Full system takeover is possible in Oracle Hyperion Financial Management 11.2.25.0.000 through the Security component, exploitable via SQL by a low-privileged network attacker with no user interaction required. Oracle classifies this as 'easily exploitable,' resulting in complete compromise of confidentiality, integrity, and availability. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity and full-takeover impact elevate real-world risk for any organization running the affected version.
Full system takeover of Oracle Hyperion Data Relationship Management 11.2.25.0.000 is achievable by low-privileged authenticated attackers over HTTP, with no interaction required beyond initial access. The vulnerability resides in the Access and Security component and results in complete compromise of confidentiality, integrity, and availability. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity and broad network accessibility make this a credible internal threat vector for any organization running the affected version.
Full takeover of Oracle Hyperion Data Relationship Management 11.2.25.0.000 is achievable by a low-privileged network attacker via HTTP, with confirmed impacts across confidentiality, integrity, and availability. The flaw resides in the Access and Security component, pointing to an authorization defect - likely privilege escalation or access control bypass - that allows any authenticated user to compromise the entire application. No public exploit has been identified at time of analysis, but the CVSS 8.8 score, low attack complexity, and Oracle's 'takeover' impact language make this a high-priority remediation target for organizations running financial master data management environments.
Full takeover of Oracle Application Testing Suite 13.3.0.1 is achievable by any low-privileged attacker holding the 'Load Testing for Web Apps' role via a network-accessible HTTPS vector. Oracle's own advisory classifies this as 'easily exploitable,' with complete confidentiality, integrity, and availability impact resulting in system compromise. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low complexity and broad CIA impact make this a credible priority for affected deployments.
Full system takeover in Oracle Hyperion Financial Management 11.2.25.0.000 is achievable by a low-privileged, network-authenticated attacker via the SQL interface targeting the Security component, with successful exploitation yielding complete confidentiality, integrity, and availability compromise. The CVSS 3.1 score of 8.8 reflects low attack complexity and no user interaction required, making exploitation straightforward for any attacker holding valid low-level credentials. No public exploit code has been identified and no CISA KEV listing is present at time of analysis, though the low barrier to exploitation warrants urgent patching for organizations running this version.
SQL-based network exploitation of Oracle Hyperion Financial Management 11.2.25.0.000 allows a low-privileged authenticated attacker to fully compromise the application, achieving complete confidentiality, integrity, and availability impact. The vulnerability resides in the Security component and is exploitable with low attack complexity and no user interaction required, making it a reliable attack path for any threat actor holding valid credentials. No public exploit code or active exploitation has been identified at time of analysis.
Full takeover of Oracle Risk Management (E-Business Suite versions 12.2.3-12.2.15) is achievable by any low-privileged authenticated user over HTTP, with no interaction from other parties required. The CVSS 3.1 score of 8.8 reflects complete confidentiality, integrity, and availability impact - Oracle's own advisory characterizes the outcome as system compromise. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity makes this a high-priority patch target for Oracle EBS deployments.
Full takeover of Oracle Hyperion Financial Reporting 11.2.25.0.000 is achievable by any low-privileged network attacker communicating via HTTPS, with complete confidentiality, integrity, and availability impact confirmed by a CVSS 3.1 score of 8.8. The vulnerability resides in the Server component and requires only minimal authenticated access, presenting a low barrier for insider threat or compromised-credential scenarios. Oracle formally disclosed and addressed this issue in its August 2026 Critical Security Patch Update; no public exploit code or CISA KEV listing has been identified at time of analysis.
Full system takeover in Oracle Essbase 21.8.1.0.0 is achievable by any low-privileged authenticated user with network access via HTTP, targeting the Calculator component. The CVSS 3.1 score of 8.8 reflects complete impact across confidentiality, integrity, and availability (C:H/I:H/A:H), consistent with Oracle's own classification of this as 'easily exploitable.' No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity and network vector make this a credible and accessible exploitation path for any valid account holder.
Full takeover of Oracle General Ledger (E-Business Suite versions 12.2.3-12.2.15) is achievable by a low-privileged, network-accessible attacker via HTTP, requiring no user interaction and minimal exploitation complexity. The vulnerability resides in the Internal Operations component and results in complete compromise of confidentiality, integrity, and availability of the General Ledger application. No public exploit code or active exploitation has been identified at the time of analysis, but the vendor's own 'easily exploitable' characterization combined with the broad affected version range makes this a high-priority patch for all Oracle EBS deployments.
Full system takeover of Oracle Reports Developer 12.2.1.19.0 is achievable by any low-privileged authenticated user with HTTP network access, exploiting a flaw in the Security and Authentication component of Oracle Fusion Middleware. Oracle classifies this as 'easily exploitable,' and the CVSS 3.1 score of 8.8 reflects complete confidentiality, integrity, and availability impact - effectively equivalent to administrative compromise of the affected instance. No public exploit code or active exploitation has been identified at time of analysis, but the low attack barrier significantly narrows the defender's window.
Full system takeover of Oracle Hyperion Infrastructure Technology 11.2.25.0.000 is achievable by a low-privileged attacker over HTTP, exploiting the Common Events component with no user interaction required. The CVSS 3.1 score of 8.8 reflects high confidentiality, integrity, and availability impact, consistent with the vendor's own characterization of the outcome as a complete system compromise. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and minimal privilege requirement make this a credible threat for any organization running the affected version.
Oracle Flow Manufacturing versions 12.2.3 through 12.2.15, a component of Oracle E-Business Suite, contains a vulnerability in its Internal Operations component that allows a low-privileged, network-authenticated attacker to fully compromise the system via HTTP with no user interaction required. The vendor characterizes this as 'easily exploitable,' and the CVSS 3.1 score of 8.8 reflects complete loss of confidentiality, integrity, and availability - constituting a full product takeover rather than the narrower 'Information Disclosure' tag in the intelligence metadata would suggest. No public exploit has been identified and the vulnerability is not listed in CISA KEV at time of analysis.
Full application takeover in Oracle Siebel CRM Cloud Applications (versions 22.3-26.6) is achievable by any low-privileged, network-accessible attacker via HTTP against the Siebel Cloud Manager component, with no user interaction required. Oracle classifies this as 'easily exploitable' and the CVSS vector confirms high impact across confidentiality, integrity, and availability - consistent with a complete system compromise. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and broad version range across four years of releases materially raises real-world risk for unpatched enterprise deployments.
Siebel Cloud Manager in Oracle Siebel CRM Cloud Applications exposes a network-accessible, low-complexity attack path that allows any low-privileged authenticated user to fully take over the application via HTTP. Affected versions span 22.3 through 26.6, a multi-year range covering a substantial portion of the deployed base. No public exploit has been identified at time of analysis; however, Oracle's own characterization of this as 'easily exploitable' and the complete C/I/A impact make this a high-priority remediation target from the August 2026 Critical Patch Update.
Full takeover of Oracle U.S. Federal Financials (versions 12.2.3 through 12.2.15) is achievable by a low-privileged attacker over HTTP, with successful exploitation resulting in complete compromise of confidentiality, integrity, and availability. The Internal Operations component within Oracle E-Business Suite exposes this attack surface to any authenticated network user, requiring no user interaction and no elevated permissions beyond a basic account. No public exploit or CISA KEV listing has been identified at time of analysis, though the low attack complexity and high impact make this a priority patching target for affected federal agencies.
Full platform takeover of Oracle Enterprise Manager Base Platform (versions 13.5 and 24.1) is achievable by any low-privileged attacker with HTTP access to the Application Config Console component. The CVSS 3.1 score of 8.8 with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H confirms low attack complexity, no user interaction, and full confidentiality, integrity, and availability impact - directly corroborated by Oracle's own characterization of the outcome as complete platform compromise. No public exploit has been identified at time of analysis, but Oracle has released a fix via the August 2026 Critical Security Patch Update.
Full takeover of Oracle Identity Manager (OIM) is achievable by any low-privileged, network-authenticated attacker exploiting a flaw in the OIM Legacy UI component of Oracle Fusion Middleware. Both actively supported versions - 12.2.1.4.0 and 14.1.2.1.0 - are affected, and the attack requires only HTTP network access with minimal credentials, yielding complete confidentiality, integrity, and availability compromise. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and high impact make this a high-priority patching target.
Full system takeover of Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 is achievable by a low-privileged attacker with network access over HTTP. The CVSS 8.8 score reflects high confidentiality, integrity, and availability impact with no user interaction required, classifying this as an easily exploitable, high-severity vulnerability within Oracle's Fusion Middleware portfolio. No public exploit has been identified at time of analysis, but Oracle's explicit use of 'takeover' language in the advisory indicates the potential for complete system compromise.
Full compromise of Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 is achievable by any low-privileged authenticated user with HTTP network access, requiring neither elevated rights nor user interaction. Oracle's own disclosure language characterizes this as 'easily exploitable,' and the resulting impact is described as complete system takeover - implying full loss of confidentiality, integrity, and availability. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, but the low attack barrier and critical business function of enterprise WCM platforms make this an immediate patching priority.
Full system takeover of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 is achievable by a low-privileged authenticated attacker over HTTP, with Oracle's own advisory characterizing the flaw as 'easily exploitable.' Successful exploitation yields complete compromise of confidentiality, integrity, and availability of the affected WebCenter Sites instance. No public exploit code or active exploitation has been confirmed at time of analysis, though the low attack complexity and severity of impact make this a high-priority remediation target.
Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 expose a full-takeover vulnerability that low-privileged, network-based attackers can exploit over HTTP without user interaction. Oracle's August 2026 Critical Patch Update characterizes this as 'easily exploitable,' with successful attacks achieving complete confidentiality, integrity, and availability compromise of the affected system. No public exploit code or CISA KEV active-exploitation listing has been identified at the time of analysis, but the low attack complexity combined with the severity of impact warrants urgent patching across all affected deployments.
Full system takeover of Oracle WebCenter Sites is achievable by a low-privileged, network-connected attacker via HTTP, with Oracle itself classifying this as 'easily exploitable.' Both currently supported versions - 12.2.1.4.0 and 14.1.2.0.0 - within the Oracle Fusion Middleware product line are confirmed affected, covering the entirety of the active install base. The CVSS 3.1 score of 8.8 (C:H/I:H/A:H) reflects complete compromise of confidentiality, integrity, and availability; no public exploit code or CISA KEV listing has been identified at the time of this analysis.
Full system takeover of Oracle SOA Suite is achievable by any low-privileged network attacker targeting the B2B Engine component via HTTP, with no user interaction required. Affected versions are 12.2.1.4.0 and 14.1.2.0.0, covering both the long-term supported and newer release trains of this enterprise middleware. The CVSS 3.1 score of 8.8 reflects high impacts across confidentiality, integrity, and availability - consistent with a complete compromise scenario. No public exploit or CISA KEV listing has been identified at time of analysis.
SQL-based exploitation in Oracle PeopleSoft Enterprise PeopleTools Configuration Manager (versions 8.61-8.63) enables a low-privileged authenticated attacker to achieve full system takeover over the network. The vulnerability is rated CVSS 8.8 High with complete Confidentiality, Integrity, and Availability impacts, and Oracle's own description characterizes it as 'easily exploitable.' No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and broad enterprise deployment footprint make this a credible priority for organizations running affected PeopleTools versions.
Full takeover of Oracle Siebel Apps - Marketing is achievable by any low-privileged attacker with network access via HTTP, affecting all supported versions from 17.0 through 26.6. The CVSS 3.1 score of 8.8 reflects complete compromise of confidentiality, integrity, and availability, meaning an attacker can read, modify, or destroy data and disrupt service entirely. No public exploit has been identified at time of analysis, but the low attack complexity and minimal privilege bar make this a realistic threat for any internet- or intranet-exposed Siebel Marketing deployment.
Full takeover of Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 is achievable by a low-privileged, network-authenticated attacker targeting the Composer component over HTTP. Oracle's own advisory characterizes the vulnerability as 'easily exploitable,' with high impact across confidentiality, integrity, and availability and no user interaction required. No public exploit or CISA KEV listing exists at time of analysis, but the combination of low attack complexity, low privilege requirement, and complete portal compromise warrants urgent patching priority for all affected deployments.
Remote network compromise of Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 enables a low-privileged authenticated attacker to achieve full system takeover via the Authentication Engine over HTTP, with no user interaction required. Oracle's August 2026 Critical Patch Update advisory rates this CVSS 8.8 (High) and explicitly describes it as 'easily exploitable,' with complete confidentiality, integrity, and availability impact. No public exploit code or active exploitation has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.
Full takeover of Oracle Identity Manager via its Legacy UI component is achievable by any low-privileged, network-authenticated attacker over HTTP. Affects Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0, with complete confidentiality, integrity, and availability impact - Oracle's own advisory characterizes the outcome as system takeover. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity (AC:L) and minimal privilege bar (PR:L) make this a realistic target once any authenticated foothold exists in an exposed OIM deployment.
Path traversal in 4gaBoards before version 3.3.8 allows authenticated project managers to read and then delete arbitrary files accessible to the server process through a crafted filename parameter in the export download endpoint. The vulnerability in `server/api/controllers/boards/download.js` passes unsanitized user input directly to `path.join()` without containment validation, enabling escape from the intended `private/exports/<user_id>/` directory. A compounding defect in the stream close handler passes the same traversal path to `fs.unlink()`, meaning each exploited download request also destroys the targeted file - combining exfiltration with irreversible data loss in a single HTTP request. No public exploit has been identified and the vulnerability is not listed in the CISA KEV catalog.
Use-after-free in the Browser component of Google Chrome on macOS prior to 151.0.7922.169 enables remote attackers to execute arbitrary code outside the sandbox. Exploitation requires social engineering to induce a user to visit a crafted HTML page, placing this in the user-interaction-required category. No public exploit code or CISA KEV listing has been identified at time of analysis, but the sandbox escape impact elevates real-world severity significantly.
Heap-based buffer overflow in Google Chrome's WebGL implementation (all versions prior to 151.0.7922.169) enables a remote attacker to execute arbitrary code outside the browser sandbox by luring a user to a crafted HTML page. The sandbox escape elevates the impact from renderer-level code execution to potential full OS-level compromise. No public exploit code or active exploitation has been identified at the time of analysis, but the SSVC technical impact rating is 'total,' reflecting the severity of successful exploitation.
Type confusion in V8, Chrome's JavaScript engine, enables arbitrary code execution inside the Chrome renderer sandbox on any platform (Windows, macOS, Linux) when a user visits an attacker-controlled HTML page. All Chrome releases prior to 151.0.7922.169 are affected; Google has released the patched stable-channel build. No public exploit code or active exploitation has been identified at time of analysis, though the SSVC framework rates technical impact as total within the sandbox boundary.
Remote unauthenticated takeover of Oracle Hospitality OPERA 5 Property Services (Opera Servlet component) is possible in versions 5.6.28.0 through 5.6.28.1 via HTTP, with an attacker requiring no privileges and only low attack complexity. The UI:R CVSS metric indicates exploitation depends on human interaction from a non-attacker party, consistent with client-side injection or CSRF-style attack patterns targeting hotel staff sessions. Full compromise of confidentiality, integrity, and availability is confirmed as the impact; no public exploit has been identified at time of analysis and the vulnerability is not currently listed in CISA KEV.
Full system takeover in Oracle Reports Developer 12.2.1.19.0 is achievable by unauthenticated remote attackers over HTTP, though exploitation requires human interaction from a victim user. The vulnerability resides in the Security and Authentication component of Oracle Fusion Middleware, and successful exploitation yields complete confidentiality, integrity, and availability compromise of the target instance. Oracle classifies the flaw as 'easily exploitable' in its August 2026 Critical Patch Update; no public exploit has been identified and the vulnerability is not listed in CISA KEV, meaning active exploitation is not confirmed at time of analysis.
Broken authentication in Atlassian Crowd Data Center 7.2.1 permits a remote, unauthenticated attacker to perform actions on behalf of any other user, effectively bypassing the platform's identity and session controls. The flaw was introduced specifically in version 7.2.1, discovered through Atlassian's Penetration Testing program, and carries a CVSS 4.0 score of 8.8 with scope-changing impact that cascades to all downstream SSO-federated applications. No active exploitation (CISA KEV) and no public exploit code have been identified at time of analysis, though the cross-system propagation potential demands urgent patching.
Type confusion in V8, Chrome's JavaScript engine, enables remote code execution within the browser sandbox against users running Chrome prior to 151.0.7922.169. An unauthenticated remote attacker can trigger the vulnerability by luring a victim to a crafted HTML page, making this a drive-by exploitation scenario requiring only a single user interaction. Google has released a patch in stable channel version 151.0.7922.169; no public exploit or CISA KEV listing has been identified at time of analysis, though SSVC rates the technical impact as total.
Remote code execution within the Chrome renderer sandbox is achievable against all Chrome versions prior to 151.0.7922.169 by delivering a crafted HTML page to a victim user. The root cause is an incorrect arithmetic or numeric calculation in V8, Chrome's JavaScript engine, which can be triggered purely through JavaScript execution in a standard browsing session. No public exploit code or CISA KEV listing has been identified at time of analysis, but the CVSS score of 8.8 and the universality of Chrome's user base make this a high-priority patching candidate.
Integer overflow in Dragonfly's Count-Min Sketch implementation prior to v1.40.0 allows unauthenticated remote clients to corrupt adjacent heap memory, partially disclose heap contents, and crash the server. The flaw exists in src/core/cms.cc: CMS.INITBYDIM and CMS.INITBYPROB accept width/depth parameters whose product with sizeof(int64_t) overflows size_t, causing the allocator to receive a truncated length and produce an undersized buffer; CMS.INCRBY and CMS.QUERY then operate with the original large dimensions, writing and reading past the end of that buffer. No public exploit code has been identified at time of analysis, but the CVSS 4.0 vector confirms unauthenticated network exploitation with no preconditions, rating this 8.8.
Insecure Direct Object Reference in Vvveb CMS prior to 1.0.8.4 allows any authenticated low-privileged Vendor to read, duplicate, or delete products belonging to other Vendors by submitting arbitrary product_id values in backend product operations. The root cause is that the products.php controller passes caller-controlled product_id values to SQL operations without consistently enforcing admin_id scoping - the fix required adding conditional admin_id filtering across six DELETE statements in both MySQL and PostgreSQL query files. No public exploit code has been identified and this CVE is not listed in the CISA KEV catalog, but the low exploitation complexity makes it a meaningful business-logic risk for any multi-vendor Vvveb deployment.
Broken object-level authorization in Vvveb CMS prior to 1.0.8.4 allows an authenticated low-privilege Vendor to access, modify, or delete digital assets belonging to any other Vendor by supplying arbitrary digital_asset_id values to the admin digital asset controllers. The flaw spans listing, read, edit, and delete operations across both MySQL and PostgreSQL backends, enabling cross-tenant metadata disclosure, resource link corruption, and permanent data loss. No public exploit code or CISA KEV listing exists at time of analysis, but exploitation is technically trivial for any authenticated Vendor in a multi-vendor deployment.
Broken object-level authorization in authentik's enterprise Remote Access Control (RAC) module exposes every configured RDP, SSH, and VNC endpoint - including stored connection credentials - to any authenticated user, irrespective of their assigned application access. Versions prior to 2026.2.6 and 2026.5.5 are affected; the flaw exists in both the endpoint listing API (which omits per-user access filtering) and the connection initiation flow (which does not validate that the requested endpoint belongs to the application through which the user is launching). No public exploit has been identified at time of analysis, though the attack requires only a valid authentik account and delivers full interactive access to infrastructure the attacker was never authorized to reach.
Oracle Call Center Technology versions 12.2.3 through 12.2.15, a component of Oracle E-Business Suite, exposes a flaw in the Internal Operations component that allows a low-privileged authenticated network attacker to fully compromise the affected system via HTTP. The vendor-assigned CVSS 3.1 score of 8.8 reflects high impact across confidentiality, integrity, and availability - consistent with the described 'takeover' outcome. No public exploit code has been identified at time of analysis, and this vulnerability does not appear in the CISA KEV catalog.
Full system takeover of Oracle Work in Process (Oracle E-Business Suite versions 12.2.3 through 12.2.15) is achievable by a low-privileged, network-authenticated attacker via HTTP, with no user interaction required. The Internal Operations component contains an easily exploitable flaw that yields complete compromise of confidentiality, integrity, and availability - consistent with an application-level takeover. No public exploit or active exploitation has been identified at time of analysis; a vendor patch was released as part of the Oracle Critical Patch Update (CPU) August 2026.
Full takeover of Oracle Virtual Directory (versions 12.2.1.4.0 and 14.1.2.0.0) is achievable by low-privileged network attackers via the LDAP protocol with no user interaction required. Oracle classifies this as 'easily exploitable,' and the CVSS 3.1 score of 8.8 reflects complete confidentiality, integrity, and availability compromise of the Virtual Directory Server. No public exploit code has been identified at time of analysis, and the vulnerability is not currently listed in the CISA KEV catalog, though the combination of network accessibility, low attack complexity, and low privilege requirement makes this a credible priority for Oracle Fusion Middleware environments.
Privilege escalation via incorrect boundary conditions in Firefox's Graphics: CanvasWebGL component allows remote attackers to achieve high-impact code execution by luring users to a crafted web page. The flaw affects all Firefox releases prior to version 154 and multiple ESR branches (115.x, 140.x, 153.x), making the exposure broad across both consumer and enterprise deployments. No active exploitation has been confirmed (SSVC: Exploitation: none), but the CVSS 8.8 score and total technical impact classification warrant prompt patching.
Privilege escalation in Firefox's CanvasWebGL graphics component affects all Firefox releases prior to version 154 and both active ESR branches, enabling a remote attacker to gain full control over confidentiality, integrity, and availability within the browser process. The flaw stems from improper privilege management (CWE-269) in the WebGL canvas rendering pipeline, exploitable by luring a victim to a crafted web page - no authentication or special software is required beyond a standard Firefox installation. No public exploit code or active exploitation has been identified at time of analysis; however, Mozilla issued three simultaneous security advisories (MFSA2026-74/76/77) addressing all supported release tracks, signaling broad internal severity.
Use-after-free memory corruption in Firefox's Canvas2D graphics component enables privilege escalation against any unpatched browser version. Remote unauthenticated attackers can achieve full confidentiality, integrity, and availability impact by delivering a malicious web page to a victim using Firefox prior to version 154 (stable) or the affected ESR releases. No public exploit identified at time of analysis, but the memory corruption class and low attack complexity make this a high-priority patch for both consumer and enterprise Firefox deployments.
Pre-account takeover in 4gaBoards before 3.3.8 allows a remote unauthenticated attacker to seize a victim's account before the victim ever logs in, by exploiting the SSO identity-linking logic. An attacker registers an unverified local account using the victim's email address; when the victim subsequently logs in via Google, GitHub, Microsoft, or OIDC SSO, the server locates the attacker's pre-registered account by email and links the verified SSO identity to it without confirming local account ownership, granting the attacker persistent password access to the now-SSO-linked account and all associated projects and data. No public exploit code or CISA KEV listing has been identified at time of analysis; the CVSS 8.8 score reflects the low attack complexity and high impact once victim interaction occurs.
Full compromise of Oracle Hyperion Financial Management version 11.2.25.0.000 is achievable by low-privileged network attackers via HTTP, targeting the Security component to gain complete control over confidentiality, integrity, and availability. The CVSS 3.1 score of 8.8 reflects the combination of network accessibility, low attack complexity, and no user interaction required beyond a valid low-privilege account. No public exploit code or CISA KEV listing has been identified at time of analysis, though the severity of the stated outcome - full system takeover - warrants immediate patch application.