Server-side request forgery in MLflow before 3.15.0 lets remote unauthenticated attackers coerce the server into making outbound requests to internal or cloud metadata endpoints via the POST /api/2.0/mlflow/webhooks/{id}/test endpoint. Because URL validation and the actual delivery re-resolve the hostname independently and follow redirects, an attacker can bypass the public-IP check and receive the target's response_status and response_body, enabling exfiltration of cloud credentials (e.g. from 169.254.169.254). No public exploit identified at time of analysis; the CVSS 9.3 rating and scope-change flag reflect the credential-theft potential of reaching metadata services.
Sandbox escape to remote code execution in the vm2 Node.js sandbox library (versions <= 3.11.5) arises because handleException() in lib/setup-sandbox.js sanitizes SuppressedError and AggregateError sub-errors but never inspects the ES2022 Error.cause property. Untrusted code running inside the sandbox that catches a host-thrown error carrying a .cause (or other own property) pointing at a host object such as process can dereference it to reach child_process and run arbitrary host commands. A working proof-of-concept demonstrating full RCE is published in the GitHub advisory, and the flaw is fixed in vm2 3.11.6; there is no CISA KEV listing indicating active exploitation.
Sandbox escape in the vm2 Node.js sandboxing library (npm, versions <= 3.11.5) lets code running inside the sandbox reach host prototype mutators and execute arbitrary OS commands on the host. It bypasses the earlier GHSA-v6mx-mf47-r5wg fix by stacking Function.prototype.call indirection so the dangerous __proto__ setter is no longer in the inspected position, then leaks a live host reference through a rejected WebAssembly.compileStreaming promise to pivot to child_process. A working proof-of-concept is published in the advisory, so publicly available exploit code exists; the flaw is not listed in CISA KEV.
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privilege escalation because the `azuracast:restore` command runs the extracted `db.sql` file verbatim, with no content validation. The flaw carries a critical 9.8 CVSS from the reporter and has publicly available exploit code, though its EPSS probability is low (0.23%, 14th percentile) and it is not on CISA KEV. The real-world attack surface hinges on who can supply and trigger restoration of a crafted backup archive.
Remote code execution in Wavlink WN531P3 and WN535M1 (firmware V250922) consumer routers arises from an unsafe strcpy in the export_pingortrace.cgi binary, where the attacker-controlled HTTP_COOKIE header is copied into a fixed stack buffer without bounds checking. Unauthenticated remote attackers can send a crafted Cookie header to the device web interface to overflow the stack and hijack execution. Publicly available exploit code exists (disclosed via VulDB with a PoC report), but there is no public exploit identified as actively exploited in the wild, and no CISA KEV listing.
Authentication bypass in EFM ipTIME A3004T (firmware 14.19.0) lets remote attackers defeat session validation through the httpcon_check_session_url function, granting unauthorized access to the router's web management interface. Publicly available exploit code exists, though the flaw is not yet listed in CISA KEV. The vendor was notified but did not respond, so no fix is currently available.
Unauthenticated data tampering in GitLab CE/EE (18.2-18.11.10, 19.0-19.0.7, 19.1-19.1.5, 19.2-19.2.3) lets a remote attacker modify or delete public projects and user data by abusing a GraphQL directive, per CVE-2026-19478 (CVSS 9.4). The flaw was self-reported by GitLab and publicly available exploit code exists via a HackerOne disclosure, though it is not listed in CISA KEV. Impact is weighted toward integrity and availability rather than data theft (CVSS C:L/I:H/A:H).
Remote code execution in Regular Labs Sourcerer for Joomla (versions before 14.0.0) allows unauthenticated attackers to inject and execute arbitrary PHP via {source} blocks. The extension parses {source} tags found anywhere in Joomla's final rendered HTML without reliably verifying where that content originated, so attacker-controlled reflected input reaching the page body gets evaluated as trusted code. Rated CVSS 4.0 10.0 (critical); no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Server-side template injection in ERPNext (Frappe framework) lets low-privileged authenticated users escape the Frappe safe-execution sandbox and achieve remote code execution on the server. The root cause is that frappe.render_template was exposed inside the safe_exec globals without forcing restrict_globals, so a user who can supply template content crosses a permission boundary into unrestricted Jinja evaluation. Rated CVSS 9.9 with a scope change; no public exploit code or CISA KEV listing is identified at time of analysis, but the fix commit is public, narrowing the reversing effort required.
Privilege escalation in Red Hat Advanced Cluster Management's multicloud-operators-subscription controller lets a low-privileged user on a managed cluster create a Subscription with crafted annotations that the controller processes with its own elevated Service Account, deploying attacker-chosen resources into arbitrary namespaces. The flaw (CWE-863, CVSS 9.9, scope-changed) affects Red Hat ACM 2.x and Multicluster Global Hub as reported by Red Hat. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Privilege escalation in Red Hat Multicluster Engine for Kubernetes (MCE) lets a privileged service account on a managed spoke cluster submit a forged Certificate Signing Request that the managedcluster-import-controller auto-approves, yielding administrative credentials on the central hub cluster. The controller's auto-approval path neither inspects the CSR signer name nor decodes the PEM-encoded x509 request, so an attacker who already controls a spoke can pivot to full control of the hub and, by extension, every cluster it manages. No public exploit identified at time of analysis; EPSS is low (0.22%, 12th percentile) and CISA SSVC records no observed exploitation.
Improper access control in OSSRS SRS (Simple Realtime Server) before v5.0.213 allows remote attackers to bypass RTMP publish authorization enforced by the vhost security layer (security.enabled / SrsSecurity::check() in trunk/src/app/srs_app_security.cpp), enabling unauthorized stream publishing and, per the report, arbitrary code execution against the RTMP listener. The issue is tagged as both RCE and Authentication Bypass and affects deployments that rely on SRS's built-in allow/deny security rules to gate who may publish. Publicly available exploit code exists (a dedicated CVE-2026-68004 GitHub repository), though the vulnerability is not listed in CISA KEV and EPSS probability is low (0.42%, 35th percentile).
Remote code execution in Halo 2.25.4, an open-source Java-based CMS/blogging platform, arises from its plugin-installation machinery: the installFromUri method in PluginEndpoint.java combined with DefaultPluginApplicationContextFactory loads and executes attacker-supplied plugin code, giving full CWE-94 code injection with total confidentiality, integrity, and availability impact (CVSS 9.8). Publicly available exploit code exists in a referenced GitHub gist, but there is no public exploit identified as being actively used in the wild (not on CISA KEV). Note a signal conflict: the NVD vector states PR:N (unauthenticated) while plugin installation in Halo is normally an administrative function - this warrants verification.
Remote code execution in Systerel S2OPC 1.7.3 arises from a heap out-of-bounds write in the server-side EventFilter handling path exercised during CreateMonitoredItems processing. A remote attacker who can reach the OPC UA server endpoint and open a session on an events-enabled server can corrupt heap memory to achieve arbitrary code execution with the privileges of the server process. No public exploit identified at time of analysis, and EPSS is low (0.27%, 20th percentile), indicating the CVSS 9.8 rating reflects potential impact rather than observed mass exploitation.
Remote code execution in opensagres xdocreport (versions 0.9.2 through 2.2.0) arises because the bundled Velocity template engine ships with the insecure default UberspectImpl introspector, letting a crafted Velocity expression reach reflective JDK classes and run arbitrary code. Any application that renders untrusted template content through xdocreport's Velocity engine is exposed to full server compromise. Publicly available exploit code exists (a dedicated PoC GitHub repository and two HackMD write-ups), though the flaw is not listed in CISA KEV and no EPSS score was supplied.
Remote code execution in RainyGao DocSys 2.02.80 arises from an unrestricted file-upload handler (CWE-434) that fails to validate uploaded file type or extension, letting a remote attacker plant a server-executable payload (e.g. a webshell) and run arbitrary commands. The flaw carries a CVSS 9.8 with a fully remote, low-complexity, no-privilege, no-interaction vector, and a public technical write-up/POC exists in a third-party GitHub repository. It is not listed in CISA KEV, and EPSS is low at 0.26% (18th percentile), indicating no evidence of widespread automated exploitation yet.
Server-side request forgery in DataHub v1.5.0.1 lets a remote attacker coerce the server into fetching an attacker-supplied URL through its image-retrieval feature, with the response body and errors suppressed (blind SSRF). The reporter escalates this to arbitrary code execution, and the SSVC framework marks a proof-of-concept as available and the attack as automatable, though the flaw is not listed in CISA KEV and the EPSS probability is low at 0.24%.
Remote code execution in Squirro Cognitive Search before version 3.14.2 lets remote attackers run arbitrary code by sending a crafted payload to the application's password-reset function, a CWE-94 code-injection flaw. The password-reset endpoint is typically pre-authentication and internet-facing, and the CVSS vector (PR:N/UI:N) indicates no credentials or user interaction are needed. Publicly available exploit code exists (SSVC exploitation status 'poc', plus a public GitHub research repo), but this CVE is not in CISA KEV and EPSS is low at 0.24% (15th percentile), indicating credible but not yet widespread exploitation.
Arbitrary code execution in SteelSeries GG for macOS v107.0.0 stems from a buffer overflow in the bundled libSSEdevice.dylib, specifically its dup_wcs (wide-character string duplication) routine, letting an attacker who can feed crafted input to the client run code with the privileges of the SteelSeries process. The flaw is disclosed by MITRE with an accompanying Cipher Security Labs research write-up (publicly available research/exploit material), but it is not on the CISA KEV list and EPSS is low at 0.21% (12th percentile). Note a material discrepancy: the CVSS vector is scored AV:N (network) yet the affected component is a local desktop peripheral-management library, which typically implies attacker-supplied data rather than an exposed network service.
Memory-corruption remote code execution affects SteelSeries GG for macOS v107.0.0, where a classic buffer overflow (CWE-120) in the bundled libSSEdevice.dylib-specifically the CxAudioHidDevice::DeviceGetDescriptionString routine-lets an attacker overwrite memory while the client parses a device description string and thereby run arbitrary code in the context of the GG process. NVD rates it CVSS 9.8 with an unauthenticated network vector, though the affected component is a HID (USB audio device) descriptor parser, which points toward a malicious-device attack surface rather than pure network reachability. A third-party research writeup (Cipher-Security-Labs CSL-2026-03) is referenced, but there is no CISA KEV listing and EPSS is low at 0.21% (12th percentile).
OS command injection in the Tenda W20E router firmware version 16.01.0.6(2782) allows remote attackers to execute arbitrary code by abusing the url_need_login function, which fails to sanitize attacker-controlled input before passing it to a system shell (CWE-78). The flaw carries a CVSS 9.8 (AV:N/AC:L/PR:N/UI:N) rating, meaning unauthenticated network-based exploitation with full compromise of the device. Publicly available exploit code exists via a GitHub disclosure repository, though EPSS remains low (0.21%) and it is not listed in CISA KEV.
Remote code execution in JeecgBoot v3.9.2 allows attackers to run arbitrary code by supplying a malicious value to the 'files' parameter within the AI Chat module. The flaw is a code-injection weakness (CWE-94) carrying a critical 9.8 CVSS rating with a fully remote, low-complexity vector. There is no public exploit identified at time of analysis, and the EPSS probability is low (0.21%, 11th percentile), indicating no observed mass-exploitation activity yet.
Privilege escalation in GAPTEQ Designer v3.5 allows a remote attacker to abuse the Company Manager role to gain elevated privileges, per CWE-269 (improper privilege management). Publicly available exploit code exists (referenced on GitHub), and CISA's SSVC framework rates the technical impact as total and the flaw as automatable, though it is not listed in CISA KEV and EPSS remains low (0.21%, 11th percentile). The scope of affected deployments is limited to the GAPTEQ low-code application platform rather than a widely embedded library.
Privilege escalation in Squirro Cognitive Search before v3.14.2 lets a remote attacker submit a crafted request to gain elevated privileges within the enterprise search platform. The flaw is rated CVSS 9.8 with full confidentiality, integrity, and availability impact, and CISA's SSVC framework marks it automatable with total technical impact. No public exploit identified at time of analysis, and EPSS estimates near-term exploitation probability at just 0.21% (11th percentile).
SQL injection in Qcms 6.0.6 lets remote attackers inject arbitrary SQL through the backend tableField action, enabling database compromise and, per the advisory tagging, escalation toward arbitrary code execution. The flaw is documented in a white-box audit write-up but is not listed in CISA KEV, and its EPSS probability is low (0.20%, 10th percentile), indicating no evidence of widespread automated exploitation yet. Qcms is a niche PHP content-management system, so real-world exposure is limited despite the high CVSS score.
Unauthenticated remote root access affects the Tenda W20E router (firmware V16.01.0.6(2782)) through its /goform/telnet web endpoint, which activates the device's Telnet daemon without any authentication check. Any attacker who can reach the router's management interface can enable Telnet and log in for a root shell, giving full control of the device. A public disclosure/PoC repository exists, though the flaw is not listed in CISA KEV and EPSS-modeled exploitation probability is currently low (0.19%).
Remote code execution in the Tenda W20E router firmware V16.01.0.6(2782) lets unauthenticated network attackers overflow a stack buffer and run arbitrary code on the device. The flaw is explicitly an incomplete fix for the earlier CVE-2025-44867 and CVE-2026-36819, meaning the same code path remains exploitable despite prior patch attempts. A public vulnerability-disclosure repository exists, but the issue is not in CISA KEV and carries a low EPSS score (0.17%, 7th percentile), indicating no confirmed widespread exploitation yet.
SQL injection in Brainformatik CRM+ through version 2025.6 allows remote unauthenticated attackers to inject arbitrary SQL via the appointment conflict-checking AJAX endpoint (index.php?module=Appointments&action=CheckConflictOfDates), enabling full database compromise. The flaw is time-based (blind) but scores CVSS 9.8 with total technical impact; a public proof-of-concept exists (CISA SSVC: exploitation=poc) though it is not yet in CISA KEV. EPSS is low (0.16%, 6th percentile), indicating no widespread automated exploitation observed to date despite the critical severity.
Arbitrary code execution is reported in PbootCMS 3.2.15, a PHP-based open-source content management system, reachable through several front-end controllers (MemberController.php, UserController.php, CommentController.php, ContentController.php) and the shared helper.php. Classified as CWE-94 code injection with a CVSS 9.8 and tagged PHP/RCE, it would let an attacker run attacker-supplied PHP on the web server. No public exploit is identified at time of analysis and it is not listed in CISA KEV; note that one of the two primary references is a document titled 'URL Redirection Vulnerability,' which conflicts with the code-execution description and should be verified.
Unauthorized internal-account access in Mahara ePortfolio (all releases before 25.04.5 and 26.04.0) allows remote attackers to log into other users' accounts by abusing the Learning Tools Interoperability (LTI) integration, an authentication-bypass class flaw affecting both the LTI 1.1 and LTI 1.3 Advantage connectors. The issue occurs 'under certain circumstances,' implying LTI must be configured and reachable, and no public exploit identified at time of analysis. The assigned CVSS of 9.8 reflects full confidentiality/integrity/availability compromise of the targeted account, though the conditional wording suggests real-world exploitation depends on LTI being enabled.
Information disclosure in the Mahara ePortfolio platform before 25.04.5 and 26.04.0 allows remote attackers to retrieve backed-up content belonging to a different Text block/section by crafting a request in a specific way. The flaw (CWE-200) exposes stored draft or historical text that should be isolated per section, potentially leaking other users' or other pages' content. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Cross-user credential disclosure in Onyx (open-source AI platform) lets any low-privileged BASIC_ACCESS user retrieve another user's OAuth Authorization header via the GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} MCP endpoints. Per-user OAuth tokens were incorrectly persisted into a shared admin MCPConnectionConfig row and then echoed back through auth_template.headers to unrelated callers, leaking bearer tokens for downstream MCP services. Affects versions prior to 3.1.10, 3.2.14, and 4.0.0; no public exploit identified at time of analysis and it is not listed in CISA KEV, but a vendor patch and detailed fix commits are available.
Stored cross-site scripting in SiYuan before v3.7.4 lets an authenticated user upload an HTML file through the asset-serving endpoint, which the server returns without Content-Disposition or X-Content-Type-Options headers, so the browser renders it inline instead of downloading it. When the workspace owner clicks the malicious asset link, the injected script runs in the app's origin with full kernel API access, enabling account and data compromise. Reported by VulnCheck with a vendor patch available; no public exploit has been identified at time of analysis.
Blind SQL injection in Google SecOps (Chronicle SOAR) versions before 6.3.85 lets an authenticated user abuse a crafted request parameter in a legacy dashboard widget API to run arbitrary blind SQL queries against the backend database. CVSS 4.0 rates it 9.4 (critical) with a low-privilege network vector; no public exploit is identified at time of analysis and it is not listed in CISA KEV. Because the platform is a Google Cloud-managed SaaS, the fix was deployed by the vendor and no customer action is required.
Arbitrary native code execution in the jahlives openssl_encrypt Python package (all versions before 1.4.0) arises from its Whirlpool hash routine loading .so extension modules via a broad glob pattern without any integrity check. An attacker who can drop a file matching 'whirlpool*py313*.so' into a site-packages directory gets their code executed in-process the moment the hashing module is imported. Reported by VulnCheck; a vendor patch (1.4.0) exists, and there is no public exploit identified at time of analysis.
Sandbox escape in the openssl_encrypt Python library (jahlives) before 1.4.0 allows attacker-supplied plugins to run without any isolation because the default process-isolation mode silently fails to enforce its sandbox restrictions. An attacker able to supply or influence a plugin gains unrestricted filesystem, network, subprocess, and full Python-module access equivalent to arbitrary code execution. Reported by VulnCheck with a vendor patch available; no public exploit code or CISA KEV listing is identified at time of analysis (CVSS 4.0 base 9.3).
Arbitrary code execution in jahlives openssl_encrypt before 1.4.0 stems from an inconsistent sandbox: the runtime PluginImportGuard and the static AST analyzer enforce two different blocklists, so an attacker who slips past the AST's DANGEROUS_MODULES check can still import high-risk modules at runtime. By using string obfuscation or encoding to hide imports of sys, shutil, multiprocessing, importlib, or pickle, a supplied plugin escapes the sandbox and runs on the host. Reported by VulnCheck with a vendor patch available; no public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass in the jahlives openssl_encrypt library (all versions before 1.4.0) lets remote unauthenticated attackers fully control the key-management API because verify_api_token treats any non-empty Bearer string as valid. An attacker can upload attacker-controlled public keys, enumerate every stored key, and revoke keys belonging to arbitrary users, undermining the confidentiality and integrity guarantees the tool is meant to provide. The flaw is vendor-confirmed with a patch available and was reported by VulnCheck; no public exploit identified at time of analysis, though the trivial nature makes weaponization simple.
Authentication brute-force protection can be bypassed in jahlives openssl_encrypt before 1.4.0 because the TOTP rate limiter is held in per-process in-memory state (a class-level defaultdict) rather than shared storage. In multi-worker or multi-instance deployments each worker enforces its own independent counters, and all lockout state evaporates on restart, so an attacker can parallelize or restart-reset their way through TOTP guesses. No public exploit is identified at time of analysis, and it is not listed in CISA KEV; a vendor patch exists in 1.4.0.
Arbitrary file read and deletion in SiYuan kernel before v3.7.4 arises from an unvalidated id parameter in the database_clean MCP tool, letting an authenticated MCP client traverse the filesystem to copy any process-readable file into the history directory and then delete the original. This is the MCP-facing twin of a flaw previously fixed on the HTTP API path (GHSA-7hm9-v7vf-7g4w), meaning a known-bad code pattern survived in a second caller. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis and not listed in CISA KEV.
Sandbox escape in the openssl_encrypt Python library (jahlives) before 1.4.0 lets attacker-supplied plugin code break out of the IsolatedPluginExecutor and run arbitrary OS commands. The restricted exec() environment still leaks live Python type objects, so an attacker walks the class hierarchy to reach system primitives despite the intended sandbox. Rated CVSS 4.0 9.3 (critical) and reported by VulnCheck; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Stored/reflected cross-site scripting in Discourse before 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0 lets an unauthenticated attacker execute arbitrary JavaScript in a visitor's browser by supplying a crafted color_scheme_id or dark_scheme_id cookie. Because the cookie is rendered into a color-scheme tag without HTML escaping, an attacker can break out of the attribute context and inject markup that defeats Discourse's nonce-based Content Security Policy. A vendor patch exists and the flaw carries a critical CVSS of 9.3, but no public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Cryptographic shared-secret disclosure in the openssl_encrypt Python library (maintainer 'jahlives') before 1.4.0 lets an attacker reconstruct the KEM shared secret and decrypt all protected ciphertext once they obtain only 16 bytes of the private key. The flaw lives in pqc.py, where any post-quantum KEM decapsulation failure silently falls back to a 'simulation mode' that derives a deterministic secret from those 16 key bytes plus attacker-visible encapsulated-key data, rather than raising an error. Reported by VulnCheck; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Sandbox escape leading to remote code execution affects openssl_encrypt (the jahlives Python package) in all versions before 1.4.0, where the DangerousPatternVisitor AST analyzer fails to catch dunder-based attribute traversal. Because the library's security model is to safely execute untrusted plugin code, an attacker who can supply a plugin can chain __class__, __bases__, __subclasses__() and __globals__ to reach restricted functions and run arbitrary OS commands, fully defeating the sandbox. Reported by VulnCheck with a vendor patch available; no public exploit or CISA KEV listing was identified at time of analysis.
Sensitive-token exposure in openssl_encrypt (the jahlives Python package, pip 'openssl-encrypt') before 1.4.0 stems from the keyserver and telemetry server accepting refresh tokens as GET query parameters. Because URLs are routinely written to server access logs, proxy/CDN logs, browser history, and forwarded in HTTP Referer headers, any party with access to those artifacts can harvest a valid refresh token and mint new access tokens, effectively bypassing authentication. Reported by VulnCheck; no public exploit identified at time of analysis and it is not on CISA KEV.
Broken access control in OpnForm's editable-submission feature lets unauthenticated attackers derive any submission's secret because the Hashids library is used with an empty default salt over sequential database row IDs. Since the hash of a sequential integer becomes trivially predictable, an attacker can enumerate submissions to read other respondents' full answer data via the submission-fetch endpoint or overwrite existing submissions through the answer endpoint. Reported by VulnCheck and patched in v2.0.2; there is no public exploit identified at time of analysis, but the flaw is remotely and trivially reproducible against affected default installs.
SQL injection in Page Builder CK for Joomla (versions before 3.6.5) lets attackers manipulate database queries through the extension's styles model, exposing the underlying database to unauthorized read and write. The flaw is exploitable remotely without authentication per the CVSS 4.0 vector (AV:N/PR:N/UI:N), with the frontend attack surface closed in 3.6.4 and the backend surface closed in 3.6.5. No public exploit identified at time of analysis, but the CWE-89 root cause and the reported 9.3 severity make this a high-priority patch for affected Joomla sites.
Authentication bypass in the openssl_encrypt Python library (versions before 1.4.0) lets attackers who can tamper with ciphertext in transit defeat integrity protection, because a failed AES-GCM authenticated decryption in pqc.py silently falls back to unauthenticated AES-CTR. Reported by VulnCheck and carrying a CVSS 4.0 base score of 9.3, the flaw enables undetected bit-flipping and ciphertext manipulation. No public exploit identified at time of analysis, but a vendor patch is available.
Authentication bypass in FakeFish (openshift-metal3/fakefish), a Redfish BMC emulator used to bridge metal3/Ironic provisioning to KubeVirt virtual machines, lets any authenticated cluster user manage VMs they do not own. Because FakeFish forwards inbound Redfish credentials to backend scripts but the KubeVirt backend authenticates via a mounted KUBECONFIG and ignores those credentials entirely, no meaningful authorization occurs; an attacker can power target VMs on and off and mount arbitrary virtual CD/ISO images. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is trivial to trigger given the missing authentication check.
Weak cryptographic key derivation in the openssl_encrypt Python library (all versions before 1.4.0) stems from its key-normalization routines invoking HKDF with no salt and a static info parameter, making derived keys deterministic for identical inputs. This reduces effective entropy and weakens resistance to multi-target (batch) attacks, letting an adversary who collects ciphertexts or derived-key material amortize cryptanalytic effort across many victims. No public exploit identified at time of analysis; the flaw was reported by VulnCheck and a vendor patch is available in 1.4.0.