Insufficient entropy in IBM PowerVM Hypervisor hypervisor calls enables a local administrator to decrypt encrypted data across affected firmware branches. Specific hypervisor API calls provide less randomness than the caller requests, weakening cryptographic operations that depend on that entropy pool. The CVSS scope-changed rating (S:C) indicates that exploitation can breach isolation boundaries, potentially exposing encrypted data belonging to guest partitions or other components beyond the attacker's own domain. No public exploit code or CISA KEV listing has been identified at time of analysis.
IBM PowerVM Hypervisor across firmware branches FW1060, FW1110, and FW1120 contains a format string vulnerability (CWE-134) that enables a local attacker with high-privilege access to extract sensitive hypervisor memory or trigger a denial-of-service condition crashing the hypervisor and all hosted virtual machines. The attack requires local presence, high privileges, and high attack complexity, confining realistic risk to insider threat or post-compromise scenarios. No public exploit code or active exploitation has been identified at time of analysis; IBM has confirmed a patch is available.
Denial of service in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 can be triggered by a remote, unauthenticated attacker exploiting an uninitialized stack pointer (CWE-908), leading to system unavailability. The CVSS vector scores high attack complexity (AC:H), indicating that successful exploitation requires specific conditions or timing rather than a straightforward network request. No public exploit code has been identified at time of analysis, and the vulnerability has not been added to the CISA Known Exploited Vulnerabilities catalog.
Unauthenticated ReDoS in Splunk Connect for Kafka below version 2.2.7 allows a network-accessible attacker to permanently block a Kafka Connect worker thread by submitting a pathological regular expression via the Kafka Connect REST API, which - when triggered by attacker-supplied or coincident matching event data during timestamp extraction - causes the regex engine to backtrack catastrophically without bound. The practical result is complete stoppage of event delivery for the targeted connector, constituting a targeted denial-of-service against Splunk data ingestion pipelines. No public exploit code or CISA KEV listing exists at time of analysis; the CVSS AC:H rating reflects the two-condition prerequisite, moderating the net risk score to 5.9 Medium despite the unauthenticated network vector.
Splunk Connect for Kafka below version 2.2.7 contains an uncontrolled resource consumption flaw in its HTTP Event Collector retry mechanism, enabling an unauthenticated network attacker who can also manipulate HEC endpoint responses to trigger an infinite retry loop that permanently halts Kafka-to-Splunk event delivery. The vulnerability arises because the connector applies an unbounded default retry count for failed HEC batches rather than a finite limit, causing the connector to stall indefinitely when fed persistent failure responses. No active exploitation has been confirmed - the vulnerability is not in CISA KEV - and no public exploit code has been identified at time of analysis.
Unauthenticated model content injection in Splunk AI Toolkit below 6.0.0 allows an authenticated attacker with model upload privileges to overwrite another user's in-progress model upload by racing concurrent requests to the same model name, causing the resulting model lookup entry to reference attacker-controlled content. The root cause is the toolkit's failure to bind uploaded file content to the specific request that creates the corresponding model lookup entry, enabling a TOCTOU-style substitution. No public exploit code or CISA KEV listing has been identified; the vendor (Splunk) has released a patch in version 6.0.0.
Incomplete assistant authorization in langgraph-api (LangGraph Server) versions before 0.10.0 allows an authenticated low-privileged user to bypass ownership controls during run creation and access private assistants belonging to other users. The flaw arises because the run-creation code path dispatched the wrong authorization event (`assistants.search` instead of `assistants.read`), causing custom auth handlers registered only for `assistants.read` to be silently bypassed, the ownership filter to be omitted from the database query, and sensitive assistant `metadata`, `config`, and `context` to be returned in plaintext via the API response. No public exploit code exists and the vendor reports no evidence of exploitation in the wild.
LangGraph Server (langgraph-api < 0.10.0) allows an authenticated user to bypass per-user authorization by specifying a relative webhook URL when creating a run or cron job, enabling cross-user thread access in multi-tenant deployments. The server's webhook delivery subsystem routes relative targets through an in-process loopback transport that the authentication middleware treats as internal and exempts from authentication, allowing the request to execute against another user's thread routes without the originating user's authorization context. No public exploit code exists and no active exploitation has been identified; the vendor explicitly states no evidence of this behavior occurring in the wild.
Out-of-bounds memory access in FFmpeg's AV1 RTP packetizer (libavformat/rtpenc_av1.c) is triggered by an integer narrowing conversion that sign-flips large OBU size values on platforms where C `long` is 32 bits, most critically 64-bit Windows builds. The sign-flipped negative value passes a payload size bounds check, causing a subsequent oversized copy operation and out-of-bounds memory access that can crash the application or - with additional exploit primitives - be leveraged for memory corruption. All FFmpeg versions prior to upstream commit b4c199c are affected on vulnerable platforms; the upstream fix is committed but no specific tagged release has been independently confirmed. No public exploit has been identified at time of analysis.
OS command injection in chenhg5 cc-connect up to and including v1.4.1 allows remote attackers to execute arbitrary operating system commands by manipulating the `exec` argument passed to the `shellExecCommand` function in `core/engine.go` via the Management API. The CVSS 4.0 vector (PR:N) indicates no authentication is required, making this network-exploitable without credentials. A public exploit exists (E:P in the supplied vector), and the upstream GitHub issue was closed automatically due to maintainer inactivity, indicating no patch has been issued.
Stored cross-site scripting in Splunk Enterprise's dashboard table renderer allows a low-privileged user - without admin or power role - to inject JavaScript payloads into sparkline table cell tooltips, which execute in the browser of any user who opens the malicious dashboard and hovers over an affected cell. The vulnerability spans four active Splunk Enterprise release lines (9.4, 10.0, 10.2, and 10.4), confirmed by EUVD-2026-63133 and Splunk advisory SVD-2026-0801. No public exploit code or active exploitation has been identified at time of analysis, but the broad version coverage and low attacker privilege bar make patching a clear operational priority.
Eclipse OpenJ9 JVM versions through 0.60 crash with a segmentation fault when processing a crafted .class file containing deeply nested annotations, enabling a denial-of-service attack against any Java application running on OpenJ9 where an attacker can supply class files for loading. The vulnerability is rooted in uncontrolled recursion (CWE-674) within the bytecode utility annotation parser, which exhausts the OS thread stack without triggering a recoverable error path. No active exploitation has been confirmed by CISA KEV and no standalone exploit code has been publicly identified, though the public GitHub fix PR clearly exposes the triggering mechanism and root cause.
Unauthenticated SQL injection in code-projects Hospital Information System 1.0 exposes the login endpoint to remote database manipulation via the unsanitized `email` parameter in `UsersController.php`. The flaw allows network-accessible attackers to alter authentication query logic, potentially bypassing login controls or extracting sensitive records such as patient data and credentials. No CISA KEV listing exists, but a published proof-of-concept exploit is referenced in the intelligence feed, materially lowering the barrier to exploitation.
Kernel stack memory disclosure in FreeBSD 15.x exposes uninitialized data to unprivileged local users through a missing error-return check in the POSIX timer subsystem. When a CLOCK_TAI timer is created on a system lacking a configured UTC-TAI offset, the kernel function realtimer_gettime() fails silently, and the resulting uninitialized stack buffer is copied verbatim to userspace via timer_settime(2). Affected releases are FreeBSD 15.0-RELEASE prior to p12 and 15.1-RELEASE prior to p2; no public exploit or CISA KEV listing has been identified at time of analysis.
Uninitialized kernel stack memory disclosure in FreeBSD's compat32 kevent() handler allows local unprivileged users to read small amounts of sensitive kernel stack data. Affected releases span FreeBSD 15.0-RELEASE before p11, 14.4-RELEASE before p7, and 14.3-RELEASE before p16, covering systems where 32-bit application compatibility is enabled. EPSS sits at 0.15% (5th percentile), no public exploit code is known, and the vulnerability is not listed in CISA KEV, indicating low exploitation urgency despite the CVSS C:H rating.
Kernel stack data disclosure in FreeBSD's Linux compatibility layer (linuxulator) allows any unprivileged local user to read up to 104 bytes of uninitialized kernel stack memory per `waitid()` invocation. The root cause is a missing zero-initialization of the destination `siginfo_t` buffer during FreeBSD-to-Linux struct translation, exposing residual kernel stack contents such as pointers and potentially cryptographic material. Patch levels are confirmed by vendor advisory FreeBSD-SA-26:47.linux; no active exploitation is confirmed in CISA KEV, and the EPSS score of 0.15% places this in the 5th percentile for near-term exploitation probability.
Out-of-bounds memory read in IBM AIX 7.2 and 7.3, and IBM PowerVM VIOS 4.1 exposes sensitive system memory to locally authenticated users holding low-privilege accounts. The flaw (CWE-125) allows an attacker with existing local access to read memory contents beyond intended buffer boundaries, producing high confidentiality impact while leaving system integrity and availability unaffected. No public exploit code or CISA KEV listing has been identified at time of analysis; IBM has released a patch via advisory 7283858.
IBM AIX 7.2 and 7.3, and IBM PowerVM VIOS 4.1 expose a local denial-of-service condition through improper handling of memory page table configurations (CWE-400), allowing a low-privileged local attacker to exhaust critical kernel resources and crash or hang the system. The CVSS scope-change flag (S:C) is particularly significant in PowerVM VIOS deployments, where a triggered kernel fault in the Virtual I/O Server could cascade to affect co-hosted guest partitions or the hypervisor layer itself. IBM has released a patch via their support portal; no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Heap buffer overflow in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 enables a local low-privileged attacker to crash the system, resulting in a denial of service. The flaw is rooted in improper bounds checking during heap memory operations (CWE-787). No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, a vendor-released patch is available via IBM advisory node/7283858.
Unicode normalization mishandling in HashiCorp go-slug versions 0.4.0 through 0.18.2 enables a local attacker to circumvent .terraformignore exclusion rules, causing sensitive files to be silently bundled into Terraform slug uploads destined for remote backends. Exploitation requires local filesystem write access to the Terraform working directory and a legitimate operator triggering a slug upload operation - the CVSS vector confirms AV:L/UI:R, narrowing the realistic attack surface to shared workstations, multi-tenant CI/CD environments, or compromised developer machines. Confidentiality impact is rated high (C:H) because excluded files such as credentials, API keys, or Terraform variable files containing secrets may be exposed to remote Terraform Cloud or Enterprise backends; no public exploit has been identified and the vulnerability is absent from the CISA Known Exploited Vulnerabilities catalog.
Wireshark's CMS (Cryptographic Message Syntax) protocol dissector crashes due to a use-after-free (CWE-416) condition when processing malformed CMS packet data, affecting versions 4.6.0-4.6.7 and 4.4.0-4.4.18 and resulting in denial of service. The CVSS vector (AV:L/UI:R) confirms exploitation requires a user to open a specially crafted capture file or analyze malicious live traffic, limiting remote risk. No public exploit code or CISA KEV listing is identified at time of analysis, making this a realistic but not critical-priority issue outside environments where analysts regularly open untrusted capture files.
Wireshark's Kerberos protocol dissector in versions 4.4.0-4.4.18 and 4.6.0-4.6.7 contains an out-of-bounds read (CWE-125) that crashes the application when parsing a maliciously crafted packet capture file, causing denial of service. Exploitation requires a local user to actively open the crafted file, making this a user-interaction-dependent, local-vector attack with no confidentiality or integrity impact. No public exploit code or active exploitation has been identified at time of analysis.
Denial of service in Wireshark's Bluetooth Hands-Free Profile (HFP) protocol dissector affects versions 4.6.0-4.6.7 and 4.4.0-4.4.18, causing application crashes via malformed HFP traffic or crafted capture files. The CWE-125 out-of-bounds read root cause is confirmed by NVD; CVSS impact is confined to availability (A:H, C:N, I:N), though tags include 'Information Disclosure' - a discrepancy unresolved from available data. No public exploit code identified and this is not listed in CISA KEV, keeping real-world risk moderate and largely limited to active Wireshark users handling Bluetooth traffic.
Wireshark's Bluetooth BR/EDR FHS protocol dissector crashes via a NULL pointer dereference (CWE-476) when processing a malformed packet capture, affecting the 4.6.x branch (4.6.0-4.6.7) and the 4.4.x branch (4.4.0-4.4.18). An attacker who can persuade a user to open a specially crafted capture file can crash the Wireshark process, resulting in an application-level denial of service with no confidentiality or integrity impact. No public exploit code has been identified and this CVE does not appear in the CISA KEV catalog; EPSS data was not included in the available intelligence.
Heap-based buffer overflow in Wireshark's SSH protocol dissector affects versions 4.6.0-4.6.7 and 4.4.0-4.4.18, crashing the application and causing denial of service. An attacker delivers a crafted network capture file or malformed live SSH traffic; when a user opens or captures it with an affected Wireshark build, the dissector overflows a heap buffer and terminates the process. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Heap-based buffer overflow in Wireshark's Bluetooth AVRCP protocol dissector crashes the application when processing malformed AVRCP packets, enabling denial of service against versions 4.6.0-4.6.7 and 4.4.0-4.4.18. The CVSS vector (AV:L/UI:R) indicates the attack requires a user to open or process a crafted packet capture file - this is not a remotely triggerable crash but a file-based DoS vector typical of Wireshark dissector flaws. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis.
Denial of service via crash affects the Bluetooth Attribute Protocol (ATT) dissector in Wireshark 4.4.0-4.4.17 and 4.6.0-4.6.7, caused by an out-of-bounds read (CWE-125) when processing malformed ATT packets. Exploitation requires user interaction - specifically opening a crafted packet capture file or capturing live malicious Bluetooth traffic - and carries no code execution potential. Fixed releases 4.4.18 and 4.6.8 are available from the Wireshark Foundation; no public exploit code or CISA KEV listing has been identified at time of analysis.
Wireshark's CMS protocol dissector crashes via a null pointer dereference (CWE-476) in versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.17, allowing denial of service against the application. An attacker can cause Wireshark to crash by inducing a user to open a malformed capture file or by injecting crafted CMS protocol traffic into a live capture session. No public exploit has been identified at time of analysis, and the CVSS local attack vector combined with high complexity limits realistic exposure to targeted scenarios.
Dell Command Update (DCU) versions prior to 5.7.1 expose sensitive system information to low-privileged local users, confirmed via Dell Security Advisory DSA-2026-309. The CVSS vector (AV:L/AC:L/PR:L/UI:N/C:H) indicates that a standard local account with no elevated rights and no user interaction is sufficient to trigger high-confidentiality-impact disclosure - potentially exposing hardware identifiers, system configuration details, or other privileged data handled by the update utility. No public exploit code exists and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Pcapng file parser crash in Wireshark 4.6.0-4.6.7 and 4.4.0-4.4.18 enables denial of service via a locally-opened malformed capture file. Rooted in CWE-125 (Out-of-Bounds Read), the parser reads beyond an allocated buffer boundary when processing certain pcapng structures, causing application termination. No public exploit identified at time of analysis and not listed in CISA KEV; real-world risk is constrained by the local attack vector and required user interaction.
Denial of service in Wireshark's 3GPP phone log file parser affects versions 4.6.0-4.6.7 and 4.4.0-4.4.18, crashing the application when a specially crafted log file is opened. The root cause is CWE-787 (out-of-bounds write), consistent with a buffer overflow in the parser's memory handling. No active exploitation is confirmed and no public exploit code has been identified, keeping real-world risk moderate despite the high availability impact on the local process.
Heap-based buffer overflow in Wireshark's UMTS FP protocol dissector crashes the application across affected 4.4.x and 4.6.x releases, enabling denial of service against network analysts and security teams. Wireshark versions 4.4.0 through 4.4.17 and 4.6.0 through 4.6.7 are vulnerable when a user opens a specially crafted capture file or captures live traffic containing a malformed UMTS FP frame. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; vendor-released patches are available in versions 4.6.8 and 4.4.18.
Denial of service in Wireshark's Catapult DCT2000 file parser crashes the application across versions 4.6.0-4.6.7 and 4.4.0-4.4.17 when a malformed capture file is opened. The root cause is a heap-based buffer overflow (CWE-122) that exhausts availability without yielding code execution, as confirmed by the CVSS A:H, C:N, I:N profile. No public exploit code exists and this vulnerability is not listed in the CISA KEV catalog, placing it in the moderate-priority tier despite the memory safety class of the flaw.
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 allows a local low-privileged attacker to gain elevated permissions through an Incorrect Authorization flaw (CWE-863). The vulnerability does not require user interaction or special configuration beyond the presence of a low-privileged local account on a Dell system running a vulnerable DCU version. Dell has released a fix in version 5.7.1 via advisory DSA-2026-309, and no public exploit has been identified at time of analysis.
Stored cross-site scripting in Splunk Enterprise's guided tour feature enables a 'power'-role user to inject and execute arbitrary JavaScript in any other authenticated user's browser when that user opens a crafted tour link. Affected across four active release branches (9.4.x, 10.0.x, 10.2.x, 10.4.x) with fixed versions now available per Splunk advisory SVD-2026-0801. No public exploit code or CISA KEV listing exists at time of analysis; the CVSS score of 5.7 reflects the dual prerequisite of attacker role access and required victim interaction.
Arbitrary file deletion on Splunk cluster managers is possible for any authenticated, low-privileged user - no admin or power role required - by submitting a crafted knowledge bundle delta containing path traversal sequences. Affected versions span four active release branches: 9.4.x before 9.4.14, 10.0.x before 10.0.9, 10.2.x before 10.2.6, and 10.4.x before 10.4.2. An attacker exploiting this flaw can delete files accessible to the Splunk process outside the intended staging directory, degrading system integrity or triggering service disruption on the cluster manager node. No public exploit code or CISA KEV listing has been identified at time of analysis.
Stored cross-site scripting in Splunk Enterprise exposes victim user data when a user holding the schedule_search capability injects a malicious script into an alert trigger condition field and induces another user to open the crafted link. The script executes in the victim's browser context and can access all Splunk data available to that user, making this particularly dangerous in environments where analysts or admins have broad search access over sensitive logs and security telemetry. Patch is available from Splunk across four version branches; no public exploit or CISA KEV listing has been identified at time of analysis.
Splunk Enterprise's Table Editor dataset feature permits a 'power' role user to inject attacker-controlled Search Processing Language (SPL) into a shared dataset, which silently executes with admin-level permissions when an administrator opens the dataset. Affected deployments span four version branches: 9.4 prior to 9.4.14, 10.0 prior to 10.0.9, 10.2 prior to 10.2.6, and 10.4 prior to 10.4.2. Because the Table Editor omits SPL safeguards for risky commands during the initial data preparation phase (CWE-863), a successfully phished admin can unwittingly expose all search-head-accessible data and allow limited data modification. No public exploit is identified at time of analysis, and the vulnerability does not appear in CISA's KEV catalog.
Broken object level authorization (BOLA) in Splunk Enterprise's data management orchestrator allows authenticated low-privileged users to delete SPL2 modules owned by other users. Affected versions are Splunk Enterprise 10.2.x before 10.2.6 and 10.4.x before 10.4.2; the feature is absent in versions prior to 10.2, so those are unaffected. No public exploit code or active exploitation has been identified at time of analysis, and a vendor-released patch is available.
Splunk Enterprise contains a stored SPL injection flaw in the Table Editor that allows a lower-privileged 'power' role user to plant risky Search Processing Language commands inside a shared dataset, which then execute silently under an 'admin' user's elevated permissions when that admin opens the dataset's Initial Data step. Affected versions span four release lines: below 10.4.2, 10.2.6, 10.0.9, and 9.4.14. A successful attack exposes all data accessible to the admin and allows modification of Splunk lookup files. No public exploit has been identified at time of analysis, and CISA KEV does not list this vulnerability as actively exploited.
Server-Side Request Forgery in Splunk Enterprise and Splunk Secure Gateway allows low-privileged authenticated users to manipulate internal Splunk services via crafted report notification paths. Affected versions span Splunk Enterprise below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway below 3.10.9, 3.9.23, and 3.8.70. An attacker holding any valid Splunk account - excluding admin and power roles - can leverage the unvalidated path handling in Secure Gateway to issue system-authenticated internal requests, potentially disrupting Search Head Cluster state or causing denial of service. No public exploit code exists and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Cross-user command history exposure in IBM System Storage DS8A00 (10.1.3.0-10.11.35.0) and DS8900F (89.40.83.0-89.44.25.0) allows a low-privileged authenticated user to read or overwrite another user's command history through externally controlled filename manipulation. Rooted in CWE-73 (External Control of File Name or Path), the flaw enables horizontal privilege escalation within the storage management interface without requiring elevated rights or user interaction. IBM has released a patch; no public exploit or CISA KEV listing has been identified.
Stored cross-site scripting in Splunk Enterprise allows a 'power' role user to embed malicious JavaScript within dashboard sparkline format options, which then executes in the browser of any user who views that dashboard. If the victim holds the 'admin' Splunk role, the attacker effectively gains access to all data accessible through Splunk Web and can perform actions at admin-level permissions. Exploitation requires social engineering - the victim must be tricked into navigating to the malicious dashboard - and no public exploit code has been identified at time of analysis. Affected versions span four active release branches below 10.4.2, 10.2.6, 10.0.9, and 9.4.14.
LDAP injection in the AD LDAP app for Splunk SOAR (versions below 2.3.8) allows authenticated low-privileged users to manipulate Active Directory queries, exposing account enumeration, sensitive attribute disclosure, and unintended modification of AD objects. Exploitation requires only a role with 'run actions' permission within Splunk SOAR - no elevated SOAR admin rights needed. Splunk has released a patch (version 2.3.8); no public exploit code or CISA KEV listing has been identified at time of analysis.
SPL command injection through the geostats command in Splunk Enterprise allows an authenticated low-privileged attacker to execute arbitrary Search Processing Language commands under the security context of a second, higher-privileged victim user. Affected release branches include 10.4.x below 10.4.2, 10.2.x below 10.2.6, 10.0.x below 10.0.9, and 9.4.x below 9.4.14. Exploitation requires phishing an authenticated target into initiating the attacker-controlled search in Splunk Web; no public exploit has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog.
Hard-coded and predictable credentials in Splunk AI Toolkit versions below 6.0.0 expose connected container services to unauthorized access by any low-privileged Splunk user. The toolkit generates or stores credentials for its container integrations using predictable or fixed default values, which are retrievable through the AI Toolkit Connections tab without requiring elevated Splunk roles. No public exploit has been identified at time of analysis, and no CISA KEV listing exists, but a vendor patch (6.0.0) is available per advisory SVD-2026-0808, reported by Cisco.
Cross-site scripting in Dell OpenManage Enterprise (all versions prior to 4.7.0) enables a low-privileged remote authenticated attacker to inject malicious JavaScript that executes in the browsers of other users, leading to information exposure such as session token theft or disclosure of management data. The CVSS vector confirms network accessibility with low attack complexity, but exploitation requires both a valid low-privileged account and a separate victim who interacts with the injected content. No public exploit code or CISA KEV listing has been identified at time of analysis, placing this in a monitor-and-patch rather than emergency-response category.
Unauthorized email enumeration in the WPS Bidouille WordPress plugin (all versions before 1.33.5) allows any authenticated user - including low-privilege subscribers - to extract the registered email addresses of every account on the site via an unprotected AJAX endpoint. The root cause is a missing authorization check on an AJAX action, meaning no elevated role is required beyond possessing a basic WordPress account. No public exploit code has been identified and EPSS probability is 0.15% (5th percentile), indicating limited exploitation interest at time of analysis.
WP Maps WordPress plugin before version 4.9.8 allows any subscriber-level authenticated user to create an unlimited number of persistent database options via an unprotected AJAX endpoint lacking both capability checks and nonce validation. Because WordPress loads all options on every page request, mass option creation degrades site performance site-wide, yielding both integrity and availability impact. No public exploit has been identified and EPSS stands at 0.14% (4th percentile), indicating low real-world exploitation probability at this time.
Cross-site request forgery in Grav Login Plugin prior to 3.8.11 allows a network attacker to silently overwrite a logged-in victim's TOTP two-factor authentication secret by inducing a single link click. The taskRegenerate2FASecret endpoint accepted top-level GET requests with no nonce, Origin, or Referer validation; under the browser-default SameSite=Lax cookie policy, this is sufficient for a cross-site navigation to carry the victim's session cookie and trigger secret regeneration. No public exploit has been identified at time of analysis; the vendor released a confirmed fix in version 3.8.11.