Server-side request forgery in Microsoft UFO's URL validation layer allows unauthenticated remote attackers to bypass the SSRF guard by supplying IPv6 transition addresses - NAT64 (64:ff9b::/96, 64:ff9b:1::/48), 6to4 (2002::/16), or Teredo (2001::/32) - that embed private or link-local IPv4 destinations the guard would otherwise reject. The bypass grants access to cloud instance metadata services (e.g., AWS IMDSv1 at 169.254.169.254), internal APIs, or localhost in any deployment where UFO processes externally-influenced URLs. No active exploitation is confirmed (not in CISA KEV), but the technique is well-documented in SSRF research and the fix is available in version 3.0.8.
Broken access control in Winter CMS (composer/winter/wn-cms-module ≤ 1.2.12) allows any authenticated backend user holding at least one Theme Editor permission to pivot beyond their authorized scope via crafted AJAX requests. The Cms\Controllers\Index controller gated section access with OR-logic across five permissions but individual handlers - onSave(), onDelete(), onDeleteTemplates(), and AssetList.onUpload() - performed no per-template-type authorization check, enabling cross-template actions such as deleting layouts, modifying partials, reading content files, and uploading arbitrary files to the active theme asset directory. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; vendor-released fix is v1.2.13.
WhatsUp Gold versions before 2026.0.2 allow a privileged attacker to configure a LogToFile action with an arbitrary file extension, enabling placement of server-executable files (e.g., .aspx web shells) directly within the IIS web root directory. Progress Software confirmed the issue and released a patch in version 2026.0.2, documented in the August 2026 security bulletin. No public exploit code has been identified at time of analysis, but the high CIA impact combined with the adjacent-network vector makes this a material insider threat and post-compromise persistence risk.
Session token validation bypass in IBM i versions 7.3 through 7.6 enables a remote low-privileged attacker to circumvent security restrictions by exploiting improper session token handling (CWE-294). The CVSS vector confirms network reachability but mandates high attack complexity and an existing authenticated foothold, capping the score at 6.8 Medium. No public exploit code or CISA KEV listing has been identified at time of analysis, and IBM has issued a vendor patch.
Arbitrary file write in Progress Software's WhatsUp Gold (all versions before 2026.0.2) enables a privileged attacker with adjacent network access to place attacker-controlled files in web-accessible directories on the host server - a primitive that commonly leads to web shell deployment and subsequent unauthenticated remote code execution via HTTP. Exploitation is constrained by both a high-privilege credential requirement and an adjacent-network attack vector (CVSS:3.1/AV:A/PR:H), substantially narrowing the practical attack surface compared to the full C:H/I:H/A:H impact triad would suggest. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor-released patch is confirmed available in version 2026.0.2.
Provider-confusion in NextAuth.js (next-auth and @auth/core) allows an attacker to link their own OAuth identity at a target provider to a victim's Auth.js user account, granting the attacker persistent unauthorized sign-in. The flaw stems from OAuth anti-CSRF cookies - state, nonce, and PKCE verifier - being stored globally without binding to the originating provider, so a callback for one provider can consume check values minted during a flow initiated with a different provider. No public exploit code or CISA KEV listing exists at time of analysis, but the CVSS 6.8 score with C:H/I:H reflects a full account-takeover outcome when the required multi-condition setup is present.
Plaintext credential exposure in MongoDB SQL Schema Builder CLI allows local users to read authentication material from diagnostic output or log files. The CLI writes its startup configuration - including connection settings containing authentication credentials - to standard output and optionally to a log file on disk without redacting sensitive values. Any local user with read access to the terminal session, the log directory, or a downstream log aggregation system can harvest those credentials and use them to authenticate to the connected MongoDB instance.
Self-hosted JFrog Artifactory deployments using Helm may expose generated TLS private keys within rendered Kubernetes manifests, where key material persists in cleartext accessible to highly privileged local users. Affecting Artifactory versions below 7.161.16 in the 7.161.x branch and below 7.146.35 in earlier LTS branches, this CWE-312 flaw can facilitate TLS impersonation or decryption of encrypted client-to-repository communications if exposed keys are not rotated after discovery. No public exploit has been identified at time of analysis, and exploitation is structurally constrained by a requirement for pre-existing high-privilege local Kubernetes cluster access.
Unsafe deserialization of stored session data in JFrog Artifactory allows a party with write access to that session store to achieve full confidentiality, integrity, and availability compromise under specific conditions. All versions are affected per the wildcard CPE string, and exploitation requires both high privileges and high attack complexity. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Integer underflow in GStreamer's avidemux element allows a remote unauthenticated attacker to trigger heap out-of-bounds read and write, heap memory disclosure, and application crash by delivering a crafted AVI file containing a malformed FUJIFILM strd chunk. The gst_avi_demux_parse_strd() function decrements its remaining-length counter by fixed offsets without bounds checking, causing unsigned integer wraparound for payloads of exactly 106 or 107 bytes. Because avidemux is auto-plugged by GStreamer's high-level components (playbin, decodebin, gst-discoverer), any application that opens or previews a media file - including GNOME Files, Nautilus, Totem, and many others - can trigger the vulnerability without user awareness. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; a vendor-released patch is available in gst-plugins-good 1.28.6.
Path traversal in IBM i 7.3 through 7.6 exposes sensitive files to remote authenticated attackers by failing to enforce restricted directory boundaries. The vulnerability (CWE-22) allows a low-privileged authenticated user to escape intended directory scope and read arbitrary file system paths, resulting in high confidentiality impact with no integrity or availability effect. No public exploit code or CISA KEV listing has been identified at time of analysis.
Cross-team credential disclosure in the Apache Airflow Google Provider's Cloud Secret Manager backend exposes every team's Connections and Variables to every other team in multi-team deployments. The backend's public methods accepted a team_name parameter but silently discarded it before the internal secret lookup, collapsing all team namespaces into one shared, unscoped lookup. No public exploit has been identified at time of analysis; the vendor-released fix is apache-airflow-providers-google 22.3.0.
OS command injection in IBM i 7.3 through 7.6 enables remote authenticated attackers to disrupt system availability by submitting crafted input containing special elements that are improperly neutralized before being passed to OS-level commands. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) confirms network-reachable exploitation requiring only low-privilege credentials, with high availability impact and a secondary low integrity impact. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and broad version range across actively supported IBM i releases make patching a priority for affected IBM Power Systems environments.
Versioned object access control bypass in RustFS allows authenticated principals holding only s3:GetObject permission to read historical object versions by supplying an explicit versionId parameter on GetObject, CopyObject source, or UploadPartCopy source requests. The authorization boundary in access.rs conflated two distinct IAM actions - s3:GetObject and s3:GetObjectVersion - by always evaluating versioned reads against the former, effectively collapsing a privileged historical-version operation into an ordinary current-object read. No active exploitation has been confirmed (not in CISA KEV), and no public exploit code has been identified; however, the bypass is trivial to exercise for any valid IAM credential with bucket read access.
Security restriction bypass in IBM i 7.3 through 7.6 allows remote authenticated attackers to circumvent access controls by supplying a crafted user profile name that passes improper validation logic. The vulnerability is tagged as a privilege escalation path, meaning successful exploitation likely enables access to resources or operations beyond the attacker's authorized scope. No public exploit code or CISA KEV listing is present at time of analysis, but a vendor patch is available and should be prioritized given the high confidentiality impact indicated by CVSS.
Unauthorized access to restricted support information in JFrog Artifactory allows a low-privileged authenticated user to read sensitive support data under specific, undisclosed conditions. The vulnerability stems from missing authorization controls (CWE-862) on support-related endpoints, exposing information that should be restricted to administrative roles. No public exploit has been identified at time of analysis, and no CISA KEV listing was found.
FleetDM Fleet's target search endpoint (POST /api/latest/fleet/targets) fails to apply the same field-masking logic used by other team-facing API endpoints, exposing unmasked team enroll secrets and credential-bearing agent options to any authenticated Observer, Observer+, or Technician user before v4.87.0. The practical blast radius extends well beyond information disclosure: leaked enroll secrets allow unauthorized hosts to be enrolled into affected teams, and if agent options contain embedded AWS secret access keys, proxy passwords, or session tokens, those credentials are also retrieved in cleartext. No public exploit code has been identified at time of analysis, though the vulnerability is trivially reproducible by any low-privileged Fleet user.
SQL injection in IBM i 7.3 through 7.6 allows remote authenticated attackers to modify SQL table data by injecting unsanitized special elements into SQL commands processed by the platform. The CWE-89 root cause confirms missing or inadequate input neutralization within IBM i's SQL handling layer, enabling unauthorized data manipulation. No public exploit identified at time of analysis; a vendor patch is available via IBM advisory 7283289.
JFrog Artifactory contains a missing authorization flaw that allows an authenticated user holding a publisher role - but explicitly denied delete permissions - to modify protected package content under specific conditions. This integrity bypass (CWE-862) is reachable over the network without elevated privileges, making it a supply chain risk for organizations using Artifactory as their artifact repository. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Denial of service in open-iscsi's iscsiuio daemon allows an unauthenticated attacker on the same local network segment to render the daemon permanently unresponsive by sending a single crafted ICMPv6 Router Advertisement carrying a zero-length option, triggering an infinite loop and sustained CPU exhaustion. Affected deployments include Red Hat Enterprise Linux 9 and 10 systems where iscsiuio is active for iSCSI hardware offload. A secondary out-of-bounds read risk exists when a short IPv6 payload is processed, though no memory corruption or data exposure has been confirmed from available intelligence; no public exploit code or CISA KEV listing has been identified at time of analysis.
Integer underflow in open-iscsi's iscsiuio daemon crashes the process when parsing malformed DHCPv6 Advertise packets with a truncated UDP length field, disrupting iSCSI storage connectivity. Systems running Red Hat Enterprise Linux 9 and 10 with iscsiuio actively engaged in a DHCPv6 exchange are exploitable by any unauthenticated attacker on the same adjacent network segment. No active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis; real-world impact is highest in shared or multi-tenant storage network environments where adjacency cannot be guaranteed.
Cleartext exposure of list-shaped Variable secrets in Apache Airflow Task SDK (all versions before 3.3.1) allows any authenticated Airflow user to recover sensitive values directly from task execution logs and the Rendered Templates UI. The masking logic in _mask_and_deserialize_variable correctly handled string- and dict-typed JSON Variable values but contained no branch for the list type, so arrays - which may hold passwords, API tokens, or connection strings - were returned unredacted. No public exploit has been identified at time of analysis; however, organizations that patched CVE-2026-59244 remain fully exposed because that fix addressed only the dict case, and must upgrade again to 3.3.1.
Sensitive credential exposure in Apache Airflow 3.3.0 allows an authenticated Viewer with configuration-read access to retrieve team-scoped sensitive options - including Celery broker URLs with embedded credentials - in cleartext via the Config API. The secrets masker evaluated sensitivity against raw section names without resolving team-prefixed sections (e.g., [team_a=celery]) back to their registered base section, so team-scoped overrides silently bypassed masking while equivalent global options were correctly redacted. This is a third distinct masker bypass variant following CVE-2026-48828 and CVE-2026-48892, meaning deployments that already upgraded to 3.3.0 to remediate those issues remain exposed. No public exploit identified at time of analysis.
Stored XSS in the Draft List WordPress plugin (versions ≤2.6.3) allows a Contributor-level authenticated user to inject persistent JavaScript into public-facing pages by exploiting a sanitization ordering flaw in the [drafts] shortcode and widget template engine. The plugin sanitizes the template string before substituting the {{draft}} placeholder with the raw post_title, meaning a crafted title containing a double-quote can break out of an HTML attribute context and execute arbitrary JavaScript in the browsers of visitors who load the affected page. Version 2.6.4 resolves the issue; no public exploit code or CISA KEV listing has been identified at time of analysis.
Cross-tenant IDOR in CERT/CC's VINCE platform allows any authenticated case participant to read another vendor's embargoed CaseStatement and per-vulnerability CaseMemberStatus records by supplying an arbitrary member ID in the API request. The authorization check in test_func validates only that the requester is a participant in the case (_is_my_case) but does not verify that the requested member ID belongs to their own organization, making the share_status embargo control bypassable. Affected versions are all VINCE releases before 3.0.44; no public exploit or active exploitation (CISA KEV) has been identified at time of analysis.
Insecure Direct Object Reference (IDOR) in Apache Allura before 1.19.1 allows unauthorized access to multiple Artifact types due to missing server-side permission checks. Attackers who can interact with the platform can reference artifact objects directly by their identifiers and retrieve content beyond their authorization level, resulting in information disclosure across potentially broad artifact categories. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Excessive Kubernetes RBAC privileges in the insights-client ServiceAccount within Red Hat Advanced Cluster Management for Kubernetes 2 expose all cluster Secrets to any attacker who compromises the pod or obtains its token. The ServiceAccount is bound to a ClusterRole granting cluster-wide get, list, and watch on all Secrets, far exceeding the single Secret the component actually requires. If the insights-client pod is breached, an attacker can read every Secret across the hub cluster - including managed-cluster kubeconfigs - enabling lateral movement to downstream managed clusters. No public exploit code has been identified at time of analysis, and this CVE is not listed in CISA KEV.
Secret exposure in Apache Airflow's Rendered Templates UI allows any authenticated user with task-level view access to read plaintext credential values that should have been masked. The secrets masker's `isinstance(str)` guard silently skips dict-typed Python objects, meaning JSON Variables accessed via `var.json` and containing dict payloads (e.g., database credentials, API keys stored as structured JSON) are rendered in cleartext rather than redacted. No public exploit is identified at time of analysis; however, the disclosure requires nothing more than standard UI navigation by a legitimately authenticated user.
Cleartext secret exposure in Apache Airflow's audit log affects all versions before 3.3.1, allowing any authenticated user with audit-log read access to recover Variable values and Connection `extra` credentials verbatim - without holding Variables or Connections read permissions. The bulk API endpoints (`PATCH /api/v2/variables`, `PATCH /api/v2/connections`) bypassed audit-log masking because the masker inspected only top-level request fields while bulk payloads nest entities two levels deep under `actions[].entities[]`. The Airflow UI's Import Variables action posts to this same bulk endpoint, meaning a routine operator import silently writes every secret in the uploaded file to the unmasked audit log. No public exploit is identified at time of analysis, but the vulnerability is fully exploitable by any authenticated user with log access, and deployments that upgraded to 3.3.0 in response to the related CVE-2026-50204 remain vulnerable and must upgrade again.
Cross-team DAG authorization bypass in Apache Airflow versions prior to 3.3.1 allows authenticated users in one team to trigger DAG runs and read XCom values belonging to other teams. The asset materialization endpoint (POST /api/v2/assets/{asset_id}/materialize) and the XCom check in wait_dag_run_until_finished both passed DagDetails without resolving the DAG's team_name, causing team-aware auth managers (e.g., Keycloak) to evaluate the permission against the global DAG resource instead of the team-scoped DAG:<team> resource. This is a missing authorization flaw (CWE-862) affecting only deployments running multi-team mode with a team-aware auth manager; FAB auth manager deployments are explicitly unaffected. No public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated path traversal in SP Page Builder (Joomla extension by joomshaper.com) versions prior to 6.8.0 permits remote attackers to create arbitrary directories and write files with predefined names on the underlying server filesystem without any credentials. The CWE-22 root cause indicates the extension fails to sanitize user-supplied path segments before constructing filesystem paths. No public exploit code exists and no active exploitation has been confirmed at time of analysis, though the unauthenticated network vector with no user interaction requirement makes this accessible to opportunistic attackers.
Incomplete Zsh special-character escaping in Shescape allows unauthenticated attackers who control input strings to bypass sanitization and trigger home directory expansion or glob pattern matching, leaking file and directory paths from the host system. Affected are npm/shescape versions below 2.1.14 (v2 branch) and 3.0.0-3.0.0 inclusive (v3 branch) on Unix systems where Zsh is the configured or default shell using the escape or escapeAll methods. No public exploit identified at time of analysis, though the GitHub security advisory GHSA-6v4m-fw66-8r4x includes functional proof-of-concept code; KEV listing is absent.
Incomplete tilde-escaping in Shescape's Dash shell mode allows attacker-controlled input to bypass sanitization and trigger home-directory expansion. Shescape versions prior to 2.1.14 (v2 branch) and 3.0.1 (v3 branch) on Unix systems fail to escape `~` when it follows `:` or `=`, characters that Dash recognizes as tilde-expansion triggers in assignment contexts. An attacker supplying values such as `:~` can disclose the server process's home-directory path and potentially redirect the filesystem location on which the downstream command operates. No public exploit identified at time of analysis, though a functional proof-of-concept is documented in the vendor's security advisory GHSA-q53c-4prm-w95q.
Unauthenticated comment creation in SP Page Builder for Joomla (versions prior to 6.8.0) allows remote attackers to bypass the disabled guest commenting restriction by supplying crafted user input that overrides the server-side access control setting. The vulnerability stems from improper access control (CWE-284), where a client-influenced parameter can override a site administrator's explicit configuration decision to disable public commenting. No public exploit or active exploitation has been identified at time of analysis, and the CVSS 4.0 score of 6.3 reflects limited integrity impact with no confidentiality or availability consequence.
SQL parameter injection in IBM i 7.3 through 7.6 allows remote authenticated attackers to bypass security restrictions by submitting specially crafted SQL input that is not properly neutralized before processing. The CWE-78 (OS Command Injection) classification combined with the SQL-parameter attack surface suggests that malicious input may propagate beyond the SQL layer to OS-level command execution, though the exact propagation path is not fully detailed in available data. No public exploit code has been identified and the vulnerability is not listed in CISA KEV at time of analysis.
MongoDB Atlas SQL ODBC Driver and Schema Builder CLI fail to validate URI schemes in authorization and token endpoints returned by an OIDC issuer's discovery document, allowing an attacker-controlled MongoDB deployment to dispatch arbitrary URIs to a victim's operating system protocol handler. Users employing MONGODB-OIDC authentication who are induced to connect to a rogue or compromised MongoDB deployment may have OIDC credentials exposed or, under conditions where a dangerous OS protocol handler is registered, experience code execution within their user session context. No public exploit has been identified at time of analysis, and exploitation carries meaningful social engineering prerequisites that constrain real-world reach despite the network-accessible attack vector.
XML External Entity (XXE) injection in UYAP Document Editor versions 4.5.17 through 5.4.17 allows a local attacker to exfiltrate sensitive file system contents by tricking a user into opening a specially crafted document. The vulnerability enables serialized data external linking via uncontrolled XML external entity resolution, resulting in high confidentiality impact with scope change to the underlying operating system. Reported by TR-CERT; no public exploit code or CISA KEV listing identified at time of analysis.
Privilege escalation in LuminalShine prior to version 26.05.0-rc4 stems from a latent file permission gap where `apps.json`, written by the SYSTEM service to `C:\ProgramData\LuminalShine\config\`, could be overwritten by local users if directory ACLs deviate from Windows defaults. On a default Windows installation this EoP path does not trigger because `BUILTIN\Users` inherits only Read+Execute rights from `C:\ProgramData`; the vulnerability is only exploitable when an administrator has loosened those inherited permissions. No public exploit code has been identified and no active exploitation is confirmed.
OS command injection in PDF::WebKit for Perl (versions through 1.2) allows arbitrary command execution under the process UID when untrusted input is forwarded as an output path or stylesheet path to `to_pdf`, `to_file`, or `_style_tag_for`. The root cause is Perl's 2-arg `open()` combined with the diamond operator, which interprets pipe-flanked strings (`| cmd` or `cmd |`) as shell commands and redirect-prefixed strings (`> path`) as file write operations rather than filenames. No public exploit code has been confirmed and the vulnerability is not listed in CISA KEV at time of analysis, but the technique exploits well-documented Perl behavior making reproduction trivial for any developer familiar with the language.
Stored cross-site scripting in Vulnerability-Lookup's render_tag_badges Jinja filter allows an authenticated user holding the vulnerability:create or vulnerability:modify permission to persist arbitrary JavaScript in public vulnerability record pages by submitting crafted reference tags via the CNA API. The flaw stems from markupsafe.Markup being applied to attacker-controlled tag values before HTML escaping, effectively suppressing Jinja's automatic sanitization and causing the payload to execute in any visitor's browser - including unauthenticated users - upon page load. No public exploit has been identified at time of analysis beyond the functional XSS payload embedded in the fix's test suite; a patch is available as upstream commit d29901655c50cf3c25737d9ea86180268df51b57.
Object Lock COMPLIANCE retention enforcement in RustFS fails open when bucket metadata is absent, unreadable, or corrupt - treating any metadata error as 'no lock configured' rather than blocking the operation. All RustFS versions prior to 1.0.0-rc.1 are affected, exposing COMPLIANCE-retained objects to unauthorized deletion via explicit delete calls, delete_prefix operations, and automated lifecycle or scanner sweeps. No public exploit or CISA KEV listing exists at time of analysis; the risk is primarily to organizations relying on COMPLIANCE-mode immutability for regulatory or legal-hold data retention obligations.
Reflected cross-site scripting in ScadaLTS 2.7.8.1 enables an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's browser by delivering a crafted URL that causes the application to echo unsanitized user-supplied input into an HTML response. Because SCADA operators - the likely victims - typically hold privileged authenticated sessions controlling industrial processes, successful exploitation could lead to session token theft, credential harvesting, or unauthorized commands issued through the victim's browser context. No public exploit code and no CISA KEV listing are identified at time of analysis, but the SCADA operational environment elevates the realistic impact of even a medium CVSS score.
Cross-site scripting in Apache Allura's Markdown rendering (versions 1.10.0 up to but not including 1.19.1) allows an attacker to inject script-related HTML into content that other users view, executing arbitrary JavaScript in their browsers. Because Allura is a collaborative forge where users routinely post Markdown in tickets, wiki pages, and comments, the payload is most likely stored and delivered to victims who open the affected page. No public exploit identified at time of analysis, and there is no CISA KEV listing or POC signal; the Apache PMC has released version 1.19.1 as the fix.
Cross-site scripting (XSS) in Apache Allura's code-display feature allows an attacker who can place crafted content into a rendered code view to execute arbitrary JavaScript in the browser of any user who views that code, in all versions before 1.19.1. Because Allura is forge/project-hosting software, a successful attack can hijack the sessions of project members or administrators. There is no public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Cross-site request forgery protection bypass in Nagios Core (before 4.5.14) and Nagios XI (before 2026R1.7) allows unauthenticated remote attackers to execute monitoring commands with the privileges of authenticated users by exploiting a flawed double-submit cookie implementation. The CSRF defense can be entirely circumvented by supplying self-crafted, matching cookie and request parameter values - no server-validated token is required - enabling command execution via maliciously crafted links sent to authenticated administrators. No public exploit code has been identified at time of analysis, and no CISA KEV listing exists, but the low attack complexity and broad target population make this a meaningful risk for any externally reachable Nagios deployment.
Out-of-bounds read in GStreamer's avidemux plugin (gst-plugins-good) allows a remote, unauthenticated attacker to crash media-processing applications and potentially leak memory contents by supplying a crafted AVI file. The flaw resides in gst_avi_demux_riff_parse_vprp(), where the count of video field descriptors is derived by dividing remaining buffer size by an attacker-controlled vprp->fields value rather than the struct size, causing the parser to treat more descriptors as valid than the buffer holds. User interaction is required to trigger the bug (the victim must open or stream the malicious AVI via playbin or decodebin), and the primary confirmed impact is denial of service; limited information disclosure is also possible. No public exploit or CISA KEV listing has been identified at time of analysis.
Remote authenticated users can crash applications built on Amazon aws-sdk-cpp versions before 1.11.862 by supplying crafted Base64-encoded input that triggers an out-of-bounds read in the SDK's Base64 decoder. Exploitation is constrained to authenticated users, requires high attack complexity, and is platform-specific - not all deployments are vulnerable. The CVSS 4.0 vector (VA:H, VC:N, VI:N) confirms impact is limited to availability (denial of service); no public exploit code exists and the vulnerability is not listed in the CISA KEV catalog at time of analysis.
SPIFFE identity impersonation in Kong Mesh universal mode allows an authenticated dataplane operator to assume another workload's mTLS identity by exploiting an incomplete workload-binding enforcement in the XDS authenticator. The kuma-cp authenticator validates the kuma.io/workload label only when a dataplane token is explicitly bound to a workload; because workload binding is optional, a tags-only-bound token can register any kuma.io/workload label value and receive the corresponding SPIFFE ID, bypassing MeshIdentity-enforced access controls. No public exploit has been identified at time of analysis; vendor-confirmed patches are available via upstream Kuma PRs.
Out-of-bounds write in the Base64 decoder of Amazon's aws-sdk-cpp (all versions before 1.11.862) exposes applications to heap memory corruption or crash when processing attacker-supplied Base64-encoded content. Remote authenticated attackers can trigger the defect by submitting crafted input to any application built on this SDK that routes user-controlled data through the affected decoder path. No public exploit code has been identified at time of analysis, and the vulnerability has not been added to the CISA KEV catalog, though the CWE-787 heap write class carries inherent tail risk beyond the denial-of-service primary impact.
Unauthorized artifact access in JFrog Artifactory allows unauthenticated network attackers to retrieve restricted artifacts under specific, high-complexity conditions. The flaw stems from a missing authorization check (CWE-862) that can be triggered without credentials, directly exposing confidential build artifacts, proprietary binaries, or sensitive packages stored in the repository. No public exploit code or active exploitation has been identified at time of analysis, and the high attack complexity requirement (AC:H) limits opportunistic mass exploitation.