SQL injection in the Link Whisper Free WordPress plugin (all versions before 0.9.7) enables authenticated users holding the Editor role or above to execute arbitrary SQL queries against the underlying WordPress database, with potential scope change to data beyond the plugin's own tables. Reported by WPScan with a publicly available proof-of-concept, this raises the practical exploitability despite the elevated privilege requirement. No CISA KEV listing indicates active mass exploitation has not been confirmed at time of analysis; a vendor-released patch (0.9.7) is available.
SQL injection in the Media Library Assistant WordPress plugin before version 3.40 allows authenticated users with the Author role to read sensitive database contents by injecting arbitrary SQL via an unvalidated search parameter in a media-library query handler. The scope-changed CVSS vector (S:C) reflects that exploitation can reach data beyond the plugin's immediate database scope, and a publicly available proof-of-concept exists per WPScan's disclosure. No public exploit identified at time of analysis for active exploitation, though the POC lowers the bar for abuse against any WordPress installation running the unpatched plugin.
Stored shortcode injection in the ProfilePress WordPress plugin before 4.17.1 allows unauthenticated attackers to persist shortcodes in two unfiltered profile fields, which WordPress then executes when any visitor loads the public profile page. The impact is limited to information disclosure - exposing a targeted user's email address, login date, and registration date - but the attack requires no elevated privileges and no special configuration beyond default plugin deployment. A publicly available exploit exists per WPScan's disclosure; patch version 4.17.1 is confirmed available from the vendor.
Server-Side Request Forgery in Unleash's addon and integration subsystem (versions prior to 7.5.2, 7.6.5, and 8.0.2) allows authenticated operators with CREATE_ADDON or UPDATE_ADDON permissions to cause the Unleash server to issue HTTP requests to arbitrary internal network addresses, including loopback, link-local, and cloud metadata endpoints such as the AWS Instance Metadata Service. The vulnerability exists because operator-supplied URL parameters in Webhook, Slack, Microsoft Teams, Datadog, and New Relic integration configurations were passed directly to the internal fetch function without SSRF filtering, enabling blind network probing via event status responses and credential forwarding when Authorization or API key headers are configured. Vendor-released patches are available and no public exploit code has been identified at time of analysis.
Session fixation in the Welcart e-Commerce WordPress plugin (all versions before 2.12.1) allows an unauthenticated remote attacker to pre-set a shop member's session identifier via a user-supplied request parameter, then silently hijack the authenticated session once the victim logs in through an attacker-crafted request. Because the plugin neither generates a fresh session ID on authentication nor rejects externally supplied session tokens, the attacker's chosen token becomes the victim's authenticated session. A publicly available POC exists via WPScan, and no KEV listing is present, though the combination of no required attacker privileges and a low-complexity exploit path elevates practical risk for any live Welcart storefront.
Passster WordPress plugin versions before 4.3.9 exposes globally password-protected post and page content to unauthenticated remote attackers via a flawed REST API path-matching bypass. The plugin's allowlist logic for public endpoints uses unanchored substring comparison against the full request URI rather than matching against the resolved WordPress route, meaning any attacker can craft a URI that embeds the whitelisted path segment anywhere within it to sidestep the protection gate entirely. A publicly available proof-of-concept exploit exists per WPScan, and the EPSS-relevant CVSS vector (PR:N, AC:L) confirms exploitation requires no authentication or special configuration beyond the plugin being installed with global password protection active.
Unauthenticated information disclosure in Dokan WooCommerce Multivendor Marketplace plugin (versions before 5.0.14) allows any remote actor to retrieve per-vendor commission configuration from an unprotected store REST endpoint without credentials. The exposed data includes commission type and, where category-based commissions are configured, per-category and default commission rates - leaking potentially sensitive business financial details for every vendor on the marketplace. A publicly available proof-of-concept exists; however, active exploitation has not been confirmed via CISA KEV.
Missing authorization on the Tamara Checkout WordPress plugin's public payment cancel/fail return URLs allows any unauthenticated remote attacker to cancel or fail arbitrary WooCommerce orders store-wide simply by enumerating sequential numeric order IDs. The plugin through version 1.9.9.20 performs no verification of the WooCommerce order key, a WordPress nonce, or any user capability before acting on the supplied ID, making mass order disruption trivial to automate. A publicly available exploit has been documented by WPScan; no KEV listing is present but the low-friction attack surface warrants prompt remediation.
Unauthenticated information disclosure in the NewPath WildApricotPress Add-on WordPress plugin (all versions through 1.0.0) exposes member-only contact fields - email addresses and phone numbers - to any anonymous internet visitor via a REST API route that omits access control enforcement. Site administrators who configure those fields as members-only visibility receive no protection because the REST endpoint bypasses the plugin's own privacy logic. A publicly available exploit exists per WPScan, and no vendor-released patch has been identified at time of analysis.
Webhook authentication bypass in the Charitable WordPress donation plugin (versions before 1.8.12) allows unauthenticated remote attackers to forge Square payment webhook notifications, causing the plugin to record donations as successfully paid without any actual financial transaction occurring. The vulnerability exists in all default configurations where Square is the configured payment gateway, requiring no credentials or user interaction to exploit. A publicly available proof-of-concept exists per WPScan reporting, though this vulnerability has not been listed in CISA's Known Exploited Vulnerabilities catalog at time of analysis.
Payment gateway merchant account verification is entirely absent in the myCred WordPress plugin before version 3.2.5, enabling unauthenticated remote attackers to fraudulently inflate their in-site credit balances by routing payments to a gateway account they control instead of the site operator's. An attacker needs only to complete a payment of the expected amount through a supported gateway and trigger the resulting notification to the vulnerable site - no knowledge of or access to the site's merchant credentials is required. A publicly available exploit exists per WPScan reporting (EUVD-2026-63909), and a vendor-released patch in version 3.2.5 is confirmed available.
Cleartext credential exposure in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator (all versions before 2.01.05) allows a local low-privilege attacker who meets specific preconditions to retrieve sensitive data stored unencrypted in application memory (CWE-316). The CVSS 4.0 vector's subsequent-system confidentiality impact (SC:H) is especially notable given this platform interfaces with fire alarm controllers and building safety networks, meaning extracted credentials could be leveraged against downstream safety-critical infrastructure. No public exploit code and no CISA KEV listing have been identified at time of analysis.
CSRF in the LitExtension WordPress migration plugin (≤1.2.5) allows an unauthenticated remote attacker to overwrite the store-migration connector's authentication token by tricking a logged-in administrator into clicking a crafted link. Token replacement gives the attacker control over the connector, potentially enabling unauthorized access to migrated store data or disruption of active migration workflows. A publicly available proof-of-concept exploit was published via WPScan; this vulnerability has not been added to the CISA KEV catalog at time of analysis.
Process-wide Mustache HTML escaping is permanently disabled in Unleash (all versions prior to 8.0.3) from the first moment any notification addon formats a feature event, allowing an editor-level user who has placed Slack or Teams link syntax in their unrestricted username to inject attacker-controlled hyperlinks into every configured outbound notification channel - including Slack, Microsoft Teams, Datadog, New Relic, and email. The scope change (S:C in CVSS) reflects that the vulnerable assignment in FeatureEventFormatterMd contaminates Mustache rendering across email-service.ts, webhook.ts, datadog.ts, and new-relic.ts for the lifetime of the Node.js process. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
Information disclosure in the Brushfire video content streaming platform (online.brushfire.com) exposes internal database path strings within HTTP responses to unauthenticated remote users, allowing enumeration of other users' data. The root cause is CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere), where backend infrastructure details are insufficiently abstracted from client-facing responses. The vendor applied a server-side fix in February 2026; no active exploitation has been confirmed and no public proof-of-concept has been identified.
Unauthenticated arbitrary directory listing in the Gallery element of the YOOtheme Zoo extension for Joomla exposes server-side directory structures to any remote, unauthenticated attacker on sites running Zoo versions prior to 4.1.66. The path traversal vulnerability (CWE-22) allows crafted requests to enumerate directories outside the intended scope of the Gallery element, potentially revealing sensitive filesystem layout including configuration paths, user data directories, or other installed components. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
STIX document import in misp-stix through version 2026.7.8 allows an unauthenticated attacker who can supply a crafted STIX bundle to inject arbitrary MISP attribute metadata - including distribution level, sharing_group_id, and classification tags - into the importing MISP instance. The import pipeline trusted attacker-controlled STIX fields (tool labels for STIX2, document title for STIX1) to decide whether content originated from MISP itself, and then passed the complete x_misp_attributes dictionary without field filtering directly into attribute creation. No public exploit has been identified at time of analysis; patch commits are available upstream from the MISP project.
Remote unauthenticated attackers can bypass mutual TLS client certificate verification on relay endpoints in Checkmk versions prior to 2.5.0p10 by supplying a fixed placeholder identity value in the request URL. Exploitation results in limited integrity and availability impact against the agent receiver relay channel, with no confidentiality exposure. Only Cloud, Ultimate, and Ultimate MT editions are affected, as relay endpoints are not exposed in other editions; no public exploit has been identified at time of analysis.
Vault token disclosure in the N-able PassPortal browser extension (versions before 3.49.6) stems from missing origin validation on postMessage events, classified under CWE-1385. A malicious web page can send a crafted postMessage to the extension listener, causing it to disclose HashiCorp Vault tokens to an untrusted origin - enabling authentication abuse against any Vault instance the user's session is authorized to access. No public exploit code has been identified at time of analysis, but the network-accessible, unauthenticated attack path (UI:A in CVSS 4.0) and high confidentiality impact make this a meaningful credential theft risk for MSP environments.
Hard-coded credentials embedded in VOCALOID6 by Yamaha Corporation allow an attacker to impersonate a legitimate VOCALOID6 Editor client and authenticate to Yamaha's backend activation and content delivery servers. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector indicates this is network-exploitable without authentication or user interaction, as the credentials are distributed within publicly available client software. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; the advisory was coordinated through JPCERT/CC (JVNVU90210212).
Unauthenticated file upload in J2Store (Joomla e-commerce extension) versions 1.0.0-3.3.20, 4.0.0-4.0.20, and 4.1.0-4.1.5 permits any remote visitor to POST arbitrary files to the upload endpoint without authentication or CSRF validation. A compounding installer manifest defect omits .htaccess and web.config protection for the upload and invoices directories on fresh installs, making uploaded files directly web-accessible over HTTP. The provided CVSS 4.0 vector includes E:A (Exploit Maturity: Attacked), indicating active exploitation is confirmed at the scoring level, though no corresponding CISA KEV entry was present in the supplied intelligence data.
Integer overflow in GNU Emacs PBM/PPM/PGM image loader (all versions before 31.0.91) enables heap memory disclosure when a user opens a crafted image file. Signed integer multiplication of image height, width, and channel count wraps to a negative value for sufficiently large inputs, bypassing the allocated-buffer bounds check and allowing the pixel reader to over-read heap contents, which are then rendered on-screen as color values. No active exploitation has been confirmed (not in CISA KEV), and no public exploit code has been identified at time of analysis; however, the VulnCheck-reported CVSS 4.0 score of 6.9 reflects high confidentiality and availability impact under local conditions with user interaction.
Resource exhaustion in Apache CloudStack's scoped global configuration subsystem-spanning versions 4.7.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0-allows authenticated low-privilege users to gradually trigger a denial-of-service condition against the management server. The vulnerability (CWE-772) affects multiple plugins including Quota and Host-HA, which allocate resources during configuration operations but fail to release them after their effective lifetime. No public exploit or active exploitation has been identified; vendor-released fixes are available in 4.20.3.1 and 4.22.1.1.
Symlink-following arbitrary file write in ONNX's save_external_data function (onnx/external_data_helper.py) allows a local attacker with write access to a shared directory to redirect a victim's model serialization writes to any file the victim can modify — including ~/.ssh/authorized_keys, cron entries, and application configuration files. All ONNX releases up to and including 1.20.1 (pip/onnx) are affected; the vendor-released patch is 1.21.0. Publicly available exploit code is confirmed via the GHSA advisory, and CISA has published a CSAF advisory (va-26-233-01) covering this issue, indicating heightened government-sector awareness.
Symlink-following vulnerability in Runtipi 4.10.0 and earlier enables authenticated administrators to write arbitrary content to any filesystem path accessible by the Runtipi process. An attacker with admin credentials plants a symlink inside a crafted backup archive targeting an arbitrary path, restores the archive via the backup API, and then invokes the user-config write endpoint - causing FilesystemService.writeTextFile() to follow the planted link and write attacker-controlled content outside the intended directory boundary. No public exploit is identified at time of analysis; vendor-released patch v4.10.1 is available and the fix is confirmed by GitHub advisory GHSA-wcrf-g9p9-2wg7.
Unauthorized document access in Combodo iTop before version 3.2.3 allows any authenticated user to retrieve documents and attachments belonging to organizations or objects they lack permission to view. The root cause is a logic inversion in the PHP DownloadDocument method: a host-object rights check could silently pass due to incorrect boolean handling, bypassing the intended access control gate entirely. No public exploit or CISA KEV listing has been identified at time of analysis, but the CVSS PR:L vector confirms exploitation requires only a valid low-privileged account.
Out-of-bounds read in iccDEV (all versions prior to 2.3.2.1) crashes the ICC profile parser via a size_t integer underflow in CIccEmbedIO::Read8() when processing embedded ICC v5 profiles. Unauthenticated remote attackers can trigger the denial-of-service condition by delivering a maliciously crafted ICC profile that requires user interaction to parse (e.g., opening a file in an application backed by this library). No public exploit code and no CISA KEV listing exist at time of analysis; vendor-released patch version 2.3.2.1 is available.
Unauthenticated deletion of the iTop `.readonly` write-protection file is possible in Combodo iTop prior to version 3.2.3, allowing any remote attacker to remove a critical filesystem-based access control mechanism. The `.readonly` file is created during the setup process specifically to block write operations on the iTop instance; its deletion effectively disables that safeguard without any credentials. No active exploitation has been confirmed (not in CISA KEV), but the low attack complexity and zero authentication requirement make this a straightforward attack against any exposed iTop instance. The issue is fixed in version 3.2.3 per the GitHub security advisory GHSA-2xh3-r27f-3pr5.
Incorrect authorization in Spring AI's tool calling subsystem allows the per-request tool allowlist to be bypassed at dispatch time, enabling invocation of tools not made available to the current request. Affected are Spring AI versions 1.0.0-1.0.9, 1.1.0-1.1.8, and 2.0.0. An authenticated low-privileged attacker who can influence model interactions may exploit this to invoke privileged tools outside their authorization scope, resulting in privilege escalation and potential confidentiality breach. No public exploit or CISA KEV listing has been identified at time of analysis.
Parser state isolation failure in misp-stix corrupts MISP event generation when the same parser instance is reused across independent STIX 1 and STIX 2 document conversions, causing retained artifacts - including galaxy clusters, passive DNS records, package titles, dates, and timestamps - from a prior document to contaminate subsequently generated MISP events. Applications directly consuming the misp-stix API with long-lived parser instances are at risk; the standard entry points that instantiate a fresh parser per file are not affected. No public exploit has been identified at time of analysis, and the CVSS 4.0 AT:P precondition metric confirms exploitation depends on a non-default deployment pattern compounded by attacker influence over document processing order.
Cross-customer order replication in J2Store (Joomla extension by j2commerce.com, versions 1.0.0-3.3.20, 4.0.0-4.0.20, and 4.1.0-4.1.5) allows an authenticated attacker to supply an arbitrary order_id and copy another customer's cart contents and shipping address data directly into the attacker's own session. The root cause is absent ownership validation on the order copy function - CSRF tokens are checked, preventing cross-site request forgery, but the back-end never verifies that the order_id belongs to the requesting user. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Stored cross-site scripting in the OpenSearch Dashboards dashboards-observability plugin allows a remote authenticated user with write permissions to saved objects to inject arbitrary JavaScript that executes in other users' browser sessions. Affected deployments include both self-hosted OpenSearch Dashboards and Amazon OpenSearch Service (managed). The scope change (S:C) and high confidentiality/integrity impact make this particularly dangerous in multi-tenant environments where admin accounts may view attacker-controlled saved assets. No public exploit or CISA KEV listing has been identified at time of analysis; vendor-released patches are available in versions 3.4.0 and 2.19.0.
Key derivation in VeraCrypt's non-default wolfCrypt backend silently substituted HKDF for PBKDF2-HMAC in SHA-256 and SHA-512 volume-header derivation, discarding the configured iteration count entirely - meaning any PIM or iteration tuning applied by users of affected builds provided zero additional brute-force resistance. Any attacker who obtains a volume file produced by a WOLFCRYPT=1 source build can attempt password recovery at HKDF speeds rather than PBKDF2-iterated cost, dramatically reducing the work factor. Official precompiled VeraCrypt binaries and standard distribution packages are entirely unaffected; no public exploit has been identified and this vulnerability is not listed in CISA KEV.
Reflected cross-site scripting in Esri Portal for ArcGIS versions 11.5 and prior allows a remote, unauthenticated attacker to craft a malicious URL that, when clicked by a victim, executes arbitrary JavaScript in the victim's browser. The CVSS Scope:Changed metric indicates that injected scripts may affect components beyond the vulnerable Portal itself, such as session tokens shared across an ArcGIS Enterprise deployment. No public exploit code has been identified at time of analysis, and this vulnerability does not appear in CISA KEV.
Stored XSS in Esri Portal for ArcGIS versions 11.5 and prior allows a remote attacker to inject persistent malicious scripts that execute in a victim's browser upon visiting affected portal content. Successful exploitation can yield session hijacking, credential theft, and unauthorized actions performed within a victim's authenticated portal session. No public exploit has been identified at time of analysis, and this CVE is not currently listed in CISA KEV.
Stored cross-site scripting in Esri Portal for ArcGIS versions 11.1 through 12.1 enables a remote, privileged attacker to persist malicious JavaScript in the portal, which then executes in the browsers of users who subsequently view the affected content. The vulnerability carries a CVSS 3.1 score of 6.1 (Medium) with scope change (S:C), meaning successful exploitation crosses trust boundaries into victims' browser sessions. No public exploit code or CISA KEV listing has been identified at time of analysis, and Esri has released patches via their August 2026 ArcGIS Security Bulletin.
Infracost's template engine prior to v0.10.45 allows repository-controlled symlinks to escape the checkout directory, enabling any contributor with repository write access to read files accessible to the CI/CD runner. The vulnerable template functions - readFile, pathExists, isDir, and matchPaths in internal/config/template/parser.go - relied on lexical filepath.Abs normalization and leaf-only os.Lstat checks that failed to resolve intermediate directory symlinks, so a path like evil/secret passes validation while physically exiting the repository root. Captured file contents are rendered into Infracost configuration output and surfaced via the Infracost dashboard or pull request comments; no public exploit identified at time of analysis, and vendor-released patch is confirmed in v0.10.45.
Line-protocol injection and log spoofing in Spring Micrometer's StatsD and LoggingMeterRegistry components allow network-reachable attackers to forge arbitrary metrics and log entries by embedding newline characters into user-supplied strings that flow unvalidated into meter names, tag keys, or tag values. Affected deployments span the 1.9.x through 1.17.x release lines of io.micrometer:micrometer-registry-statsd and io.micrometer:micrometer-core when the Datadog or Etsy StatsD flavor is active, or when LoggingMeterRegistry is in use. No public exploit has been identified at time of analysis, though the integrity-focused impact carries real risk for organizations whose incident-response workflows depend on Micrometer-sourced telemetry.
Token exfiltration in Infracost prior to 0.10.45 allows an attacker who controls scanned Terraform source to redirect a configured Terraform Cloud or registry credential to an arbitrary attacker-controlled host. The vulnerable code path in internal/hcl/remote_variables_loader.go derived the destination hostname from untrusted Terraform cloud/backend block attributes without validating it against the operator-configured trusted host. CI pipelines using pull_request_target or same-repository pull request workflows that expose a TFC token to Infracost scans are affected; standard fork pull_request workflows without secrets are explicitly not vulnerable. No public exploit code has been identified at time of analysis, and this CVE is not listed in CISA KEV.
CRLF injection in @fastify/busboy's multipart part-header parser allows unauthenticated remote attackers to embed bare carriage return or line feed characters into parsed Content-Disposition filenames and field names, which are then handed to applications as if they were clean values. All versions through 3.2.1 are affected; the fix is in 3.2.2. When applications forward these tainted values to CR/LF-sensitive sinks - HTTP response headers, log systems, or filesystem paths - attackers can achieve log forging, HTTP header injection, or filesystem filename pollution. No public exploit or CISA KEV listing has been identified at time of analysis.
Stored cross-site scripting in Esri Portal for ArcGIS versions 11.5 and prior enables a remotely authenticated administrator to inject persistent malicious JavaScript that executes in other users' browsers upon page load. The scope change (S:C) in the CVSS vector confirms the attacker's injected payload crosses from the server context into victims' browser sessions, enabling session hijacking, credential theft, or DOM manipulation. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present; Esri has issued a patch via the August 2026 ArcGIS security bulletin.
Stored cross-site scripting in Esri Portal for ArcGIS versions 11.1 through 11.5 permits a remote attacker holding high portal privileges to persist malicious JavaScript payloads in portal content. When any other authenticated user browses the affected item, the injected script executes in their browser, enabling session hijacking, credential exfiltration, or portal actions performed on the victim's behalf. No public exploit code has been identified and the vulnerability is absent from the CISA KEV catalog at time of analysis; however, the CVSS scope-change metric (S:C) signals that impact crosses the security boundary of the vulnerable component and extends to victims' browser sessions.
Stored cross-site scripting in Esri Portal for ArcGIS versions 11.1 through 11.5 allows a remote, privileged attacker to persist malicious JavaScript within the portal, which subsequently executes in the browsers of any user who views the affected content. The vulnerability carries a CVSS 3.1 score of 5.5 with scope change (S:C), reflecting that exploitation crosses from the portal server into victim browser sessions, enabling session hijacking, credential harvesting, or unauthorized portal actions on behalf of victims. No public exploit code or CISA KEV listing has been identified at time of analysis, but Esri has released patches for affected enterprise versions and advises upgrading to the latest long-term support release.
Kernel heap corruption and GPU memory leaks in Imagination Technologies Graphics DDK expose systems to local denial-of-service from non-privileged users. A double-free defect in the GPU memory free paths - triggered via user-initiated GPU system calls - can corrupt kernel heap state or cause memory leaks, with potential availability impact at the kernel level. No active exploitation is confirmed (EPSS 0.15%, no CISA KEV listing), but a vendor patch is available and a ChromeOS stable channel advisory confirms real-world distribution reach.
Stack exhaustion in the Picotls minicrypto backend's custom ASN.1 validator allows an attacker who can supply crafted private-key material to crash any application that calls ptls_minicrypto_load_private_key() or the public ptls_asn1_validation() API on untrusted DER input. All Picotls versions prior to upstream commit c14231d80 are affected when the minicrypto backend is in use; applications using the libcrypto (OpenSSL) backend are immune because OpenSSL performs its own bounded DER parsing. No public exploit has been identified and no CISA KEV listing exists; CVSS 5.5 reflects a local, user-interaction-dependent denial-of-service with no code execution potential.
HTML injection in Esri Portal for ArcGIS versions 11.1 through 12.0 enables a remote authenticated attacker to insert arbitrary HTML into the Portal for ArcGIS Home application, potentially exposing other portal users to malicious content. The flaw is tagged as XSS and classified under CWE-79, meaning unsanitized attacker-controlled input is rendered in the browser context of other users visiting the Home application. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code is identified, though the relatively low privilege requirement (authenticated, low-privilege user) broadens the potential attacker pool within any ArcGIS Enterprise deployment.
Improper access control in Apache CloudStack's annotation APIs (addAnnotation and listAnnotation) allows any authenticated user to read and write annotations on entities they do not own. The APIs perform an ownership check when an entity UUID is supplied but fail to enforce the result of that check, reducing authorization to a formality that any authenticated user can bypass. No public exploit has been identified at time of analysis; no EPSS or CISA KEV data is available, but the bug affects all CloudStack deployments from 4.15.0.0 onward until the patched releases.
Denial of service in Micrometer Tracing's Brave bridge allows remote unauthenticated attackers to crash Spring Boot 3.x+ applications by sending HTTP requests with artificially inflated W3C baggage headers. The parser allocates one BaggageField object per baggage key-value pair without enforcing any limit, violating the W3C Baggage specification's own security guidance, leading to garbage collection saturation, CPU spike, and eventual OutOfMemoryError. No public exploit code has been identified at time of analysis, but the attack is trivially constructible given the documented mechanism.
Missing authentication in Esri Portal for ArcGIS versions 11.1 through 12.0 permits a remote unauthenticated attacker to read a specific internal resource intended to be access-controlled. The flaw (CWE-306) means one or more endpoints fail to enforce authentication before returning protected content, though the exposed resource is explicitly scoped to non-user data. No public exploit code or CISA KEV listing has been identified at time of analysis; the CVSS 5.3 Medium rating reflects the bounded confidentiality-only impact.
Missing authentication for a critical function in IKAS Technology Inc. Rush (versions through 21082026) permits unauthenticated remote attackers to forge the apparent source of data submitted to the system. Disclosed by Turkey's national CERT (USOM) under advisory TR-26-0883, this CWE-306 flaw carries a CVSS 5.3 Medium rating with network-level reach and no authentication barrier. No active exploitation has been confirmed (not listed in CISA KEV), and no public exploit code has been identified at time of analysis.