Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER handler, causing a denial of service. The vulnerability exists in diam_log_func within lib/diameter/common/init.c, where a call to ogs_assert_if_reached() could be triggered by a crafted Capabilities Exchange Request message over the Diameter protocol. A public exploit exists and a patched release (v2.7.7) is available; no active exploitation has been confirmed via CISA KEV.
Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the intended Docker cache directory when specific remote-repository conditions are present. The CVSS 3.1 vector scores 5.3 Medium, reflecting a real but constrained integrity risk - arbitrary filesystem writes are possible, but high attack complexity and required authentication limit opportunistic abuse. No active exploitation or public exploit code has been identified at time of analysis.
Cross-tenant data exposure in Velociraptor's multi-tenant GUI allows authenticated root-org users to read Stacked result sets belonging to child organizations by bypassing the prefix deny list that enforces datastore path isolation. The GUI endpoint that serves result sets does not correctly validate requested paths against the deny list, so a crafted request can resolve to a sub-org datastore directory the requester should not have access to. No public exploit has been identified and exploitation requires existing high-privilege authenticated access, but the confidentiality impact is significant in shared DFIR environments where tenant isolation is a core security guarantee.
Heap corruption via double-free in 389-ds-base's LDAP control parsing allows an unauthenticated remote attacker to crash the directory service with a single crafted BIND request. The flaw resides in `get_ldapmessage_controls_ext()`, which frees a parsed controls array when rejecting an unknown critical Session Tracking control but fails to clear the corresponding SLAPI_REQCONTROLS pblock slot - causing operation teardown to free the same pointer a second time. Affected deployments include Red Hat Directory Server 11 through 13 and the 389-ds-base package across all supported RHEL versions (6-10). No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog; the CVSS AC:H rating reflects that reliable heap exploitation requires specific memory layout conditions rather than a trivially repeatable one-shot crash.
Reflected Cross-Site Scripting in the WP Photo Album Plus WordPress plugin (all versions before 9.2.07.002) allows unauthenticated attackers to inject arbitrary JavaScript into a victim's browser by reflecting an unsanitized parameter directly into an inline script block on gallery pages. Exploitation requires social engineering - the victim must open a crafted link - but no attacker credentials are needed. A publicly available proof-of-concept exists, reported by WPScan, and EPSS places exploitation probability at 17%, a notably elevated figure for a reflected XSS in a plugin.
Eventin WordPress plugin versions before 4.1.20 exposes stored customer records - including names and email addresses - to any authenticated WordPress user holding contributor-level access or higher, due to missing server-side capability checks on customer data retrieval. A publicly available proof-of-concept exploit exists per the WPScan advisory, and an EPSS score of 15% places exploitation probability well above the median for medium-severity CVEs. The vendor-released patch (version 4.1.20) resolves the access control gap; no active exploitation is confirmed in the CISA KEV catalog at time of analysis.
Unauthorized access to paid course content in LearnPress WordPress plugin (all versions before 4.4.4) allows any authenticated user - including low-privilege subscribers - to retrieve lesson material from courses they have not purchased or enrolled in. The flaw resides in the plugin's AI-assistant feature, which processes lesson content requests without first verifying the requesting user's enrollment status, exposing an authorization bypass at the content-serving layer. With a publicly available proof-of-concept from WPScan and a 15% EPSS score, this is a realistic and low-barrier threat to any WordPress e-learning deployment running an affected version.
CSV formula injection in Velociraptor's export pipeline allows attacker-controlled endpoint artifacts to execute as formulas when a forensic analyst opens the exported CSV in Microsoft Excel. Affected export paths include the GUI, offline collector, and data export features - any of which may produce unsanitized CSV output when collected data contains leading formula-trigger characters (=, +, -, @, tab). No public exploit code has been identified and no CISA KEV listing exists; however, the CVSS scope-change metric (S:C) and high confidentiality rating (C:H) correctly reflect that successful exploitation results in formula execution within the analyst's own workstation environment rather than the Velociraptor server itself.
WPC Admin Columns WordPress plugin exposes arbitrary metadata to subscriber-level authenticated users through an AJAX endpoint that lacks any authorization check. Any account with the lowest default WordPress role - subscriber - can query user, post, and term metadata site-wide, including sensitive data belonging to administrator accounts. Publicly available exploit code documented by WPScan lowers the practical barrier to exploitation; patch version 2.3.4 is available and should be applied immediately.
Server-side request forgery in ProSolution WP Client WordPress plugin (all versions before 2.0.9) allows any authenticated user - including low-privileged subscribers - to force the hosting server to issue arbitrary HTTP requests to internal hosts and services, with full attacker control over request method, headers, and body. The vulnerability bypasses both WordPress capability checks and nonce verification entirely. Publicly available exploit code exists, though no CISA KEV listing confirms active in-the-wild exploitation at time of analysis.
Memory corruption in Open5GS versions through 2.7.1 is remotely exploitable via the freeDiameter protocol component, allowing low-privileged network-accessible attackers to corrupt memory with limited confidentiality, integrity, and availability impact. The vulnerability falls under CWE-119 and is tagged as a buffer overflow class flaw within the Diameter protocol handling stack used in 5G/4G core network deployments. No public exploit has been identified at time of analysis, and the CVE is not listed in the CISA Known Exploited Vulnerabilities catalog; however, the telecom-grade attack surface warrants attention for operators running Open5GS in production.
Stored cross-site scripting in the Welcart e-Commerce WordPress plugin (all versions before 2.11.34) allows any authenticated user holding the Author role or above to permanently inject malicious JavaScript into product pages, executing in every subsequent visitor's browser. A publicly available proof-of-concept exploit exists and the EPSS score of 16% reflects above-average exploitation probability for a medium-severity plugin flaw. The vendor has released a fix in version 2.11.34, and patching is the primary recommended action.
Stored XSS in the Patterns Kit WordPress plugin (versions through 1.0.3) enables any Contributor-level user to inject a JavaScript payload into an unescaped link attribute, which a client-side script inserts directly into the DOM. Victim browsers execute the payload when a user views the content and clicks the affected element, with the CVSS scope change (S:C) confirming the attack crosses from the WordPress application into the victim browser context. No vendor-released patch has been identified at time of analysis; a public proof-of-concept is available and the 16% EPSS score indicates above-average real-world exploitation probability for this severity class.
Incorrect authorization in Velociraptor's hunt_delete() VQL function grants investigator-role users the ability to permanently delete hunt results, a privilege that should be restricted to administrators holding the DELETE_RESULTS permission. The platform misapplied the COLLECT_CLIENT permission check in place of the DELETE_RESULTS gate, enabling lateral privilege abuse within authenticated sessions. No public exploit or active exploitation has been identified, but the integrity impact is high because hunt data represents forensic evidence collected during incident response operations.
Stored Cross-Site Scripting in the Royal Addons for Elementor WordPress plugin (all versions before 1.7.1065) allows authenticated users holding the Contributor role or higher to inject persistent malicious scripts by supplying an unsanitized value in a widget setting that is written directly into an HTML tag. When a higher-privileged user such as an administrator subsequently views the affected page, the injected script executes in their browser session. A publicly available proof-of-concept exists and EPSS is 15%, placing this above the median exploitation probability for medium-severity WordPress plugin flaws.
Improper access control in the Cotton Cloud Joomla extension (versions prior to 2.0.3) enables horizontal privilege escalation across user accounts within a shared Joomla installation. Any authenticated user - regardless of privilege level - can read, delete, overwrite, or reassign permissions on files owned by other users, bypassing the extension's intended ACL enforcement. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity makes exploitation straightforward for any credentialed user.
Unauthenticated information disclosure in the Order Sync with Zendesk for WooCommerce WordPress plugin (all versions before 2.2.3) exposes full customer order history and cumulative purchase totals to any remote attacker who supplies a target's email address. The plugin's REST API endpoint omits both a WordPress capability check and any ownership verification, meaning the access control layer is entirely absent - not misconfigured but simply missing. A publicly available proof-of-concept exists (reported by WPScan), and SSVC assesses the vulnerability as automatable, making bulk enumeration of customer purchase data a realistic threat; however, no confirmed active exploitation (CISA KEV) has been recorded at time of analysis.
User Access Manager WordPress plugin before version 2.3.15 exposes restricted content to unauthenticated attackers via the WordPress REST API, which the plugin fails to protect with its own access control logic. Any post, page, or custom post type configured to be visible only to specific user groups can be silently read through standard REST API endpoints without credentials. A publicly available proof-of-concept exists (WPScan), and with an EPSS of 15% and automatable exploitation, this is a realistic risk for any WordPress site using this plugin to gate premium or sensitive content.
Unauthenticated IDOR in WP Travel Engine WordPress plugin before 6.8.5 exposes all customer booking records and stored billing information to any unauthenticated attacker who supplies a valid booking identifier to an unprotected cart action. The root cause is a complete absence of authorization and ownership checks - the plugin accepts a caller-supplied booking ID and processes it without verifying the requestor's identity or entitlement. Beyond disclosure, attackers can overwrite any customer's booking record with their own data, enabling fraud, booking manipulation, or data corruption at travel agencies. A publicly available proof-of-concept exists, and at 15% EPSS this vulnerability is elevated for its CVSS 5.3 rating - warranting prompt attention.
Concurrent TLS handshakes on Zephyr RTOS devices built with CONFIG_TLS_CREDENTIALS_BACKEND_PROTECTED_STORAGE cause a deterministic kernel panic and device reset via a NULL pointer dereference in the uninitialized credential mutex wait queue. The PSA Protected Storage credential backend in all affected Zephyr builds declared its serialization mutex without proper initialization, leaving its dlist sentinels as NULL; the fault triggers only on first contention but is fully deterministic once two threads race to acquire the lock. No public exploit has been identified and the issue is not in CISA KEV, though no exploit sophistication is required beyond opening multiple simultaneous TLS connections.
Improper access control in the Cotton Cloud Joomla extension (versions below 2.0.2) by tabaoca.org exposes a broken ACL implementation that allows unauthenticated remote attackers to perform arbitrary file operations - reading, deleting, overwriting, and reassigning permissions - on every file managed within the extension. The network-accessible, zero-authentication attack vector (CVSS 4.0 AV:N/AC:L/PR:N/UI:N) makes exploitation trivially low-effort against any Joomla site running an unpatched Cotton Cloud installation. No public exploit code or active exploitation has been identified at time of analysis, though the attack surface is broad enough that no specialized tooling is required.
Broken authorization in the Cookie Consent WordPress plugin before 0.0.10 allows any authenticated user - including a subscriber - to invoke administrator-intended REST API endpoints that control consent settings. Affected sites on the vendor's paid plan face an additional confidentiality exposure: the same misconfigured routes permit low-privileged users to read stored visitor consent logs, data that may carry GDPR compliance significance. A publicly available exploit exists, and an EPSS of 18% signals meaningful near-term exploitation probability despite the moderate CVSS score.
Incorrect authorization in the Cookie Consent WordPress plugin (versions before 0.0.10) allows any authenticated user - including low-privilege roles such as subscribers - to overwrite the plugin's stored geolocation service license key via a REST API route that fails its intended administrator-only capability check and falls back to a weaker authentication-only gate. The practical consequence is silent disruption of geolocation-based consent banner targeting, which can undermine GDPR and regional cookie-consent compliance workflows. Publicly available exploit code exists (no confirmed CISA KEV listing), and an EPSS score of 17% indicates above-average real-world exploitation interest relative to this severity class.
WP Crowdfunding WordPress plugin before version 2.2.1 allows any subscriber-level authenticated user to create crowdfunding campaign posts by exploiting a missing capability check in an AJAX action endpoint. The plugin fails to verify whether the requesting user holds the campaign-submission permission, allowing low-privilege WordPress roles to perform actions reserved for higher-privileged users. A publicly available exploit exists via WPScan, and an elevated EPSS of 14% signals meaningful real-world exploitation interest despite no CISA KEV listing.
Insecure Direct Object Reference in WP Crowdfunding (WordPress plugin, all versions before 2.2.1) allows any authenticated user with Subscriber-level access to read personal data from arbitrary WooCommerce orders and enumerate the store's complete order history. The flaw stems from missing order ownership verification, meaning low-privilege accounts - freely obtainable on sites with open registration - can harvest customer PII at scale. A publicly available exploit documented by WPScan exists, and the 14% EPSS score indicates meaningful real-world exploitation interest beyond what the mid-range CVSS score alone suggests.
Broken object-level authorization in the WP Crowdfunding WordPress plugin before 2.2.1 allows any authenticated user - including low-privilege Subscribers - to modify the update history of campaigns they do not own and trigger notification emails to that campaign's backers. The vulnerability stems from missing ownership verification on campaign update endpoints, enabling horizontal privilege escalation across all campaigns on the affected site. A publicly available proof-of-concept exists (reported by WPScan), and the EPSS score of 14% is notably elevated relative to most WordPress plugin flaws, warranting prompt patching on sites hosting active crowdfunding campaigns.
Insecure Direct Object Reference (IDOR) in KiviCare WordPress plugin before 4.5.2 allows any authenticated patient-level user to retrieve bills, invoices, and appointment records belonging to other patients without authorization. The plugin fails to verify record ownership server-side, meaning a low-privilege patient account is sufficient to enumerate and access sensitive healthcare and financial records of arbitrary other patients. A publicly available proof-of-concept exists via WPScan, and the EPSS score of 14% indicates meaningful near-term exploitation probability.
Eventin WordPress plugin versions from 4.1.9 through 4.1.19 exposes customer order records - including personal information - to any contributor-level or higher WordPress user via an Insecure Direct Object Reference (IDOR) flaw. Authenticated users can enumerate order identifiers sequentially to read arbitrary customers' purchase data without authorization. A public proof-of-concept is available via WPScan, and an EPSS score of 14% places this notably above the median for WordPress plugin vulnerabilities, indicating active interest from threat actors even without a CISA KEV listing.
Missing authorization on two administrative AJAX endpoints in ProSolution WP Client WordPress plugin before 2.0.9 allows any low-privileged authenticated user - including subscribers - to trigger administrative data synchronization and erase the plugin's activity log. The security nonce protecting these endpoints is exposed in the public-facing frontend, effectively nullifying WordPress's built-in CSRF protection and reducing the attack bar to any account with login access. A public exploit exists via WPScan, though CISA KEV lists no active exploitation and SSVC rates technical impact as only partial.
Insufficient authorization in WP Photo Album Plus (all versions before 9.2.09.002) allows any authenticated WordPress user-including low-privilege Subscriber accounts-to upload files into photo albums owned by other users or administrators. The flaw is rooted in CWE-639 (Authorization Bypass Through User-Controlled Key): the plugin's front-end upload endpoint accepts a caller-supplied album identifier without verifying ownership, enabling cross-user content injection. A publicly available POC exists via WPScan; no active exploitation is confirmed in CISA KEV, and the attack surface is constrained by a non-default configuration prerequisite.
Unauthenticated shortcode injection in Kirki WordPress plugin (all versions before 6.2.1) allows any remote attacker to execute arbitrary registered WordPress shortcodes via unprotected front-end form submission REST routes. On a default WordPress install, exploitation leads to disclosure of the site administrator's email address and abuse of the victim domain as a mail relay to arbitrary recipients. A publicly available proof-of-concept exploit exists per WPScan, and a vendor patch has been released.
Authenticated customers on WooCommerce stores running Wallet System for WooCommerce before 2.7.10 can complete purchases for free by submitting arbitrarily inflated wallet deduction amounts during checkout that the plugin accepts without verifying against the customer's actual stored balance. This business logic flaw enables systematic payment fraud - any registered shopper can zero out an order total and receive goods or services without paying the merchant. A publicly available proof-of-concept exists per WPScan, making this trivially exploitable by any site visitor who can register an account, and patching should be treated as urgent.
Heap buffer overflow in Samsung's rlottie animation rendering library allows remote denial-of-service via maliciously crafted Lottie animation files. An integer overflow in the 32-bit bitmap stride calculation inside vbitmap.cpp produces an undersized heap allocation; when the library then writes full-dimension pixel data into this allocation, heap corruption and application crash result. No public exploit has been identified at time of analysis, but any application embedding rlottie that renders untrusted animation content is exposed given the network-deliverable, user-interaction attack path reflected in CVSS PR:N/UI:R.
Uncontrolled resource consumption in Samsung's open-source rlottie library allows a crafted Lottie animation file to trigger excessive memory allocation, crashing any application that renders it. The root cause is unbounded amplification in the shape/repeater content tree: nested repeaters multiplied by point-heavy shapes (polystar, custom paths) can cause allocations that scale combinatorially with file complexity. All rlottie versions prior to the fix in GitHub PR #599 are affected; no patch release version is independently confirmed. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
OAuth2 access and refresh token theft in Budibase's automation testing pipeline exposes SSO-authenticated builder credentials to any co-builder of the same application, in all versions prior to 3.39.25. When an SSO-authenticated user runs an automation test in the Budibase builder, the full trigger outputs - including the user's OAuth2 access and refresh tokens - are broadcast without sanitization via WebSocket to every builder connected to the same application room, and are simultaneously stored in a server-side in-memory cache accessible to any co-builder via the test status polling endpoint. A vendor-released patch is available in version 3.39.25; no active exploitation has been confirmed and no public proof-of-concept has been identified at time of analysis.
Stored cross-site scripting in Prowler's HTML report formatter (all versions prior to 5.37.0) allows any cloud principal with resource tag-write permissions to inject arbitrary HTML or JavaScript that executes when a security operator opens the generated report. The flaw resides in prowler/lib/outputs/html/html.py, where resource tags assembled via unroll_dict and parse_html_string were interpolated into HTML table cells without HTML entity escaping. No public exploit identified at time of analysis; a vendor-released patch is available in version 5.37.0.
DOM-based cross-site scripting in Material for MkDocs versions 7.2.0 through 9.7.6 allows remote attackers to execute arbitrary JavaScript within a documentation site's origin by crafting a malicious `q` URL parameter targeting the optional search.suggest feature, which requires a single click from the victim to trigger. The vulnerability is confined to sites that have explicitly enabled the search.suggest feature, and exploitation results in Low confidentiality and integrity impact scoped to the affected origin. No public exploit code or active exploitation (CISA KEV) has been identified; the vendor released a confirmed patch in version 9.7.7.
Reflected XSS in LibreNMS 26.4.0 and earlier allows an authenticated attacker to inject arbitrary JavaScript into any victim's browser session by embedding a payload in the GET parameters `instance` or `vmid` of the Proxmox application module. The root cause is unsafe PHP string interpolation of unsanitized GET input directly into a `document.title` JavaScript assignment in `LegacyController.php:75`, bypassed with a simple single-quote injection. A working proof-of-concept demonstrating cookie exfiltration is publicly documented in the GitHub security advisory GHSA-jmqm-f8q4-v7wx; this CVE is not in CISA KEV.
Unauthenticated remote denial of service in the Russh SSH library (versions ≤ 0.62.3) allows any network attacker to crash individual server key-exchange sessions by sending a single SSH_MSG_KEX_ECDH_INIT packet containing a 32-byte all-zero Curve25519 public key. The defect triggers under the default server configuration - no special deployment required - causing a Rust bounds-check panic in encode_mpint before host-key signature verification ever occurs. A public proof-of-concept is documented in GHSA-5xvq-cp9x-6p6r; no active exploitation is confirmed in CISA KEV.
Account enumeration and targeted denial-of-service in Budibase prior to 3.39.25 stem from an observable response discrepancy in the login lockout mechanism: the login endpoint returns distinct HTTP 403 headers (X-Account-Locked: 1, Retry-After: 900) for locked existing accounts but a generic 403 for non-existent addresses, allowing an unauthenticated remote attacker to verify whether any email is registered in a tenant. Beyond reconnaissance, an attacker can deliberately trigger 5 failed attempts against a known valid address to lock that account for 900 seconds. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; remediation via upgrade to 3.39.25 is straightforward.
Reflected XSS in Astro's server-side View Transition CSS generator affects all server-rendered or on-demand Astro applications running versions 2.9.0 through 7.0.9. The framework interpolates attacker-controlled animation property values (such as duration, easing, delay, direction, fillMode, and name) directly into an inline <style> element without CSS or HTML escaping, allowing a crafted value containing </style> to break out of the style context and inject arbitrary HTML or JavaScript. A public proof-of-concept exists per the GHSA advisory; no public exploit identified at time of analysis beyond that PoC. The issue is fixed in Astro 7.1.0.
Denial-of-service in russh's Curve25519 key exchange client path allows any malicious SSH server to crash a connecting russh client session deterministically and pre-authentication, before host key verification occurs. Affected are all russh client deployments running versions prior to 0.62.4. An attacker operating or controlling an SSH server can terminate the client's spawned session task with a single malformed KEX_ECDH_REPLY packet; a working proof-of-concept is included in the GHSA advisory. No public exploit identified at time of analysis for active exploitation, and CISA KEV listing is absent, but the attack is reliable, requires no authentication, and a POC is publicly available.
Price manipulation in the Payment Button for PayPal WordPress plugin (all versions through 1.2.3.44) enables unauthenticated remote visitors to complete real PayPal transactions at self-specified amounts, causing direct financial loss to the merchant. The plugin forwards whatever payment amount the browser submits to PayPal without any server-side comparison against the merchant-configured price, meaning a buyer can purchase any listed product or service for an arbitrarily low value - including fractions of a cent. A publicly available proof-of-concept exploit exists per WPScan intelligence, lowering the bar for opportunistic financial fraud against any affected storefront.
Payment fraud in the Payment Gateway for PayPal on WooCommerce WordPress plugin (all versions before 9.2.1) enables unauthenticated remote attackers to mark arbitrary WooCommerce orders as paid without completing actual payment. The plugin's PayPal return handler reads attacker-controlled URL parameters and completes orders regardless of whether server-side gateway verification passes or fails, with no amount comparison and no order-ownership validation. A publicly available proof-of-concept exploit exists per WPScan; while the official CVSS score is 5.3, the financial fraud impact on affected e-commerce stores is materially higher in practice.
Fraudulent order completion in the Quick Paypal Payments WordPress plugin (all versions through 5.7.50) enables any buyer to acquire full-price goods or services by paying an arbitrary small amount. The plugin's PayPal IPN handler validates only the order token when determining whether to mark an order as paid - ignoring the payment amount, receiver address, and payment status entirely - so any buyer who can initiate a checkout can trivially complete a full-value order for pennies. Publicly available exploit code exists, reported by WPScan, making immediate opportunistic exploitation straightforward for any motivated attacker targeting affected WordPress storefronts.
Payment callback fraud in the Welcart e-Commerce WordPress plugin (versions before 2.11.33) allows any unauthenticated remote attacker to flip their own unpaid order to a settled/paid state by submitting a crafted HTTP request containing only an order number and a status flag - no signature, payment amount, or origin IP is validated. Merchants offering convenience-store or bank-transfer pay-later methods are directly exposed to financial fraud, enabling attackers to obtain goods or services without transferring funds. A publicly available proof-of-concept exists; no active exploitation has been confirmed by CISA KEV at time of analysis.
Cross-namespace Secret manipulation in the multicloud-operators-channel component of Red Hat Advanced Cluster Management for Kubernetes 2 (RHACM) enables an authenticated low-privileged user holding specific channel-related permissions to read or modify Kubernetes Secrets outside their authorized namespace scope. The CVSS S:C (Changed Scope) metric confirms the flaw crosses namespace trust boundaries - a critical boundary in multi-tenant Kubernetes environments - potentially exposing credentials, service account tokens, or application secrets belonging to other tenants, and enabling privilege escalation. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Filesystem existence and readability probing in Budibase Cloud's MongoDB integration prior to version 3.40.1 exposes an information-disclosure oracle exploitable by authenticated builders. The `tlsCertificateKeyFile` and `tlsCAFile` fields in the MongoDB datasource configuration were passed unsanitized to the MongoDB driver as server-side filesystem paths, enabling a builder to probe arbitrary absolute paths on the shared multi-tenant server via `/api/datasources/verify` by comparing distinct driver error messages. No CISA KEV listing exists, but the GHSA advisory contains a fully working reproduction command; the vulnerability is specific to Budibase Cloud and does not affect self-hosted deployments.
Server-Side Request Forgery in Budibase's AI table generation pipeline (versions prior to 3.39.4) allows a builder-level user to coerce the server into fetching arbitrary internal network endpoints - including cloud metadata services such as 169.254.169.254 - by crafting LLM prompts that cause the AI to output internal IP addresses as attachment column values. The vulnerable code path, `uploadUrl()` in `fileUtils.ts`, uses a bare `node-fetch` call with no SSRF blacklist validation, while sibling code paths in the same codebase correctly use `fetchWithBlacklist()`. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV; a vendor-released patch is available in version 3.39.4.
SQL injection in Phoenix Contact PLCnext controller web interfaces exposes a notification message SQLite database to manipulation by authenticated low-privilege users. The vulnerable endpoint is network-accessible with no attack requirements beyond a valid low-privilege account, making it trivially exploitable from any networked workstation in OT environments where such accounts exist. Impact is deliberately bounded by design to the notification subsystem - core PLC control logic, I/O, and safety functions are not affected - but notification tampering in industrial contexts may suppress or falsify operational alerts. No public exploit code exists and no CISA KEV listing is present at time of analysis.