Remote code execution in SimpleX Chat before v6.5 is claimed via the /Terminal/Notification.hs component, where a crafted payload delivered inside a normal text message is said to execute arbitrary commands with zero user interaction (CWE-94 code injection). If accurate, any user running a vulnerable build could be compromised simply by receiving a message. No public exploit identified at time of analysis and EPSS is low (0.22%, 12th percentile); the claim rests on a single third-party disclosure blog rather than a vendor advisory, so treat the severity as unconfirmed.
Authentication bypass in DWSurvey v6.14.0 lets remote unauthenticated attackers reach protected API functionality through the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' endpoint paths, which are treated as public and skip access-control checks. A public technical writeup describing the flaw exists; it is not listed in CISA KEV and the EPSS probability is low (0.18%, 8th percentile), indicating no evidence of widespread automated exploitation yet despite the critical 9.8 CVSS rating.
Heap-based buffer overflow in Das U-Boot (the Denx universal embedded bootloader) before 2026.04 allows an attacker who controls an ext4 filesystem image to trigger an integer overflow in the ext4fs_get_bgdtable() block-group descriptor table size calculation, resulting in an undersized allocation that is later overrun by memcpy(). Successful exploitation can lead to arbitrary code execution in the highly privileged pre-OS boot context, denial of service, or memory corruption. No public exploit identified at time of analysis (a referenced GitHub gist may contain a proof-of-concept but is unverified), EPSS is low at 0.18% (7th percentile), and it is not listed in CISA KEV.
Remote code execution in AntFlow V2.0.0 arises because the ActivitiTest.java handler evaluates attacker-supplied JUEL (Java Unified Expression Language) expressions without any input filtering, letting an attacker run arbitrary Java code and operating-system commands on the host. The affected component is described as a front-desk (pre-authentication) endpoint, so exploitation appears to require no valid account. Publicly available exploit code exists via a GitHub write-up, though EPSS remains low (0.17%, 7th percentile) and it is not on CISA KEV.
Memory corruption in Das U-Boot's ZFS filesystem driver (all releases before 2026.04) lets an attacker who controls the on-disk ZFS metadata trigger an integer overflow (CWE-190) that leads to undersized allocation and out-of-bounds access, enabling a boot-time crash or arbitrary code execution in the pre-OS bootloader context. Rated CVSS 9.8 by the reporter, but the flaw is reached only when U-Boot parses attacker-supplied ZFS storage during boot, so realistic exploitation is local/physical rather than network-borne. EPSS is low (0.17%, 7th percentile) and there is no confirmed active exploitation.
Unauthenticated configuration disclosure in Baidu disconf 2.6.36 lets any anonymous network attacker read every configuration item and file managed by the config center. The LoginInterceptor whitelists four config-fetching endpoints (/api/config/item, /api/config/file, /api/config/list, /api/config/simple/list), bypassing authentication entirely. SSVC records a public proof-of-concept and full technical impact; EPSS is currently low (0.17%, 6th percentile), and there is no public exploit identified as actively exploited in the wild.
Unauthenticated configuration disclosure in SuperDiamond (super-diamond-server) versions 1.3.3 and earlier exposes the Netty-based configuration distribution service on TCP port 8283 without any authentication mechanism. Any remote attacker who can reach the port can send a raw TCP request and retrieve the complete configuration of any managed project, including database passwords and API keys. A public write-up exists but there is no public exploit identified as weaponized tooling, and the flaw is not in CISA KEV; EPSS is low at 0.17% (6th percentile).
Denial-of-service (and potential memory corruption) in the Stomper STOMP message broker (commit 5e2741e) lets remote attackers crash the broker process by abusing frame sequencing. By opening a connection that sends multiple CONNECT frames and subscribes a destination, then having another client SEND to that destination, an attacker triggers a heap use-after-free on a freed StompStreamSocket object. A public proof-of-concept write-up exists (no confirmed active exploitation), and because the protocol path requires no authentication by default, exploitation is straightforward against exposed instances.
SQL injection in the smart-web2 v1.3.1 backend report module lets attackers execute arbitrary SQL because the sqlResource.sql parameter, saved via ReportController.save() into the t_report_sql_resource table, is concatenated directly into Hibernate native queries without parameterization or filtering. Any actor able to reach the report-save interface can read, modify, or destroy database contents. No CISA KEV listing exists and EPSS is low (0.15%), but a public write-up detailing the flaw is available on GitHub.
Remote code execution in Cohere North AI v1.1.5 arises from an arbitrary file upload flaw in the /v1/my_drive/batch_upload endpoint, where insufficient validation of uploaded file type/content lets an attacker place a malicious file that the server subsequently executes. The affected component is part of Cohere's North enterprise AI knowledge platform, and successful exploitation yields full compromise of confidentiality, integrity, and availability. No public exploit is identified in the intelligence feeds, though a third-party technical write-up exists on GitHub; EPSS is low (0.15%, 5th percentile), indicating limited observed exploitation activity to date.
Unauthenticated SQL injection in Mingsoft MCMS versions 6.2.0 and earlier lets remote attackers inject arbitrary SQL through the size parameter of the front-end /cms/category/list endpoint. The parameter is rendered directly into the query's LIMIT clause via the FreeMarker expression ${size} without parameter binding, and the built-in SqlInjectionUtil blacklist omits CREATE/TABLE/SET/PREPARE/EXECUTE, so its filter is bypassable and stacked queries execute. No login is required; publicly available exploit/write-up code exists, though EPSS remains low (0.15%) and there is no public exploit identified as weaponized beyond the researcher proof-of-concept.
Sensitive-data exposure in Cohere North AI v1.1.5 stems from the server accepting cross-origin requests without validating the Origin header, letting any untrusted website read authenticated API responses in a victim's browser. Affects the North enterprise AI platform; tagged as CORS misconfiguration / information disclosure. No public exploit or active exploitation is identified, and EPSS is low (0.14%, 4th percentile), though the NVD-published CVSS of 9.8 likely overstates real-world impact.
SQL injection in Funiture 1.0.0 lets remote unauthenticated attackers manipulate backend database queries through the /sys/tool/select.json and /sys/tool/update.json tool-management endpoints (CWE-89). Publicly available exploit code exists (a GitHub write-up and VulDB entry), though the flaw is not listed in CISA KEV and its EPSS probability is low (0.14%, 4th percentile), suggesting no widespread automated exploitation yet despite a CVSS of 9.8.
SQL injection in super-diamond-server (versions <= 1.3.3) lets remote attackers manipulate backend database queries via the front-end preview endpoint /superdiamond/preview/{projectCode}/{module}/{type}. The module path parameter is split with StringUtils.split() and concatenated directly into a SQL IN clause without parameterization, giving unauthenticated attackers (per CVSS PR:N) a path to read, alter, or destroy configuration data. Publicly available exploit code exists (referenced write-up), though EPSS remains low at 0.14% and there is no evidence of active exploitation.
Arbitrary file upload in DocSys-master V2.02.85 lets remote attackers upload malicious files through the uploadMarkdownPic interface in DocController.java, bypassing intended image-only restrictions on the Markdown picture-upload endpoint. Because a webshell or other executable payload can be written into a web-accessible path, this can escalate to full server compromise and remote code execution. Publicly available exploit code exists (a GitHub write-up with reproduction steps); it is not listed in CISA KEV and EPSS is low (0.14%, 4th percentile), indicating no evidence of widespread automated exploitation yet.
Out-of-bounds kernel memory read in the Linux kernel's libceph client (decode_watchers()) lets a malicious or compromised Ceph OSD trigger a 4-byte read past a validated buffer when it returns an obj_list_watch_response_t reply with struct_len=0. Any kernel client issuing CEPH_OSD_OP_LIST_WATCHERS is affected; the leaked garbage value is then used as a watcher count for allocation, risking information disclosure or unstable allocation behavior. Tagged as Information Disclosure with no public exploit identified at time of analysis and no CISA KEV listing, despite an NVD CVSS of 9.8.
A use-after-free / lifetime race in the Linux kernel's ovpn (in-kernel OpenVPN data-channel offload) module lets crypto completion callbacks outlive the peer and netdev they depend on. Because the callback holds both key-slot and peer references, dropping the last peer reference too early can schedule an RCU callback backed by already-freed module text after ovpn_cleanup's rcu_barrier has run, corrupting kernel memory during peer teardown or module removal. There is no public exploit identified at time of analysis, and despite the input's 9.8 CVSS this is a teardown-path race, not a remote unauthenticated RCE.
Unrestricted file upload in the wedevs WP ERP plugin (ERP: Complete HR, Accounting & CRM Suite for WooCommerce) for WordPress, in all versions through 1.17.8, allows unauthenticated attackers to write attacker-controlled PHP into wp-content/uploads/ via the save_attachments() function when the CRM IMAP Email Connect feature parses inbound email attachments. Because file extension validation and path normalization are both missing, a crafted email with a forged References header and a path-traversal filename escapes the .htaccess-protected crm-attachments directory, enabling remote code execution on hosts where PHP executes in the uploads directory. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the CVSS base score of 9.8 reflects the unauthenticated, network-reachable nature of the flaw.
Remote code execution in Ubiquiti EdgeMAX EdgeSwitch devices allows an attacker on an adjacent network to fully compromise the switch by exploiting a heap-based buffer overflow in its DHCPv6 handling. The flaw affects EdgeSwitch units that have DHCPv6 enabled and requires no authentication or user interaction, only Layer 2/link-local reachability. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the CVSS 9.6 rating and network-daemon attack surface make it a high-priority patching target.
Unauthenticated remote access to the CRUD operation handler in itsourcecode Payroll System 1.0 allows any network-accessible attacker to create, read, update, or delete payroll records without credentials. The root cause is CWE-306 - the ajax.php endpoint processes the 'action' parameter and executes database operations without verifying caller identity. A public proof-of-concept exploit is available on GitHub, making exploitation trivially accessible to low-skill attackers against any internet-exposed deployment.
Server-side request forgery in ddfourtwo sentry-selfhosted-mcp 0.4.0 allows remote unauthenticated attackers to manipulate the endpoint argument in the raw_sentry_api component, causing the server to issue arbitrary HTTP requests to internal or external hosts. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) confirms no authentication or user interaction is required, and a public exploit exists via a GitHub issue report. No patch has been released - the project maintainer has not responded to the coordinated disclosure.
Improper authorization in GitLab Enterprise Edition allows an authenticated project Maintainer to access the interactive terminal of a protected environment they are explicitly excluded from, bypassing environment-level access controls enforced separately from project roles. Affected versions span a wide range - all EE releases from 11.3 through 19.3.0 - meaning the exposure window is substantial across the enterprise install base. A publicly available exploit exists via a disclosed HackerOne report; no active exploitation (CISA KEV) has been confirmed at time of analysis.
SQL injection in the RegistrationMagic WordPress plugin (all versions before 6.0.9.4) permits authenticated administrators to inject arbitrary SQL through an unsanitized parameter. The CVSS Scope:Changed metric indicates the injected query can reach beyond the WordPress application boundary into the underlying database layer, enabling cross-schema data reads. A publicly available proof-of-concept exists via WPScan, though EPSS at 0.19% and SSVC exploitation status of 'none' indicate limited real-world abuse at time of analysis.
OS command injection in Dell Cloud Disaster Recovery (versions 20.2 and prior) lets an already high-privileged, remote user smuggle special shell characters into a command the product executes on the underlying host, resulting in arbitrary command execution. Dell rates it CVSS 9.1 with a scope change, meaning the injected commands can escape the application's authorization boundary onto the host OS. No public exploit identified at time of analysis and the flaw is not on CISA KEV, so severity is driven by impact rather than confirmed activity.
Remote code execution in Google Cloud BigQuery Data Transfer Service (versions prior to the 2026-05-01 service release) allows an authenticated tenant user to run arbitrary code inside the managed connector container and escalate privileges within the tenant project by supplying crafted parameters in a JDBC connection string routed through the bundled CData JDBC driver. Rated CVSS 4.0 9.4 (Critical) with a scope change to subsequent systems, the flaw was fixed server-side by Google on 1 May 2026 and requires no customer action. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Kernel-state confusion in the Linux MPTCP subsystem allows a remote peer to leave stale Multipath TCP Fast Open (MPTFO) state on a passively-opened socket by sending a valid-cookie TCP Fast Open SYN that carries no payload. Because mptcp_fastopen_subflow_synack_set_params() set the is_mptfo flag before verifying that data was actually queued, a data-less TFO SYN triggers a WARN and, if non-fatal, leaves the subflow in an inconsistent state that can later be tripped inside check_fully_established(). The upstream fix marks the subflow as MPTFO only after an SKB is confirmed queued and returns quietly on an empty receive queue. No public exploit identified at time of analysis; the input carries the inflated CVSS 9.4 typical of automated kernel-CVE scoring rather than a demonstrated high-impact primitive.
Path traversal in the Directorist WordPress plugin (versions 8.5 through before 8.9.3) allows subscriber-level authenticated users to relocate arbitrary server-readable image files into a publicly accessible directory and delete them from their original location. The flaw stems from unsanitized user-supplied image references passed directly to a file-move operation, exposing sensitive server files to unauthenticated public access after the move. Publicly available exploit code exists per WPScan reporting; however, EPSS sits at 0.19% (9th percentile), and the requirement for a subscriber-level account limits opportunistic mass exploitation.
Unauthenticated arbitrary file upload in Thinking Software Technology's EFence (versions up to and including 1.2.66, DB Ver:56) lets remote attackers upload executable web shell backdoors and run arbitrary code on the underlying server. The flaw requires no authentication or user interaction over the network, yielding full compromise of confidentiality, integrity, and availability. Reported by TWCERT; no public exploit identified at time of analysis, and EPSS exploitation probability is moderate at 0.68% (50th percentile).
Improper access control in the Project Manager WordPress plugin before 4.0.7 exposes several REST API routes without project-membership enforcement, allowing any low-privilege authenticated user - including subscribers - to read task content and user email addresses across projects they do not belong to, and to modify task boards of arbitrary projects. The flaw is a classic CWE-284 (Improper Access Control) exploitable with no special configuration, network-accessible, and requiring only a valid WordPress account. A publicly available exploit exists via WPScan, though EPSS at 0.16% (5th percentile) indicates limited observed exploitation; no public exploit identified at time of analysis confirms CISA KEV status, so active widespread exploitation cannot be confirmed.
Authentication coercion in Veeam ONE lets an unauthenticated network attacker force the Veeam ONE service account to perform outbound SMB authentication to an attacker-chosen destination, exposing the account's NTLM credentials for capture and relay. The flaw (CWE-288, CVSS 4.0 base 9.3) is remotely triggerable with no privileges or user interaction and carries high subsequent-system impact, meaning captured service-account credentials can be relayed to pivot onto other systems. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated PHP object injection in the ILIAS e-learning platform allows remote attackers to achieve code execution as the web server user via the Shibboleth back-channel logout endpoint (shib_logout.php). The endpoint runs on an authentication-exempt path and passes every live session row's stored data through a hand-rolled parser that calls unserialize() with no class allowlist, so an attacker who first seeds a serialized object into a session row (via the equally unauthenticated LTI entry point) triggers a destructor-based POP chain that writes attacker-controlled JSON to an attacker-chosen path below the web root. No public exploit has been identified at time of analysis, but the flaw is unauthenticated and network-reachable, and the vendor CVSS 4.0 base score is 9.3 (Critical).
Out-of-bounds read in the RISC-V ZBB-optimized strnlen() routine of the Linux kernel allows the aligned-word loop to load one machine word past the caller-supplied count boundary; when the source is aligned and count is a multiple of the register size, the extra load lands exactly at s+count and faults if that address sits on an unmapped page boundary. The affected code path only runs on RISC-V hardware exposing the Zbb bitmanip extension. This has been fixed upstream (stable commits e697e30f and 5d588c68); no public exploit identified at time of analysis, and the CNA's 9.4 network-vector scoring is inconsistent with an arch-local kernel string-length primitive.
Broken authorization in getgrav/grav-plugin-api before 1.0.18 lets a scoped API key that belongs to a super-admin account perform privileged user-management actions it was never scoped for. Across seven sensitive endpoints the requireNotSuperTarget() guard in UsersController.php checks isSuperAdmin() on the underlying account instead of whether the presented key carries super authority (isSuperWithinScope()), so a deliberately down-scoped key can act against other super-admin accounts-disabling their 2FA, deleting avatars, and minting or deleting their API keys. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not on CISA KEV.
Improper access control on the debug and engineering interfaces of Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 drive platforms lets attackers read and write internal device values and, more critically, upload and execute unsigned applications, EEPROM data, and firmware through exposed service and software-update mechanisms. Rated CVSS 4.0 9.3, the flaw effectively bypasses code-signing and grants full control over affected industrial drive controllers. There is no public exploit identified at time of analysis, but the missing authentication and firmware-overwrite capability make this a severe integrity and availability risk for operational technology environments.
Cross-tenant data exposure in Google Cloud Vertex AI Search for Commerce (versions prior to 2026-04-27) allowed an authenticated attacker who knew a victim's Google Cloud project number to read from and write to the Cloud Storage buckets used for BigQuery Import staging, because those bucket names were predictably derived rather than randomized. An attacker could reach another tenant's staged catalog data and import error logs, breaching data confidentiality and integrity across project boundaries. There is no public exploit identified at time of analysis, and Google fixed the issue server-side so no customer action is required.
SQL injection and unrestricted template file loading in the Tutor LMS WordPress plugin before version 4.0.6 exposes non-public course question-and-answer content to unauthenticated remote attackers. User-supplied values are incorporated directly into database query grammar without validation, and no restriction is enforced on which template file a request may load. Although a publicly available proof-of-concept exists and the flaw is fully automatable with no authentication barrier, the SQL injection is constrained by database engine behavior such that it does not yield arbitrary table extraction - impact is limited to disclosure of restricted course Q&A material. No confirmed active exploitation (CISA KEV) has been reported at time of analysis.
Unauthorized reservation creation in the WPCafe WordPress plugin (all versions before 3.0.18) exposes the administrator moderation workflow to unauthenticated bypass through a missing authorization check in its REST API endpoint. The endpoint validates only a publicly available nonce - a control that provides no meaningful access restriction - allowing any remote user to submit reservations with an arbitrary approval status, including self-approving bookings that administrators would otherwise need to review and accept. A proof-of-concept exploit is publicly available via WPScan; however, EPSS stands at 0.19% (9th percentile), indicating that exploitation has remained limited despite trivially low attack prerequisites.
Payment amount manipulation in the Booking Package WordPress plugin (versions before 1.7.25) allows unauthenticated remote attackers to complete paid service bookings at an arbitrary fraction of the legitimate price. The plugin derives the charge amount from attacker-controlled HTTP request values rather than authoritative server-stored pricing, a classic business-logic trust boundary failure. A publicly available exploit exists per WPScan, though no CISA KEV listing was provided in input data, and EPSS at 0.18% (7th percentile) suggests limited observed mass exploitation to date.
Unauthenticated information disclosure in Royal Addons for Elementor (WordPress plugin) before version 1.7.1066 exposes names and IDs of non-public taxonomy terms to any remote caller. The plugin performs no capability or nonce verification before fulfilling taxonomy data requests, meaning access controls enforced by WordPress core are entirely bypassed at the plugin layer. A publicly available proof-of-concept exists per WPScan, and exploitation is assessed as automatable with partial technical impact by the SSVC framework.
Unauthenticated metadata tampering in Royal Addons for Elementor WordPress plugin before 1.7.1066 allows any remote visitor to overwrite like-count and visitor-tracking post meta on arbitrary posts, including private and draft posts, because the plugin's AJAX handler validates only a nonce - a value scrapeable from any public page - without performing any WordPress capability or post-ownership check. A publicly available proof-of-concept exists per WPScan. While exploitation is automatable and requires no credentials, the integrity impact is narrow, limited to engagement metadata rather than post content or authentication data.
Unauthenticated information disclosure in the Eventin WordPress plugin before 4.1.22 exposes private, draft, and pending posts - including the plaintext passwords and full content of password-protected posts - to any unauthenticated HTTP client via an unprotected REST API namespace. The flaw arises from missing authorization checks on post status and ownership within that namespace, meaning no credentials or privileges are required to enumerate and read content the site owner intended to restrict. A publicly available proof-of-concept exploit exists, and the attack is fully automatable per the SSVC framework, though CISA has not listed this in KEV and the EPSS score is low (0.18%), suggesting exploitation has not yet been widespread.
Stripe Payment Forms by WP Full Pay plugin for WordPress (all versions before 8.5.1) exposes customer subscription and billing data to unauthenticated network attackers due to a missing session-confirmation check in the customer portal workflow. The plugin returns sensitive financial records before verifying that a portal session has completed its confirmation step, enabling any unauthenticated user to read billing information belonging to a different customer. A publicly available exploit exists per WPScan intelligence, though EPSS sits at 0.18% (7th percentile), indicating limited observed exploitation despite the low-barrier attack path.
Kirki WordPress Customizer Framework plugin before 6.0.14 exposes registered user email addresses, comment author emails, non-public page content, and site settings to unauthenticated remote attackers via missing capability checks on public AJAX action endpoints. Every WordPress site running any Kirki version prior to 6.0.14 is affected regardless of configuration. A publicly available proof-of-concept exists per WPScan reporting; exploitation probability is currently low (EPSS 0.18%, 7th percentile) and no active exploitation is confirmed in CISA KEV, though the data harvested enables downstream phishing and credential-stuffing campaigns.
Unauthenticated payment bypass in the Eventin WordPress plugin before 4.1.19 lets any visitor fraudulently obtain valid paid event tickets without completing payment. By abusing a guest checkout token, an attacker can transition their own unpaid order to 'completed', triggering ticket issuance without a charge being processed. A publicly available proof-of-concept exists, and SSVC flags the attack as automatable - enabling scaled ticket fraud against any WordPress site running the affected plugin.
Unauthenticated remote attackers can invoke AI queries against a site owner's configured provider account through the AI Engine WordPress plugin before version 3.7.2. The plugin exposes an administration-only feature protected solely by a token it distributes to anonymous visitors - rather than a proper WordPress capability check - enabling any network-accessible attacker to submit arbitrary AI prompts billed to the operator's account. A publicly available proof-of-concept exists via WPScan; however, the vulnerability is not currently listed in the CISA KEV catalog, and EPSS sits at 0.17% (6th percentile), suggesting limited confirmed mass exploitation at time of analysis.
Broken authorization in the Grav API plugin (getgrav/grav-plugin-api) before 1.0.18 lets a holder of a scoped API key view - and potentially edit - a page's security/permission blueprint section beyond the scope their key was granted. The flaw lives in injectSecurityTab() of BlueprintController, which decides editability using raw isSuperAdmin()/hasPermission() checks and never calls scopeAllows(), so the per-key scope cap is silently bypassed. There is no public exploit identified at time of analysis and no KEV listing; the reporter (VulnCheck) explicitly could not confirm the end-to-end write-time impact, so confirmed effect is at least unauthorized disclosure of permission fields.
Uncontrolled recursion in the Linux kernel's s390 vfio-ccw driver lets a local actor on IBM Z (s390) hosts submit a channel program containing an unbounded number of chained CCW/Transfer-in-Channel (TIC) segments, which are processed recursively and can exhaust the kernel stack. Affected are s390 systems using vfio-ccw device passthrough to KVM guests; the impact is host instability and potential kernel memory corruption. No public exploit is identified at time of analysis, it is not in CISA KEV, and no EPSS score was provided.
Host-side memory corruption/information disclosure in the Linux kernel s390 vfio_ccw driver allows a malicious or compromised KVM guest on IBM Z mainframes to exploit a double-fetch race when the driver reads a guest-supplied IDAL (Indirect Data Address List). Because the first IDAW is read separately to size the transfer buffer, a guest that changes that address between reads can desynchronize the buffer size from the actual IDAW set, corrupting or leaking host memory (S:C, C:H/I:H/A:H, CVSS 9.3). No public exploit identified at time of analysis and the issue is not in CISA KEV; the fix (verifying the first IDAW is unchanged between reads) is available upstream via stable kernel commits.
Denial of service in qTox v1.18.4 lets an attacker crash the client through the profile-serialization code in src/persistence/serialize.cpp, classified as uncontrolled resource consumption (CWE-400). The description scopes this to a local attacker requiring victim interaction, and SSVC records a proof-of-concept, so publicly available exploit code exists; it is not listed in CISA KEV and EPSS is low (0.13%, 3rd percentile), indicating no evidence of widespread exploitation. Impact is limited to availability of the desktop client for the affected user, not remote code execution.
Unauthenticated disclosure and modification of runtime configuration in NebulaGraph (vesoft-inc nebula) through version 3.8.0 lets any network-reachable attacker read and rewrite daemon gflags via the built-in web service. Because the service in src/webservice/WebService.cpp binds to all interfaces with no authentication, token, or address restriction, an attacker can harvest sensitive paths (certificate, key, CA, and password-file locations) and disable transport-security flags, redirect logging, and weaken lockout controls without a restart. No public exploit is identified at time of analysis, but the flaw is trivial to trigger and was reported by VulnCheck.