SQL injection in ZTE SCP allows authenticated, adjacent-network users to craft malicious database queries that bypass authorization logic and access data outside their permitted scope. The flaw requires valid low-privileged credentials and adjacency to the management network but achieves high confidentiality impact by exposing arbitrary database contents - particularly sensitive in telecom infrastructure contexts. No public exploit code or CISA KEV listing has been identified; ZTE classifies this as high-priority and has published a security bulletin.
Stored Cross-Site Scripting in the Greenshift animation and page builder blocks WordPress plugin (versions up to and including 12.8.9) allows authenticated attackers holding at minimum Contributor-level access to inject persistent malicious JavaScript via the plugin's customapi action handler. The root cause is unsanitized API response content written directly to the DOM through innerHTML in two JavaScript modules within the plugin. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been identified at time of analysis.
Spring Integration's UDP inbound adapter can be abused by unauthenticated remote attackers to coerce the server into emitting outbound UDP datagrams to arbitrary hosts and ports - a classic UDP Server-Side Request Forgery (SSRF). Affected versions span the entire supported line from 5.5.x through 7.1.0, covering a wide range of enterprise Java deployments. No public exploit code or active exploitation has been identified at time of analysis, but the low attack complexity (single crafted UDP packet) makes this straightforward to weaponize once the adapter port is located.
Unsafe deserialization in Spring Integration exposes network-accessible, low-privilege attackers to arbitrary Java class instantiation by manipulating the json__TypeId__ message header, which is resolved via ClassUtils.forName without any type or package allowlist. All maintained Spring Integration branches are affected - 5.5.21 and earlier, 6.4.0-6.4.12, 6.5.0-6.5.10, 7.0.0-7.0.5, and 7.1.0 - making the exposure broad across the Spring ecosystem. No public exploit code or CISA KEV listing has been identified at time of analysis, though the deserialization-via-header-controlled-type pattern is a well-understood Java attack class with a mature exploit toolkit.
Broken access control in Grafana OSS and Enterprise allows an organization administrator to delete dashboard snapshots owned by other organizations on the same multi-tenant instance, and to recover a snapshot's secret delete key by supplying only its public share key. The flaw crosses organizational trust boundaries within a shared Grafana deployment, enabling a malicious or compromised org-admin to both exfiltrate snapshot delete credentials and destroy data belonging to tenants they should have no access to. No public exploit code or CISA KEV listing exists at time of analysis, but the low attack complexity and authenticated-network accessibility make this straightforward to exploit for any actor who holds org-admin credentials.
Cross-site scripting across three components of Cockpit CMS (item.php, field-select.js, and tags.js) enables remote attackers to inject and execute malicious JavaScript within authenticated users' browser sessions in versions 2.13.5 and prior. The CVSS Scope:Changed metric signals that impact extends beyond the vulnerable component - successful exploitation against an authenticated administrator can result in session hijacking, credential theft, or persistent content manipulation within the CMS. No active exploitation is confirmed (no CISA KEV listing; EPSS 0.30% / 23rd percentile), though a researcher repository at github.com/Securify-AI/CVE-2026-39275 exists as a potential POC reference.
Credential leakage in the Reactor Netty WebSocket client exposes authentication data when a WebSocket handshake is redirected to a different origin and the HTTP client has been explicitly configured to follow redirects. Affected release trains span Reactor Netty 1.0.x through 1.3.6, covering multiple active Spring ecosystem versions maintained by VMware. No public exploit code has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog, but the cross-origin credential forwarding is a direct confidentiality risk for any reactive Spring application operating with redirect-following enabled.
Denial of Service in Spring Reactor Core affects any JVM service that uses the Flux.windowTimeout operator with the fairBackpressure option enabled, across three major release trains (3.4.x through 3.8.6). An unauthenticated network attacker can trigger resource exhaustion or stall the reactive pipeline, causing full availability loss for the affected service. No active exploitation is confirmed (not listed in CISA KEV) and no public exploit code has been identified at time of analysis; the high attack complexity rating (AC:H) reflects the requirement for a specific, non-default operator configuration.
Improper access control in Dell iDRAC9 allows an unauthenticated remote attacker to access unauthorized data under high-complexity conditions. Affected generations are 14G firmware prior to 7.00.00.182 and 15G/16G firmware prior to 7.20.30.50. No public exploit code or CISA KEV listing has been identified at time of analysis, but iDRAC exposure on management networks represents a significant attack surface in enterprise environments.
Cross-cluster authorization bypass in KubePi 2.0.0 and earlier permits an authenticated user with management rights over one Kubernetes cluster to read or modify data in other clusters they were not granted access to. The cluster identifier passed in API request URLs is trusted without per-request validation against the calling user's cluster bindings, confirmed by the patch introducing `requireClusterAccess()` middleware across chart and cluster API handlers. No public exploit or CISA KEV listing exists at time of analysis, but the CVSS 4.0 subsequent-system impact (SC:H/SI:H/SA:H) reflects that successful exploitation grants high-impact lateral access across the full multi-cluster estate managed by the panel.
SQL injection in SourceCodester Simple Online Food Ordering System 1.0 exposes the admin login endpoint to unauthenticated remote exploitation via the email parameter in /admin/ajax.php?action=login2. The flaw allows attackers to manipulate SQL queries sent to the backend database, enabling authentication bypass and potential data exfiltration or modification. A public proof-of-concept exploit has been disclosed on GitHub; no CISA KEV listing is present, but the exploit's public availability materially lowers the barrier to exploitation.
Stack-based denial of service in GIMP's Seattle FilmWorks (SFW) image plugin crashes the application when a crafted SFW file triggers an unbounded variable-length array allocation on the stack. The flaw affects all GIMP versions per the GNOME CPE string and is confirmed across Red Hat Enterprise Linux 6 through 9. An attacker who can deliver a malicious SFW file to a user can reliably crash the GIMP process with no code execution or data exposure; no public exploit has been identified at time of analysis.
Cleartext credential exposure in the ipa_getkeytab module of the community.general Ansible collection allows local users - or any principal with access to Automation Controller/AWX job logs - to recover the IPA/LDAP bind password supplied via bind_pw. The parameter is not marked no_log, causing the credential to appear verbatim in the system journal ('Invoked with' record), module return values, verbose Ansible output, AWX job logs, and the OS process list while ipa-getkeytab executes. No public exploit has been identified at time of analysis; exploitation is straightforward given log or process-table read access, requiring no special tooling.
Starlette-Admin, the Python ASGI-based administrative UI framework, fails to validate sort and filter parameters against configured field allowlists on its backend API, allowing any authenticated user to bypass the frontend field restrictions and query hidden or non-sortable columns as an information-disclosure oracle. Additionally, passing special Python attribute names such as `__class__` or `metadata` as field values triggers unhandled exceptions that return HTTP 500 responses, creating a limited denial-of-service condition against targeted list endpoints. All versions prior to 0.16.1 are affected; no public exploit code has been identified and this vulnerability is not in CISA KEV.
Path traversal in Spring Integration's ZipTransformer allows a low-privileged attacker who controls the file_name message header to write ZIP archive output to arbitrary filesystem paths outside the configured workDirectory. Affected versions span the 6.4.x, 6.5.x, 7.0.x, and 7.1.0 release lines of Spring Integration, and exploitation is viable by default since ZipResultType.FILE is the standard configuration. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Out-of-bounds read and in-object write in the Zephyr RTOS IEEE 1588 PTP stack affects all Zephyr versions with CONFIG_PTP enabled, exploitable by any unauthenticated attacker with Layer 2 adjacency. The PTP_MGMT_TIME management-id case in tlv_mgmt_post_recv() omits the length guard present for every sibling case, allowing a crafted short TLV to drive an 8-byte over-read and bounded write-back within the same struct ptp_msg allocation. No public exploit has been identified at time of analysis, and impact is constrained to minor adjacent-memory disclosure and corruption of the device's parsed management timestamp - no crash or past-allocation corruption is reachable.
Authorization bypass and privilege escalation in Apache APISIX 3.11.0-3.17.0 stem from the `attach-consumer-label` plugin failing to strip client-supplied consumer-label headers before using them in security decisions. An attacker who can reach the gateway can forge header values to impersonate a higher-privileged consumer label, bypassing route-level access controls. No vendor-released patch is available at time of analysis (fix version marked pending); no public exploit code or CISA KEV listing has been identified.
HTTP/1.1 request pipelining in Reactor Netty causes unbounded memory growth, exposing Spring WebFlux applications to availability degradation or denial of service from unauthenticated remote clients. Three release trains are affected - 1.0.x through 1.0.52, 1.1.0 through 1.2.18, and 1.3.0 through 1.3.6 - giving this issue broad coverage across current and legacy Spring reactive deployments. No public exploit code has been identified and this vulnerability is not listed in CISA KEV, though the low exploitation complexity warrants attention in deployments that expose Reactor Netty directly to the internet.
Object-scoped RSS feeds in Weblate prior to version 2026.8 bypass the platform's permission model, exposing change-history metadata from private projects and restricted components to any requester - including unauthenticated users on installations that permit anonymous access. The exposed metadata includes project and component identities, contributor usernames and full names, action types, timestamps, and translation unit links, enabling enumeration of contributor identity and project structure in otherwise-private deployments. No public exploit has been identified at time of analysis and this vulnerability is not listed in CISA KEV, but the lack of any exploitation prerequisite on anonymously accessible instances makes it straightforward to abuse with standard HTTP tooling.
Insecure Direct Object Reference in WP Data Access plugin for WordPress (all versions through 5.5.68) exposes protected app container data to unauthenticated attackers via the `check_app_access` function. The flaw stems from a logical mismatch: authorization is validated against the `app_id` parameter, but the subsequent data retrieval uses `cnt_id` without verifying that the requested container actually belongs to the authorized app - allowing a user to pass an authorized `app_id` to clear the access gate while supplying an arbitrary `cnt_id` to reach a different container's data. No public exploit code or KEV listing exists at time of analysis, but the low attack complexity and zero-authentication requirement make this straightforward to abuse opportunistically.
Reactor Netty HTTP Server incorrectly evaluates the remote client IP address in deployments where HAProxy PROXY Protocol support is enabled, potentially allowing network attackers to spoof their apparent source IP. Affected versions span the 1.0.x, 1.1.x/1.2.x, and 1.3.x branches. This flaw carries no confidentiality or availability impact per the CVSS vector, but can undermine IP-based access controls, rate limiting, audit logging, or allowlist/denylist enforcement that rely on the server's perception of the client IP. No public exploit code or CISA KEV listing is present at time of analysis.
Stored cross-site scripting in LimeSurvey Community Edition 7.0.5 allows a low-privileged authenticated user to inject persistent malicious scripts through the replacement-fields dialog in the administrative question editor. When a higher-privileged user - such as an administrator - subsequently views or edits the affected question, the payload executes in their browser context, enabling session hijacking or unauthorized administrative actions. No public exploit or CISA KEV listing has been identified at time of analysis, though Fluid Attacks has published a dedicated advisory.
Stored XSS via unrestricted file upload in tamguo 1.5.3 allows authenticated network attackers to execute arbitrary JavaScript in victims' browsers. The /uploadFile and /imgUpload endpoints in FileUploadController.java and UEditorController.java accept arbitrary HTML and JavaScript files without content-type or extension validation, enabling persistent script injection. No public exploit identified at time of analysis and EPSS probability is 0.14% (3rd percentile), indicating low current exploitation pressure.
CorvusSKK, a Windows-based SKK Japanese input method editor by Sasaki Nobuyuki, contains a signed 32-bit integer overflow (CWE-190) in its tar-format dictionary file size parsing, which can allow malicious data to be written to a dictionary file when a user opens a crafted input. All versions prior to 3.3.4 are affected; version 3.3.4 was released to address this flaw alongside a separate Lua-related vulnerability. No public exploit has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog, indicating no confirmed active exploitation.
Improper authorization in Myna Point's Android Intent handler allows a co-installed malicious application to invoke the app's custom URL scheme handler without caller validation, triggering arbitrary JavaScript execution within the app's WebView context. All versions of the Japanese government digital identity application (Digital Agency, CPE wildcard) appear affected per JVN advisory JVN67155805. No public exploit identified at time of analysis, though the attack surface is inherently local and requires a malicious app on the same device.
Global permission bypass in Weblate prior to 2026.7 allows authenticated team members to receive site-wide management permissions without satisfying their team's enforced two-factor authentication requirement. While 2FA enforcement was correctly applied to project-, component-, and workspace-scoped permissions, the same gate was absent for global permissions, meaning a user lacking a configured TOTP device could still access the site management interface at /manage/. No public exploit code is identified at time of analysis, and the issue is fixed in version 2026.7.
HCL BigFix Quantum Risk Analyzer contains a hardcoded external resource reference combined with absent binary integrity verification, exposing the product to binary substitution attacks and potential sensitive information disclosure. The affected CPE covers all versions of the product under hclsoftware. A locally privileged attacker could exploit the missing integrity check (CWE-494) to substitute a malicious binary fetched from the hardcoded external reference, achieving high-integrity impact. No public exploit code exists and CISA KEV does not list this vulnerability at time of analysis.
Arbitrary PHP constructor execution is possible through the MailPreview feature of CakePHP debug_kit due to unsafe reflection (CWE-470), affecting all 4.x versions below 4.10.3 and 5.x versions below 5.2.4. An attacker with low-privileged network access to an application running in debug mode on a local or allowlisted hostname can pass a fully-qualified PHP class name as the previewName parameter, causing the controller to instantiate arbitrary classes. Vendor-released patches 4.10.3 and 5.2.4 address this issue; no public exploit has been identified at time of analysis.
Cross-organizational information disclosure in Katello - the content management engine of Red Hat Satellite 6 - allows any authenticated user to read lifecycle history of Content Views belonging to organizations other than their own. By supplying an arbitrary Content View identifier to the Content View History API endpoint, a low-privileged user bypasses organization-scope authorization and retrieves publication events, promotion history, associated usernames, and timestamps for foreign tenants. No public exploit has been identified at time of analysis, and no CISA KEV listing exists; the CVSS 4.3 Medium rating reflects the strictly read-only, single-organization-boundary impact.
Static Web Server (SWS) through version 2.43.0 exposes its Prometheus /metrics endpoint to unauthenticated remote attackers when both the basic-auth and metrics compile-time features are simultaneously enabled, due to a middleware ordering defect in src/handler.rs that processes metrics requests before the authentication gate. Exploitation leaks operational intelligence - virtual host names, request volumes, error rates, latency histograms, and active connection counts - that can inform subsequent targeting or infrastructure mapping. No public exploit code or CISA KEV listing has been identified; however, the GitHub commit diff is publicly available and the attack surface is trivially reachable with a single unauthenticated HTTP GET to /metrics.
Server-Side Request Forgery in Dell Cloud Disaster Recovery versions 20.2 and prior enables a low-privileged authenticated remote attacker to coerce the server into making arbitrary outbound HTTP requests, with limited confidentiality impact per the vendor-confirmed CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). The vulnerability is documented in Dell advisory DSA-2026-353 and affects all releases up to and including version 20.2. No public exploit code has been identified and the vulnerability does not appear in the CISA Known Exploited Vulnerabilities catalog at time of analysis.
Nested API change endpoints in Weblate prior to version 2026.7 bypass component-level access controls, exposing change history of restricted components to authenticated project members who lack direct view permissions. A low-privileged project member can call the project-, component-, or translation-level change list endpoints to enumerate change records for restricted components - including source and translated string content, component identity, and change metadata - that return 404 on direct component access. No public exploit or CISA KEV listing has been identified; real-world risk is conditional on use of Weblate's restricted component feature.
Object existence enumeration in Weblate prior to version 2026.7 allows authenticated low-privilege users to infer whether objects exist within private projects by observing differential HTTP response codes - HTTP 403 (Forbidden) for existing-but-inaccessible objects versus HTTP 404 (Not Found) for truly absent ones. Affected endpoints performing globally-scoped ORM lookups across changes, comments, and announcements fail to restrict results to projects the requesting user is authorized to view. No public exploit has been identified and this is not listed in CISA KEV; the CVSS 4.3 Medium rating reflects the authentication prerequisite and the narrow confidentiality impact (existence inference only, no content disclosure).
Spring Data REST's HTTP PUT handler silently drops the persisted `@Version` field when writing immutable aggregate root types, bypassing the framework's optimistic locking mechanism. Affected release trains span versions 3.x through 5.1.0, covering a broad surface of Spring-based enterprise REST APIs that use versioned immutable entities. An authenticated low-privilege attacker can exploit this to perform lost-update attacks - overwriting entity state without triggering concurrency conflict detection - undermining data integrity guarantees in concurrent-write environments. No public exploit code exists and the vulnerability is not listed in CISA KEV at time of analysis.
Command injection in Wgcloud 3.6.4 exposes the server to remote code execution: the `content` parameter is unsanitized and directly concatenated into a Java `ProcessBuilder` call, allowing an adjacent-network attacker to inject arbitrary OS commands. The CWE-77 classification and the researcher's own proof-of-concept - titled RCE.md - confirm arbitrary code execution capability, making the submitted CVSS of 4.3 (C:L only) a significant understatement of real impact. No public exploit in CISA KEV, but publicly available exploit code exists per the researcher's GitHub disclosure.
Out-of-bounds read in Zephyr RTOS's LoRaWAN clock synchronization service allows a malicious or compromised LoRaWAN application server to corrupt the target device's internal time offset by sending a crafted short AppTimeAns frame. The over-read is bounded by a 255-byte static backing buffer so no crash occurs, and the stray bytes are never transmitted back to the attacker, eliminating any information disclosure. Impact is confined to a minor, device-local clock integrity issue - the device's time estimate may silently diverge if a garbage time-correction value happens to match the pending token. No public exploit identified at time of analysis, and no CISA KEV listing.
HCL BigFix Quantum Risk Analyzer exposes sensitive internal application data through excessively verbose default logging, classified under CWE-532. The CVSS vector (AV:L/PR:H) confirms exploitation requires local, privileged access to the host system - a meaningful barrier that confines risk to insider threats or post-compromise scenarios rather than remote attack. No public exploit code exists and CISA has not listed this in the Known Exploited Vulnerabilities catalog.
HCL BigFix Quantum Risk Analyzer's binary executable lacks multiple industry-standard binary hardening protections, leaving it susceptible to a stack-based buffer overflow (CWE-121). The vulnerability requires local access with high privileges and high attack complexity, yielding a CVSS score of 3.9 (Low). No public exploit code has been identified at the time of analysis, and the combination of local-only access, elevated privilege requirements, and high exploitation complexity significantly constrains real-world risk despite the theoretical severity of a stack overflow primitive.
HCL BigFix Quantum Risk Analyzer leaks internal system details through overly verbose error messages returned during input validation, enabling attackers with local high-privileged access to conduct more efficient reconnaissance against the platform. By submitting malformed inputs and observing descriptive error responses, an adversary can map internal validation logic and fine-tune automated fuzzing tools to generate valid payloads for follow-on exploitation. No public exploit code exists and no active exploitation is confirmed (not listed in CISA KEV); with CVSS 3.9 and a vector requiring local high-privilege access with high complexity, real-world risk is low and confined to already-privileged insiders or post-compromise actors.
Exception detail leakage in Reactor Netty HTTP Server exposes internal error information across unrelated client requests when the server is configured with Brave Tracing. Affected versions span three distinct release lines - 1.0.x through 1.0.52, 1.1.x through 1.2.18, and 1.3.0 through 1.3.6 - making the exposure broad in terms of version footprint. No public exploit has been identified and this vulnerability is not listed in the CISA KEV catalog; real-world risk is bounded by the prerequisite Brave Tracing configuration.
DNS resolver isolation failure in Reactor Netty allows network-adjacent attackers to trigger incorrect DNS resolution by exploiting resolver state leakage across multiple concurrently configured HTTP clients. Affected versions span three release lines: 1.0.x through 1.0.52, 1.1.0 through 1.2.18, and 1.3.0 through 1.3.6. When an application instantiates multiple Reactor Netty clients with distinct DNS resolver configurations, a previously used resolver may be applied to a subsequent client, causing network requests to resolve hostnames through an unintended resolver. No public exploit identified at time of analysis.
Server-side request forgery in HCL Connections allows a low-privileged, authenticated attacker - operating from or through a compromised internal server - to issue unauthorized outbound requests to internal resources, resulting in limited information disclosure or potential security control bypass. The vulnerability carries a low CVSS base score of 3.7 due to high attack complexity, required user interaction, and unchanged scope, and no public exploit or CISA KEV listing exists at time of analysis. Risk is constrained by the prerequisite of a pre-compromised internal host, making this a meaningful lateral-movement enabler rather than a direct initial-access vector.
HCL Traveler's Apple profile generation page reflects user-submitted Logon Name and Mail Address values into generated Apple device synchronization profiles without verifying those values against the authenticated user's entry in the HCL Domino directory. An authenticated, low-privileged user can therefore embed arbitrary directory values into a generated Apple profile. Practical impact is severely constrained: the resulting profile is incomplete without additional credentials and, per vendor description, can only be used to configure the attacker's own Apple device - making this an authenticated, self-targeting input validation gap rather than a lateral-movement primitive. No public exploit code exists and the CVE is not listed in CISA KEV.
Weblate's REST API prior to version 2026.8 permits authenticated users to silently replace their account's primary email with any unverified address via PUT or PATCH requests to /api/users/{username}/, bypassing the normal email-verification flow. This allows an attacker to pre-claim an email address and then accept team or project invitations directed to that address without ever accessing the intended recipient's mailbox. The fix is confirmed in Weblate 2026.8, and no public exploit code or active exploitation has been identified at time of analysis.
DNS rebinding SSRF in Weblate prior to version 2026.8 allows an authenticated user with VCS component URL management privileges to circumvent VCS_RESTRICT_PRIVATE protections and reach internal network services. The attack exploits the time gap between Weblate's initial hostname validation and the VCS client's subsequent independent DNS lookup - an attacker-controlled domain passes validation pointing to a public IP, then switches to an internal address before the actual VCS connection is made. Triggering a clone, fetch, push, or similar operation then causes Weblate to connect to internal VCS-compatible services and potentially expose their contents. No public exploit has been identified at time of analysis, though the DNS rebinding technique is well-understood and toolkits for it exist.
HTML injection in OpenSTAManager versions 2.10.1 and earlier allows an authenticated high-privilege user to embed arbitrary HTML - including redirect anchor tags - into the user group name field, which is then rendered unsanitized to all users who view the group assignment interface in modules/utenti/edit.php. The attack enables phishing and open-redirect scenarios targeting other application users without requiring any special server configuration. Publicly available exploit code exists (documented in GHSA-crx4-7mmq-j74j with screenshots); this CVE is not in CISA KEV, and EPSS data was not provided.
SSH host key verification is persistently disabled in Siemens kas versions prior to 5.4 when the tool's internal SSH key setup path is triggered via SSH_PRIVATE_KEY or SSH_PRIVATE_KEY_FILE and the invoking user has no pre-existing ~/.ssh/config. The tool writes a global Host * rule with StrictHostKeyChecking no to ~/.ssh/config and does not remove it upon exit, leaving all subsequent SSH sessions of that local user silently accepting unverified host keys. No public exploit code exists and this vulnerability is not listed in CISA KEV; the low CVSS score of 3.3 correctly reflects a constrained local, multi-condition attack path, though the persistence of the misconfiguration indefinitely extends the exposure window beyond any single kas invocation.
Out-of-bounds read in Zephyr RTOS's LoRaWAN TS004 Fragmented Data Block Transport handler allows a party holding valid device session keys to trigger a bounded overread of up to 232 bytes beyond the 255-byte `MacCtx.RxPayload` static buffer, with overread data silently written into decoder buffers and the FUOTA flash image rather than returned to the attacker. The vulnerable function `frag_transport_package_callback()` in `subsys/lorawan/services/frag_transport.c` casts `rx_buf + rx_pos` to fixed-size structs and passes the pointer to the fragment decoder without first verifying that sufficient payload bytes remain. No public exploit is identified and this CVE is not listed in the CISA KEV catalog; CVSS 3.1 rates the vulnerability 3.1 (Low), reflecting the high-privilege access barrier and constrained, non-disclosing impact.
SMM buffer overflow in InsydeH2O's IHISI command handler for FMTS command 0x32 allows a physically-present, highly-privileged attacker to trigger out-of-bounds writes in System Management Mode firmware. The vulnerable function FMTSWriteUseIntelLib performs read and write operations without validating buffer sizes, enabling potential firmware-level memory corruption in Ring -2 execution context. No active exploitation has been identified and no public exploit exists; the combination of physical access, high privilege, high attack complexity, and required user interaction makes real-world risk extremely low despite the sensitive SMM execution environment.
Kids Mode on Vivo Android devices contains a pop-up logic flaw that permits physical-access bypass of the parental password gate, enabling a child or any person holding the device to launch Quick Apps outside the Kids Mode sandbox. The CVSS 4.0 score of 2.4 reflects the mandatory physical access requirement and limited low-level confidentiality and integrity impact on both the device and downstream mini-app systems. No public exploit code and no CISA KEV listing exist at time of analysis.