Arbitrary Python code execution in FreeCAD's BIM Workbench (versions 0.19 through 1.1.0) is triggered when a user creates a TechDraw page from a malicious SVG template, due to an unsafe eval() call in BimTDPage.py at line 87. Exploitation requires social engineering - an attacker must deliver a crafted SVG template to a victim who then performs the TechDraw page creation action. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the vulnerability is structurally trivial (direct eval of attacker-controlled input, CWE-95) and the fix is available in version 1.1.1.
Shell command injection in openshift-metal3/fakefish allows low-privileged network-accessible attackers to execute arbitrary OS commands by supplying crafted Image URLs or BMC credential values. Unquoted shell variable expansion in FakeFish scripts passes attacker-controlled strings directly into shell command lines and Kubernetes manifests without sanitization, with the Changed scope (S:C) in the CVSS vector indicating impact extends beyond the FakeFish process to the underlying provisioning infrastructure. No public exploit code has been identified at time of analysis, and no active exploitation is recorded in CISA KEV.
UpTrain versions 0.7.1 and prior expose a critical authentication bypass combining two design flaws: a static default API key that equals the default username (making it predictable to any observer), and a permissive CORS policy that allows cross-origin requests from any domain. Any malicious website can authenticate to a reachable UpTrain instance by embedding the known static key in the `uptrain-access-token` header, performing privileged operations as the default user. Proof-of-concept exploit code exists (confirmed by CVSS 4.0 E:P metric), and no vendor patch has been released as of publication.
SQL injection in ERPNext's Inactive Customers report allows any authenticated user to manipulate raw database queries via an unvalidated doctype filter parameter. Affected versions prior to 15.116.0 (v15 branch) and 16.23.0 (v16 branch) interpolate user-supplied input directly into f-string SQL in get_sales_details and get_last_sales_amt, enabling exfiltration of sensitive ERP data and limited database manipulation. No public exploit code has been identified at time of analysis, and no active exploitation is confirmed.
Remote unauthenticated denial of service in ACME mini_httpd 1.30 and earlier is triggered by sending crafted HTTP requests that exploit a parsing flaw in the handle_request() function's header processing logic. The attack requires no authentication, no user interaction, and is classified as automatable by CISA's SSVC framework, meaning scripted mass-scanning for vulnerable instances is feasible. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been independently verified, though a researcher blog post linked in NVD references the vulnerability directly.
Directory traversal and reported remote code execution in Pronis Loisirs Billetterie CSE (all versions prior to April 2026) expose sensitive server-side files to unauthenticated remote attackers. A public proof-of-concept repository is available on GitHub, materially lowering the skill barrier for exploitation. EPSS sits at 0.40% (34th percentile), indicating limited observed exploitation activity at time of analysis; no CISA KEV listing is confirmed.
Remote code execution in UpTrain v0.7.1 and prior is achievable by any authenticated user through the `/create_project` API endpoint, where the `checks` and `metadata` parameters are processed without adequate sanitization, allowing arbitrary code to run in the context of the host process. Discovered and reported by GitHub Security Lab (GHSL-2024-198/GHSL-2024-199), the flaw targets the dashboard backend (app.py:L691) and is most commonly exploited within Docker-based deployments as recommended by official documentation. No vendor patch exists as of publication, and a proof-of-concept is confirmed by the CVSS 4.0 E:P modifier, elevating real-world urgency despite the authentication prerequisite.
Missing authorization in Dolusoft Software Technologies Fortilogger (before version 6.1.5.9) allows unauthenticated remote attackers to access functionality that should be restricted by access control lists. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication and no user interaction over the network, with a resulting high confidentiality impact. No public exploit code or active exploitation has been identified at time of analysis, though the vulnerability was flagged and disclosed by Turkey's national USOM cybersecurity authority.
Unauthenticated directory traversal in hermes-studio v.0.6.26 exposes arbitrary server-side files through the api/hermes/download endpoint, where the validatePath function fails to adequately restrict path sequences supplied by the caller. The flaw (CWE-22) enables a remote attacker with no credentials to retrieve sensitive files - including configuration files, credentials, and OS artifacts - bounded only by the filesystem permissions of the server process. Publicly available exploit code exists in a GitHub repository; EPSS places current exploitation probability at 0.26% (18th percentile), indicating low observed exploitation volume at time of analysis with no CISA KEV listing.
Missing Authorization in Sonlogger (Dolusoft Software Technologies) versions v6.6.6 through before 6.7.4.8 exposes protected functionality to unauthenticated remote attackers via ACL bypass, resulting in high confidentiality impact. The CVSS vector confirms AV:N/PR:N, meaning no credentials are required - any network-reachable instance is exposed by default. No public exploit or active exploitation has been identified at time of analysis, but SSVC flags the flaw as automatable, meaning mass scanning and opportunistic exploitation is technically feasible.
Remote denial-of-service in Apple iOS, iPadOS, and macOS Tahoe exploits a use-after-free memory corruption flaw, allowing an unauthenticated remote attacker to trigger unexpected system termination without user interaction. Affected platforms include iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, as confirmed by Apple security advisories. No public exploit code or active exploitation has been identified at time of analysis, but the network-accessible, zero-interaction attack surface presents a meaningful availability risk for all unpatched Apple devices.
Uncontrolled recursion in docx4j-core's PropertyResolver crashes Java server-side applications that process untrusted DOCX files. The fillPPrStack method and adjacent style-resolution helpers traverse the OpenXML w:basedOn style inheritance chain without cycle detection, meaning a crafted DOCX with two mutually referencing styles triggers unbounded recursion and a java.lang.StackOverflowError, killing the processing thread. No public exploit identified at time of analysis, but the attack is trivially reproducible by editing OOXML XML internals, and the malicious document is a syntactically valid OOXML package that bypasses antivirus and content-inspection filters.
Unbounded gzip decompression in http4k's `ServerFilters.GZip` and `RequestFilters.GunZip` filters allows any unauthenticated remote client to exhaust JVM heap memory by sending a small (kilobyte-scale) gzip-encoded request body that decompresses to gigabytes - a classic compression bomb attack. All http4k servers using these filters across the v4.x, v5.x, and v6.x lines are affected; the flaw was silently present for approximately 9 years (since commit 2618fe08f9, 2017-08-01). No public exploit code or CISA KEV listing is identified at time of analysis, though the attack technique is trivially constructable from publicly documented zip-bomb methodology.
CPU exhaustion via ReDoS in sqlparse affects all Python applications that pass caller-controlled SQL text to sqlparse.parse(), sqlparse.format(), or sqlparse.split() prior to version 0.6.0. The root cause is a backreference regex pattern in the dollar-quoted literal lexer that, combined with the per-position lexer loop, produces O(n²) CPU complexity when processing inputs containing many unique, unclosed dollar-quote openers or multiline comment delimiters — making it trivially exploitable from the network with no authentication. No public exploit code or CISA KEV listing has been identified at time of analysis, but the fix commit includes a purpose-built benchmark script that doubles as a functional reproduction guide.
Path traversal in PostCSS's automatic source map loading allows arbitrary `.map` file disclosure when untrusted CSS is processed without explicitly opting out. Specifically, `lib/previous-map.js` constructs file paths from attacker-controlled `sourceMappingURL` comment values without sandboxing directory traversal sequences, enabling an attacker who can supply CSS to a PostCSS-processing service to exfiltrate `sourcesContent` from any `.map` file reachable by the process. The flaw affects all PostCSS versions from 8.0.0 through 8.5.17; no public exploit or CISA KEV listing has been confirmed at time of analysis, though the GHSA advisory provides a detailed attack scenario.
Unauthenticated denial-of-service in New API (QuantumNous), an open-source LLM gateway and AI asset management platform, allows remote attackers to exhaust host memory and disk resources by sending arbitrarily large payloads to payment webhook endpoints before any signature validation occurs. The payment processing routes for Stripe, Creem, and Waffo read and fully log request bodies prior to any cryptographic verification, meaning no valid payment credential or forged signature is required to trigger sustained resource consumption. No public exploit code has been identified at time of analysis, but the attack is trivially automatable given the unauthenticated, network-accessible surface and low complexity; the vendor-released fix in v1.0.0-rc.11 enforces a configurable 512 KB body limit on all anonymous endpoints.
OS command injection in Dell ObjectScale (versions prior to 4.3.0.1) enables a low-privileged local attacker to execute arbitrary operating system commands, yielding full confidentiality, integrity, and availability compromise of the affected node. The CVSS vector (AV:L/PR:L/UI:R) constrains exploitation to authenticated local actors who must also induce user interaction, making this a post-access lateral-movement or insider threat rather than a direct external attack path. No active exploitation has been confirmed (not listed in CISA KEV) and no public exploit code has been identified at time of analysis, though the Dell advisory DSA-2026-328 confirms the issue and provides a patch.
Remote code execution in UpTrain 0.7.1 and prior allows authenticated users to execute arbitrary commands on the host system via the `/new_run` API endpoint. The `checks` and `metadata` parameters are unsanitized, enabling injection attacks (CWE-74) that run in the context of the underlying process - typically a Docker container per the official deployment documentation. Publicly available exploit code exists (CVSS 4.0 E:P per GitHub Security Lab advisory GHSL-2024-200/201), and no vendor-released patch has been identified at time of publication.
Remote code execution in UpTrain's `/add_prompts` API endpoint allows any authenticated user to execute arbitrary commands on the host system by injecting malicious payloads into the `checks` or `metadata` parameters. Affected versions are 0.7.1 and prior, and deployments following the official documentation run inside Docker containers, meaning successful exploitation grants control of the container environment. GitHub Security Lab (GHSL-2024-200/201) has published an advisory and the CVSS 4.0 E:P modifier confirms publicly available proof-of-concept exploit code exists; no vendor-released patch has been issued as of time of publication.
IMAP command injection in Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3 enables authenticated remote attackers to disclose information or escalate privileges by exploiting a desynchronization between mail search operations and LITERAL+ byte-count handling. The flaw was reported by Zach Hanley of Horizon3.ai and is classified as CWE-77 (Command Injection), with the vendor releasing patched versions 1.6.18 and 1.7.3 on 2026-08-09. No public exploit code or CISA KEV listing has been identified at time of analysis, though the C:H/I:H CVSS impact and the researcher's track record for producing working exploits elevate the urgency of patching.
Cross-site scripting (XSS) in OpenText Directory Services through version 22.2 allows network-based unauthenticated attackers to inject malicious scripts that execute in victims' browsers, yielding high confidentiality and integrity impact against the vulnerable system. A proof-of-concept exploit exists per the CVSS 4.0 E:P modifier, though this CVE does not appear in the CISA KEV catalog and user interaction is required to trigger the flaw. Because directory services platforms manage authentication credentials and identity data, successful exploitation can enable session hijacking or account takeover with downstream access implications across integrated systems.
Path traversal in Progress ShareFile Storage Zones Controller (v5 ≤ 5.12.5, v6 ≤ 6.0.2) enables an authenticated zone administrator to write attacker-controlled files outside the intended download preparation directory. On v5 versions this file-write primitive escalates to confirmed remote code execution; the vendor has not confirmed RCE on v6. No public exploit has been identified at time of analysis, though the vulnerability was self-disclosed by Progress via security@progress.com.
Privilege escalation in Dell ObjectScale versions prior to 4.3.0.1 is enabled by an Uncontrolled Search Path Element (CWE-427), allowing a low-privileged local attacker to plant a malicious binary or shared library in a directory that the application resolves before the legitimate path, resulting in code execution under a higher-privileged context. The CVSS 3.1 score of 7.3 reflects full confidentiality, integrity, and availability impact, though the attack is constrained to local access and requires user interaction to trigger the vulnerable operation. Dell has released a fix in version 4.3.0.1 per advisory DSA-2026-328; no public exploit code has been identified at time of analysis.
Memory corruption in the kernel-mode driver component of BeyondTrust Endpoint Privilege Management for Windows (all versions prior to 26.1.2) allows a low-privileged local user to trigger an out-of-bounds read, potentially disclosing kernel memory contents or corrupting system state. The flaw is rooted in insufficient input validation within a Ring 0 component - the most privileged execution layer on Windows - amplifying the potential impact of what would otherwise be a constrained user-level action. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the vendor has released a fix in version 26.1.2.
Path traversal in Progress ShareFile Storage Zones Controller v5.12.5 and below enables an authenticated party holding valid zone credentials to write arbitrary content to any filesystem location accessible by the application's service account via the resumable upload initiation endpoint. By manipulating path parameters in upload requests, the attacker can plant attacker-controlled files outside intended storage boundaries, with the vendor explicitly noting this may result in execution of attacker-supplied code. No public exploit identified at time of analysis and no CISA KEV listing, but the direct path to code execution and the vendor-confirmed scope make this a high-priority patch target for on-premises deployments.
Roundcube Webmail's built-in CSS proxy failed to validate responses from external CSS sources, enabling XSS or information disclosure via browser MIME sniffing in versions before 1.6.18 and 1.7.x before 1.7.3. The CVSS 3.1 score of 7.2 with Changed scope reflects that successful exploitation compromises the victim's browser session within the webmail origin. No active exploitation has been confirmed by CISA KEV, and no public proof-of-concept exploit has been identified at the time of analysis.
Unauthorized S3 signed-URL generation in Budibase prior to 3.41.3 allows any authenticated published-app user holding the low-privilege BASIC role to supply arbitrary bucket and key values to POST /api/attachments/:datasourceId/url and receive valid signedUrl and publicUrl values generated using the application's stored S3 datasource credentials. The root cause is missing authorization (CWE-862) on this endpoint, which fails to restrict low-privileged app users from invoking datasource-credential-backed operations. No public exploit or CISA KEV listing has been identified at time of analysis, though the low attack complexity and the wide availability of BASIC-role accounts in published Budibase apps makes this a realistic internal threat.
Prototype pollution in ApostropheCMS 4.32.0 and earlier enables an authenticated editor to trigger a persistent, process-wide denial of service via a single PATCH REST API request. By sending `{ "toString.call": "x" }` to `PATCH /api/v1/article/:id`, the attacker walks the JavaScript prototype chain through `apos.util.set()` into the shared `Object.prototype.toString` function object and shadows its `call` method, breaking every subsequent `Object.prototype.toString.call()` invocation in Node.js - including those inside the MongoDB driver - until the server process is manually restarted. No separate proof-of-concept repository has been published, but the exact attack payload is fully disclosed in the public GitHub security advisory GHSA-vmg4-6gfg-83qx and the upstream commit diff, and active exploitation has not been confirmed by CISA KEV.
OS command injection in GL.iNet firmware 4.8.x exposes eight router models to unauthenticated remote root code execution via the NAS Command Service binary at /usr/bin/gl_nas_sys. GL.iNet's own CVE advisory on GitHub characterizes the attack as a 'Host-header bypass to unauthenticated root RCE,' meaning the Host HTTP header can be manipulated to circumvent the service's authentication layer before injecting arbitrary OS commands. The vendor has confirmed the vulnerability, vendor-released patch version 4.9.0 is available, and no public exploit identified at time of analysis, though the GL.iNet-hosted writeup substantially documents the attack mechanism.
CORS misconfiguration in the openssl_encrypt pip package (versions before 1.4.0) enables any website to issue fully credentialed cross-origin API requests on behalf of authenticated users, exposing sensitive API responses to attacker-controlled origins. Both standalone server components - key-server and telemetry-server - ship with the maximally permissive combination of allow_origins=["*"] and allow_credentials=True as their default configuration, propagated through docker-compose.yml and .env.example. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code is known at time of analysis, though the attack pattern is a well-understood, low-complexity web exploit.
Missing authorization on Determined's generic task management API endpoints allows any authenticated user to kill, pause, or unpause tasks belonging to other users. The flaw - rooted in CWE-862 (Missing Authorization) - means a low-privileged user with a valid account can disrupt any other user's ML training workloads across the platform without owning those tasks. No public exploit code has been identified at time of analysis, but the attack surface is straightforward: any authenticated API call to the affected endpoints against an unprotected resource suffices.
Incorrect authorization in OpenViking's debug vector scroll and count endpoints exposes all co-tenant records to any authenticated user within the same account. The storage backend in viking_vector_index_backend.py enforces only account-level scoping, with no per-user access controls, enabling lateral data theft of private memories, skills, resources, and secrets without administrative privileges. No active exploitation has been confirmed (not in CISA KEV), and no vendor-released patch version has been identified at time of analysis.
Netfilter's nft_payload offload mask builder in the Linux kernel performs an undefined-behavior shift (1 << 120 on a 32-bit int) when constructing hardware-offload match masks for partial IPv6 address fields, and separately over-masks trailing bytes when priv_len is a multiple of four. Systems running affected kernel versions that use nftables hardware offload rules with partial IPv6 address matches may experience firewall rule bypass (I:H) or kernel instability triggered by UBSAN (A:H). No public exploit is identified at time of analysis, and EPSS sits at 0.16% (5th percentile), consistent with a kernel correctness/stability bug rather than an actively targeted security issue. Patches are available across all active stable branches.
Path traversal (CWE-22) in HashiCorp Packer's third-party plugin installer through version 1.15.4 permits a crafted plugin archive to write files outside the intended extraction directory, enabling code execution on the host. Users who install plugins from malicious or compromised sources trigger the vulnerability through the normal `packer plugins install` workflow. No public exploit code has been identified at time of analysis, and a vendor-released fix is available in Packer 1.16.0.
Redirect URI prefix-matching in Medplum's unauthenticated external IdP callback (GET /auth/external) allows an attacker who can forge or intercept the OAuth state parameter to redirect Medplum authorization codes and login tokens to an attacker-controlled endpoint. All deployments of npm/@medplum/core at version 5.1.5 and below where a ClientApplication has an external identityProvider configured are affected; the fix was released in v5.1.6. Publicly available exploit code exists in the GHSA-m44r-7c5h-m6mj advisory - including curl-based reproduction steps - and because the attacker can inject their own PKCE challenge into the forged state, stolen codes can be redeemed for a full access token without the victim's knowledge, constituting a complete account takeover.
Path traversal in Dell ObjectScale (versions prior to 4.3.0.1) enables a local low-privileged attacker to write to or corrupt files outside intended directory boundaries, achieving high integrity and availability impact without requiring user interaction. The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) confirms exploitation requires only a local account with minimal privilege - no elevated rights or user interaction needed. No public exploit code or CISA KEV listing has been identified at time of analysis; risk is primarily from insider threats or attacker-controlled service accounts in post-compromise scenarios.
Tamper protection bypass in BeyondTrust Endpoint Privilege Management (EPM) for Windows allows local high-privileged users to circumvent agent protection controls by exploiting a flaw in how protections are applied to a support utility process. Affected versions are all EPM Windows Deployment releases prior to 26.1.2, per EUVD-2026-60270 and BeyondTrust advisory BT26-04. No public exploit has been identified and this is not in CISA KEV, but the high confidentiality, integrity, and availability impact on the vulnerable system makes this a meaningful concern for any organization relying on EPM as a core endpoint security control.
Glances versions through 4.5.5 contain an incomplete fix for CVE-2026-53925: the `--disable-config-exec` flag correctly suppresses shell operator interpretation in AMP module commands but fails to do so for on-alert action commands in `glances/actions.py`, where `secure_popen()` is called without `allow_operators=False`. An attacker with write access to `glances.conf` can place shell metacharacters (`>`, `&&`, `|`) in alert action directives, which execute at the Glances process privilege when an alert threshold is crossed - despite the operator supposedly operating in hardened mode. No public exploit confirmed active exploitation (no CISA KEV listing); a benign proof-of-concept is documented in GHSA-59fj-m2j6-hcxh. The fix is available in Glances 4.5.6.
Recursive arbitrary directory deletion in OpenEMR before 8.2.0 is achievable by an unauthenticated attacker through a two-vulnerability chain: a path traversal flaw in standard_tables_manage.php allows the db GET parameter - passed unsanitized to temp_dir_cleanup() - to resolve outside the intended PHP temporary directory, while an open redirect in dicom_frame.php enables delivery of a crafted URL that triggers this deletion inside an authenticated Superuser's active session. The patch is confirmed in OpenEMR 8.2.0 (released 2026-07-08); no active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis. The potential for irreversible mass deletion of patient records and EHR runtime data makes this a high-priority patching target despite the social-engineering prerequisite.
Stored cross-site scripting in Pandora's URL observable rendering allows network-reachable attackers to inject arbitrary JavaScript that executes in the context of an authenticated victim's Pandora session when they interact with the Submit to Lookyloo control. The root cause is a JavaScript string injection context mismatch: attacker-controlled URLs extracted from submitted files were interpolated directly into inline onclick handlers, where the template engine's HTML entity encoding provides no protection. Successful exploitation enables session hijacking or unauthorized actions on behalf of the victim; no public exploit has been identified at time of analysis.
Cross-zone isolation is broken in Kong Mesh's global control plane, allowing any authenticated zone to inject and overwrite mesh resources attributed to other zones by spoofing the in-band ControlPlane.Identifier during KDS sync. Multiple release trains are affected, including all Kong Mesh versions prior to 2.7.29, 2.9.19, 2.11.18, 2.12.14, 2.13.10, and 2.14.2. No public exploit has been identified at time of analysis; the CVSS 4.0 score of 7.0 reflects high integrity impact to global control plane state and downstream zones, with no availability impact.
Remote code execution via crafted .FCStd document in FreeCAD prior to 1.1.2 allows arbitrary Python execution when a victim opens a malicious file. The deserialization path in PropertyPythonObject::Restore() passes attacker-controlled module names directly to PyImport_ImportModule(), executing module-level Python code on import; the legacy pickle branch additionally invokes an attacker-controlled class constructor via PyObject_CallObject(). No public exploit or CISA KEV listing is identified at time of analysis, but exploit construction is straightforward for any researcher who can craft the FCStd XML schema.
Arbitrary file deletion in Terragrunt before v1.0.4 allows an attacker who controls a remote module source to delete any file accessible to the Terragrunt process by embedding directory traversal paths in a forged `.terragrunt-module-manifest` file within the module. The deletion occurs automatically during the module download and initialization phase - before OpenTofu or Terraform executes - making CI/CD pipelines that consume external modules particularly exposed. No public exploit has been identified and no CISA KEV listing exists; a vendor-released patch is available in v1.0.4. Note: an 'RCE' tag in the source metadata directly contradicts the vendor advisory's explicit statement that this is a deletion-only primitive with no code execution or data exfiltration capability.
Authorization bypass in the WebDAV Service COPY/MOVE operations on seventeen GL.iNet router models running firmware up to 4.8.x allows remote unauthenticated attackers to read and write files outside their authorized share boundaries. The root cause, per the GitHub reference title 'WebDAV Public-Share Destination Authorization Bypass', is that the destination path supplied in COPY/MOVE requests is not properly authorization-checked against the caller's access scope - a classic CWE-639 user-controlled key bypass. The vendor has independently confirmed the vulnerability exists. No public exploit code or CISA KEV listing is identified at time of analysis.
Remote content blocking evasion in Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3 lets a crafted SVG image with an unclosed url() in a FuncIRI attribute slip past the remote-image blocker, so external resources load when a victim views a malicious email. This exposes the recipient's IP, mail-client fingerprint, and email-open telemetry to the sender, and per the advisory may aid further information disclosure or privilege escalation. It has a vendor patch and no public exploit identified at time of analysis; EPSS is low (0.31%) and CISA SSVC rates exploitation as none.
Directory listing exposure in SourceCodester Best Employee Management System 1.0 allows unauthenticated remote attackers to browse the /assets/uploadImage/Profile/ path and enumerate all uploaded employee profile images without any credentials. The web server returns a browsable file index rather than denying access, leaking filenames, file metadata, and potentially PII-adjacent content tied to employee records. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis, though exploitation requires nothing more than a standard HTTP GET request.
Uncontrolled resource consumption in HP Smart Tank All-in-One printers allows unauthenticated network attackers to render affected devices unavailable by flooding them with concurrent HTTP requests. The vulnerability (CWE-400) is rooted in the printer's embedded HTTP service failing to throttle or bound incoming connection load, causing availability loss without any authentication requirement. No public exploit code or CISA KEV listing has been identified at time of analysis, though the simplicity of the attack vector (parallel HTTP flooding) significantly lowers the skill bar for exploitation.
Stored XSS in the Pandora malware analysis platform's PDF download endpoint allows attacker-controlled JavaScript to execute in the security context of the application when an analyst views a crafted analysis task. An attacker submits a polyglot file that passes Pandora's content-based PDF detection but whose filename or extension causes Flask's send_file() to serve it with an active MIME type such as text/html, with no Content-Disposition: attachment header forcing browser download. Any victim with access to the analysis task who follows the PDF download link will have attacker-supplied script execute in their Pandora session, potentially exposing session data or enabling unauthorized actions. No public exploit identified at time of analysis; a patch is available via upstream commit 668ec65a93cee327e3d925da2698849c9e65625a.
Key derivation bypass in jahlives/openssl_encrypt PHP library before 1.4.6 allows offline password cracking at SHA-256 speed against credentials derived under the flawed sequential XOR composition mode. An algebraic cancellation in the key generation routine causes the memory-hard KDF's final stage to nullify itself, stripping the configured computational cost entirely and collapsing security to that of a single SHA-256 hash. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis, but the impact is severe for any application storing user passwords in the vulnerable configuration.
Server-side template injection in JumpServer prior to 4.10.17 enables an authenticated administrator with Applet Host management and deployment permissions to plant Jinja2 expressions in the IP/Host or Core Service Address fields, which Ansible then evaluates as live template expressions during Applet Host deployment, yielding arbitrary OS command execution on the JumpServer control node. The patch was released in v4.10.17, confirmed via the GitHub release tag, and no public exploit code or CISA KEV entry has been identified at time of analysis. Because the control node manages downstream bastion targets, a successful exploit has blast radius well beyond the JumpServer process itself.