Arbitrary code execution on IBM Power Systems host is achievable by any attacker who already holds service account or root access to the BMC or FSP management controller. The vulnerability resides in the interface layer between the BMC/FSP and the host, where missing authorization checks (CWE-862) allow an authenticated BMC-level principal to cross the trust boundary and execute code with full host-system privileges. All hosted logical partitions are consequently exposed, making this a critical lateral-movement and privilege-escalation path within IBM Power infrastructure. No public exploit code or CISA KEV listing has been identified at time of analysis.
Arbitrary code execution on IBM Power Systems host environments is achievable by an attacker with service-level access to the Baseboard Management Controller (BMC), exploiting a stack-based buffer overflow (CWE-121) in the BMC-to-host communication interface. Affected firmware versions FW1120.00 and FW1110.00 through FW1110.30 are vulnerable; successful exploitation yields full control over the host system and all hosted logical partitions (LPARs), resulting in complete confidentiality, integrity, and availability compromise across all co-located workloads. No public exploit has been identified at time of analysis, and the CVE is not currently listed in the CISA KEV catalog; IBM has released a remediation patch via advisory at https://www.ibm.com/support/pages/node/7283220.
Stack-based buffer overflow in IBM Power Firmware's host firmware configuration parser allows an attacker with service-level access to the BMC/FSP to supply specially crafted configuration data, triggering CWE-121 during the firmware boot stage and compromising the entire software stack loaded thereafter. Affected firmware spans multiple major release trains - FW1120, FW1110, FW1060, FW950, and OP940 - covering Power9 and Power HMC managed systems. No public exploit has been identified at the time of analysis, and a vendor patch is available from IBM.
Arbitrary code execution in IBM Power Firmware across multiple firmware branches (FW1120.00, FW1110.x, FW1060.x, FW950.x, OP940.x) stems from a CWE-787 out-of-bounds write in the service processor mailbox interface. An authenticated attacker with service-level access to the BMC/FSP can exploit this buffer overflow to cross the trust boundary from the management processor into the host firmware runtime, gaining full control over the managed Power system. No public exploit has been identified at time of analysis; IBM has released a patch per advisory 7283236.
Image policy bypass in IBM Portieris 0.5.0 through 0.14.2 allows remote authenticated attackers to circumvent container image verification controls by exploiting improper authorization of pod owner references (CWE-862). An attacker with low-privilege Kubernetes cluster access can deploy containers from untrusted or unverified images, effectively nullifying the admission controller's entire security enforcement purpose. No public exploit has been identified at time of analysis, but a vendor patch is available via IBM's security advisory.
Remote code execution in Splunk SOAR versions below 8.6.0 allows unauthenticated remote attackers to execute arbitrary code on the SOAR host by exploiting the Automation Broker's blind trust of client-supplied IP address headers. The Automation Broker accepts a forged source-IP header as proof that a notification endpoint request originates from the local system (CWE-290), bypassing all authentication. Successful exploitation grants full confidentiality, integrity, and availability impact on the SOAR host; no public exploit is identified at time of analysis, but the vendor has released a patch in version 8.6.0.
Improper TLS certificate validation in the NIM (Network Installation Management) subsystem of IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 enables remote attackers to gain unauthorized access to AIX systems by exploiting the failure to verify certificate authenticity during NIM communications. The CVSS 8.1 High score reflects high confidentiality and integrity impact across a network-exploitable path with low complexity and no user interaction required. No public exploit identified at time of analysis, but the authentication bypass classification of this flaw makes it a meaningful privilege escalation and lateral movement risk in IBM Power environments.
Remote authenticated exploitation of IBM i versions 7.3 through 7.6 via an out-of-bounds read (CWE-125) enables attackers to both crash the system and exfiltrate sensitive data from adjacent memory regions. The CVSS 8.1 score (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) reflects significant dual confidentiality and availability impact achievable over the network without user interaction, though a minimum of low-privilege credentials is required, limiting the attack surface to authenticated accounts. No public exploit code or active exploitation has been identified at time of analysis; EPSS sits at a low 0.31% (24th percentile), and SSVC rates the attack as non-automatable.
Scope enforcement is entirely absent in the Grav API Plugin prior to 1.0.6, meaning any scoped API key silently exercises its issuing account's full permissions rather than the declared restricted subset. Holders of keys deliberately issued narrow read-only scopes - including third-party integrations and external services - can perform all write, delete, and administrative operations that the key's owning account is authorized for. No public exploit has been identified at time of analysis, but the vulnerability is exploitable by any valid API key holder over the network without user interaction, making supply-chain and insider-threat scenarios the primary risk vectors.
SPL injection in Splunk Enterprise Security versions below 8.6.1 allows low-privileged authenticated users holding the mc_investigation_read capability to inject Search Processing Language through Analyst Queue search filter field names, gaining access to data and system integrity controls available to scheduled search contexts beyond their authorized scope. The root cause is absent validation of filter field names before inclusion in SPL queries - analogous to SQL injection but within Splunk's proprietary query language. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the CVSS 8.1 High score reflects meaningful confidentiality and integrity exposure for any account holding the relevant capability.
Authentication bypass in Splunk Enterprise across multiple supported version branches allows an attacker who has obtained a trusted distributed search private key to forge administrative session tokens entirely over the network. Affected versions span 9.4.x below 9.4.14, 10.0.x below 10.0.9, 10.2.x below 10.2.6, and 10.4.x below 10.4.2. Once a forged token is accepted, the attacker gains full confidentiality, integrity, and availability impact equivalent to an administrator - including access to all indexed data and the ability to disrupt search services. No public exploit or CISA KEV listing exists at time of analysis; this was reported by Cisco, suggesting coordinated disclosure from security research.
Unauthorized cross-user data access and deletion in Splunk AI Toolkit below 6.0.0 allows any authenticated user holding the 'power' Splunk role to read and destroy experiment history records belonging to other users. The root cause is CWE-639 (IDOR): the toolkit fails to preserve a trusted experiment scope boundary when processing caller-controlled query values, enabling horizontal privilege escalation across all experiment history without touching admin-level permissions. No active exploitation or public exploit code has been identified at time of analysis; a vendor-released patch (6.0.0) is available per Splunk advisory SVD-2026-0808.
Splunk AI Toolkit before version 6.0.1 allows authenticated users holding the built-in 'power' role to modify app-provided scheduled searches, which execute SPL under the permissions of the search owner rather than the modifying user. By injecting arbitrary SPL into such searches, a 'power' role user can access all data visible to the search owner and alter system integrity - effectively escalating privileges beyond their authorization level. No public exploit code or active exploitation has been identified at time of analysis.
Privilege escalation in Splunk Enterprise Security below 8.6.1 enables authenticated users holding the ess_analyst role to modify UEBA search macros that are subsequently executed by scheduled searches running under administrator permissions. The flaw stems from misconfigured UEBA app metadata that incorrectly grants analyst-tier write access to macros intended to be restricted to administrators, resulting in unauthorized access to all Splunk-indexed data and potential system integrity violations. No public exploit or CISA KEV listing exists at time of analysis, though the low barrier - any ess_analyst account - makes insider threat and compromised analyst credential scenarios credible attack paths.
Search Head Clustering bundle replication in Splunk Enterprise fails to validate bundle filenames or neutralize NUL bytes before constructing file system paths on non-captain cluster members, allowing any authenticated low-privileged user to delete or temporarily overwrite files accessible to the Splunk service account via a crafted REST API request. Affected are Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 running in SHC deployments - standalone instances are not in scope. No public exploit code has been identified at time of analysis and this CVE is not listed in CISA KEV; however, vendor patch is available via advisory SVD-2026-0801 and the low privilege barrier makes this a credible insider or stolen-credential threat in SOC environments.
SPL injection in Splunk Enterprise exposes all indexed data and compromises search integrity for any low-privileged authenticated user. Specifically, users without the 'admin' or 'power' role can inject Search Processing Language commands into saved-search dispatch requests by supplying malicious time values that Splunk Enterprise fails to validate. Patch versions have been released across all supported branches; no public exploit code or CISA KEV listing has been identified at time of analysis.
Memory corruption in Zephyr RTOS's IPv6 neighbor discovery stack allows any unauthenticated host on the same network link to crash or corrupt kernel memory with a single crafted ICMPv6 Router Advertisement. The handle_ra_6co() function in subsys/net/ip/ipv6_nbr.c fails to bound the 8-bit context_len field from a 6LoWPAN Context Option to the RFC 6775 maximum of 128, triggering an unsigned size_t underflow that causes memset to overwrite an unbounded region of kernel memory. This produces a reliable adjacent-network denial of service with collateral memory integrity loss; no public exploit code has been identified at time of analysis, though the patch commit and security advisory are publicly available.
Race condition in the authentication handler (`check.jst`) of RDK-B WebUI rdkb-2025q4-kirkstone allows remote unauthenticated attackers to bypass authentication by submitting concurrent login requests that exploit unsynchronized shared authentication state. Successful exploitation grants full administrative access to the broadband gateway device with high impact across confidentiality, integrity, and availability. No public exploit code has been identified at time of analysis, and EPSS scoring at 0.21% (12th percentile) reflects low observed exploitation activity despite the severity of the authentication bypass.
Unsigned x-amz-* header injection in Ceph Object Gateway (RGW) SigV4 allows any holder of a presigned URL to attach arbitrary unsigned x-amz-* headers - such as ACL grants, copy-source directives, or storage-class overrides - that RGW silently honors without verifying they were covered by the original cryptographic signature. Affected versions are Ceph prior to 19.2.6 and prior to 20.2.4; the flaw directly enables privilege escalation beyond the permissions the URL signer intended. No public exploit code or active exploitation is confirmed at time of analysis, and vendor-released patches for both stable branches are available.
Privilege management regression in FreeBSD 15.x ktrace(2) allows an unprivileged jail user to manipulate or suppress the jailed root user's kernel tracing configuration. Because an unrelated code change inadvertently causes PRIV_KTRACE to always be denied to jailed root, that user's active trace sessions are not marked as privileged - permitting any jail user holding debug rights over a traced process to alter or clear those trace flags. No public exploit has been identified and the EPSS score of 0.18% (8th percentile) reflects negligible opportunistic exploitation probability, though multi-tenant jail environments relying on ktrace for security auditing face a meaningful auditability risk.
Unauthorized event takeover in the Eventin WordPress plugin (all versions before 4.1.21) allows any authenticated contributor-level user to modify, delete, or reassign events owned by other users - including site administrators. The flaw is a classic Insecure Direct Object Reference (IDOR) rooted in CWE-639: the plugin processes event operations using a user-supplied event identifier without verifying the requesting user actually owns or has authorization over the targeted record. No active exploitation has been confirmed (not in CISA KEV) and no public proof-of-concept code was identified at time of analysis, but the low privilege bar and mechanically simple IDOR exploitation pattern elevate real-world risk for any multi-author WordPress deployment.
Full takeover of IBM Power Systems host partitions and all hosted logical partitions (LPARs) is achievable by any actor holding service account or root credentials on the BMC or FSP management controller across multiple IBM Power firmware generations. The flaw (CWE-863, Incorrect Authorization) permits writing arbitrary data to hardware control registers via the BMC/FSP-to-host interface, collapsing the security boundary between the out-of-band management plane and every workload running on the system. No public exploit has been identified at time of analysis and the vulnerability is absent from CISA KEV; IBM has released a firmware patch via support advisory 7283218.
Local File Inclusion in the Resido WordPress theme (versions 1.5 and below) allows unauthenticated remote attackers to include arbitrary files server-side via unsanitized PHP include/require logic. The CVSS 3.1 score of 8.1 with full Confidentiality, Integrity, and Availability impact reflects the potential for sensitive file disclosure, server-side code execution via log poisoning or similar LFI chaining techniques, and service disruption - though the High Attack Complexity metric signals that reliable exploitation requires specific preconditions. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis.
The acm-operator-bundle build pipeline within Red Hat Advanced Cluster Management for Kubernetes 2 fetches and executes a remote script without any cryptographic integrity or authenticity verification (CWE-829), exposing privileged build credentials - including GitHub access tokens and container registry passwords - to attacker-controlled code. An adversary able to compromise the remote script host or intercept the fetch in transit can inject arbitrary code that runs inside the privileged build environment and poisons the resulting operator bundle, extending the blast radius to downstream Kubernetes clusters that consume it (CVSS S:C). No public exploit code has been identified and CISA has not listed this in the Known Exploited Vulnerabilities catalog, but the credential-theft and supply-chain propagation potential make this a high-priority finding for organizations actively running ACM 2.x build pipelines.
Dashboard Studio in Splunk Enterprise (below versions 9.4.14, 10.0.9, 10.2.6, and 10.4.2) allows a low-privileged 'user'-role account to inject attacker-controlled SPL queries that execute within the authenticated session of a different, potentially higher-privileged victim user. The root cause is Dashboard Studio's failure to consistently enforce app-visibility authorization boundaries before search query options reach the search dispatch layer - a CWE-862 Missing Authorization defect. No public exploit code or active exploitation has been confirmed; a vendor patch is available across all affected branches.
IBM Power Systems Firmware across three firmware branches exposes a privilege escalation path across the BMC/FSP-to-host boundary, allowing an attacker already holding service account or root credentials on the Flexible Service Processor to read and disrupt host processor state, cascading impact to all logical partitions (LPARs) hosted on the managed system. The scope change confirmed in the CVSS vector (S:C) distinguishes this from a typical local privilege issue: exploitation crosses the management-plane isolation barrier and can affect production workloads running on every partition. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.
Shell metacharacter injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local low-privileged attacker to execute arbitrary OS commands, resulting in complete confidentiality, integrity, and availability compromise per CVSS C:H/I:H/A:H. The root cause (CWE-78) is insufficient sanitization of special shell characters passed to an OS interpreter within an IBM-provided utility or script. IBM has released a patch; no public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Kernel heap overflow in FreeBSD's ZFS subsystem via the ZFS_IOC_USERSPACE_MANY ioctl enables local privilege escalation across multiple supported FreeBSD release branches. The flaw stems from an integer width mismatch: the kernel allocates a heap buffer sized by a 32-bit truncation of the caller-supplied 64-bit length, then copies records up to the original 64-bit limit - writing past the end of the allocation. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog; however, the low attack complexity and high impact across confidentiality, integrity, and availability make patching a priority for any FreeBSD deployment that uses ZFS delegated permissions.
Kernel memory corruption in FreeBSD's ZFS subsystem allows a local user with the delegated 'receive' ZFS permission to trigger a heap-based buffer overflow via the ZFS_IOC_RECV_NEW ioctl. The flaw stems from an integer truncation: a 64-bit payload size is silently narrowed to 32 bits for heap allocation, but the original 64-bit value is then used as the length for a subsequent byteswap operation - writing beyond the allocated buffer into kernel memory. Exploitation is limited to the heal receive path and requires the ZFS 'receive' delegation, but no patch has been publicly released yet for all affected branches. No public exploit code or CISA KEV listing has been identified at time of analysis.
Out-of-bounds kernel heap read and write in FreeBSD's semctl(2) GETALL and SETALL commands enable local privilege escalation by exploiting a 15-bit sequence-number wraparound in the System V semaphore subsystem. FreeBSD 14.4-RELEASE prior to p8, 15.0-RELEASE prior to p12, and 15.1-RELEASE prior to p2 are affected. An unprivileged local attacker races two processes - one cycling semaphore set destruction and recreation to wrap the 0x8000-bounded counter, another issuing GETALL or SETALL at the moment of wrap - causing the kernel to copy semaphore values using a mismatched buffer size and producing exploitable heap corruption. No public exploit code has been identified at time of analysis, but the vulnerability class (local kernel heap OOB via IPC race) is a consistently weaponized primitive for privilege escalation.
Local privilege escalation in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 enables a low-privileged authenticated user to gain root access by bypassing RBAC role enforcement. The flaw (CWE-269: Improper Privilege Management) means the operating system fails to correctly enforce the boundaries between assigned RBAC roles, allowing a standard user to assume or exercise privileges reserved for root. IBM has released a patch; no public exploit code or CISA KEV listing has been identified at time of analysis.
Local arbitrary code execution in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 stems from improperly scrubbed environment variables (CWE-426: Untrusted Search Path), allowing a low-privileged local user to inject malicious values such as PATH or LD_PRELOAD that are subsequently consumed by a privileged process. With a CVSS score of 7.8 (HIGH) and full confidentiality, integrity, and availability impact, successful exploitation yields arbitrary code execution at an elevated privilege level. No public exploit or CISA KEV listing has been identified at time of analysis, though a vendor patch is available via IBM support.
Local privilege escalation in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 stems from an out-of-bounds write (CWE-787) that allows a low-privileged local attacker to achieve complete system compromise across confidentiality, integrity, and availability. The CVSS 7.8 score (AV:L/AC:L/PR:L/UI:N) reflects low-complexity exploitation requiring only a standard local account - a realistic threshold for insider threats or post-exploitation lateral movement within IBM Power environments. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis; however, the total C/I/A:H impact on high-value enterprise Unix systems warrants prompt patching.
Local privilege escalation in IBM AIX 7.2 and 7.3, and IBM PowerVM VIOS 4.1 allows an authenticated low-privileged user to gain full elevated privileges due to improper privilege management (CWE-269). The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms that any standard local user account is sufficient to trigger the flaw with low complexity and no user interaction, resulting in complete confidentiality, integrity, and availability compromise of the affected system. No public exploit identified at time of analysis, and a vendor patch is available via IBM advisory.
Splunk Enterprise for Windows exposes a startup race condition on the management port that allows a low-privileged local user to intercept authentication tokens from Splunk child processes. By pre-binding the management port before the Splunk service initializes - exploiting the absence of exclusive address binding protections on Windows - an attacker captures session tokens that can be replayed to compromise all data and system integrity accessible to the Splunk service account. No public exploit code has been identified and EPSS is 0.12% (3rd percentile), indicating low current exploitation activity; however, the vulnerability is Windows-specific and patch is available from Splunk.
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 enables a low-privileged local attacker to fully compromise system confidentiality, integrity, and availability through unsafe deserialization of attacker-controlled data. The root cause is CWE-502 (Deserialization of Untrusted Data), a class of vulnerability where malicious serialized objects can trigger unintended code paths during deserialization, resulting in privilege escalation on Dell client endpoints. Dell has released version 5.7.1 as a fix per advisory DSA-2026-309; no public exploit or active exploitation has been identified at time of analysis.
Elevation of privilege via deserialization of untrusted data affects Dell Command Update (DCU) versions prior to 5.7.1 on local systems. A low-privileged local attacker can exploit unsafe deserialization to execute arbitrary code at a higher privilege level, potentially gaining full system control. No public exploit code or active exploitation has been identified at time of analysis, but the high CVSS score and straightforward attack complexity make this a meaningful patching priority for enterprise fleets.
Incorrect Default Permissions in Dell Command Update (DCU) exposes a local privilege escalation path on all versions prior to 5.7.1, allowing a low-privileged authenticated user to gain unauthorized read and write access to filesystem resources owned or managed by DCU. The flaw stems from overly permissive ACLs set during installation, consistent with CWE-276, and carries a CVSS 7.8 High rating reflecting full confidentiality, integrity, and availability impact. No public exploit identified at time of analysis, and the vulnerability is not currently listed in the CISA KEV catalog.
Elevation of privileges in Dell Command Update (DCU) versions prior to 5.7.1 is achievable by a low-privileged local attacker through a Time-of-check Time-of-use (TOCTOU) race condition (CWE-367). The CVSS 3.1 score of 7.8 High (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects that exploitation requires only a local low-privileged account with no user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis; Dell has released a remediated version (5.7.1) per advisory DSA-2026-309.
Remote code execution in GitPython before 3.1.58 is reachable through Repo.init(), which forwards all keyword arguments verbatim to git init without any unsafe-option validation. An attacker who can influence the template kwarg can point it at an attacker-controlled directory containing malicious git hooks; git copies those hooks into the newly initialized repository, and the next git operation (e.g., a commit) triggers arbitrary code execution at the privilege level of the host process. A proof-of-concept demonstrating the full hook-copy-and-fire chain has been publicly released and independently reproduced per the GHSA advisory, and upstream fix code is available in PR #2204 and commit d9ddb55bdc66, targeting the 3.1.58 release.
Heap buffer overflow in FreeRDP's Opus audio codec path allows a malicious RDP server to corrupt client heap memory and potentially execute arbitrary code on any connecting client built with WITH_OPUS enabled and WITH_DSP_FFMPEG disabled. The flaw in freerdp_dsp_decode_opus (versions prior to 3.28.0) stems from a capacity check applied to the wrong buffer, leaving the actual PCM output buffer unguarded against oversized libopus decoded frames that can overrun the fixed 4096-byte StreamPool_Take destination in the rdpsnd channel. No public exploit has been identified at time of analysis, but the confirmed heap write primitive and RCE classification make this a credible code execution risk for susceptible client builds connecting to untrusted servers.
Remote code execution in Wekan prior to version 9.75 allows any authenticated user to execute arbitrary OS commands as the Wekan server process by embedding shell metacharacters in an uploaded filename. The flaw exists in models/fileValidation.js, which interpolated the user-supplied file path into an admin-configured external scanner command line wrapped only in double quotes before passing it to asyncExec - a promisified child_process.exec that spawns /bin/sh -c - allowing double-quote-permeable constructs like $(cmd) and backtick substitutions to escape argument boundaries. No public exploit has been identified at time of analysis, though the published commit diff in GHSA-x3xm-pxrv-jg7p constitutes a near-complete exploitation guide.
Server-Side Request Forgery in Termix prior to 2.3.2 allows authenticated users to weaponize the proxy connectivity test endpoint as an internal network scanner and cloud credential harvester. The POST /host/db/proxy/test endpoint blindly forwards raw TCP and SOCKS connections to attacker-controlled addresses supplied via singleProxy, proxyChain, and testTarget fields, enabling traversal to localhost services, RFC-1918 private networks, and link-local cloud metadata endpoints such as 169.254.169.254. Structured connection error responses and timing data leak host reachability, and successful metadata service access directly exposes cloud provider IAM credentials usable for lateral movement. No public exploit is identified at time of analysis, but the attack is trivially reproducible given the granular advisory disclosure.
Payment amount tampering in Balbooa Forms (Joomla extension) versions prior to 2.4.3.2 allows any unauthenticated visitor to purchase priced items for an attacker-controlled amount - including $0.01 - by submitting a crafted value directly to the stripeCharges or payAuthorize payment endpoints. The server forwards this client-supplied total to the payment gateway without recomputing it from configured product prices, and neither endpoint enforces authentication or CSRF checks, making exploitation trivial with a single HTTP request. No public exploit has been identified at time of analysis, but the attack requires zero prerequisites beyond a published payment-enabled form.
Path traversal in Splunk Enterprise allows low-privileged authenticated users to write dispatch metadata to arbitrary locations on the host filesystem by supplying a crafted search identifier to a REST API endpoint. Affected branches span versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, covering all currently maintained Splunk Enterprise release lines. No public exploit has been identified at time of analysis and the vulnerability is absent from CISA KEV, but the low complexity, network accessibility, and high integrity impact create meaningful risk on unpatched instances, particularly given the potential for filesystem write primitives to be chained into privilege escalation.
Supply chain code injection in Red Hat Multicluster Engine for Kubernetes (mce-operator-bundle) enables arbitrary code execution during the software build process. The build pipeline fetches and executes scripts from a remote repository without commit pinning or cryptographic signature verification, meaning any actor with write access to that upstream repository can inject malicious payloads that execute at build time. The consequence extends beyond the build system itself (CVSS S:C) to the distributed artifacts, potentially delivering compromised software to all downstream consumers of the operator bundle. No public exploit code exists and no CISA KEV listing is present at time of analysis.
Principal-type confusion in Vikunja through 2.4.0 allows an attacker holding a valid link-share JWT to impersonate arbitrary user accounts by exploiting numeric ID collisions between LinkSharing principals and user records. Three permission-check code paths lack type guards, causing the application to treat a LinkSharing principal whose id equals N as the user with users.id == N. With a crafted link-share token, an attacker can remove victims from teams, enumerate and delete bot user accounts, or read team membership rosters. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
IBM AIX 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, expose a time-of-check time-of-use (TOCTOU) race condition that local, unprivileged attackers can exploit to corrupt data integrity or crash the system. The flaw requires only local shell access with no privileges, making it exploitable by any local user account on affected POWER-architecture systems. No public exploit code or CISA KEV listing exists at time of analysis, though a vendor patch is available.
Server-Side Request Forgery in @contentful/mcp-tools allows any party who can invoke MCP tools or inject instructions into Contentful content to redirect the server's Contentful Management API Personal Access Token (PAT) to an attacker-controlled endpoint. The export_space and import_space tools spread LLM-controlled arguments - including host, proxy, rawProxy, and insecure - directly into the options object alongside the server-side PAT, causing the Contentful Management SDK to build its baseURL from attacker input and attach Authorization: Bearer <PAT> to all outgoing requests. A confirmed working proof-of-concept exists demonstrating both host-redirect and proxy-redirect vectors; no CISA KEV listing was identified at time of analysis, but the prompt injection path requires zero MCP privileges and represents a high-severity real-world risk for any AI agent reading untrusted Contentful content.
Stack-based buffer overflow in Wazuh's wazuh-authd enrollment daemon (versions 4.5.0 through 4.14.5 and 5.0.0-beta1) allows unauthenticated remote attackers to crash the service by sending a crafted nine-byte version string in the enrollment 'V:' field, triggering unsafe stack memory reads and a null byte write into adjacent stack frames. The vulnerable code path in compare_wazuh_versions() is reachable before authentication over TCP port 1515 when anonymous TLS enrollment is enabled, resulting in a denial of service against the agent enrollment service. No active exploitation has been confirmed (not in CISA KEV) and no public proof-of-concept has been identified at time of analysis; vendor-released patches are available in versions 4.14.6 and 5.0.0-beta2.