Account takeover in Red Hat Build of Keycloak allows an unauthenticated attacker to abuse the reset-credentials flow in the keycloak-services component to complete a password reset for any user without ever clicking the emailed verification link, letting them directly set new credentials. Because the mandatory email-ownership check can be bypassed, the flaw yields full control of arbitrary accounts (CVSS 9.1). No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Remote stack-based buffer overflow in the embedded nginx binary (/usr/nginx/sbin/nginx) of the TRENDnet TEW-WLC100 wireless LAN controller, firmware 1v2.07b01, lets remote attackers overflow a fixed-size stack buffer in the HTTP Server-header handling routine FUN_0040da4c. Reported through VulDB with a public proof-of-concept exploit already available, the flaw carries a CVSS 4.0 base score of 9.3 and, per its vector, requires no authentication or user interaction. There is no public exploit identified as being used in active attacks - only a POC exists - but the combination of a network-reachable overflow and released exploit code makes this a high-priority patching candidate.
Server-side request forgery in CodeWhale before 0.8.64 lets remote attackers reach internal-only IP addresses through the agent's fetch_url tool by exploiting a time-of-check-time-of-use gap in its DNS-pinning defense. Because the pre-fetch validator treated a failed DNS lookup as a pass-through ('let the HTTP request proceed and fail naturally'), an attacker who controls DNS responses can make the safety check see a non-resolving or benign answer while the real request resolves to an internal address, bypassing the SSRF allow/deny policy. No public exploit identified at time of analysis; a vendor patch and fix commit exist, and the issue was reported by VulnCheck.
Credential and 2FA-secret disclosure in the Froxlor hosting control panel (versions before 2.3.8) lets an authenticated API caller retrieve password hashes and Base32 TOTP seeds through the Customers, Admins, and Ftps API commands. The affected get()/listing() endpoints run full-row queries (SELECT *) and return the raw rows via $this->response(...) without stripping the password, type_2fa, or data_2fa fields. A detailed proof-of-concept exists (curl calls plus a Python TOTP-code generator); there is no public exploit identified as being used in active attacks and the issue is not in CISA KEV.
CSV injection (CWE-1236) in Brainstorm Force SureForms versions ≤ 2.1.1 enables remote unauthenticated attackers to embed spreadsheet formula directives inside user-controlled form field names, which are written unsanitized into CSV exports generated by administrators. When a site admin exports form submissions and opens the resulting file in a vulnerable spreadsheet application such as Microsoft Excel or LibreOffice Calc, the embedded formulas execute in the context of that administrator's workstation. A public proof-of-concept is available on GitHub; however, EPSS sits at 0.34% (27th percentile) and this CVE is not in the CISA KEV catalog, suggesting limited real-world exploitation to date.
Remote code execution in LibreNMS allows an authenticated administrator to execute arbitrary OS commands on the host server by chaining two unsafe PHP `exec()` calls in the Signal alert transport module. Versions 21.6.0 through 26.5.0 (exclusive) are affected, with the root cause being unescaped user-controlled inputs - the `signal-cli` path and `Recipient` field - interpolated directly into shell commands in `LibreNMS/Alert/Transport/Signal.php` and `scripts/composer_wrapper.php`. A publicly available proof-of-concept with step-by-step exploit instructions is included in the GitHub Security Advisory GHSA-c9fv-cgmm-2wg7; no CISA KEV listing was identified at time of analysis.
Environment variable inheritance in CodeWhale's js_execution tool prior to version 0.8.64 allows crafted JavaScript payloads to read the full parent process environment via process.env, exposing API keys, cloud credentials, and authentication tokens to the model context. The affected codebase is a Rust TUI AI coding assistant whose Node.js child process spawning failed to sanitize the environment before execution. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor patch is available via GitHub advisory GHSA-h539-c7r8-3xq4.
Unauthenticated file disclosure in CodeWhale before 0.8.64 allows arbitrary local file reads via the image_analyze tool's failure to resolve symbolic links before enforcing workspace boundaries. An attacker who can place a crafted symlink (named with an image extension) inside a victim's workspace - for example via a malicious git repository - can cause CodeWhale's vision endpoint to read and transmit the symlink target's bytes without user approval. No CISA KEV listing or public exploit has been identified, but the CVSS 4.0 score of 8.7 and high confidentiality impact make this a meaningful risk for developers who open untrusted projects in CodeWhale.
Arbitrary file read in CodeWhale before version 0.8.64 allows an attacker to exfiltrate files from a developer's workstation by embedding a malicious `.codewhale/config.toml` in a repository. The `instructions` array in project config accepted arbitrary filesystem paths without workspace boundary enforcement, causing the tool to silently read and inject targeted files into the AI system prompt. No public exploit or CISA KEV listing has been identified at time of analysis, but the attack primitive is a well-understood path traversal and requires no technical sophistication beyond crafting a config file.
Stored XSS in Froxlor's DNS TXT record editor enables any low-privilege hosting customer with DNS editor access to inject arbitrary JavaScript that executes automatically in an administrator's browser session upon routine page load. The attack exploits a three-point failure: missing HTML sanitization at input, an unescaped `wordwrap()` callback that introduces raw HTML, and a Twig template using `|raw` that bypasses auto-escaping - compounded by a CSP header that includes `'unsafe-inline'`, rendering it useless. A detailed public proof-of-concept is confirmed in the vendor advisory; no CISA KEV listing at time of analysis. Successful exploitation yields complete admin account takeover and full server compromise.
Stack-based buffer overflow in the alphapd web server daemon of TRENDnet TV-IP751WIC firmware 11.03.03 allows low-privileged remote attackers to execute arbitrary code by sending malformed input to any of seven vulnerable configuration-handling functions. Seven distinct code paths - SystemNetworkChanged, SystemDDNSChanged, SystemEmailChanged, SystemFTPChanged, websCheckRealm, FUN_00432574, and FUN_0043372C - copy user-supplied configuration values onto the stack without enforcing length limits. A public proof-of-concept exploit has been published on GitHub, and the CVSS 4.0 score of 8.6 with E:P reflects meaningfully elevated exploitation risk even absent CISA KEV listing.
Stack-based buffer overflow in the DHCP blobmsg handler within /sbin/netifd on TRENDnet TEW-WLC100P firmware 12.07b01 allows unauthenticated adjacent-network attackers to execute arbitrary code with no user interaction required. A working proof-of-concept Python exploit script has been publicly released on GitHub, materially lowering the skill threshold for exploitation. No CISA KEV listing exists at time of analysis and no vendor patch has been identified, leaving affected devices exposed with only network-level compensating controls available.
Argument injection in CodeWhale's git_show tool (versions 0.8.41-0.8.63) allows an attacker to cause arbitrary file writes at the invoking user's privilege level via a malicious repository combined with prompt injection. The model-supplied rev parameter is passed directly to git show argv without an --end-of-options sentinel, meaning a value beginning with --output= is interpreted by git as a file-write flag rather than a revision. Because the git_show tool is registered as auto-approved and advertised as read-only, exploitation bypasses the user confirmation prompt entirely, enabling silent overwrite of sensitive files such as ~/.ssh/authorized_keys or ~/.bashrc. No public exploit has been identified at time of analysis, and a vendor-released patch is available in version 0.8.64.
Remote code execution in CodeWhale (packages codewhale and codewhale-tui) versions 0.8.41 through 0.8.63 allows an attacker to execute arbitrary Python code on the victim's machine by exploiting a hardcoded approval bypass in the rlm_eval built-in tool. The tool's approval_requirement() method returned ApprovalRequirement::Auto, causing the engine to silently skip user approval prompts regardless of the operator's configured --approval-policy, enabling prompt injection attacks through any external content the agent reads. No public exploit has been identified at time of analysis, but the attack surface encompasses any CodeWhale agent workflow that fetches untrusted content such as web pages, repository files, or MCP tool results.
Shell command injection in CodeWhale before version 0.8.64 enables arbitrary code execution on a victim developer's machine through a malicious repository config file. By committing a crafted `.codewhale/config.toml` containing `allow_shell = true` to any repository, an attacker can override the tool's shell access controls; when the target developer clones and opens the repository in CodeWhale, the AI agent gains unrestricted access to `exec_shell` and `task_shell` built-in tools and executes arbitrary shell commands without the user's explicit consent. No public exploit has been identified at time of analysis and no CISA KEV listing is confirmed, though the attack mechanics are straightforward and a vendor patch is available.
Argument injection in CodeWhale versions before 0.8.64 exposes arbitrary files on the host system by accepting unsanitized option-shaped values in the git_blame and git_show tools' rev parameter. An unauthenticated remote attacker who can influence the rev value - for example via a prompt injection payload in a malicious repository - can supply flags such as --contents=/home/user/.ssh/id_rsa, causing git to read and return the targeted file as tool output visible to the AI model. Vendor-released patch: 0.8.64 is available; no public exploit identified at time of analysis.
Broken object-level authorization in Netflix Lemur versions 0.5.0 through 1.9.3 permits any authenticated non-read-only user to silently hijack TLS certificate lifecycle management for certificates they do not own. By supplying arbitrary certificate identifiers in the replaces[] or replacements field of create, upload, or edit requests, an attacker triggers an append listener that suppresses the victim certificate's expiry notifications, marks it as replaced, and excludes it from get_all_pending_reissue - after which certificate_rotate may deploy the attacker's certificate to production endpoints previously serving the victim. No public exploit code has been identified at time of analysis, and no KEV entry exists, but the integrity and availability impact on managed TLS fleets is high; the fix shipped in version 1.9.3.
Command injection in Microsoft Copilot Web (copilot_web) enables unauthenticated remote attackers to exfiltrate sensitive data over the network by embedding malicious command elements in user-controlled input. The impact is strictly bounded to confidentiality - no integrity or availability loss - and a proof-of-concept is publicly available on GitHub. Despite a CVSS 7.5 score and public PoC, SSVC classifies exploitation as none with Automatable=no, and EPSS sits at 1.63%, suggesting limited real-world exploitation activity at time of analysis.
Credential exposure in Netflix Lemur's destination API allows any authenticated low-privilege user to retrieve plaintext SFTP passwords and private key passphrases stored in destination plugin configurations. Affected versions prior to 1.9.3 expose GET /api/1/destinations endpoints without the admin_permission guard applied to sibling write handlers, and DestinationOutputSchema serializes raw plugin options - including fields marked as storing passwords - without redaction. The CVSS Scope:Changed rating reflects that the exposed SFTP credentials extend attacker reach beyond Lemur itself to remote certificate-deployment infrastructure. No public exploit code has been identified, though the fix commit is publicly available and the attack path is trivially constructable from the diff.
Server-side request forgery in Netflix Lemur's authority update path allows an authenticated user holding an authority role to redirect the Lemur backend into fetching arbitrary internal URLs, including cloud instance metadata endpoints such as 169.254.169.254. This is an incomplete-fix bypass of CVE-2026-55166 (GHSA-v2wp-frmc-5q3v): the creation-time allowlist check in `_validate_acme_url` was never applied to the `PUT /api/1/authorities/` update path, leaving the stored `acme_url` writable without re-validation. The fix is shipped in v1.9.3 with no public exploit identified at time of analysis.
Resource exhaustion in Brainstorm Force SureForms before version 2.1.3 enables unauthenticated remote attackers to submit crafted form entries that exhaust server resources, block administrator access to the Entries interface, and trigger HTTP 500 errors sitewide. The root cause is CWE-400: the Entries component imposes no adequate limits on user-controlled field content during processing and rendering, making the attack low-complexity and fully automatable. A publicly available proof-of-concept exploit exists on GitHub, materially lowering the barrier to exploitation, though no CISA KEV listing confirms mass active exploitation at time of analysis.
Unauthenticated access to the classifieds-types REST endpoint in WPAdverts - Classifieds Plugin for WordPress (all versions through 2.3.2) exposes internal site configuration data due to a missing authorization check in class-rest-blocks.php. Remote attackers without any credentials can retrieve registered post types, taxonomy definitions, form schema metadata, contact options, and custom field meta keys - information that supports targeted reconnaissance for follow-on attacks. No public exploit has been identified at time of analysis and this vulnerability is not listed in CISA KEV, but the CVSS AV:N/PR:N vector means any internet-facing WordPress site running the affected plugin version is reachable without precondition.
Server-side request forgery in Netflix Lemur prior to 1.9.3 allows authority-role users to redirect ACME certificate issuance workflows to attacker-controlled servers, enabling JWS-signed HTTP requests to reach internal services or cloud metadata endpoints. The flaw exists in two components acting together: the PUT /api/1/authorities/ endpoint accepted acme_url modifications without revalidating the host against an allowlist, and the ACME ClientV2 blindly followed server-supplied URLs for nonce, order, authorization, and finalize operations without confirming the hostname matched the configured directory. No public exploit identified at time of analysis; vendor-released patch available in version 1.9.3.
Prompt-injection-driven privilege escalation in CodeWhale 0.8.41-0.8.63 allows an attacker who can place malicious instructions in content the agent ingests to execute arbitrary commands inside an already-approved long-running interactive shell session - such as python3 -i, mysql, ssh, or sudo -i - without triggering any user approval prompt. The root cause is that exec_shell_interact (and its RlmEvalTool counterpart) hardcoded ApprovalRequirement::Auto, overriding the default Required gate that governs code-executing tools. Fixed in version 0.8.64; no public exploit or CISA KEV listing has been identified at time of analysis.
Second-order SQL injection in Froxlor (versions before 2.3.8) enables an authenticated administrator with the change_serversettings=1 privilege to store a UNION-based SQL payload in the panel_admins.ip column via Admins.add or Admins.update, which executes without further victim interaction when IpsAndPorts.listing is called by the poisoned account, returning all administrator login names and bcrypt password hashes. A confirmed, publicly available proof-of-concept demonstrates the complete two-step store-then-trigger chain against a live instance, enabling full database exfiltration and privilege escalation from reseller admin to super-admin. No active exploitation is confirmed in CISA KEV, though the working PoC and the specific threat model of multi-admin hosting deployments materially elevate real-world risk.
Privilege escalation and authorization bypass in Netflix Lemur before 1.9.3 permits any authenticated non-read-only user to revoke arbitrary TLS certificates fleet-wide, causing denial of service across all managed endpoints. Two chained API flaws - an unchecked upload endpoint and a row-scoped revocation check - allow an attacker to manufacture a shadow Lemur database record aliasing any real CA-side certificate, then trigger the issuer plugin to revoke the genuine certificate using stored authority credentials. No public exploit code has been identified, but the attack path is fully disclosed in the GitHub security advisory GHSA-pxmc-2ffp-8j67 and the fix commit.
Froxlor's standalone AJAX endpoint (lib/ajax.php) entirely bypasses the CSRF token enforcement present in lib/init.php, allowing a remote attacker to forge state-changing POST requests on behalf of any authenticated administrator who visits a malicious page. Successful exploitation modifies administrator API key properties - specifically injecting the attacker's IP into the allowed_from whitelist and setting valid_until to -1 (never expires) - creating a persistent foothold for future API abuse if the API secret is later obtained. A working proof-of-concept HTML page is included in the public GitHub security advisory (GHSA-xpr4-8vp6-c87j); no CISA KEV listing found at time of analysis. EPSS data was not provided, but the UI:R requirement and niche product footprint constrain real-world exploitation.
Privilege escalation in Netflix Lemur's certificate authority API allows any authenticated non-read-only user to mint a sub-CA chained to an internal root CA they do not control, when the ADMIN_ONLY_AUTHORITY_CREATION flag is disabled. The POST /api/1/authorities endpoint (type=subca) failed to verify AuthorityPermission on the caller-supplied parent, allowing the caller to invoke cryptography-issuer which signed the new intermediate using the parent root's private key. The resulting sub-CA can issue trusted certificates outside normal issuance controls and its private key can be extracted and used entirely outside Lemur. No public exploit has been identified at time of analysis, and the fix is available in version 1.9.3.
Server-side request forgery in MagicMirror² versions prior to 2.37.0 allows unauthenticated remote attackers to make the mirror server issue arbitrary outbound HTTP requests to attacker-controlled URLs, including to internal network services. The vulnerability stems from the ADD_CALENDAR handler on the unauthenticated Socket.IO /calendar namespace accepting a fully attacker-controlled URL, authentication headers, and a TLS-bypass flag with no SSRF validation. When the internal target returns valid iCal data, the parsed event content is returned to the attacker via CALENDAR_EVENTS, enabling blind-to-semi-open SSRF with data exfiltration. A working proof-of-concept (exploit-ssrf-calendar.js) is documented in the GHSA advisory; no CISA KEV listing at time of analysis.
Unauthenticated Server-Side Request Forgery in MagicMirror² versions prior to 2.37.0 allows any network-reachable attacker to weaponize the smart mirror as an internal network probe. By connecting to the unguarded Socket.IO `/newsfeed` namespace and emitting a `CHECK_ARTICLE_URL` notification with an attacker-controlled URL, the server performs an unsanitized `fetch()` HEAD request and returns timing and framing data via `ARTICLE_URL_STATUS`, creating a boolean-plus-timing oracle for internal host and port enumeration. A proof-of-concept exploit is documented in the GHSA advisory; no confirmed active exploitation (CISA KEV) has been reported.
Denial of service in the RabbitMQ Java client library (com.rabbitmq:amqp-client ≤ 5.30.0) allows a malicious or compromised AMQP broker to forcibly terminate any active client connection by sending a crafted malformed frame sequence. The flaw in CommandAssembler.consumeBodyFrame subtracts a peer-controlled body-frame payload length before validating it fits within the declared body size, driving remainingBodyBytes negative and triggering an unhandled UnsupportedOperationException - a legacy stub - rather than a proper MalformedFrameException, causing AMQConnection to perform a hard connection shutdown. A PoC is referenced in the GHSA advisory; no active exploitation is confirmed in CISA KEV.
Blind SSRF in Netflix Lemur's certificate revocation URL validation allows authenticated operators to induce internal network requests targeting loopback, RFC1918, link-local, or cloud instance-metadata addresses. Two distinct bypass paths exist in versions prior to 1.9.3: the `_validate_revocation_url` function in `verify.py` followed HTTP redirects without validating Location targets, allowing a whitelisted CRL or OCSP URL to silently redirect the actual fetch to an internal address; and separate DNS resolutions at validation and connection time created a TOCTOU window exploitable via DNS rebinding on both CRL and OCSP code paths. No public exploit or CISA KEV listing has been identified at time of analysis.
Remote code execution in the WP Compress (Image Optimizer) WordPress plugin before version 7.20.01 allows unauthenticated attackers to inject and execute arbitrary PHP code on the underlying web server. Reported by Patchstack (EUVD-2026-60774) and rated CVSS 10.0 with a network, no-privilege, no-interaction vector, this is a maximum-severity flaw affecting every deployment running a vulnerable plugin version. No public exploit identified at time of analysis, though the code-injection root cause and unauthenticated reachability make it a high-priority patch target.
Integrity bypass in CPython's stringprep module causes divergent domain name normalization when processing internationalized domain names (IDNs) under IDNA 2003. The module incorrectly applies modern Unicode codepoint attributes - Unicode 17.0.0 in the fixed version - instead of the Unicode 3.2.0 attributes mandated by RFC 3454, causing incorrect case-folding behavior via in_table_b2() and related functions. Applications using Python's idna codec for domain validation or access control are at risk of domain identity confusion for a subset of IDN labels containing characters whose Unicode properties changed after Unicode 3.2.0. A vendor fix is available via CPython PR #155293; no public exploit has been identified at time of analysis.
Sandbox escape in the Remote Settings Client component of Mozilla Firefox lets attacker-controlled code break out of the isolated content process and reach the more privileged parent process, and was resolved in Firefox 154. The flaw is classed as a protection-mechanism failure (CWE-693) and carries a maximal CVSS 3.1 base score of 10.0 with a changed scope, reflecting cross-boundary impact. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, so this is a high-severity but not yet actively-exploited issue.
Authentication bypass in Oracle Hyperion Financial Management 11.2.25.0.000 (Security component) lets a remote, unauthenticated attacker reach the application over TLS and read or alter all data the product can access, with a scope-changing blast radius into adjacent Oracle products. Rated CVSS 10.0, it is trivially exploitable (AV:N/AC:L/PR:N/UI:N) and delivers full confidentiality and integrity compromise while leaving availability untouched. No public exploit identified at time of analysis, and it is not listed in CISA KEV, but the perfect score and unauthenticated network reach make it a top-priority patch.
Complete takeover of Oracle Internet Directory (OID) is possible in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 through its OID LDAP Server component, where an unauthenticated remote attacker with LDAP network access can fully compromise the directory service. Rated CVSS 10.0 with a scope change (S:C), successful exploitation can pivot beyond OID to significantly impact additional products that depend on it. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the maximum severity and identity-infrastructure role make this a top-priority patch.
Complete takeover of Oracle Hyperion Data Relationship Management 11.2.25.0.000 is possible by remote, unauthenticated attackers over TCP, per Oracle's August 2026 Critical Patch Update. The flaw sits in the Access and security component and carries a maximum CVSS 3.1 base score of 10.0 with a scope change, meaning successful exploitation can reach beyond DRM into additional connected products. No public exploit code has been identified at time of analysis, but the trivial exploitability (no authentication, low complexity) makes this a top-priority patch.
Unauthenticated arbitrary file upload leading to remote code execution affects the Forminator Forms WordPress plugin (WPMU DEV) in all versions through 1.56.1. The public form-submission handler trusts attacker-controlled upload field configuration injected through a forged Select field value, and the dangerous-extension blocklist in handle_file_upload uses exact-key matching that is bypassed with pipe-alternative MIME type keys, letting an attacker drop an executable PHP file on the server. Reported by Wordfence and carrying a CVSS 9.8, this is a critical, network-reachable flaw with no authentication barrier, though there is no public exploit identified at time of analysis.
Sandbox escape leading to host remote code execution in Kobako, a Ruby gem that runs untrusted mruby guest scripts in a WASM sandbox. The transport dispatcher forwarded guest-supplied method names directly to `Object#public_send` on host-bound Service objects without restricting them to the object's own methods, letting a guest pivot through the public `send` into private `Kernel#eval` and execute arbitrary Ruby in the host process. All released versions 0.1.0-0.9.0 are affected; the vendor advisory (GHSA-7pwq-q9jf-539h) documents a working proof-of-concept and CVSS is rated 10.0, though there is no CISA KEV listing or EPSS data provided.
Full takeover of Oracle Managed File Transfer (Oracle Fusion Middleware, MFT Runtime Server) is possible when a low-privileged attacker with network access reaches the T3 or IIOP protocol interface. The flaw carries a CVSS 3.1 base score of 9.9 and, critically, involves a scope change (S:C) so successful attacks may significantly impact additional products beyond MFT itself. No public exploit has been identified at time of analysis and the issue is not listed in CISA KEV, but the low attack complexity, low privilege requirement, and network exposure via WebLogic-style T3/IIOP make it a high-priority patch.
Privilege escalation to full takeover in Oracle Hyperion Financial Management 11.2.25.0.000 (Security component) lets a low-privileged attacker with network access, operating over the SQL layer, fully compromise the application and - because of a scope change - significantly impact other connected products. Oracle rates it CVSS 3.1 9.9 with high confidentiality, integrity, and availability impact. No public exploit code has been identified and it is not on CISA KEV, but the low complexity and low privilege bar make it a top-priority patch item.
Privilege-based takeover of Oracle Siebel CRM Cloud Applications (versions 22.3 through 26.6) is possible via the Siebel Cloud Manager component, where a low-privileged attacker with HTTP network access can fully compromise the application. Because the flaw carries a scope change, successful attacks can significantly impact additional connected products beyond Siebel itself. Rated CVSS 3.1 9.9 with full confidentiality, integrity, and availability impact; no public exploit identified at time of analysis.
Privilege-escalating account takeover in Oracle Hyperion Calculation Manager 11.2.25.0.000 (Security component) lets a low-privileged, network-adjacent attacker send crafted HTTP requests that fully compromise the product and, because of a CVSS scope change, spill impact into additional connected Oracle Hyperion products. Oracle rates it CVSS 3.1 9.9 with full confidentiality, integrity, and availability loss; it was disclosed in Oracle's August 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Remote takeover of Oracle WebLogic Server is possible when a low-privileged attacker reaches the server over the T3 or IIOP protocols, abusing a flaw in the Core component to fully compromise the host. Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 are affected, and because the attack carries a scope change it can significantly impact products beyond WebLogic itself. Oracle rates it CVSS 9.9; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the CVSS profile matches historically weaponized WebLogic T3/IIOP deserialization bugs.
Full compromise of Oracle Reports Developer 12.2.1.19.0 (Oracle Fusion Middleware) is possible when a low-privileged attacker reaches the product over the network via the CORBA protocol, per Oracle's August 2026 Critical Patch Update. Because the flaw carries a scope change, successful exploitation can take over the Reports Developer instance and significantly impact other products beyond the vulnerable component, yielding full confidentiality, integrity, and availability loss (CVSS 3.1 base 9.9). No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Full compromise of Oracle Siebel CRM Integration (Open Integration component) is achievable by a low-privileged, network-based attacker over HTTP, with a scope change that lets attacks significantly impact additional products beyond the vulnerable component. Affected releases span 25.12 through 26.6, and Oracle rates it CVSS 3.1 9.9 with full confidentiality, integrity, and availability loss (component takeover). There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the combination of low attack complexity, low privilege requirement, and scope change makes it a top-tier patch priority.
Privilege escalation to full takeover in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component, versions 22.3 through 26.6) lets a low-privileged attacker with only HTTP network access fully compromise the application and, because of a scope change, meaningfully impact additional connected products. Oracle rates it CVSS 3.1 9.9 with high confidentiality, integrity, and availability impact; it was disclosed in the Oracle Critical Patch Update of August 2026. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Privilege-escalating account/system takeover in Oracle WebCenter Portal (Fusion Middleware, Composer component) versions 12.2.1.4.0 and 14.1.2.0.0 lets an authenticated low-privileged attacker reach full compromise over HTTP. Because the flaw carries a scope change (S:C), successful exploitation can pivot beyond WebCenter Portal to impact additional products, and Oracle rates it CVSS 9.9. No public exploit identified at time of analysis, but the near-maximum score, low attack complexity, and minimal privilege requirement make it a top-tier patch priority.
Full compromise of Oracle Identity Manager (OIM Legacy UI component) in Oracle Fusion Middleware 12.2.1.4.0 and 14.1.2.1.0 is achievable by a low-privileged attacker over HTTP, resulting in complete takeover of the OIM instance. Because the flaw carries a scope change, successful exploitation can significantly impact additional connected products beyond OIM itself, elevating this from a single-product compromise to a potential identity-fabric breach. Disclosed in Oracle's August 2026 Critical Patch Update with a CVSS 3.1 base score of 9.9; no public exploit identified at time of analysis.