Arbitrary file read in Hugging Face Transformers allows an attacker who controls a model checkpoint index file to exfiltrate files from the host filesystem outside the intended model directory. The library fails to sanitize shard filenames in checkpoint index files before joining them to directory paths, meaning maliciously crafted entries containing parent-directory sequences or absolute paths resolve to unintended locations. Any user or automated pipeline that loads an attacker-supplied checkpoint - for example, by downloading a model from an untrusted Hub repository - can have host files disclosed without code execution. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Denial-of-service in JetBrains YouTrack before 2026.2.18177 allows an authenticated low-privileged user to exhaust server resources by uploading a decompression bomb to the import endpoint. The CVSS vector confirms full availability impact (A:H) with no confidentiality or integrity consequences. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis, making this a moderate-priority internal threat requiring authenticated access.
Denial-of-service in JetBrains YouTrack before versions 2026.1.13901 and 2026.2.17950 allows authenticated remote attackers to exhaust server resources by submitting crafted type parameters, rendering the service unavailable. The vulnerability stems from uncontrolled resource consumption (CWE-770), where malformed input is not bounded before processing. No public exploit code or active exploitation has been identified at time of analysis.
The Acer Planet9 desktop application contains a hardcoded read-only API key that grants unauthenticated network access to Acer's internal repositories. Any user possessing the application binary can extract this credential via static analysis, access repository contents, and recover embedded administrative credentials from within those repositories - potentially enabling administrative control over repository infrastructure and software source code modification. No public exploit code exists at time of analysis (CVSS 4.0 E:U), and Acer has released an update to remediate the issue.
Out-of-bounds read in Apple iOS, iPadOS, and macOS kernel components allows a low-privileged local app to trigger unexpected system termination or disclose sensitive kernel memory. Affected platforms include iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with Apple releasing emergency point releases to address the flaw. No public exploit or active exploitation has been identified (not in CISA KEV), and EPSS sits at the 5th percentile (0.15%), indicating very low likelihood of observed exploitation at this time.
Path traversal in ApostropheCMS's import-export module (versions prior to 3.6.2) allows an authenticated contributor to exfiltrate host files and expose them publicly via the CMS uploads URL. By importing a crafted `.tar.gz` archive with `../` sequences embedded in the `_id`, `name`, or `extension` fields of `aposAttachments.json`, an attacker causes the module to reconstruct a source path that escapes the extraction directory, reading any host file whose name ends with an allow-listed extension and copying it to a publicly accessible, unauthenticated uploads endpoint. No public exploit is identified at time of analysis; vendor-released patch is available in version 3.6.2.
Server-side request forgery in vLLM's MiMoV2OmniMultiModalProcessor allows authenticated API users to bypass the framework's media access controls, enabling arbitrary file reads on the vLLM host and SSRF requests to internal network resources. The flaw affects all vLLM releases prior to 0.26.0 where attacker-controlled image and audio URL strings were passed directly to _fetch_image, requests.get, and Image.open instead of routing through the MediaConnector abstraction that enforces allowed_media_domains and allowed_local_media_path restrictions. No public exploit code or CISA KEV listing exists at time of analysis, but the low attack complexity and network-accessible vector make this a meaningful risk for deployments serving untrusted authenticated users via the affected multimodal processor.
Memory exhaustion in Deskflow's clipboard protocol subsystem allows a connected peer to crash the receiving process by flooding it with DataChunk messages that accumulate beyond the declared DataStart size before any DataEnd validation occurs. Versions 1.17.0 through continuous build 1.26.0.299 are affected on both server (ClientProxy1_6.cpp) and client (ServerProxy.cpp) code paths. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the attack primitive is straightforward given the publicly available patch diff.
Denial of service in Mattermost's Boards (focalboard) plugin allows any authenticated user to crash the plugin process and disrupt Boards availability for all users on the instance by sending a single malformed WebSocket message. The root cause is absent input validation on the teamId field type in custom_focalboard_SUBSCRIBE_TEAM WebSocket commands, classified under CWE-704 (Incorrect Type Conversion). Affected versions span 11.7.x through 11.7.6, 10.11.x through 10.11.21, and 11.8.x through 11.8.3; no public exploit has been identified at time of analysis.
Privilege escalation in Onyx Enterprise Edition (versions prior to 4.3.0) allows any authenticated curator to modify user groups outside their assigned scope, gaining unauthorized document access through the platform's OpenSearch access_control_list filter. The PATCH /manage/admin/user-group/{user_group_id} and POST /manage/admin/user-group/{user_group_id}/add-users endpoints relied solely on a role check confirming the caller held curator status somewhere in the system, but the underlying database functions update_user_group and add_users_to_user_group never invoked _validate_curator_can_modify_group to scope that access to specific groups. No public exploit has been identified at time of analysis, and the issue is fixed in the vendor-released version 4.3.0.
Unauthorized cross-project article disclosure in JetBrains YouTrack allows any authenticated user to read restricted knowledge base articles belonging to projects they are not authorized to access, by exploiting a missing authorization check on the draft creation endpoint. Affected are all YouTrack deployments running versions before 2026.1.13903 and 2026.2.17950. No public exploit or active exploitation has been identified, but the low attack complexity and network-accessible vector make this trivially repeatable by any valid account holder on the instance.
Glances REST API prior to 4.5.6 exposes authenticated system monitoring data to untrusted cross-origin websites due to a logic error in the CORS credentials guard: the exact-equality check (`cors_origins == ["*"]`) fails to catch multi-entry origin lists that contain the wildcard alongside other origins, while Starlette's CORSMiddleware still treats any such list as 'allow all origins' and reflects credentials. Any website visited by an authenticated Glances user can read sensitive REST API data - including full process lists with command-line arguments - by triggering the browser's automatic replay of cached HTTP Basic Auth credentials in a cross-origin request. A proof-of-concept is publicly embedded in the GHSA advisory; no confirmed active exploitation (not in CISA KEV) has been observed at time of analysis.
Incorrect authorization in Mattermost Boards allows an authenticated board editor to relink any editable board to an arbitrary channel by exploiting a missing PermissionManageBoardRoles check on the channelId field of the batch endpoint. Affected are Mattermost versions 11.7.x through 11.7.6, 10.11.x through 10.11.21, and 11.8.x through 11.8.3 (advisory MMSA-2026-00686). No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and network accessibility make this straightforward to execute for any authenticated board editor.
Path override bypass in the @astrojs/vercel ISR entrypoint (versions 10.0.3 through 11.0.2) exposes edge-protected routes to unauthenticated remote access via a crafted GET request against the public /_isr function. The root cause is a confused deputy flaw (CWE-441): the origin entrypoint trusts the x-vercel-isr header - which Vercel itself sets on all external requests to /_isr - as sole authorization to accept an attacker-supplied x_astro_path query parameter, silently rewriting the rendered route behind the edge's back. This is a confirmed regression of CVE-2026-33768, reintroduced in 10.0.3 via PR #16079; no public exploit code has been identified, and the fix is confirmed released in @astrojs/vercel 11.0.3.
Uncontrolled resource consumption in Apple's image processing subsystem affects iOS/iPadOS (prior to 26.6.1) and macOS Tahoe (prior to 26.6.2), enabling a network-reachable denial-of-service when a user processes a specially crafted image. Apple has released patches across both platform families via support advisories 148281 and 148282. No public exploit code exists and EPSS sits at 0.15% (5th percentile), indicating negligible observed exploitation pressure; the vulnerability is not listed in CISA KEV.
Kernel memory corruption in Apple iOS, iPadOS, and macOS Tahoe allows a malicious app to cause unexpected system termination or corrupt kernel memory through improper memory buffer handling. Affected versions are iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with Apple having released patches via security advisories at support.apple.com. No public exploit code has been identified and EPSS stands at 0.15% (5th percentile), indicating low observed exploitation probability at time of analysis.
Denial-of-service in Apple iOS and iPadOS (all versions before 18.7.10) can be triggered by an attacker occupying a privileged network position - such as a network middleman - who sends malformed input that trips a reachable assertion, crashing the affected process or device. The CVSS vector confirms no attacker privileges are required and the attack is network-reachable, though user interaction and a specific network vantage point are prerequisites. No public exploit code or active exploitation in CISA KEV has been identified at time of analysis; Apple has released a vendor patch.
Use-after-free memory corruption in Apple's WebKit web rendering engine crashes the browser process when handling maliciously crafted web content on iOS, iPadOS, and macOS Tahoe. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) confirms network-reachable exploitation limited to availability impact - a process crash - with no confidentiality or integrity compromise. Apple has released fixes across both the legacy iOS 18.x branch and the current iOS 26.x line, indicating broad exposure across the installed base. No active exploitation or public proof-of-concept has been identified at time of analysis.
Sensitive data exposure in Apple iOS, iPadOS, and macOS Tahoe can be triggered when a user visits a maliciously crafted website, requiring no attacker-side authentication per the CVSS PR:N designation. Classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), the flaw carries a CVSS 3.1 score of 6.5 with high confidentiality impact despite requiring user interaction to deliver. Apple has simultaneously patched both the legacy 18.x and current 26.x release trains across iOS and iPadOS, as well as macOS Tahoe 26.6.2; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unexpected process termination in Apple iOS/iPadOS and macOS Tahoe can be triggered remotely by luring a user to visit maliciously crafted web content, exploiting a use-after-free flaw in the web content rendering engine. The vulnerability affects iOS and iPadOS versions prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with impact limited to availability - crashing the affected browser or WebKit-based process - and no confirmed confidentiality or integrity loss. No public exploit code or CISA KEV listing is identified at time of analysis, though the low-complexity, network-accessible attack surface warrants prompt patching given the broad Apple device install base.
HTTP Digest authentication in http4k-security-digest silently degraded to MD5 for all credential verification, regardless of the configured algorithm. Applications on any v4.x, v5.x, or v6.x release prior to the fixes believed they were enforcing SHA-256 Digest auth but were actually operating under MD5's weaker collision resistance since the component's introduction in 2021. No public exploit has been identified and this vulnerability is not in CISA KEV, but the long exposure window and algorithmic downgrade create a meaningful authentication integrity risk for affected deployments.
Command injection in COMFAST CF-N1-S firmware 2.6.0.1 allows remote authenticated attackers to execute arbitrary OS commands via the macaddress parameter of the /cgi-bin/mbox-config CGI endpoint. The vulnerable function sub_44A968 fails to sanitize input passed through the ptest_macaddress section before passing it to a system-level command. A public proof-of-concept has been disclosed (GitHub PDF), and the vendor did not respond to responsible disclosure.
Insecure PRNG import in the jahlives openssl_encrypt Python package (all versions before 1.4.0) places Python's non-cryptographic 'random' module (Mersenne Twister) into openssl_encrypt/modules/pqc.py, though the code makes no calls to it, so no cryptographic operation is presently weakened. VulnCheck reported this as a latent hazard: the import invites future maintainers to reach for random.randint() instead of secrets/os.urandom, which would yield predictable values recoverable from ~624 outputs. There is no public exploit identified at time of analysis and it is not on CISA KEV; the flaw was fixed by removing the import in version 1.4.0.
Privilege escalation in Mattermost's channel administration API allows authenticated channel administrators to assign non-channel-scoped roles to channel members, exceeding their intended authorization boundary. Three active release lines are affected: 10.11.x through 10.11.21, 11.7.x through 11.7.6, and 11.8.x through 11.8.2. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Privilege retention in Mattermost Boards allows a user demoted to System Guest to continue exercising Board Admin privileges via the Boards REST API or UI. Affected are Mattermost versions 11.7.0-11.7.6, 10.11.0-10.11.21, and 11.8.0-11.8.3, where the SchemeAdmin flag is not reconciled against the user's current role during or after demotion. An authenticated attacker in this state can invoke admin-only Boards operations - including modifying board permissions and settings - without detection by role-based access checks. No public exploit code is identified and no CISA KEV listing is present at time of analysis.
Server-Side Request Forgery in JetBrains IntelliJ IDEA before version 2026.2.1 allows an attacker who supplies a malicious project to cause the IDE's OpenAPI preview proxy to issue HTTP requests to arbitrary internal or external endpoints. The scope change (S:C in CVSS) indicates the proxy can reach resources beyond the local machine, enabling internal network reconnaissance or credential harvesting from metadata services. No public exploit code and no CISA KEV listing have been identified at time of analysis, but the high confidentiality impact and developer-targeting nature elevate practical concern.
Remote command injection in kylecui NetForensicMCP 2.1.0 allows authenticated remote attackers to execute arbitrary OS commands by supplying shell metacharacters in the `interface` or `protocol` arguments passed to the `execAsync` function in `index.js`. A public proof-of-concept exists via a GitHub issue, though this vulnerability is not currently listed in CISA KEV, indicating no confirmed widespread exploitation at time of analysis. The CVSS 4.0 score of 5.3 (Medium) reflects limited confidentiality, integrity, and availability impact with no lateral scope change, but the public exploit and absent vendor response elevate practical urgency for any deployment.
Privilege escalation in JumpServer prior to 4.10.17 allows an authenticated user holding the `users.invite_user` permission to silently overwrite any existing organization member's role assignments by re-submitting that member through the invite API endpoint, enabling both upward privilege escalation and downward administrator demotion. The root cause is a single Django ORM call - `user.org_roles.set(org_roles)` in `apps/users/api/user.py` - which unconditionally replaces the full many-to-many role set without verifying whether the target already belongs to the organization. No public exploit has been identified and this CVE is not listed in CISA KEV; a confirmed patch is available in v4.10.17.
Git credentials are recorded in plaintext to IntelliJ IDEA's local IDE log file in all versions before 2026.1.5, exposing usernames, passwords, and tokens to any entity with read access to those log files. This CWE-532 information disclosure flaw affects the IDE's built-in Git integration subsystem and carries a high confidentiality impact (C:H in CVSS) because exposed credentials can grant full access to remote source code repositories. No public exploit has been identified at time of analysis, and CISA KEV lists no active exploitation.
Notification service module in HarmonyOS 6.1.0 exposes sensitive data due to improper permission enforcement, allowing local access to confidential notification content without requiring elevated privileges. Huawei disclosed this flaw in its August 2026 security bulletins, covering smartphones, Vision devices, wearables, and laptops running HarmonyOS 6.1.0. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in CISA KEV.
Improper permission control in HarmonyOS 6.1.0's multi-mode input module exposes sensitive service data to local, unprivileged processes. The flaw, rooted in CWE-200 (information exposure), allows a local attacker or malicious application without elevated privileges to read confidential data handled by the input subsystem. No public exploit code has been identified at time of analysis, and CISA has not added this to the Known Exploited Vulnerabilities catalog.
The Gallery module in Huawei HarmonyOS (4.0.0-4.3.1) and EMUI (14.0.0-15.0.0) contains a permission control flaw that allows a local process or application without elevated privileges to access protected gallery content, producing high confidentiality impact. Classified as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), the flaw bypasses scoped media permission enforcement native to the HarmonyOS/EMUI security model. No public exploit has been identified and CISA SSVC confirms no known exploitation at time of analysis.
Local availability disruption in Huawei HarmonyOS and EMUI affects the Wi-Fi enhancement module through a permission control flaw rooted in improper handling of exceptional conditions (CWE-755). Huawei HarmonyOS versions 4.0.0 through 4.3.1 and EMUI versions 14.0.0 through 15.0.0 are confirmed affected, allowing a local unprivileged process to crash or deny Wi-Fi service availability without requiring user interaction. No public exploit code exists and CISA has not added this to the Known Exploited Vulnerabilities catalog; SSVC assessment places exploitation as 'none' with partial technical impact, indicating low urgency but real operational risk for availability-sensitive deployments.
Permission control failure in HarmonyOS 6.1.0's device key management module allows a local, unprivileged actor to cause a complete availability loss on the vulnerable system. The flaw is classified under CWE-264 (Permissions, Privileges, and Access Controls), indicating improper enforcement of access restrictions within the key management subsystem. SSVC assessment confirms no known exploitation and non-automatable attack, but the local-no-privilege vector lowers the bar for any co-located attacker or malicious app on the device.
Code injection in sqlparse prior to 0.6.0 allows attackers to escape generated Python and PHP source-code snippets by supplying crafted SQL containing backslashes immediately before quote characters, exploiting a missing pre-escaping step in the output formatting filters. The flaw resides in sqlparse/filters/output.py, which escapes quotes without first escaping pre-existing backslashes, causing the generated escape to neutralize the backslash rather than the quote and allowing attacker-controlled content to appear outside the intended string literal as executable code. Publicly available exploit code exists via a validated Docker-based proof-of-concept published in GHSA-3496-9g83-7v6x; no confirmed active exploitation in CISA KEV at time of analysis.
Heap-based buffer overflow in Assimp's 3DGS MDL7 model parser allows remote attackers to crash applications processing maliciously crafted model files, causing a denial-of-service condition. The flaw resides in the ReadFaces_3DGS_MDL7 function and affects all Assimp versions through commit 17c12da (CPE wildcard-versioned), with a public proof-of-concept exploit already circulating on GitHub. No active exploitation is confirmed in CISA KEV; the CVSS 4.0 score of 5.3 (Medium) reflects availability-only impact gated by passive user interaction.
Reflected cross-site scripting in code-projects Online Shopping System 1.0 allows remote attackers to inject arbitrary JavaScript into victim browsers by manipulating the email argument in offersmail.php. The vulnerability requires no authentication (PR:N per CVSS 4.0 vector) but does require a victim to interact with a crafted link or page (UI:P). Publicly available exploit code exists on GitHub, though no active exploitation has been confirmed by CISA KEV.
Improper privilege management in Bagisto's backend customer management endpoint allows authenticated low-privileged users to access customer behavior data beyond their authorization scope. The vulnerability affects all Bagisto releases from 2.4.0 through 2.4.4 at the /admin/customers endpoint via manipulation of the ID parameter. A publicly available proof-of-concept exploit exists on GitHub; the vendor has acknowledged the issue and confirmed partial internal remediation with remaining fixes planned for upcoming releases.
Heap-based buffer overflow in Open Asset Import Library (Assimp) at commit 17c12da allows remote attackers to corrupt heap memory by supplying a crafted MDL7 3DGS format file that triggers out-of-bounds writes in the AddBonesToNodeGraph_3DGS_MDL7 function via a manipulated bones_num argument. Any application embedding Assimp that accepts untrusted 3D model files is exposed, with no vendor patch released as the project has not responded to disclosure. A publicly available proof-of-concept exploit exists, meaningfully lowering the exploitation bar for opportunistic attackers.
Buffer overflow in Open Asset Import Library (Assimp) commit 17c12da allows remote attackers to corrupt memory by delivering a maliciously crafted MDL7 3D model file to a victim application. The vulnerable function `GenerateOutputMeshes_3DGS_MDL7` in `MDLLoader.cpp` fails to enforce buffer bounds during mesh generation, resulting in low-severity integrity and availability impact per CVSS 4.0 (score: 2.1). A public proof-of-concept exploit has been disclosed; no vendor patch exists as the project has not responded to the coordinated disclosure.
Authorization bypass in Webkul Bagisto's cache management endpoint allows authenticated low-privileged remote attackers to execute unauthorized cache management operations by manipulating the `action` parameter at `/admin/configuration/cache-management/execute`. Affected versions span the entire 2.4.x branch (2.4.0 through 2.4.4), with CWE-639 (Authorization Bypass Through User-Controlled Key) as the root cause. A public proof-of-concept exploit has been released, and the vendor has confirmed awareness with partial remediation underway - though no specific fixed version has been disclosed; no public exploit identified at time of analysis maps to confirmed active exploitation in CISA KEV.
Reflected cross-site scripting in SourceCodester Class and Exam Timetabling System 1.0 allows remote attackers to inject arbitrary JavaScript via the unsanitized `course` parameter in /BSCE2.php, executing in the context of a victim's browser upon interaction with a crafted link. A public proof-of-concept exploit exists (GitHub issue, VulDB reference), raising the practical exploitability above the base CVSS 4.0 score of 5.3 would suggest in isolation. No active exploitation is confirmed by CISA KEV, and real-world impact is substantially constrained by the product's narrow academic/student deployment footprint.
Reflected cross-site scripting in SourceCodester Class and Exam Timetabling System 1.0 allows remote unauthenticated attackers to inject arbitrary JavaScript via the unsanitized `course` parameter in /BSHRM1.php, executing within the victim's browser session when a crafted link is followed. A public proof-of-concept exploit is available via a GitHub issue, lowering the practical bar for exploitation despite the low CVSS 4.0 score of 2.1. No active exploitation has been confirmed by CISA KEV; impact is bounded by mandatory user interaction and the browser-session scope of injected code.
Buffer overflow in Open Asset Import Library (Assimp) commit 17c12da allows remote attackers to cause memory corruption by supplying a crafted MDL7 format 3D model file. The `ParseBoneTrafoKeys_3DGS_MDL7` function in `MDLLoader.cpp` fails to validate that the bone transformation matrix span derived from `transmatrix_count` and `bonetrans_stc_size` falls within the bounds of the loaded file, allowing heap memory reads or writes beyond the allocated buffer. A public proof-of-concept exploit exists, though no active exploitation has been confirmed in CISA KEV. The CVSS 4.0 score of 2.1 reflects limited individual component impact, though buffer overflows in file parsers carry inherent code execution risk that warrants prompt patching.
RMA state validation in Webkul Bagisto 2.4.0-2.4.4 permits authenticated customers to bypass the intended Return Merchandise Authorization workflow by submitting crafted requests to /customer/account/rma/update-status, forcing unauthorized state transitions without merchant review. An authenticated customer can escalate an RMA to an approved or completed state outside the designed approval sequence, enabling potential fraudulent return processing. A public proof-of-concept exploit exists; the vendor has confirmed internal awareness and is addressing the issues in upcoming releases, though no specific patched version has been publicly confirmed.
Heap-based buffer overflow in Open Asset Import Library (Assimp) commit 17c12da enables remote attackers to corrupt memory by supplying a crafted file processed by the decompressBlock routine in Compression.cpp. Any application embedding Assimp for 3D asset import is exposed when a user opens a malicious model file, making this a supply-chain-style risk across game engines, editors, and design tools that depend on the library. No vendor patch exists at time of analysis - the project was notified via GitHub issue #6624 but has not responded - and a public proof-of-concept archive has already been released, lowering the barrier to exploitation.
Cross-site scripting in the Alaev SEO Tools Chrome Extension (versions up to 1.0.10) exposes users to script injection via the popup UI's addDiv function, which fails to sanitize externally sourced page SEO field data before inserting it into the DOM. A working proof-of-concept exploit is publicly available on GitHub, demonstrating injection through crafted page metadata. The vendor did not respond to responsible disclosure, and no patch has been released, leaving all users of affected versions without an official fix.
Server-side request forgery in PromptShopMCP's Image-Toolkit-MCP-Server exposes internal network resources via the download_image function in server.py, where insufficient validation of the image_url argument allows an authenticated remote attacker to direct the server to make arbitrary HTTP requests. All commits up to 5bc0cd17358e19a5415d11a531088170d7b81452 are affected, and a public exploit exists via GitHub issue #4. The vendor has been notified but has not responded, and no patch is available; the rolling release model further complicates fixed-version remediation.
SQL injection in itsourcecode Hospital Management System 1.0 exposes patient management functionality to low-privileged authenticated attackers who can manipulate the `delid` parameter in /viewpatient.php to alter or extract database records. Successful exploitation allows unauthorized read, modification, or deletion of patient data, carrying significant regulatory and privacy consequences in healthcare environments. A proof-of-concept exploit has been publicly disclosed via GitHub, materially lowering the bar for opportunistic attacks against unpatched instances; the vulnerability is not currently listed in the CISA KEV catalog.
Persistent ad-blocking bypass in Adblock for Youtube Extension versions up to 7.2.1 on Google Chrome allows remote web content to silently disable the extension's filtering rules by exploiting an improper authorization flaw (CWE-285) in the contentscript.js event listener. The updateDynamicRules function processes the yt-anti-adblock-detected DOM event without verifying the caller's origin or authorization, meaning any adversarial webpage can trigger the function and persistently disable ad blocking. Publicly available exploit code demonstrates this technique; the vulnerability is not listed in the CISA KEV catalog and no vendor patch exists, as the maintainer did not respond to pre-disclosure outreach.