuth middleware rather than the publish-access controls enforced on the /assets/* route. When publish authentication is disabled, anonymous readers can retrieve .sya annotation files containing private highlights and notes from password-protected, unpublished, or publish-forbidden documents simply by knowing a valid asset path; authenticated publish RoleReaders face the same missing check. The CVSS 4.0 score of 6.9 reflects a network-accessible, unauthenticated vector with limited scope - encrypted notebooks are not affected - and no public exploit code or CISA KEV listing has been identified at time of analysis.
Static-route access control bypass in SiYuan before v3.7.4 allows attackers to read sensitive workspace data by directly accessing file-serving routes that skip the authorization checks enforced on the REST API. Affected deployments include any SiYuan instance operating in disabled-auth mode (anonymous access) or where publish reader tokens have been issued, as those token holders can reach templates, snippets, and export artifacts without restriction. No public exploit or active exploitation has been identified at time of analysis, but the patch to v3.7.4 is available and should be applied promptly given the unauthenticated attack vector in disabled-auth configurations.
Unauthorized information disclosure in SiYuan exposes protected document metadata and content snippets via three unenforced API endpoints - getBlockBreadcrumb, getRefText, and getBlockTreeInfos - in all versions before v3.7.4. Unauthenticated network actors or low-privilege RoleReader accounts can bypass publish-access controls on documents explicitly marked as publish-forbidden or password-protected, retrieving titles, ancestor block content snippets, reference text, and path metadata by supplying block IDs. No public exploit has been identified at time of analysis; vendor patch is available in v3.7.4.
Unauthenticated information disclosure in SiYuan versions before 3.7.4 allows retrieval of block attributes - names, aliases, memos, and custom fields - from documents protected by publish-access controls. The `getBlockAttrs` and `batchGetBlockAttrs` API endpoints accept POST requests with block IDs without verifying the caller's authorization against the parent document's access policy, directly bypassing the publish-access restriction (CWE-862). No active exploitation has been confirmed and no public proof-of-concept has been identified; impact is bounded to metadata exposure rather than full document content, but the unauthenticated network vector warrants prompt patching for internet-exposed instances.
Information disclosure in SiYuan before v3.7.4 allows unauthenticated remote attackers to retrieve the server's absolute filesystem workspace path, operating-system username, and installation layout by querying the resolveAssetPath endpoint with relative asset paths harvested from published documents. The endpoint enforces only a lightweight CheckAuth gate rather than full authentication, satisfying CWE-639's authorization bypass pattern, and returns raw absolute paths to any network-reachable caller. Vendor patch v3.7.4 has been released; no active exploitation has been confirmed and no public proof-of-concept code has been identified at time of analysis.
Missing authorization controls on three internal API endpoints in SiYuan before v3.7.4 allow callers operating within the publish context to retrieve database column schemas, template expressions, select vocabularies, and workspace-wide block identifiers that were never intended to cross publish access boundaries. The affected endpoints - getAttributeViewKeysByID, getBlockDefIDsByRefText, and getBlockRelevantIDs - perform their operations without consulting publish-scoped permission checks, constituting a CWE-862 (Missing Authorization) flaw. A vendor patch is available at v3.7.4, no public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Five path-resolution API endpoints in SiYuan's publish mode fail to enforce access controls, allowing unauthenticated or minimally-authenticated readers to enumerate the complete private document tree. Affected versions are all SiYuan releases up to and including v3.7.2; v3.7.4 contains the fix. An attacker targeting a SiYuan instance running in publish mode with Publish.Auth.Enable set to false can call getFullHPathByID, getHPathByID, getPathByID, getIDsByHPath, and getHPathByPath without any credentials to recover notebook names, folder hierarchies, document titles, and document IDs - including for content explicitly marked hidden, password-protected, or publish-forbidden. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Unauthenticated information disclosure in SiYuan before v3.7.4 exposes encrypted notebook identifiers, names, and memory-resident unlock states via the getEncryptedNotebookStatus API endpoint without enforcing publish-access filtering. Any anonymous or publish-mode client that can reach the instance can enumerate the full list of encrypted notebooks and determine which are actively decrypted in server memory, leaking sensitive organizational metadata. No public exploit has been identified and no CISA KEV listing exists; a vendor-released patch is available in v3.7.4.
SiYuan's /api/tag/getTag endpoint leaks tag labels and occurrence counts from password-protected documents to any unauthenticated network caller, constituting an authorization bypass under CWE-863. All SiYuan versions before 3.7.4 are affected, as confirmed by a vendor GitHub Security Advisory (GHSA-mp7r-57w4-5qm3) and the EUVD entry EUVD-2026-57452. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog; however, the zero-friction network exploitability (PR:N, AC:L, UI:N) means any attacker with network reach can enumerate protected document vocabulary with a single API call.
Information disclosure in SiYuan v3.7.4-alpha.1 (pre-release only) permits any caller who passes basic authentication to retrieve complete database view metadata - including view names, icons, layout types, and per-field Hidden flags - for arbitrary database blocks by supplying an avID, regardless of their access level. The `/api/av/getAttributeViewFieldViews` endpoint introduced in commit acfc02ee8 applies `CheckAuth` middleware but omits any ownership or publish-access filter, producing a CWE-862 Missing Authorization condition. The vulnerability was corrected in the v3.7.4 stable release; no public exploit or active exploitation has been identified at time of analysis.
Unauthenticated information disclosure in SiYuan before v3.7.4 exposes notebook metadata - including names, document counts, storage sizes, and timestamps - for closed and non-published notebooks via the /api/notebook/getNotebookInfo endpoint, which performs no authorization check. Any attacker with network access to the SiYuan API can enumerate structural information that the application's access control model explicitly intends to hide from readers. No public exploit or CISA KEV listing has been identified at time of analysis, but the zero-friction, unauthenticated attack path makes this trivially exploitable wherever the API is internet- or network-exposed.
Cryptographic validation weakness in the IBM Security Verify Access / Verify Identity Access Reverse Proxy (WebSEAL) allows remote attackers to bypass expected integrity checks on user-supplied data in certain configurations, affecting Security Verify Access 10.0 through 10.0.9.2 and Verify Identity Access (and its Container edition) 11.0 through 11.0.3. NVD rates this CVSS 9.8, but the vague 'certain configurations' wording and a low EPSS of 0.24% (15th percentile) with SSVC exploitation status 'none' point to a config-dependent issue rather than mass exploitation. There is no public exploit identified at time of analysis and it is not on CISA KEV.
Denial-of-service in OpenStack Designate's mDNS handler allows unauthenticated remote disruption of DNS resolution across all tenants sharing an affected pool path. The handler performs pool-blind zone lookups: when two zones with the same name exist across different pools - a condition reachable either through a separate cross-tenant zone overlap vulnerability or via legitimate cross-pool configurations - the lookup fails deterministically, causing the handler to return REFUSED for all DNS queries through that path. The _handle_notify trigger is reachable via a single unauthenticated UDP packet, with no public exploit code identified at time of analysis and no confirmed active exploitation in the CISA KEV catalog.