Authorization bypass in CodeCanyon's TimeCamp Integration for CRM (all versions through 2.8) allows authenticated remote attackers to manipulate the contact_id parameter submitted to the /clients/save_contact endpoint, overwriting or corrupting contact records belonging to other users without owning those records. The flaw is a classic Insecure Direct Object Reference (CWE-639): the application trusts the caller-supplied contact_id without verifying record ownership against the authenticated session. Publicly available exploit code exists on GitHub, materially lowering the barrier to exploitation.
Server-side request forgery in jkawamoto mcp-florence2 (all versions through 0.3.13) enables remote low-privilege attackers to manipulate the `src` argument of the `get_images` function, causing the server to issue arbitrary HTTP requests to attacker-controlled destinations - including internal network services and cloud metadata endpoints. A public proof-of-concept is available via GitHub issue #59, lowering the exploitation bar significantly. This vulnerability is not currently listed in the CISA KEV catalog, but the publicly available exploit and network-accessible attack vector make it relevant to any deployment where the server host has access to sensitive internal resources.
Cross-site scripting in JeecgBoot v3.9.2's AI RAG chat upload endpoint allows unauthenticated remote attackers to inject arbitrary JavaScript that executes in the browsers of users who interact with the malicious content. The CVSS 6.1 (Medium) vector confirms Changed Scope, enabling session hijacking, credential theft, or authenticated action hijacking against victims. No public exploit code has been identified and the EPSS score of 0.21% (11th percentile) indicates negligible current exploitation activity; this is not listed in the CISA KEV catalog.
SQL injection in itsourcecode Hospital Management System 1.0 exposes the /viewprescriptionrecord.php endpoint to authenticated remote attackers who can manipulate the `delid` parameter to execute arbitrary SQL commands against the underlying database. Publicly available exploit code exists on GitHub, confirmed by the CVSS 4.0 E:P modifier, though no CISA KEV listing indicates active widespread exploitation at time of analysis. Given the healthcare context, the combination of public exploit availability and sensitive patient data makes this a higher-priority remediation than the low CVSS 4.0 score of 2.1 alone suggests.
SQL injection in itsourcecode Hospital Management System 1.0 allows authenticated remote attackers to manipulate database queries via the `delid` parameter in /viewpaymentreport.php. A publicly available proof-of-concept exploit exists on GitHub, lowering the barrier to exploitation for any reachable instance. The CVSS 4.0 vector confirms low-privilege authentication is required (PR:L), and impact is rated partial across confidentiality, integrity, and availability - though SQL injection primitives can often be escalated beyond initial scoring to achieve broader data extraction.
Cross-site scripting in Squirro Cognitive Search versions prior to 3.14.2 allows remote attackers to inject and execute arbitrary JavaScript in victims' browsers via three distinct application functions: Email Notification, Create Evaluation Sets, and HTML Editor. The CVSS scope change (S:C) indicates the injected script executes outside the originating security context, enabling session hijacking, credential theft, or malicious action on behalf of authenticated users. No public exploit identified at time of analysis, though a researcher-published CVE entry with supporting materials exists on GitHub at Henkel-CyberVM/CVEs, suggesting active investigation of the vulnerability.
Path traversal in Microsoft Kiota's AI plugin manifest generator allows an attacker who controls or tampers with the OpenAPI description input to inject percent-encoded file references - including double-encoded sequences, NUL-byte payloads, and Unicode full-width homoglyphs - that bypass the IsSafeFileReference validator and are written verbatim into the generated plugin manifest. When an AI host deploys and resolves the manifest, it can access files outside the intended package boundary, leading to disclosure of sensitive files such as /etc/passwd. The vulnerability affects nuget/Microsoft.OpenApi.Kiota versions prior to 1.29.1 and 1.30.0 through 1.33.x; no public exploit or active exploitation is confirmed at time of analysis.
Authorization bypass in Bagisto's backend RMA endpoint allows authenticated admin-level users to access or manipulate Return Merchandise Authorization records they are not authorized to view or modify, affecting all Bagisto releases through version 2.4.4. The flaw is rooted in CWE-639 (Authorization Bypass Through User-Controlled Key), an IDOR-class weakness in the /admin/sales/rma/requests handler, enabling horizontal privilege escalation across sales data within the admin panel. A public proof-of-concept exploit is available on GitHub; however, the CVSS 4.0 score of 2.0 and the PR:H requirement confirm that exploitation is bounded to already-authenticated high-privilege accounts, not unauthenticated external actors.
Quota bypass via Redis cache race condition in New API (QuantumNous LLM gateway) allows any authenticated low-privilege user to keep their cached quota balance artificially inflated by flooding PUT /api/user/self with settings updates while concurrently consuming quota. The settings update path reads a stale full User snapshot and writes it back via RedisHSetObj, atomically overwriting HINCRBY billing deductions applied by concurrent relay requests to the same Redis hash key. No public exploit has been identified and the vulnerability is not listed in CISA KEV; however, the financial integrity impact on operators is concrete, as affected users can make LLM API calls well beyond their paid allocation without detection until a database reconciliation occurs.
OS command injection in android-mcp-server's `build/index.js` allows local low-privilege attackers to execute arbitrary shell commands by supplying malicious values for parameters such as `deviceId`, `packageName`, `permission`, or `extras` fields passed to the `child_process.exec()` ADB command builder. The vulnerable code interpolates user-supplied input directly into shell command strings without sanitization, making exploitation trivial for any local user with access to the MCP server process. A publicly available proof-of-concept exists via the GitHub issue tracker, and a patch commit has been published; no CISA KEV listing confirms active in-the-wild exploitation at time of analysis.
Cross-site scripting in Webkul Bagisto's RMA Message Handler (versions 2.4.0-2.4.4) allows authenticated customers to inject arbitrary JavaScript via the message argument at the /customer/account/rma/send-message endpoint, with execution occurring in the browser of any privileged user (e.g., store administrator) who reviews the RMA thread. A public proof-of-concept exploit is available on GitHub, lowering the exploitation barrier. The vendor has acknowledged the issues were already identified internally, with partial fixes applied and remaining items deferred to upcoming releases - no confirmed patched version has been published.
Session token invalidation failure in Dokploy allows a stolen better-auth.session_token to persist for up to three days after a victim changes their password, providing an attacker with continued authenticated access even after the victim has attempted to remediate a compromised account. All self-hosted Dokploy deployments prior to version 0.29.6 running the unpatched user.update tRPC procedure are affected. No public exploit identified at time of analysis, but the attack requires only a previously obtained session token and no further interaction from the victim.
Denial of service via WebSocket decompression in JetBrains Ktor before 3.4.1 allows unauthenticated remote attackers to exhaust server resources or trigger an infinite loop by sending crafted compressed WebSocket messages. The root cause is CWE-835 (Loop with Unreachable Exit Condition), meaning the decompression routine can enter a state from which it cannot exit, stalling the affected connection handler or the broader server process. No public exploit code or active exploitation has been identified at time of analysis, but the network-reachable, no-authentication attack path makes this relevant to any internet-exposed Ktor deployment with WebSocket compression enabled.
IPSec authentication bypass in Apple iOS and iPadOS (all versions prior to 26.6.1) allows an adjacent-network attacker to circumvent IPSec mutual authentication and intercept device network traffic. The root cause is improper state management (CWE-287) in the IPSec stack, corrected in iOS 26.6.1 and iPadOS 26.6.1. No public exploit code has been identified at time of analysis, and EPSS at 0.19% (10th percentile) confirms minimal observed exploitation activity.
CSS sanitization bypass in Roundcube Webmail before 1.6.18 and 1.7.3 enables unauthenticated remote attackers to trigger server-side HTTP requests to RFC6598 shared address space (100.64.0.0/10) and IPv6 link-local addresses (fe80::/10) by embedding malicious stylesheet URLs in HTML email. This is the fourth iteration in a chain of incomplete SSRF fixes - following CVE-2026-35540, CVE-2026-48843, and CVE-2026-62643 - with each prior fix failing to cover the full local address space, indicating a systemic gap in the blocklist-based sanitization approach. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; vendor-released patches 1.6.18 and 1.7.3 are available as of 2026-08-09.
Remote image blocking bypass in Roundcube Webmail (all versions before 1.6.18 and 1.7.x before 1.7.3) allows network-based attackers to defeat content security filters through crafted SVG animate elements, with potential for user metadata disclosure and privilege escalation. The sanitizer's failure to validate the SVG animate `by` attribute permits malicious email content to trigger outbound resource loads that the webmail's blocking controls were designed to prevent. Vendor-released patches 1.6.18 and 1.7.3 are confirmed available; no public exploit code or active exploitation has been identified at time of analysis.
Kernel state leakage in Apple iOS and iPadOS prior to version 18.7.10 enables a locally-installed, low-privileged app to read sensitive kernel memory through a validation gap classified as CWE-200. The flaw was addressed by Apple with additional input validation, and the fix is confirmed available in iOS 18.7.10 and iPadOS 18.7.10. No public exploit code or active exploitation has been identified at time of analysis, though kernel state disclosure of this type is a common precursor to full privilege escalation chains on mobile platforms.
XML External Entity injection in JetBrains IntelliJ IDEA's Eclipse settings importer exposes sensitive local files on developer workstations running versions prior to 2026.2.1. The flaw (CWE-611) is triggered when a user imports a maliciously crafted Eclipse settings XML file, allowing an attacker to read arbitrary files accessible to the IDE process. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Local file disclosure in JetBrains IntelliJ IDEA before 2026.2.1 is possible through an XXE injection in the Hadoop ResourceManager integration component. When a developer opens or processes a maliciously crafted XML-based project or configuration file, the unsanitized XML parser resolves external entity references and leaks arbitrary local files - including SSH keys, credentials, and application secrets - to the attacker. The CVSS vector (AV:L/UI:R) confines the risk to local or social-engineering attack paths; no public exploit or CISA KEV listing has been identified at time of analysis.
Dell ObjectScale versions prior to 4.3.0.1 expose sensitive information through insecure logging in the svc_tools component, enabling information disclosure to locally authenticated low-privileged users. A local attacker with minimal privileges can read svc_tools log files to extract sensitive data - potentially credentials, tokens, or internal configuration secrets - without requiring elevated permissions. No public exploit code or active exploitation has been identified at time of analysis, but the high confidentiality impact (C:H) indicates the logged data is meaningfully sensitive.
Improper permission controls in the HarmonyOS 6.1.0 clipboard module expose confidential data to local attackers. The flaw, classified under CWE-264 (Permissions, Privileges, and Access Controls), allows a local actor who can induce user interaction to read clipboard contents without appropriate authorization, impacting confidentiality only. No active exploitation is confirmed by CISA KEV, and SSVC rates exploitation status as none with no automation potential.
OS command injection in GL.iNet BE9300 and MT6000 router firmware 4.8.x allows remote low-privileged attackers to execute arbitrary operating system commands via unsanitized dest_port and dest_ip arguments in the Firewall-management RPC component. The vendor has confirmed the vulnerability through their CVE issues GitHub repository and released a fix in firmware version 4.9.0. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
OS command injection in GL.iNet routers running firmware up to 4.8.x allows an authenticated remote attacker to execute arbitrary shell commands via the Wi-Fi Timer Power-Schedule feature by manipulating the switch_power or restore_power arguments. The vendor has independently confirmed the vulnerability exists. A public write-up exists in the vendor's own CVE issues repository describing the attack as a cron-based RCE path, and no public exploit with KEV listing has been identified at time of analysis. The CVSS 4.0 score of 5.3 (with PR:L) reflects that low-privilege authentication is required, but the real-world impact of arbitrary command execution on a network router warrants elevated attention beyond what the score conveys.
Path traversal in JumpServer's KoKo Web Terminal SFTP component (versions 4.8.0 through 4.10.16) allows authenticated users holding SFTP asset permissions to escape the intended SFTP root directory sandbox. The root cause is insufficient path normalization in AssetDir.GetRealPath() (pkg/srvconn/sftp_asset.go), where a naive strings.HasPrefix boundary check is applied before path cleaning, enabling crafted traversal sequences to bypass the root confinement. A low-privileged authenticated attacker can read, list, write, rename, or delete files accessible to the configured backend account on the managed asset, potentially exposing credentials and configuration data beyond the intended access scope. No active exploitation is confirmed and no public exploit has been identified at time of analysis; vendor-released patch 4.10.17 is available.
Stored XSS in Roundcube Webmail's 'Add to address book' feature allows a low-privileged authenticated attacker to inject persistent malicious scripts that execute in the browser sessions of other users who trigger the affected action. Affected versions span the 1.6.x branch before 1.6.18 and the 1.7.x branch before 1.7.3, both patched on 2026-08-09 per vendor advisory. No public exploit code or CISA KEV listing has been identified at time of analysis, though stored XSS in webmail clients historically enables session hijacking and unauthorized mail access with low attacker effort.
Server-Side Request Forgery in JetBrains IntelliJ IDEA before version 2026.2.1 allows network-accessible attackers to coerce the IDE into issuing arbitrary HTTP requests via the DevKit debug listener endpoint, requiring user interaction to trigger. The vulnerability carries a CVSS 5.4 (Medium) score with low confidentiality and integrity impact, and no availability impact. No public exploit code and no CISA KEV listing have been identified at time of analysis, suggesting limited real-world exploitation pressure currently.
Privilege escalation in Mattermost's Boards feature allows a low-privileged board member to elevate a guest user to Board Admin by importing a specially crafted .boardarchive file. Affected are Mattermost versions 10.11.0 through 10.11.21 and 11.7.0 through 11.7.6. No public exploit or KEV listing has been identified, but the low attack complexity and the insider-threat profile make this a meaningful risk in multi-tenant or externally-collaborative Mattermost deployments.
Memory corruption in Apple's web content processing engine affects iOS, iPadOS, and macOS Tahoe, allowing a remote unauthenticated attacker to trigger CWE-119 buffer mismanagement when a user processes maliciously crafted web content. Affected platforms span both the legacy iOS 18.x branch and the current iOS/iPadOS 26.x line, as well as macOS Tahoe 26.x, indicating broad reach across Apple's device ecosystem. No public exploit identified at time of analysis; EPSS score of 0.14% (4th percentile) reflects very low current exploitation probability, and the vulnerability is not listed in CISA KEV.
Memory corruption in Apple's web content processing stack affects iOS and iPadOS prior to version 26.6.1 and macOS Tahoe prior to 26.6.2, triggered when a user processes maliciously crafted web content. Classified under CWE-119 (improper bounds restriction), the flaw carries a CVSS 5.4 medium rating reflecting limited confidentiality and integrity impact without availability disruption. No public exploit code has been identified and no active exploitation is confirmed by CISA KEV, making this a standard patch-cycle priority rather than an emergency response item.
Macro command injection in Notepad++ prior to 8.9.7 enables local privilege escalation by bypassing HMAC integrity validation on shortcuts.xml-sourced macros. An attacker who can place a malicious shortcuts.xml in the application's settingsDir can embed macro payloads that invoke Scintilla actions and the internal 'Open in Default Viewer' command within an elevated Notepad++ process, resulting in protected file modification or elevated command execution when a user triggers the macro. No CISA KEV listing and no public proof-of-concept are known at time of analysis; exploitation requires multiple aligned local prerequisites.
Stored XSS in Etherpad's HTML export function allows any pad editor to execute arbitrary JavaScript in the browser of every collaborator who opens the exported document. The root cause is in `getHTMLFromAtext` (src/node/utils/ExportHtml.ts), where attribute-pool values routed through the `exportHtmlAdditionalTagsWithData` plugin hook are interpolated directly into span data-attributes without HTML escaping - reachable via the bundled ep_font_color or ep_font_size plugins. All ep_etherpad-lite npm releases through 1.8.14 are affected; vendor-released patch 3.3.0 is available. No public exploit tool has been identified at time of analysis, though the GHSA advisory contains a working payload example that significantly lowers the exploitation barrier.
The backup endpoint on LB-Link WR1210M firmware 1.0.3 exposes device configuration data to unauthenticated adjacent-network attackers due to missing authentication in the main() function of /www/cgi-bin/backup.cgi. Any attacker on the same local network segment can retrieve the router's backup archive without credentials, potentially obtaining Wi-Fi passphrases, administrative passwords, and network configuration. No public exploit has been identified at time of analysis, and the vendor did not respond to responsible disclosure, leaving no patch available.
DualSafe Password Manager & Digital Vault Extension (versions up to and including 1.4.35 for Chrome) exposes stored credentials and TOTP codes through an unauthenticated postMessage-based bridge, enabling cross-origin secret exfiltration by any webpage the victim visits. The extension's bridge component processes incoming postMessage calls without validating the sender's origin, meaning an attacker-controlled page can query the vault directly without any extension-level authentication. A publicly available proof-of-concept hosted on GitHub demonstrates the technique; the vulnerability has not been added to the CISA KEV catalog as of this analysis.
Cross-organization permission data disclosure in Grafana OSS and Enterprise affects all multi-org deployments across a broad range of versions from 11.2.0 through 13.1.0. An authenticated Org Admin of any single organization can call the access-control permission search API endpoint with an actionPrefix filter and receive dashboard and folder UIDs along with per-user permission/scope mappings belonging to other organizations within the same Grafana stack. No public exploit code has been identified at time of analysis, and CISA KEV listing is absent, but the flaw is vendor-confirmed and the exploitation path is trivial for any Org Admin in a multi-org environment.
Code injection in GL.iNet router firmware's Language Auto-Update component allows low-privileged authenticated remote attackers to execute arbitrary OS-level commands by manipulating cron scheduling parameters in the ui.update_langs function. Seventeen router models running firmware up to version 4.8.x are affected, spanning GL.iNet's entire current lineup from travel routers (MT3000, AXT1800) to high-end mesh units (BE10000, BE9300). The vendor has confirmed the vulnerability exists and a patch is available via the GL.iNet CVE issues repository; no public exploit code or CISA KEV listing has been identified at time of analysis.
Server-side request forgery in fetcher-mcp versions 0.3.0 through 0.3.9 allows low-privileged remote attackers to redirect the fetch_url and fetch_urls functions toward internal network resources, including cloud instance metadata endpoints such as the AWS IMDS path /latest/meta-data/iam/security-credentials/. When deployed on cloud infrastructure, this can result in exposure of IAM credentials tied to the host instance role, representing a scope-changing impact beyond what the CVSS 4.0 Medium rating conveys. No patch exists - the project maintainer has not responded to responsible disclosure filed via GitHub issue #37, and no public exploit code or CISA KEV listing has been identified at time of analysis.
Broken object-level authorization on the portal ping and wake-on-LAN endpoints in Next Terminal exposes all registered asset metadata and WoL controls to any authenticated portal user, regardless of their assigned asset permissions. The wildcard CPE (all versions) indicates no patched release exists, and the flaw is rooted in CWE-862 (Missing Authorization) - a structural gap in the access-control layer rather than a logic edge case. An attacker holding any valid portal credential can silently enumerate asset display names, IP addresses, reachability status, and connection timing, then issue WoL packets to bring unauthorized offline assets online. No public exploit code or CISA KEV listing has been identified at time of analysis.
Credential disclosure in Glances prior to 4.5.6 allows unauthenticated remote attackers to retrieve plaintext usernames and credential-bearing URLs from the system monitoring tool's REST API. The flaw exists in as_dict_secure() within glances/config.py, which was designed to sanitize configuration data for no-auth API access but filters only on configuration key names - never on values. As a result, public_username and any public_api URL containing embedded credentials (e.g., https://user:pass@host/) are returned in full via GET /api/4/config and GET /api/4/config/ip. No public exploit or CISA KEV listing identified at time of analysis; the EPSS score is not provided but the low CVSS (5.3) and specific prerequisite configuration suggest limited opportunistic exploitation.
Hidden post content disclosure in Discourse allows unauthenticated visitors and search-engine crawlers to read first-post content that was explicitly hidden or made unviewable through moderation controls. Affected versions span multiple release branches prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0. The authorization check governing post visibility is not applied when generating Q&A JSON-LD structured data, so the raw excerpt appears in publicly-served HTML. No public exploit code exists and this vulnerability is not listed in CISA KEV.
Heap buffer overflow in hashcat's KeePass AESKDF/KDBX v4 cracking module (module_34301.c) exposes master branch builds after v7.1.2 to heap memory corruption when a privileged operator processes a crafted hash file containing an oversized ninth token field. The parser accepted up to 600 hex characters for a field decoded into a fixed 256-byte buffer with no length check, enabling up to 44 bytes of out-of-bounds writes into adjacent esalt fields and heap chunk metadata. No public exploit exists and the vulnerability is not listed in CISA KEV; an upstream fix commit is confirmed available.
Path traversal in Notepad++ before version 8.9.7 enables local attackers with write access to the user's profile directory to read arbitrary user-readable files outside the designated backup folder by poisoning session.xml. The backupFilePath attribute is validated with std::wstring::starts_with against the expected backup directory prefix but without prior path normalization, allowing dot-dot sequences to bypass the check during snapshot-mode session restoration and load an out-of-bounds file into an editor tab. No public exploit code or active exploitation has been identified at the time of analysis; the vendor released a confirmed fix in version 8.9.7.
Improper permission enforcement in the notification module of Huawei HarmonyOS and EMUI permits a local, unprivileged process to interfere with notification handling, resulting in limited integrity and availability impact. Affected versions span HarmonyOS 4.0.0 through 4.3.1 and EMUI 14.0.0 through 15.0.0 across Huawei consumer devices. No public exploit code or active exploitation has been identified at time of analysis; Huawei disclosed this via its August 2026 security bulletin.
Passkey management in New API, an LLM gateway and AI asset management system, permits lower-privileged administrators to delete passkeys belonging to same-level or higher-privileged accounts-including the root account-via the DELETE /api/user/:id/reset_passkey endpoint. Versions 0.9.1.3 through 1.0.0-rc.7 (exclusive) are affected because AdminResetPasskey in controller/passkey.go omits the canManageTargetRole authorization check applied consistently to every comparable privileged-account-management endpoint in the codebase. No public exploit has been identified at time of analysis, but successful exploitation silently removes a FIDO2 second factor from high-value accounts, potentially enabling credential-only takeover as a follow-on attack.
Sensitive user information disclosure in Apple iOS, iPadOS, and macOS Tahoe stems from a logic issue classified as a Protection Mechanism Failure (CWE-693), where security checks were insufficiently enforced, allowing a locally installed app to bypass intended data access controls. Affected platforms include iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2. No public exploit code has been identified and the EPSS score of 0.17% (7th percentile) signals low exploitation probability, though the high confidentiality impact (C:H) and Apple's broad install base keep this relevant for enterprise mobile management programs.
Out-of-bounds stack read and write in the WNC-M14A2A LTE-M modem driver (wncm14a2a.c) within Zephyr RTOS versions 1.13.0 through below 4.4.2 allows a rogue cellular base station or RF attacker to crash the modem RX thread and leak adjacent stack memory without any application interaction. The defect fires automatically on receipt of an unsolicited %NOTIFYEV: event whose payload exceeds 39 bytes and lacks a quote character within the linearized region, causing scanning loop indices to walk past the fixed 40-byte stack buffer. While the write primitive is weakly controlled — limiting demonstrated impact to denial of service and stack disclosure — the CVE is tagged RCE by reporters, though the description explicitly states memory-safe code execution has not been demonstrated. No public exploit or CISA KEV listing exists at time of analysis.
DOM-based Cross-Site Scripting in OutSystems Service Center (all versions before 11.41.2) allows a low-privileged authenticated user to inject malicious JavaScript by uploading a file with a crafted filename, which executes in the browser context of other users - typically higher-privileged administrators - who subsequently view the rendered filename. The flaw affects every file attachment location within Service Center. OutSystems has released a vendor patch in version 11.41.2; no public exploit code or active exploitation has been identified at time of analysis.
Terminal escape sequence injection in powerlevel10k (all versions through 1.20.17) allows any attacker who controls a package.json file on a victim's filesystem to emit arbitrary terminal control sequences on every shell prompt render when the victim navigates into the affected directory. The `prompt_package` segment in `internal/p10k.zsh` passed the `P9K_PACKAGE_VERSION` variable to the terminal without applying Zsh's `(V)` sanitization flag, meaning raw ANSI or OSC escape bytes in the version field reach the terminal emulator unfiltered. No public exploit or CISA KEV listing is identified at time of analysis; the CVSS 4.0 score of 4.8 reflects limited integrity impact and required user interaction.
Interrupt-storm livelock in Zephyr RTOS's ARM PL011 UART driver (versions 1.14.0 through 4.4.1) allows an attacker controlling the serial peer to permanently hang the CPU by injecting line errors that trigger an error interrupt the ISR never clears. The root cause is that pl011_isr() acknowledged only the CTS modem-status interrupt and never wrote the UARTICR register for error bits (framing, parity, break, overrun), leaving the interrupt line permanently asserted and causing the CPU to re-enter the ISR indefinitely. Exploitation is gated by a non-default configuration requirement - the error interrupt path is off by default and no in-tree Zephyr subsystem enables it - so only embedded applications explicitly calling uart_irq_err_enable() on a PL011 interrupt-driven port are at risk. No public exploit or CISA KEV listing exists at time of analysis.
Cross-site scripting in JetBrains PyCharm's Quick Documentation rendering feature (before version 2026.2.1) enables code execution within the IDE process when a developer inspects documentation for a symbol from a maliciously crafted source. Attackers - including supply-chain adversaries embedding malicious HTML or JavaScript into Python package docstrings - can achieve code execution in PyCharm's local process context once the victim triggers Quick Documentation on an affected symbol. No public exploit has been identified at time of analysis, and JetBrains has released a fix in version 2026.2.1.
Command injection in JetBrains IntelliJ IDEA before 2026.2.1 enables arbitrary command execution through crafted Markdown preview content when a user opens and trusts a malicious project. The flaw (CWE-77) is constrained to trusted projects and requires the victim to interact with the Markdown preview, limiting its practical reach. No public exploit code or CISA KEV listing has been identified at time of analysis, and the vendor-assigned CVSS score of 3.6 (Low) reflects these mitigating conditions.