Out-of-bounds memory read in BlueZ's AVRCP implementation allows a physically proximate attacker - within Bluetooth radio range - to crash the bluetoothd daemon and potentially leak heap memory contents by sending a malformed GetFolderItems response. The flaw resides in parse_media_element() and parse_media_folder(), which fail to validate packet length fields before reading. Exploitation requires the victim to interactively pair with the attacker-controlled malicious Bluetooth device. No public exploit code or CISA KEV listing has been identified at time of analysis.
Oracle Commerce Guided Search and Experience Manager version 11.4.0 exposes a local confidentiality vulnerability in its Content Acquisition System (CAS) component that allows an unauthenticated infrastructure-level attacker to bypass application-layer authentication and obtain complete read access to all Oracle Commerce accessible data, including critical confidential records. The scope change designation in the CVSS vector (S:C) indicates successful exploitation can cascade beyond the Commerce platform itself, impacting additional co-located or integrated products. No public exploit code has been identified at time of analysis, and EPSS data was not provided in the source intelligence.
Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 allows a local attacker without Hyperion-level credentials to gain unauthorized read and write access to critical Hyperion data through a flaw in the Installation and Configuration component. Exploitation requires physical or logical presence on the infrastructure host and successful social engineering of a legitimate user to trigger the vulnerable condition, consistent with the CVSS 3.1 vector AV:L/AC:H/UI:R. No public exploit has been identified and the vulnerability is not listed in CISA KEV, though the high confidentiality and integrity impacts are significant for environments where Hyperion hosts sensitive financial or enterprise planning data.
Full system compromise of Oracle Agile Engineering Data Management 6.2.1 is possible through a flaw in the Engineering Communication Interface (ECI) component, but only under a confluence of highly restrictive conditions - local infrastructure access, high privileges, high attack complexity, and mandatory third-party user interaction. The CVSS base score of 6.3 (Medium) reflects these compounding constraints despite a full confidentiality, integrity, and availability impact. No public exploit code and no active exploitation (CISA KEV) have been identified at time of analysis.
Stored cross-site scripting in Forem's admin abuse-report panel allows a remote unauthenticated attacker to execute arbitrary JavaScript in an administrator's browser. The public FeedbackMessagesController previously accepted an attacker-supplied offender_id parameter, which caused the unsanitized message field to be rendered via Rails' raw() helper when an administrator views the flagged report - exposing CSRF tokens, session data, and enabling unauthorized administrative actions. No public exploit has been identified at time of analysis, but the attack path is technically straightforward and targets a routine administrative workflow that reliably delivers the payload.
Stored cross-site scripting in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to inject persistent malicious JavaScript into the user documentation field, which then executes in the browsers of any users who view the affected content. The CVSS scope-change indicator (S:C) confirms that impact propagates beyond the injecting session to other authenticated users, enabling session hijacking, credential theft, or UI redressing. No public exploit confirmation or KEV listing is present, but a detailed researcher disclosure on GitHub (cert-rit, January 2026) documents the stored variant specifically.
Oracle Hyperion Infrastructure Technology 11.2.25.0.000 exposes a network-accessible vulnerability in its Common Security component that permits unauthenticated remote attackers to compromise data confidentiality and integrity via HTTP, provided a victim user interacts with attacker-controlled content. The CVSS scope-change designation (S:C) indicates successful exploitation can extend impact to additional Oracle Hyperion products sharing the same infrastructure. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the 'Authentication Bypass' tag in the intelligence data warrants attention as it may signal higher practical impact than the Medium CVSS score implies.
Cross-site scripting or client-side injection in Oracle Helidon 4.5.0's Imperative Web Server component enables unauthenticated, network-accessible attacks that produce partial confidentiality and integrity impacts while extending harm to additional products through a scope change. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) is the canonical fingerprint of reflected or stored XSS - an attacker delivers a crafted HTTP payload that, once interacted with by a victim user, executes within a different security scope such as a browser session. No public exploit code has been identified and this CVE does not appear in the CISA Known Exploited Vulnerabilities catalog; Oracle disclosed it through the August 2026 Critical Patch Update.
Cross-site scripting in Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 enables unauthenticated remote attackers to compromise victim sessions via HTTP. The attack requires human interaction - a victim must trigger the malicious request - and exploits the Internal operations component in a way that causes a scope change, meaning successful exploitation can affect resources beyond the vulnerable component itself (consistent with browser-context hijacking). Impact is limited to partial confidentiality and integrity loss: unauthorized read access to a subset of accessible data and unauthorized write/insert/delete on some accessible data; no availability impact is present. No public exploit or CISA KEV listing has been identified at time of analysis.
Oracle Hyperion Infrastructure Technology 11.2.25.0.000 exposes a network-exploitable flaw in its Installation and Configuration component that allows unauthenticated remote attackers to partially compromise confidentiality and integrity. The scope change (S:C) in the CVSS vector, combined with the UI:R requirement and 'Authentication Bypass' tag, strongly suggests a client-side injection class vulnerability - likely cross-site scripting or request forgery - capable of affecting components beyond the directly targeted product. No public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated network exploitation of Oracle Hyperion Financial Reporting 11.2.25.0.000 allows remote attackers to perform unauthorized read and write operations against application data by inducing a victim user to interact with attacker-controlled content. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) is characteristic of a client-side injection class - most likely Cross-Site Scripting - where the scope change metric indicates that successful exploitation extends impact beyond the immediate Hyperion application to additional products sharing the same session or trust context. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.
Unauthorized read and write access to Oracle Hyperion Financial Reporting 11.2.25.0.000 data is achievable by unauthenticated remote attackers via HTTP, provided a victim authenticated user interacts with attacker-controlled content. The attack achieves a scope change - impacting components beyond the directly targeted server - yielding limited confidentiality exposure and insert/update/delete capability against accessible Financial Reporting data. No public exploit has been identified at time of analysis; Oracle addressed this in the August 2026 Critical Patch Update.
Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 exposes a network-accessible vulnerability in its Installation and Configuration component that unauthenticated remote attackers can leverage via HTTP, but only with a victim's interaction, to perform unauthorized read and write operations against accessible data while also impacting additional products through a scope change. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) combined with the 'Authentication Bypass' tag and scope change is consistent with a client-side injection pattern - likely cross-site scripting or a similar reflective attack surface in the web-facing installation or configuration interface. No public exploit code has been identified at time of analysis, and exploitation has not been confirmed by CISA KEV.
Reflected XSS in reportico-web 8.1.0 and earlier allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by luring them to a crafted URL targeting the run.php endpoint with a malicious payload in the loadTemplate parameter combined with execute_mode=PREPARE. The CVSS vector (PR:N, S:C, UI:R) confirms no authentication is required from the attacker, though user interaction is needed, and the attack scope crosses into the victim's browser context. A public vulnerability research repository exists for this CVE, suggesting exploit code is likely available; no confirmed active exploitation via CISA KEV at time of analysis.
Reflected XSS in Reportico Web (versions up to and including 8.1.0) enables remote unauthenticated attackers to inject and execute arbitrary JavaScript in a victim's browser by crafting a malicious URL with a payload in the `reportico_criteria` parameter combined with `execute_mode=CRITERIA` on `run.php`. A public proof-of-concept is available per SSVC data, though no active exploitation is confirmed in CISA KEV. Successful exploitation requires social engineering the victim into clicking a crafted link, enabling session hijacking, credential theft, or malicious in-browser actions.
Unauthorized read and write access to Helidon-accessible data is possible through the Imperative Web Server component in Oracle Helidon 3.2.19 via a network-deliverable HTTP attack that requires victim interaction. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) with scope change is characteristic of a client-side injection vulnerability such as Cross-Site Scripting or CSRF, where the attack crosses a scope boundary to impact resources or systems beyond the Helidon process itself. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV at time of analysis; Oracle disclosed it via the August 2026 Critical Patch Update.
Cross-site scripting or authentication bypass in Oracle Helidon 4.1 Imperative Web Server (version 4.5.0) allows unauthenticated remote attackers to perform unauthorized read and write operations against Helidon-accessible data, with scope change extending impact to additional dependent products. Exploitation requires victim interaction, consistent with a reflected XSS or similar client-side injection pattern in the HTTP server component. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and zero-privilege requirement make this accessible to unsophisticated attackers once a victim is lured.
Cross-site scripting or equivalent client-side injection in Oracle Helidon 3.2.18's Imperative Web Server component allows unauthenticated remote attackers to compromise confidentiality and integrity of Helidon-accessible data when a victim user interacts with attacker-controlled content. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) is a canonical XSS fingerprint - scope change combined with user interaction and partial C/I impact - despite the 'Authentication Bypass' tag in the intelligence metadata, which may indicate a secondary or misclassified characteristic. No public exploit code or CISA KEV listing has been identified at time of analysis.
Cross-site scripting or injection via the Endeca Application Controller in Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 allows an unauthenticated remote attacker to cause unauthorized read and write access to data by luring a victim user to interact with a malicious HTTP request. The CVSS scope change (S:C) signals that a successful exploit extends impact beyond the vulnerable component itself - consistent with browser-context compromise such as session theft or UI redress, which aligns with the 'Authentication Bypass' tag. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Cross-site scripting (or equivalent client-side injection) in the Endeca Application Controller component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 allows unauthenticated remote attackers to perform unauthorized read and write operations against Commerce data by luring an authenticated user into interacting with a malicious HTTP request. The scope change (S:C) in the CVSS vector confirms that a successful attack can extend impact beyond the targeted component to additional Oracle products or browser contexts. No public exploit identified at time of analysis, and no CISA KEV listing; Oracle disclosed and patched this issue in the August 2026 Critical Patch Update.
Cross-site scripting (XSS) class vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 allows unauthenticated remote attackers to compromise confidentiality and integrity of data by delivering a crafted HTTP payload that requires victim interaction. The scope change indicator in the CVSS vector (S:C) confirms that successful exploitation impacts resources beyond the directly vulnerable component - consistent with browser-context script execution affecting adjacent systems or sessions. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and absence of authentication requirements make this accessible to unsophisticated attackers once a suitable delivery mechanism is established.
Cross-site scripting (XSS) in Oracle Commerce Guided Search / Experience Manager 11.4.0 allows a remote unauthenticated attacker to inject malicious content into a victim's browser session via a crafted HTTP request, requiring the victim to interact with a manipulated link or page. The scope change in the CVSS vector (S:C) indicates the attack can affect browser context outside the vulnerable component, enabling session token theft or unauthorized data modification within the application. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Cross-site scripting or client-side injection in Oracle Commerce Experience Manager 11.4.0 enables unauthenticated remote attackers to compromise confidentiality and integrity of affected deployments through HTTP-delivered attacks requiring victim interaction. The scope change indicator in the CVSS vector confirms that successful exploitation can impact resources beyond the directly vulnerable component, consistent with session theft or content injection affecting downstream users. No public exploit code or CISA KEV listing has been identified at time of analysis, though Oracle's August 2026 Critical Patch Update addresses this in a quarterly advisory cycle.
Cross-site scripting conditions in Oracle Commerce Guided Search / Experience Manager 11.4.0 allow an unauthenticated remote attacker to compromise victim sessions through a crafted HTTP request that requires human interaction to trigger. The vulnerability carries a scope change, extending impact beyond the directly vulnerable component to data accessible within the victim's authenticated browser context, enabling unauthorized read and limited data modification. The vulnerability is absent from the CISA KEV catalog and no public exploit code has been identified at the time of analysis.
Local access exploitation in Oracle Hyperion Financial Management 11.2.25.0.000 enables authenticated low-privileged users with host logon rights to bypass Security component access controls and gain unauthorized read access to all HFM-accessible financial data, plus limited write capability. The vulnerability is tagged as an Authentication Bypass within the Security component itself - not a peripheral feature - meaning the core authorization enforcement mechanism is circumvented. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and realistic insider-threat scenario make this actionable for organizations running HFM on-premises.
Header spoofing in fastify 5.8.3 through 5.12.0 persists despite the prior CVE-2026-3635 patch because the numeric trustProxy form compiles to a hop-count predicate that structurally ignores the connecting address, rendering the guard introduced by the earlier fix completely ineffective for this configuration. An attacker who can reach the Fastify origin server directly - bypassing the front-facing reverse proxy - can forge X-Forwarded-For, X-Forwarded-Host, and related fields that fastify uses to derive request.ip, request.hostname, request.host, and request.protocol, enabling host injection in generated URLs, HTTPS-enforcement bypass, secure-cookie and CSRF-origin spoofing, and host-based routing and cache poisoning. No public exploit has been identified at time of analysis; the vendor-released fix is fastify 5.12.1, which disables the numeric trustProxy form entirely.
Oracle VM VirtualBox 7.2.14 (Core component) is affected by a locally exploitable vulnerability that allows a low-privileged, unauthenticated local user to cause a complete denial of service - a hang or repeatable crash - of the hypervisor, as well as unauthorized modification of a subset of its accessible data. Exploitation requires physical or logical local access to the host infrastructure and human interaction from a separate user (e.g., a legitimate VirtualBox user performing a VM operation). No public exploit code has been identified and this vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog at time of analysis.
Local exploitation of Oracle Helidon 4.5.0's Imperative Web Server component enables a low-privileged attacker with infrastructure logon to bypass authentication controls and gain unauthorized access to all data accessible by the Helidon process, with limited write capability. Confirmed by Oracle's Critical Patch Update for August 2026 and corroborated by EUVD-2026-62096, this carries a CVSS 3.1 score of 6.1. No public exploit code or active exploitation has been identified at time of analysis.
Credential disclosure in Python's urllib.request HTTPPasswordMgr class family enables scheme-downgrade attacks that expose HTTPS-registered credentials over plaintext HTTP. Any Python application using HTTPPasswordMgr, HTTPPasswordMgrWithDefaultRealm, or HTTPPasswordMgrWithPriorAuth that stores credentials with scheme-qualified https:// URLs is affected: an attacker able to intercept traffic or inject a redirect can force the client to transmit those credentials over an unencrypted HTTP connection. No public exploit code has been identified at time of analysis, and CISA KEV listing is absent, but the attack is conceptually straightforward for an on-path adversary.
Server-Side Request Forgery in FUXA 1.3.2 and earlier allows authenticated non-admin runtime users to weaponize the FUXA server as an outbound HTTP proxy, reading responses from internal services and cloud metadata endpoints. The vulnerability exists in the device-webapi-request Socket.IO handler, which applies no ownership or allowlist validation to the user-controlled property.address parameter before issuing the request. Patch is available as of version 1.3.3; no public exploit code or CISA KEV listing identified at time of analysis.
Zabbix's API host.get action exposes PSK (Pre-Shared Key) credential material to authenticated low-privileged users, allowing extraction of secrets used to secure TLS-encrypted communications between the Zabbix server and monitored agents. Any authenticated API user can query host.get and retrieve PSK values configured on hosts, undermining the confidentiality of those credentials and the integrity of the monitoring infrastructure they protect. No public exploit has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog.
Server-Side Request Forgery in the Aotuman Grab WeChat Articles WordPress plugin (versions <= 2.0.1) allows low-privileged authenticated users at the subscriber role to force the WordPress server to issue arbitrary HTTP requests to attacker-controlled destinations, including internal network hosts. The CVSS Scope:Changed metric confirms the vulnerability can reach resources outside the WordPress application boundary, such as cloud metadata endpoints or internal services. No public exploit code has been identified at time of analysis, and the vulnerability has not been listed in the CISA KEV catalog.
Oracle VM VirtualBox 7.2.14 Core component contains a vulnerability that allows a high-privileged local attacker to breach VM isolation boundaries and access all confidential data accessible to VirtualBox, including data from guest virtual machines. The CVSS scope-change metric (S:C) confirms that successful exploitation extends impact beyond the VirtualBox process itself, enabling unauthorized read access to critical data across VM boundaries. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present, but the EUVD 'Authentication Bypass' tag suggests the vulnerability may undermine guest-level authentication or isolation enforcement mechanisms.
Confidentiality compromise in Oracle VM VirtualBox 7.2.14 Core component allows a locally authenticated, high-privileged attacker to access all data reachable by the VirtualBox process and breach isolation boundaries to impact additional products via scope change. The 'Authentication Bypass' tag supplied by the reporter suggests an internal access-control bypass within VirtualBox's security model that extends an attacker's data reach beyond their normally authorized scope. No public exploit code or active exploitation has been confirmed at time of analysis.
Unauthorized data access and modification in Oracle Cash Management (versions 12.2.3 through 12.2.15) is achievable by a high-privileged attacker with local logon access to the host infrastructure where the application executes. Exploitation allows complete read access and write or delete control over critical Cash Management data, covering both confidentiality and integrity at a High impact level with no availability component. No public exploit code has been identified at time of analysis, and this vulnerability does not appear in the CISA Known Exploited Vulnerabilities catalog.
Oracle VM VirtualBox 7.2.14 Core component allows a high-privileged local attacker to trigger a complete denial-of-service condition - causing a hang or frequently repeatable crash of the hypervisor - with a confirmed scope change that can significantly impact additional products beyond VirtualBox itself, likely the host operating system or co-resident guest VMs. The vulnerability is exploitable by an attacker with administrator-level access already present on the host infrastructure, making it most relevant in multi-tenant or shared virtualization environments where privileged-but-not-hypervisor-owner threat actors are a realistic model. No public exploit code or CISA KEV listing has been identified at time of analysis.
Oracle VM VirtualBox 7.2.14 Core component allows a high-privileged local attacker to cause a complete denial of service - hang or repeatable crash - with a scope change that can impact additional products beyond VirtualBox itself, such as guest virtual machines sharing the same host. The vulnerability is locally-triggered and requires existing privileged access to the infrastructure, limiting opportunistic exploitation. No public exploit code and no CISA KEV listing have been identified at time of analysis, and EPSS data was not available in the provided intelligence.
Oracle Hyperion Financial Management 11.2.25.0.000 exposes a local security-component flaw that grants a high-privileged infrastructure user unauthorized read and write access to all application data, including critical financial records. Despite requiring existing high privileges, the 'Authentication Bypass' tag signals that the Security component likely fails to enforce intra-application authorization boundaries, enabling privilege escalation within the product beyond the attacker's sanctioned scope. No public exploit code has been identified, and the vulnerability is not listed in the CISA KEV catalog at time of analysis.
Oracle VM VirtualBox 7.2.14 contains a local privilege-escalation-to-DoS flaw in the Core component that allows a highly privileged host user to repeatedly crash or hang the hypervisor, with scope change meaning hosted guest VMs are also disrupted. The attack requires local logon and high privileges on the host infrastructure, substantially limiting the attacker pool to insiders or already-compromised privileged accounts. No public exploit code or active exploitation has been identified at time of analysis; EPSS data was not provided.
Oracle VM VirtualBox 7.2.14 Core component exposes a locally exploitable denial-of-service condition that can be triggered by a high-privileged attacker with logon access to the host infrastructure. Exploitation results in a complete, repeatably triggerable crash or hang of the VirtualBox process, with scope change indicated - meaning the disruption can cascade to guest virtual machines and other co-hosted workloads. No public exploit code exists and no active exploitation has been identified at time of analysis.
Privilege escalation and denial of service in Dell Alienware Command Center (AWCC) versions prior to 6.14.20.0 are achievable by a local low-privileged attacker exploiting a link-following flaw in the application's privileged file access routines. The vulnerability allows an attacker to substitute a symbolic link or directory junction between the time AWCC resolves a filesystem path and the time it performs a privileged file operation, redirecting that operation to an arbitrary location. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA Known Exploited Vulnerabilities catalog; Dell has released a patched version per advisory DSA-2026-334.
Integrity-bypassing authentication flaw in Oracle Helidon 4.5.0's Imperative Web Server component allows unauthenticated remote attackers to create, delete, or modify critical application data via HTTP, despite requiring high attack complexity to trigger. The CVSS vector (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) confirms the attack is network-reachable without credentials but is gated behind difficult-to-replicate exploitation conditions. No active exploitation has been confirmed (no CISA KEV listing), and no public exploit code has been identified at time of analysis.
Authentication bypass in Oracle Helidon 3.2.19 Imperative Web Server exposes critical data to unauthenticated network attackers via HTTP. The flaw, tagged as an Authentication Bypass by the reporter, allows a remote attacker without credentials to gain complete read access to all data accessible by the Helidon server instance. No public exploit code or active exploitation has been identified at time of analysis; however, the high confidentiality impact warrants timely patching in any environment running this specific version.
Authentication bypass in Oracle Hyperion Calculation Manager 11.2.25.0.000 allows a remote unauthenticated attacker to compromise data confidentiality and integrity via a network-delivered HTTP attack that requires victim interaction. Successful exploitation yields complete read access to all data accessible by the Calculation Manager and limited write capability (insert, update, delete) against a subset of that data. No active exploitation has been confirmed in CISA KEV and no public exploit code has been identified at time of analysis, but the tagging of this vulnerability as an Authentication Bypass in the Security component, combined with the high confidentiality impact, makes it a meaningful risk for organizations running Oracle Hyperion environments.
Oracle Hyperion Financial Reporting version 11.2.25.0.000's Server component contains an authentication bypass flaw exploitable by unauthenticated remote attackers over HTTP, as tagged directly by Oracle in their August 2026 Critical Patch Update. Successful exploitation - which demands both high attack complexity and human interaction from a legitimate user - yields complete read access to all data accessible within the Financial Reporting server, plus limited write capability (insert, update, delete) over some records. No public exploit code has been identified at time of analysis; exploitation complexity and the mandatory victim interaction requirement meaningfully constrain opportunistic or automated campaigns.
Authentication bypass in Oracle Agile PLM MCAD Connector 3.6 (CAX Client component) exposes critical PLM data to unauthenticated attackers who have physical adjacency to the network segment where the connector hardware operates. The vulnerability enables unauthorized read access to all connector-accessible data and limited write access, scored CVSS 5.9 Medium due to the adjacent-network attack vector and high complexity constraints. No public exploit code or CISA KEV listing has been identified at time of analysis.
Stored Cross-Site Scripting in the PublishPress Series WordPress plugin (versions through 2.17.0) allows a high-privileged attacker to persist malicious JavaScript payloads that execute in victims' browsers when affected content is viewed. The scope change in the CVSS vector confirms the injected script crosses trust boundaries, affecting users beyond the administrative context where the payload was stored. No public exploit code or CISA KEV listing exists at time of analysis, placing this in the category of moderate, authenticated risk.
Cleartext storage of a long-lived broker service account bearer token in the Submariner Custom Resource specification exposes full mesh network control to any Kubernetes principal with CR read access. Red Hat Advanced Cluster Management for Kubernetes 2 (RHACM 2) is confirmed affected via CPE. An attacker who retrieves the token - through a routine `kubectl get` invocation or direct etcd access - gains unrestricted authority to manage Submariner endpoints, secrets, and cross-cluster network resources, constituting a complete compromise of the multi-cluster network plane. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Cleartext storage of sensitive information in Cryptosim exposes confidential data to authenticated adjacent-network attackers across all versions before 3.1.0.229. Discovered and reported by TR-CERT (Turkish national cybersecurity authority), the flaw (CWE-312) allows any low-privileged user with adjacent network access to retrieve embedded sensitive data that the application should protect through encryption. No active exploitation is confirmed at time of analysis, and no public proof-of-concept code has been identified.
Oracle VM VirtualBox 7.2.14 contains a locally exploitable flaw in its Core component that grants high-privileged local attackers partial read, write, and denial-of-service capabilities, with a confirmed scope change meaning the impact can extend to products or components beyond VirtualBox itself. The vulnerability is described as 'easily exploitable' by Oracle, though the high privilege and local access requirements substantially constrain the realistic attacker pool. No public exploit code or CISA KEV listing has been identified at time of analysis.