Complete authentication bypass in TarsWeb (the web console for the TARS microservice framework) through 3.0.14 lets a remote unauthenticated attacker act as any account, including an administrator, by sending a forged X-Forwarded-For header naming the loopback address together with a uid query parameter. Because app.js trusts Koa's proxy option blindly and the SSO middleware treats the loopback allowlist match as authorization to adopt the caller-supplied uid, no ticket, cookie, or password is ever checked. No public exploit is identified at the time of analysis, but the technique is trivial and the CVSS 4.0 base score is 9.3 (Critical).
Command injection in Ubiquiti's UID Enterprise Agent lets a high-privileged, network-adjacent actor run arbitrary OS commands on the host device by supplying improperly validated input. The flaw carries a CVSS 9.1 rating driven by a scope change and full compromise of confidentiality, integrity, and availability, though exploitation requires existing high privileges (PR:H). No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Command injection in Ubiquiti UniFi OS Server allows an attacker holding high-privilege access and network reachability to execute arbitrary operating-system commands on the underlying host, per Ubiquiti Security Advisory Bulletin 067. The flaw stems from improper input validation (CWE-20) and, with a scope-changed CVSS 9.1, lets a compromised or malicious privileged account break out of the application context to fully control the host. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Command injection in Ubiquiti UniFi OS Server allows an attacker holding high-privilege (administrative) access on the network-reachable management interface to break out of the application and run arbitrary operating-system commands on the underlying host device. The flaw stems from improper input validation (CWE-20) and carries a vendor-assigned CVSS of 9.1, driven largely by a scope change from application to host. No public exploit identified at time of analysis, and it is not listed in CISA KEV; the only source is Ubiquiti's own Security Advisory Bulletin 067.
Authenticated command injection in Ubiquiti's UniFi Network Application (the controller software managing UniFi network gear) allows an attacker holding high-privilege access on the network to inject and execute operating-system commands on an adopted device managed by the controller. Because the injected command runs on a downstream device rather than the controller itself, the flaw crosses a trust boundary (CVSS scope change) and yields full confidentiality, integrity, and availability impact on the target device. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Remote code execution in Google langfun before 0.1.2 arises because the default lf.query Python protocol evaluates model-generated Python expressions with no sandbox, letting remote unauthenticated attackers run arbitrary code in the host application by supplying crafted prompt inputs that steer the model into emitting executable code. Because langfun embeds directly in LLM-driven Python applications, any deployment that pipes untrusted prompt content through lf.query is exposed. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the CVSS 4.0 base score of 9.2 (CRITICAL) reflects full confidentiality, integrity, and availability impact.
Command injection in TeamViewer Full Client and Host for Linux (prior to version 15.81.5) allows remote attackers to execute arbitrary OS commands as the current user by sending a crafted URL through the out-of-session chat feature. The attack exploits CWE-78 (OS Command Injection) in the Linux URL-handling path and requires only that the victim click the malicious link - no attacker authentication is needed. No public exploit has been identified at time of analysis; the vendor has released a patch in version 15.81.5 per advisory TV-2026-1009.
Privilege escalation in Ubiquiti's UniFi Network Application allows an already-authenticated, high-privileged user with network access to gain elevated rights within the application through an improper access control (CWE-284) flaw. Ubiquiti self-reported the issue in Security Advisory Bulletin 067 and tags it as an authentication bypass; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. The vendor rates it CVSS 9.1, driven largely by an assumed scope change, though the practical bar is raised by the requirement for pre-existing high privileges.
Information disclosure in the OpenRISC OR1200 processor soft-core (commit 83ac6b) arises from a mismatch between the RTL source and the synthesized netlist, meaning the fabricated/synthesized hardware behaves differently than the verified design and can leak confidential state or misbehave. The flaw was surfaced by the academic SynFuzz RTL-vs-netlist fuzzing research (arXiv:2504.18812) rather than by field exploitation; no public exploit identified at time of analysis and EPSS is low (0.15%, 5th percentile). The NVD CVSS of 9.1 (C:H/A:H) is far more alarming than the vague one-line description supports, so the score should be treated skeptically.
Server-side request forgery in JetLinks Community 2.11 lets attackers abuse the device metadata import endpoint (/device/instance/{productId}/property-metadata/import) to coerce the server into issuing arbitrary outbound requests. Because the platform sits at the IoT control layer, this can be used to reach internal-only services, cloud metadata endpoints, and other network-segment resources normally shielded from the internet. A public write-up/POC exists (GitHub) and SSVC rates the flaw as automatable with total technical impact, though EPSS remains low (0.14%) and it is not on CISA KEV, so no public exploit identified at time of analysis as active exploitation.
Server-side request forgery in Zyplayer-Doc version 1.0.0 and earlier lets remote unauthenticated attackers coerce the server into issuing arbitrary outbound requests through the WikiPageWebService.download() function. Because the wiki page download feature fetches attacker-controlled URLs without validation, an attacker can reach internal-only services, cloud metadata endpoints, and other back-end systems the server can see. Publicly available exploit code exists (a GitHub write-up), CVSS is rated 9.1, and SSVC flags the flaw as automatable with total technical impact, though it is not listed in CISA KEV.
Hard-coded credentials in TÜBİTAK BİLGEM's Liderahenk Linux endpoint management platform (all versions before 3.5.5) let a remote, unauthenticated attacker log in using built-in default/common username-password pairs, yielding an authentication bypass with high confidentiality and integrity impact. Because Liderahenk centrally administers fleets of Pardus/Linux clients, valid access to its management interface exposes managed-endpoint policies and configuration. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw was reported by Turkey's national CERT (TR-CERT).
Authentication bypass in Ubiquiti UniFi OS lets a network-adjacent attacker circumvent login on affected devices by injecting CRLF sequences, granting full control over the appliance under certain conditions. It affects a broad range of UniFi OS platforms including Cloud Gateways, Dream Machines/Routers, Cloud Keys, and Enterprise NVR/NAS hardware. Reported by Ubiquiti with a CVSS of 9.0; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the high scope-changing impact makes it a priority to patch.
Privilege escalation in Ubiquiti's UniFi Connect Display Cast Pro lets a network-adjacent attacker abuse an improper access-control flaw to gain elevated rights on the device under certain conditions. The issue was reported by Ubiquiti and disclosed in Security Advisory Bulletin 067; it is tagged as an authentication bypass. No public exploit identified at time of analysis, and it is not listed in CISA KEV, but the vendor-assigned CVSS of 9.0 marks it as critical.
Privilege escalation in Ubiquiti UniFi OS affects a broad range of gateway, NVR, storage, and Cloud Key appliances running the UniFi OS platform, where leftover Active Debug Code (CWE-489) lets an authenticated low-privilege actor with network access elevate their privileges on the device. The flaw is vendor-reported via Ubiquiti Security Advisory Bulletin 067 and carries a 9.0 CVSS driven by a security-scope change and full confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the wide device footprint makes it a notable patch priority.
OS command injection in Dell PowerProtect One versions 20.1.0.0 and below allows remote code execution by low-privileged authenticated users. The CWE-78 root cause indicates that user-controlled input is passed unsanitized to OS-level shell commands exposed through a network-accessible interface. Dell confirmed this in advisory DSA-2026-369; no public exploit or CISA KEV listing has been identified at time of analysis, though the full C:H/I:H/A:H impact profile makes this a high priority for any organization running this data protection platform.
OS Command Injection in Dell PowerProtect One versions 20.1.0.0 and below allows a remote low-privileged attacker to execute arbitrary operating system commands on the underlying host. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms network-accessible exploitation requiring only a valid low-privileged credential, with full confidentiality, integrity, and availability impact on the vulnerable system. No public exploit code or active exploitation has been identified at time of analysis.
Unbounded memory allocation in amqp091-go (RabbitMQ's official Go AMQP 0.9.1 client) before v1.13.0 allows a malicious or compromised AMQP broker to force connected clients to allocate and process content body frames exceeding the negotiated frame_max limit, bypassing protocol framing constraints and causing application-layer denial of service. The root cause - confirmed via PR diff - is the client's blind acceptance of broker-advertised frame sizes during the TUNE handshake without enforcing the AMQP specification's minimum frame floor. No public exploit or CISA KEV listing exists at time of analysis; a vendor-released patch is available in v1.13.0.
Cookie forgery in the Mang Board WP WordPress plugin (≤2.3.7) enables any subscriber-level account holder to forge administrator authentication cookies and change the administrator password, resulting in complete WordPress site takeover. The flaw originates in `mbw_get_hash_key()`, which generates HMAC material from the currently logged-in user's identity rather than the username embedded in the cookie under validation, while `mbw_validate_auth_cookie()` performs insufficient verification - allowing the forged cookie to pass as legitimate. No public exploit has been identified at time of analysis and no CISA KEV listing is present, but the CVSS 8.8 score accurately reflects the low privilege bar required and full confidentiality, integrity, and availability impact.
SQL injection in Thinking Software Technology's Efence (versions ≤ 1.2.66 DB Ver:56) exposes full database contents to unauthenticated remote attackers via the file upload functionality. The CVSS 4.0 score of 8.8 with PR:N and AV:N confirms no credentials are required, and SSVC rates the attack as automatable. No public exploit code or CISA KEV listing exists at time of analysis, but the attack surface is low-complexity and network-accessible.
Out-of-bounds write in FreeBSD's userspace ppp(8) daemon allows a malicious PPP peer to crash the process or execute arbitrary code as root. The flaw is in LcpDecodeConfig(), which fails to validate endpoint discriminator option lengths against the RFC 1717 minimum, enabling memory corruption during LCP negotiation. Affected releases are FreeBSD 15.1-RELEASE prior to p3, 15.0-RELEASE prior to p13, and 14.4-RELEASE prior to p9; no active exploitation or public proof-of-concept has been identified at time of analysis.
Heap-based buffer overflow in FreeBSD's ppp(8) daemon allows a malicious PPP peer to crash the daemon or execute arbitrary code as root. The flaw resides in mp_Enddisc(), which miscalculates buffer lengths when formatting Multilink PPP endpoint discriminator addresses, overflowing a global result buffer. Affected releases are FreeBSD 14.4-RELEASE prior to p9, 15.0-RELEASE prior to p13, and 15.1-RELEASE prior to p3; no active exploitation is confirmed (not in CISA KEV), but SSVC rates the technical impact as total and the attack as automatable.
Privilege escalation in Unraid OS 6.12.14 and earlier is enabled by a CSRF vulnerability rooted in the authentication cookie's lax SameSite policy, allowing a remote attacker to forge authenticated requests on behalf of a logged-in victim. When an authenticated Unraid user visits an attacker-controlled page, the browser's permissive cookie policy causes the session credential to accompany the cross-site request, potentially granting the attacker elevated access to the NAS management interface. No active exploitation is confirmed by CISA KEV; EPSS sits at 0.28% (20th percentile), though public security research at alittleinsecure.com documents the vulnerability in detail.
Improper authentication in Dell PowerProtect Cyber Recovery (versions prior to 20.3) allows a remote low-privileged attacker to bypass authorization controls and gain unauthorized access to the backup and recovery environment. The CVSS 8.8 High score reflects network-accessible exploitation with low attack complexity (AV:N/AC:L/PR:L), and full confidentiality, integrity, and availability impact - suggesting the attacker can read, modify, or destroy vaulted backup data. Vendor patch version 20.3.0.0 is available via Dell Security Advisory DSA-2026-370; no active exploitation has been confirmed in CISA KEV and EPSS indicates low current exploitation probability.
Privilege escalation in Admin By Request (ABR) for macOS allows a low-privileged local user to obtain full administrator rights by exploiting a predictable PIN derivation mechanism via Apple's Cross-Process Communication (XPC) framework. The attacker masquerades as an Apple-signed process during XPC communication, bypassing ABR's authentication logic entirely. Covered by a vendor security advisory and a CSA alert, the flaw carries a CVSS 8.8 with a scope change; no public exploit or CISA KEV listing has been identified at time of analysis.
Out-of-bounds region index access in the Linux kernel's s390/vfio_ccw subsystem exposes systems to potential guest-to-host privilege escalation on IBM mainframe KVM deployments. The read/write region handlers lack the bounds clamping that was applied to the capability chain regions, allowing a low-privileged local attacker - typically a KVM guest with vfio_ccw passthrough access - to trigger out-of-bounds memory access with a CVSS Scope:Changed impact. Vendor-released patches are available across multiple stable kernel branches, and no public exploit has been identified at time of analysis.
Use-after-free in the Linux kernel's s390/vfio_ccw subsystem allows a local low-privileged user on IBM Z hardware to corrupt freed kernel memory by triggering workqueue dispatch after the owning private struct has been released. Affected systems are those running KVM guests with VFIO CCW I/O channel passthrough on s390 architecture, spanning kernel versions from 4.12 through multiple unpatched stable branches. No public exploit or CISA KEV entry exists at time of analysis, but the scope-changing CVSS vector reflects the potential to compromise the host kernel or co-resident VMs.
Race condition in the Linux kernel's s390/vfio_ccw CRW (Channel Report Word) subsystem allows low-privileged local attackers on IBM mainframe KVM hosts to read incoherent CRW payload state, with CVSS-assessed potential for high confidentiality, integrity, and availability impact including scope change into the hypervisor. The root cause is an absent lock on the CRW payload list, which receives exclusively asynchronous hardware events and was therefore never protected for concurrent access. No public exploit code or CISA KEV listing exists; patches have been backported across multiple stable kernel branches including 6.12.105, 6.18.46, 7.1.10, and 7.2.
Missing bounds validation in the amdgpu DRM driver's GFX ring command submission path allows a local low-privileged user to submit oversized Indirect Buffer (IB) requests that corrupt adjacent control bits in GPU ring packet fields, destabilizing command submission and potentially achieving kernel memory corruption with scope-changing impact. Affected systems must have AMD GPU hardware and the amdgpu kernel module loaded; the vulnerability is present across multiple stable branches prior to Linux 6.12.105, 7.1.10, 6.18.46, and 7.2. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-released patches are available for all affected stable branches.
Arbitrary file upload in EFence (Thinking Software Technology) versions 1.2.66 and earlier allows authenticated remote attackers to upload web shell backdoors and achieve full arbitrary code execution on the underlying server. The CVSS 4.0 score of 8.7 reflects network-accessible exploitation requiring only low-privilege credentials, with confirmed total technical impact per SSVC. No public exploit has been identified at time of analysis and SSVC rates current exploitation as none, though the Taiwan CERT (TWCERT) has published advisories indicating confirmed vendor awareness.
Memory exhaustion in RustDesk versions before 1.4.7 allows unauthenticated remote attackers to crash or severely degrade server availability by sending crafted TCP frame headers through BytesCodec before any authentication occurs. The decoder blindly reserves up to 1,073,741,823 bytes of buffer capacity per connection based solely on an untrusted four-byte length field, and concurrent connections multiply the allocation pressure until host memory is exhausted. No public exploit code has been identified at time of analysis, though the upstream patch commit fully discloses the trigger mechanism; the fix is available in the vendor-released 1.4.7 build.
Missing authorization checks across four methods in TarsWeb's PatchController allow any authenticated account - regardless of its assigned application scope - to deploy arbitrary packages to any server managed by the console, retrieve or delete packages belonging to other applications, and alter default deployment configurations system-wide. Affected versions span TarsWeb through at least v3.0.16 as confirmed by the vulnerable source reference at that tag. No public exploit code has been identified at time of analysis, but the vulnerability is straightforwardly exploitable by any user with a valid TarsWeb account, making it a high-priority internal threat in multi-tenant or shared TarsWeb installations.
Race conditions in the s390/vfio_ccw subsystem of the Linux kernel arise from an insufficiently scoped io_mutex that serialized io_regions but left other I/O operations unserialized, creating exploitable synchronization windows. Local low-privilege users inside guest VMs on IBM s390/zSeries hosts running vfio_ccw can exploit these races to achieve scope-changed privilege escalation into the host kernel, with full confidentiality, integrity, and availability impact. No public exploit or CISA KEV listing has been identified; vendor patches are confirmed across stable branches 6.6.153, 6.12.105, 6.18.46, 7.1.10, and 7.2.
Remote code execution via symlink following in Plesk's Site Import and Migrator extensions allows network-accessible, low-privilege authenticated users to execute arbitrary code as root on the hosting server. Both webpros:plesk_migrator and webpros:plesk_site_import are affected across all versions per CPE wildcard data, with the flaw rooted in CWE-59 improper link resolution during privileged file operations. No public exploit or active exploitation is confirmed at time of analysis, but the low-complexity, network-accessible attack path and root-level impact make this a high-priority remediation target for Plesk hosting environments.
CPU exhaustion via algorithmic complexity in Apache APISIX 3.17.0 allows unauthenticated remote attackers to pin a gateway worker process at 100% CPU using a single small HTTP request targeting routes protected by the graphql-limit-count plugin. The CVSS 4.0 score of 8.7 reflects the high availability impact and trivial exploitation requirements - no authentication, no complexity, no user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis, though the minimal attack payload described makes this class of vulnerability straightforward to weaponize once the affected plugin is known to be in use.
Catastrophic regex backtracking in NLTK before 3.10.0 allows unauthenticated remote attackers to saturate CPU and deny service to all users sharing the Python process by supplying crafted patterns to the Text.findall() or TokenSearcher.findall() methods. Any Python application that exposes NLTK regex search functionality to user-controlled input is affected across all platforms. No public exploit has been identified at time of analysis, but the vulnerability class (ReDoS) is well-understood and trivial to weaponize once the targeted endpoint is known.
Authorization bypass in SeaweedFS versions 4.39 and earlier allows authenticated federated users to assume IAM roles they are explicitly denied through the standard STS path. The S3 API's direct bearer token authentication path validates the OIDC JWT signature but skips trust policy enforcement, which the STS AssumeRoleWithWebIdentity path correctly applies. A federated user with a valid OIDC token can present it directly to the S3 API and obtain the mapped role's full S3 permissions - including object read, write, and delete - even when the role's trust policy explicitly rejects their identity provider. Version 4.40 patches the issue; no public exploit code has been identified at time of analysis.
Stored cross-site scripting in Penpot's comments panel allows any authenticated team member to inject and persistently store arbitrary HTML or JavaScript that executes in collaborators' browsers upon viewing the comments panel. Affected are all Penpot instances running version 2.14.3 and earlier. Because the attack is passive - victims trigger payload execution merely by opening the comments panel as part of normal collaboration - an attacker can silently steal session cookies, hijack accounts, and access victims' files and projects. No public exploit identified at time of analysis; however, the attack mechanism is technically trivial and the fix commit is publicly visible.
Broken object-level authorization in the Booking for Appointments and Events Calendar WordPress plugin (versions 9.0 through before 9.8) allows any authenticated employee account to overwrite a different employee's cabinet password, achieving full account takeover of the victim provider. The flaw exists because the plugin's password-update endpoint does not verify that the requesting employee owns the target provider account. A publicly available proof-of-concept exists; no active exploitation has been confirmed by CISA KEV at time of analysis.
Unauthorized device control of TP-Link Kasa smart home devices is achievable by any attacker with local network adjacency, due to missing required cryptographic protections (CWE-325) in the local LAN communication protocol. At least 20 distinct Kasa product models are affected, spanning smart plugs, power strips, outdoor outlets, and in-wall switches. Exploitation enables interception, replay, and forgery of device control messages with no authentication required, allowing complete operational manipulation or denial-of-service of affected hardware.
Arbitrary file upload leading to remote code execution affects CAYIN Technology's CMS-WS, CMS-SE, and SMP series digital signage management platforms. Privileged remote attackers can upload web shells through the product's file upload functionality and then execute arbitrary commands on the underlying server. No public exploit code has been identified at time of analysis, and SSVC assessment confirms no active exploitation; however, the technical impact is rated total across confidentiality, integrity, and availability.
Server-Side Request Forgery in mcp-fetch through version 1.6.3 allows unauthenticated attackers who can influence model tool arguments to bypass the SSRF guard entirely and reach loopback, private, and link-local network endpoints including cloud instance metadata services. The bypass exploits a parsing gap: the guard tests the bracketed IPv6 literal string such as [::1] against Node.js's net.isIP(), which returns zero for bracketed input, causing the private-address branch to be skipped; the HTTP client later strips the brackets and connects normally. A secondary flaw in isPrivateIPv6 - no handling of the ::ffff: IPv4-mapped prefix - provides an independent bypass path for IPv4 targets expressed in mapped form. No public exploit code or CISA KEV listing exists at time of analysis, though a public issue report documenting the flaw is open on the upstream repository.
Cross-tenant insecure direct object reference in Plesk's database management interface allows any authenticated hosting panel customer to read and overwrite databases belonging to other customers on the same server, affecting versions 18.0.79.7 and earlier and 18.0.80 through 18.0.80.3. The CVSS 4.0 score of 8.6 reflects high confidentiality and integrity impact with low attack complexity, consistent with the description: a valid tenant account and knowledge of another tenant's database identifier are all that is required. No public exploit code or CISA KEV listing has been identified at time of analysis, but the multi-tenant hosting context amplifies real-world impact significantly.
Insecure Direct Object Reference in IDURAR ERP CRM through v4.1.1 allows any authenticated administrator to overwrite the password of any other administrator account by supplying an arbitrary account identifier in the URL path of the password-update endpoint. The backend handler resolves the target account from the caller-controlled path parameter rather than the session token, and the two are never compared, enabling full account takeover of peer administrators. No public exploit has been identified at time of analysis, but the logic flaw is mechanically straightforward for any holder of a valid administrator token.
Hard-coded HMAC credential exposure in Resamania's Virtuagym mobile application allows a low-privileged attacker to forge unlimited physical access QR codes, bypassing facility entry controls permanently. The static HMAC key - derived from the badge_number parameter - is retrievable via an authenticated API call, and the QR code generation logic can be extracted by reverse engineering the unobfuscated APK. Generated codes remain valid indefinitely regardless of subsequent password changes or session logouts, meaning revocation of legitimate access does not invalidate attacker-forged credentials. No public exploit has been identified at time of analysis, though the low technical barrier significantly elevates practical exploitability.
Authorization state-confusion in Simple Machines Forum (SMF) through version 2.1.7 enables any authenticated low-privileged user to escalate privileges to administrator without possessing admin credentials. The vulnerability stems from a mismatch between Profile::$member and User::$me->is_owner during sequential profile loading when multiple values are supplied for the user parameter, tricking the application into treating the attacker as the owner of an administrator profile and granting access to password-change functionality. No CISA KEV listing or confirmed public exploit code exists at time of analysis, but the CVSS 4.0 score of 8.6, low attack complexity, and minimal authentication barrier - any registered user qualifies - make this a critical priority for all SMF operators.
Code injection in whichllm's run and snippet CLI commands allows a network-positioned attacker who controls a HuggingFace repository to achieve full arbitrary code execution on any victim's machine by publishing a repository containing a crafted GGUF filename with Python metacharacters. The script generation function in cli.py interpolates the HuggingFace Hub API siblings rfilename field directly into dynamically generated Python source without escaping, enabling a string-literal breakout that fires injected code before any model download occurs. No active exploitation is confirmed in CISA KEV and no public proof-of-concept is referenced; vendor-released patch v0.5.16 is available and directly remediates the root cause.
Argument injection in bestzip, a Node.js npm library wrapping the system zip binary, enables arbitrary shell command execution when attacker-controlled source paths are passed to its API. Because bestzip omits the POSIX '--' end-of-options delimiter when building the zip command line, any source path beginning with a hyphen is interpreted by zip as a flag rather than a filename - zip's built-in -T/-TT test-command feature then executes a caller-supplied command through a shell after archive creation. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-released patches exist as versions 2.2.6 and 3.0.2.
OAuth authorization code hijacking in Stalwart Mail Server through v0.16.19 enables full email account takeover when a victim authenticates via a crafted phishing link. The validation routine for OAuth redirect URIs in the default shipped configuration - where client authentication is disabled - returns success immediately without comparing the supplied redirect_uri against any registered client destination, allowing any attacker-controlled URI to receive a valid authorization code. The CVSS 4.0 score of 8.5 with high confidentiality and integrity impact reflects the severity of resulting mailbox compromise; no public exploit code has been identified at time of analysis, though the vulnerability is fully described in a public GitHub issue with source-level detail.
NTLM credential capture in Veeam ONE exposes the Reporter service account to any low-privileged authenticated user over the network, enabling theft of service account credentials without user interaction. The captured Net-NTLMv2 hash can be relayed or cracked offline to compromise other systems in the environment, reflected by the high subsequent-system impact scores (SC:H/SI:H/SA:H) in the CVSS 4.0 vector. No public exploit code or CISA KEV listing is confirmed at time of analysis, though the attack technique is well-understood and Veeam backup infrastructure is a high-value ransomware target.