Path traversal in n8n-nodes-sqlite3 (all versions prior to 1.0.0) exposes multi-tenant n8n deployments to arbitrary file read and overwrite through the unsanitized db_path node parameter. When a workflow author explicitly maps untrusted end-user input to the SQLite node's database path field, an attacker can supply a crafted traversal string to redirect SQLite to open any file accessible to the n8n process-potentially exposing credentials, configuration files, or enabling data destruction. No public exploit has been identified at time of analysis, and the vendor-confirmed fix is available in v1.0.0 via commit 145a887.
Path traversal in blackms aistack's Static File Handler (src/web/server.ts) exposes arbitrary server-side files to unauthenticated remote attackers via unsanitized req.url processing. All versions through 1.6.1 are confirmed affected per NVD CPE data, and a public proof-of-concept exploit exists in GitHub issue #57. The project received responsible disclosure but has not responded, meaning no patch is available at time of analysis.
Path traversal in bsmi021's mcp-file-context-server 1.0.0 allows remote unauthenticated attackers to read arbitrary files on the host system by supplying crafted path arguments to the read_context function in src/index.ts. The Path Resolution component fails to canonicalize or boundary-check caller-supplied paths, enabling directory escape via sequences such as '../'. A public exploit exists (GitHub issue #15), the project maintainer has not responded to disclosure, and no vendor-released patch is available.
Path traversal in linkedin-ads-mcp 1.0.0 allows remote unauthenticated callers to read arbitrary files from the server's filesystem. The vulnerability exists in the Media Upload component where the `filePath` argument is passed directly to Node.js `fs.readFileSync` without sanitization, enabling directory traversal sequences to escape the intended media directory. A publicly available proof-of-concept exploit exists via a GitHub issue report; the maintainer has not responded to the disclosure.
Path traversal in boxpositron/with-context-mcp up to version 3.0.7 exposes the host filesystem through four note-management functions - ingest_notes, teleport_notes, sync_notes, and project_folder - in src/index.ts, allowing unauthenticated remote attackers to read or write files outside the intended working directory. The affected package is a Model Context Protocol (MCP) server, meaning exploitation is triggered via tool-call requests sent to the MCP endpoint, a vector inherently accessible to any AI agent or client connected to the server. A publicly available proof-of-concept has been disclosed via a GitHub issue; the vendor had not responded to the coordinated disclosure at time of reporting, leaving affected versions unpatched.
Hard-coded credentials in the Bendix EC80ESP and EC80ESP+ Brake ECU family allow an adjacent-network attacker to bypass authentication and disable automatic traction control and electronic stability program functions on commercial heavy vehicles. All ten identified EC80ESP/EC80ESP+ variants across J1708, CAN, PLC, and TPMS configurations are affected, with no version exclusion identified in CPE data. No public exploit or KEV-confirmed active exploitation has been identified, though the safety-critical nature of the affected system significantly amplifies real-world operational risk beyond the moderate CVSS score.
Clickjacking vulnerability in the Ebyte NE2-D11 industrial IoT device web management interface enables a remote unauthenticated attacker to embed the administrative UI within a crafted external webpage. By luring an authenticated administrator to visit the malicious page, an attacker can trick that administrator into submitting unintended configuration changes or triggering disruptive actions against the device. Reported by CISA ICS-CERT under advisory ICSA-26-237-06; no public exploit identified at time of analysis.
Plaintext administrative credential exposure in the Ebyte NE2-D11 firmware management interface allows anyone with physical access to directly observe device credentials without any authentication or tooling. Reported by ICS-CERT under advisory ICSA-26-237-06, the flaw (CWE-522) affects all known firmware versions per CPE data, with a physical attack vector (AV:P) confirming that exploitation requires proximity to the device. Credential capture could enable full administrative control over the device, with downstream risk to industrial operations where the NE2-D11 is deployed. No public exploit has been identified and the vulnerability is not listed in CISA KEV.
Incomplete NAT64 prefix filtering in CC: Tweaked prior to 1.120.0 allows any Lua-capable Minecraft player on a dual-stack server to bypass SSRF protections and reach loopback, RFC 1918, cloud metadata, or internal API endpoints. The flaw resides in AddressPredicate.java, which correctly blocks the RFC 6052 Well-Known NAT64 prefix (64:ff9b::/96) but omits the RFC 8215 Local-Use prefix (64:ff9b:1::/48), enabling requests via http.request or http.websocket to mapped internal IPv4 addresses. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog; exploitation requires a non-default dual-stack NAT64 deployment.
Server-side request forgery in AVideo before 24.0 allows unauthenticated network attackers to bypass SSRF protections in the isSSRFSafeURL function by encoding private IPv4 targets inside NAT64, 6to4, or Teredo IPv6 transition address formats. The LiveLinks proxy endpoint serves as the attack surface, enabling requests to reach internal network services and cloud instance metadata endpoints (e.g., 169.254.169.254 equivalents) that should be unreachable. No active exploitation is confirmed (not in CISA KEV) and no public proof-of-concept has been identified at time of analysis; however, the unauthenticated network vector and patch availability make this a straightforward prioritization for any AVideo operator.
Log injection in Flowintel versions 3.3.0 and later allows unauthenticated remote attackers to forge arbitrary log lines by supplying email values containing CR/LF characters at the login endpoint. The vulnerability traces to a misuse of WTForms validation - the code constructed a validator object via Email(email) without invoking it, leaving attacker-controlled input unsanitized before it was interpolated into both the standard warning logger and the custom audit logger via Python f-strings. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, but the attack is trivially executable with a single HTTP request against any network-exposed deployment, and its impact falls directly on security logging integrity rather than application confidentiality or availability.
OpenFaaS gateway versions 0.27.11 through 0.27.13 expose the administrative GET /system/telemetry route without authentication even when basic_auth is enabled, allowing any network-reachable client to retrieve provider telemetry data without credentials. The TelemetryHandler was omitted from the auth.DecorateWithBasicAuth wrapper applied to all other /system/* routes - confirmed by fix commit 8d803bf9 in the official repository. No active exploitation is confirmed (not in CISA KEV), though a researcher advisory is publicly available and a patch exists in version 0.27.14.
Uncontrolled recursion in NLTK's FeatStructReader component (all versions before 3.10.3) enables unauthenticated remote attackers to crash any Python application that parses user-supplied feature structures or feature grammars. Attackers submit trivially crafted payloads containing deeply nested brackets, exhausting Python's call stack and raising an unhandled RecursionError that terminates the application process. No active exploitation has been confirmed by CISA KEV, and no public exploit code has been identified at time of analysis; a vendor patch is available in NLTK 3.10.3.
WatchGuard Dimension, the network security visibility and management platform, contains a business logic flaw (CWE-284) that permits an authenticated administrator to trigger multiple backend operations within a single logical request flow by sending a specially crafted HTTP request. All versions of Dimension are listed as affected via the wildcard CPE, and the impact is high confidentiality exposure on the Dimension system itself with limited subsequent-system effect. No public exploit code has been identified at time of analysis, and no CISA KEV listing exists, but the PR:H requirement constrains exploitation to actors who already hold or have compromised administrator credentials.
Heap-based buffer overflow in WatchGuard Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon by saving a specially crafted configuration, resulting in denial of service and disruption of IPsec VPN services. The CVSS 4.0 score of 6.9 with PR:H reflects the high-privilege requirement, meaning exploitation is gated behind valid administrator credentials. No active exploitation has been identified (not in CISA KEV) and no public exploit code is known at time of analysis.
Unauthenticated content tampering in Joomla Event Manager before version 5.0.1 permits any anonymous visitor to overwrite and force-publish articles linked to events on the affected Joomla site. Rooted in CWE-284 (Improper Access Control), the extension fails to enforce authorization before processing article modification requests, treating a routine guest session token - automatically issued to every site visitor - as sufficient proof of permission. No public exploit code or CISA KEV listing has been identified at time of analysis, but the zero-authentication barrier means exploitation requires no special tooling or credentials.
NoSQL injection in the MongoDB C# Driver's LINQ-to-aggregation translation layer allows network-accessible, unauthenticated attackers to manipulate database queries by embedding special elements in application-supplied values. Affected applications using LINQ query constructs that incorporate user-controlled input fail to properly escape those values before transmission to MongoDB, enabling query logic injection. The CVSS 4.0 score of 6.9 (AV:N/AC:L/PR:N/UI:N) reflects broad reachability with limited but real data confidentiality and integrity impact; no public exploit or CISA KEV listing is identified at time of analysis.
Filesystem containment bypass in NLTK's Downloader component allows local attackers with write access to a shared download directory to overwrite arbitrary files outside the intended install root by planting hardlinks before a download operation. All NLTK versions prior to 3.10.3 are affected via the Downloader.download and Downloader.incr_download methods, which fail to validate link targets during package extraction. No public exploit has been identified at time of analysis; risk is highest in shared multi-user environments such as HPC clusters or build servers where the NLTK data directory is world- or group-writable.
Uncontrolled resource consumption in the jahlives openssl_encrypt PHP library (versions before 1.4.9) allows local attackers with write access to identity stores to crash the host by supplying an excessively large memory_cost parameter in a crafted identity file. The flaw manifests during Argon2 key derivation when the library unlocks identities prior to authentication, triggering an out-of-memory condition on the host. No public exploit code has been identified at time of analysis, and this vulnerability has not been added to the CISA KEV catalog.
Local information disclosure in the openssl-encrypt pip package (versions ≤ 1.4.8) exposes steganography passwords to all unprivileged users on the same Linux host. When the desktop GUI initiates an encrypt or decrypt operation involving the steganography feature, it spawns a CLI child process with the password supplied as the `--stego-password` command-line argument rather than via an environment variable, making it readable from `/proc/<pid>/cmdline` for the entire subprocess lifetime by any local user. The main encryption password is handled correctly via environment variable and is unaffected. A vendor-released patch is available in version 1.4.9; no public exploit has been identified at time of analysis.
The optional D-Bus crypto service in jahlives/openssl_encrypt 1.4.x before 1.4.9 exposes org.freedesktop.DBus.Properties.Set without polkit authorization or input validation, enabling any local system-bus user to persistently disable the root daemon. Setting MaxConcurrentOperations to zero or a negative value causes the concurrency gate to reject all subsequent cryptographic requests from the daemon; setting it to an arbitrarily large value or manipulating DefaultTimeout degrades stability in the opposite direction. No public exploit code has been identified at time of analysis, and the flaw is not listed in CISA KEV.
Arbitrary file deletion in Fluent Boards Pro (WordPress plugin) versions up to and including 2.0.11 allows authenticated Editor-level users to delete files anywhere on the server via path traversal. The changed scope (S:C in the CVSS vector) indicates that deletion can extend to files outside the WordPress installation - including potentially critical OS-level or application files - causing severe availability impact. No public exploit code or CISA KEV listing is identified at time of analysis.
Out-of-bounds read and write primitives in the hank-ai Darknet neural network framework (all versions through 6.0) are triggered by parsing a crafted configuration file, yielding a reliable crash and a single fixed-byte heap write at an attacker-controlled offset. The parser in src-lib/darknet_cfg.cpp consumes the `from` field of shortcut, scale_channels, and sam sections-and the `layers` field of route sections-as a direct array index into the layer heap allocation without validating it against the array's declared size. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Token exfiltration in airtable-mcp-cli before 0.2.5 allows an attacker who convinces a user to run the configure command with a malicious endpoint URL to receive the user's Airtable personal access token on every subsequent CLI invocation. The root cause is that ConfigureCommand.execute in src/cli.ts persisted the --endpoint option directly into the user profile, bypassing the createSafeUrl helper in src/config.ts that already enforced HTTPS and vendor-host restrictions for the environment-variable pathway. Because src/mcp.ts attaches the stored token as a bearer credential on every outbound request, the stolen token grants full API-level access to the victim's Airtable account. No public exploit or CISA KEV listing has been identified at time of analysis.
Unauthenticated notification injection in APITable through 1.13.0-beta.1 permits any network-reachable client to write arbitrary messages into any user's inbox by exploiting a missing-authentication annotation on the internal notification create endpoint. The InternalNotifyController marks its create handler with requiredLogin = false, causing ResourceInterceptor to skip all session and API key validation; because the nginx gateway bundled with the product proxies every /api path to the Java backend, the endpoint POST /api/v1/internal/notification/create is fully exposed to unauthenticated callers. Setting fromUserId to 0 makes injected messages render as legitimate system notifications, enabling platform-wide social-engineering attacks; no public exploit code has been identified at time of analysis, though the flaw is documented in a public GitHub issue (no KEV listing).
Symlink redirection in Spring Integration's Zip/UnZip transformer allows a local unprivileged user sharing the same host to hijack transformer output by pre-creating /tmp/ziptransformer as a symlink before application startup. Affected versions span the 6.4, 6.5, 7.0, and 7.1 release lines, covering a wide range of enterprise Java deployments that use Spring Integration's file transformation capabilities. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV, though the integrity and availability impact is rated High by the vendor-assigned CVSS score.
Reflected XSS in Netron desktop application versions 9.1.2 and earlier enables arbitrary JavaScript execution within the Electron/Chromium renderer by injecting payloads into unsanitized model node names, types, and attribute descriptions. Reported by HiddenLayer, the vulnerability allows an attacker who can deliver a crafted ML model file to hide graph nodes, conduct local network port scanning, and - when chained with a Chrome n-day exploit - escalate to full Remote Code Execution on the victim's machine. No public exploit has been identified at time of analysis, and the CVE is not currently listed in the CISA KEV catalog.
Reflected XSS in Netron ≤9.1.2 desktop application executes attacker-controlled JavaScript when a user opens a specially crafted ML model file containing malicious node names, descriptions, or type labels. Because Netron is Electron-based, XSS runs in a privileged Chromium renderer context - enabling SSRF-style local port scanning and, when chained with an unspecified Chrome n-day vulnerability, potential remote code execution on the host. No public exploit confirmed at time of analysis, but HiddenLayer published a security advisory documenting the impact chain.
Reflected XSS in Netron desktop application versions ≤9.1.2 executes attacker-controlled JavaScript when a victim opens a crafted neural network model file containing malicious node names, type labels, or value descriptions. Because Netron runs on Electron (a Chromium-based runtime), the injected script operates within a privileged renderer process capable of port-scanning local networks and, with a separately-acquired Chrome n-day, achieving full remote code execution on the host machine. HiddenLayer reported the vulnerability and a vendor fix is available via GitHub commit cd14bad8c91; no public standalone exploit has been confirmed and this CVE does not appear in CISA KEV.
TLS certificate validation is absent by default in Spring AMQP's Log4j2 appender when shipping log events to a RabbitMQ broker, leaving all log traffic fully exposed to man-in-the-middle interception. Spring AMQP versions 2.4.18 and earlier, 3.2.0-3.2.12, 4.0.0-4.0.4, and 4.1.0 are affected when the Log4j2 appender is used with its documented default configuration. No public exploit has been identified at time of analysis, but the high confidentiality and integrity CVSS impact reflects that intercepted log streams may contain API keys, session tokens, and other sensitive application data.
Zip extraction in AWS diagram-as-code (awsdac) versions 0.10 through 0.23 is vulnerable to relative path traversal (CWE-23), enabling a third party to write arbitrary files outside the intended extraction directory by embedding crafted path sequences in zip entry names within a malicious diagram bundle. Exploitation requires user interaction - a victim must actively process the attacker-supplied bundle - making this a social-engineering-dependent local attack. AWS has released a patched version 0.24; no active exploitation or public exploit code has been identified at time of analysis.
Out-of-bounds write in the SmiFlash SMM (System Management Mode) module affects ASUS FA507NU and FA507NV laptop BIOS firmware across all versions. A local administrator can dispatch a crafted Software SMI (SW SMI) request with an oversized length value, causing the SmiFlash handler to write beyond its allocated SMRAM buffer boundary, resulting in a system crash (BSOD) or irreversible BIOS flash corruption. The affected models are designated 'unsupported-when-assigned,' meaning these products were already outside active vendor support when this CVE was issued; no public exploit has been identified at time of analysis.
Sensitive KMS provider credentials supplied for client-side field-level encryption (CSFLE) in the MongoDB C# Driver are reproduced in plaintext within the driver's diagnostic string representation of its client settings, rather than being masked like other secret fields. Any party with read access to application logs, diagnostic output, or process memory dumps can recover these credentials and independently invoke the key management service to unwrap data-encryption keys, compromising all data protected by those keys. No public exploit code or active exploitation in CISA KEV has been identified at time of analysis; exploitation is bounded by the requirement that CSFLE be configured and that the attacker have access to diagnostic output.
Spring Integration's jCIFS-based SMB client silently negotiates down to legacy SMB1/CIFS when applications omit an explicit `smbMinVersion` setting, exposing file transfer sessions to NTLM relay attacks and in-transit content tampering by a network-positioned adversary. Affected versions span Spring Integration 6.4.0-6.4.12, 6.5.0-6.5.10, 7.0.0-7.0.5, and the standalone release 7.1.0 - covering all currently active Spring Integration release trains at time of disclosure. No CISA KEV listing or public exploit code specific to this CVE has been identified at time of analysis, though NTLM relay is a mature, extensively tooled attack class; EPSS data was not available in the sourced intelligence.
Arbitrary code execution across entire WordPress multisite networks is possible in the Defender Security plugin (versions 5.0.0 through 6.1.x) due to a missing access control check on a network-wide setting. Any site-level administrator on a multisite installation - a role with significantly lower trust than a network/super administrator - can modify this setting to inject and execute code affecting all sites on the network. No public exploit has been identified and EPSS stands at 0.17% (6th percentile), but SSVC rates technical impact as 'total', consistent with the network-wide RCE consequence if exploited by a malicious or compromised site admin.
Cleartext cluster key disclosure in Wazuh 4.14.0-4.14.6 allows any low-privilege API user with the default readonly or cluster_readonly role to retrieve the shared secret that authenticates and encrypts all inter-node cluster traffic. The GET /cluster/local/config endpoint was missing the mask_sensitive_config decorator applied to every sibling config endpoint, causing the cluster.key field to be returned unredacted to accounts that are explicitly denied update-config permission. The severity of this information disclosure is amplified by prior Wazuh advisories that establish cluster-peer remote code execution chains contingent on possessing the cluster key, making this a practical stepping stone to full cluster compromise. No public exploit has been identified at time of analysis and the vulnerability is not in the CISA KEV catalog.
Denial-of-service in Spring for Apache Kafka's `DeadLetterPublishingRecovererFactory` exposes consumer JVMs across all supported branches (2.8.x through 4.1.0) to crash or hang when processing messages with a crafted `retry_topic-original-timestamp` header. An authenticated Kafka producer can inject a ConsumerRecord carrying an oversized or malformed header byte array, which is passed without any length or format validation directly to Java's `BigInteger(byte[])` constructor, triggering heap memory exhaustion or an unhandled exception that disrupts message consumption. No public exploit code has been identified and the CVE does not appear in CISA KEV at time of analysis, but low attack complexity combined with broad version coverage makes this a credible availability threat for any Spring Kafka deployment using retry or dead-letter queue features.
Arbitrary file write in the libreoffice-convert npm package (all versions prior to 1.8.2) allows any caller who supplies a user-controlled `fileName` option to escape the intended temporary directory and overwrite arbitrary filesystem paths accessible to the Node.js process. The root cause is unsanitized use of `path.join(tempDir.name, fileName)` - a `../`-laden filename resolves outside the temp dir without restriction. With no public exploit identified at time of analysis and no CISA KEV listing, risk is contingent on whether consuming applications expose `fileName` to untrusted input, but the write primitive is trivially exploitable in document-conversion web services.
Cleartext credential exposure in Spring AMQP affects applications that use the RabbitMQ management aliveness check: when that check fails at runtime, the configured admin password is embedded verbatim in the thrown Java exception message, making it visible to anyone with access to exception output. The vulnerability spans multiple major release lines - 2.4.x, 3.2.x, and 4.0.x through 4.1.0 - and was reported by security@vmware.com, the Spring Security team. No public exploit code has been identified at time of analysis and CISA KEV status is unconfirmed, but a successful credential leak would yield full RabbitMQ administrative control.
Link credit exhaustion in Spring AMQP 4.1.0 silently stalls AMQP listener containers when a container-level ErrorHandler is active. Each message delivery whose processing throws an exception permanently consumes one link credit without returning it to the broker; once the pool reaches zero (after the default 100 credits), the broker halts delivery while isRunning() continues to report true, masking the outage from standard health checks. No active exploitation has been confirmed (no CISA KEV listing, no public POC), but this is a realistic denial-of-service condition for any Spring-based messaging consumer running the affected version with an ErrorHandler configured.
Path traversal in Spring AI's ResourceCacheService allows an authenticated low-privileged network attacker to write files outside the intended cache directory. The getCacheName() method appends URI fragments verbatim - including '../' sequences and path separators - to a base directory path before passing the result to new File(resourceParentFolder, newFileName) and writing downloaded bytes there. Affected versions span Spring AI 1.0.9 and earlier, 1.1.0 through 1.1.8, and 2.0.0; no public exploit or CISA KEV listing has been identified at time of analysis.
Spring Integration's UnZipTransformer component fails to impose any limit on decompressed entry size or entry count, enabling a low-privileged remote attacker to trigger JVM heap exhaustion via a crafted zip bomb archive. Affected versions span 6.4.0-6.4.12, 6.5.0-6.5.10, and 7.0.0-7.1.0 across the widely-used Spring enterprise Java framework. The attack primitive is well-understood and trivially constructable, though exploitation requires access to an integration endpoint that routes payloads through UnZipTransformer; no public exploit code has been identified at time of analysis and this CVE is not listed in the CISA KEV catalog.
SQL injection in the NL2SQLTool component of crewai-tools v1.10.2rc1 exposes any application built on this AI agent framework to arbitrary database query execution by remote unauthenticated attackers. The unsanitized sql_query argument is passed directly to the underlying database engine, enabling classic injection attacks against the connected data store. No public exploit code has been identified at time of analysis, and the EPSS score of 0.23% (13th percentile) indicates low current exploitation activity, though the zero-authentication requirement elevates exposure for internet-facing deployments.
Authorization bypass via user-controlled key in Summit Security Systems AdisyonPro (all versions before v5.21.0) allows unauthenticated remote attackers to access application functionality that should be restricted by access control lists, resulting in integrity and availability impact. The flaw is classified as CWE-639, an Insecure Direct Object Reference (IDOR)-class weakness in which the application accepts user-supplied keys to gate access to protected resources without adequate server-side authorization validation. No public exploit code or active exploitation has been identified at time of analysis.
Foreman's template revision endpoint, as shipped in Red Hat Satellite 6, exposes historical template contents across organizational and location boundaries due to missing object-level authorization (IDOR/BOLA, CWE-639). An authenticated user holding any template-related permission - as minimal as view_ptables - can retrieve audit-history revisions owned by other organizations simply by supplying a guessable audit ID. Template revisions may contain credentials, secrets, or sensitive configuration data, making the confidentiality impact high despite the low attack complexity. No public exploit has been identified at time of analysis, though the low-privilege entry bar lowers the practical exploitation threshold significantly.
Stored Cross-Site Scripting in Fluent Boards Pro (WordPress plugin by WP Manage Ninja) versions up to and including 2.0.11 allows a subscriber-level authenticated attacker to inject persistent malicious scripts into board content. Because the scope changes (S:C in the CVSS vector), the injected payload executes in the browser context of other users - most critically administrators - who subsequently view the compromised content, enabling session hijacking or privilege escalation. No public exploit code or active exploitation has been identified at time of analysis, but the low privilege requirement (subscriber account) broadens the realistic attacker population on multi-user WordPress sites.
Insufficient data exists to characterize CVE-2026-19953 beyond its association with an Ubuntu vendor report. No description, CVSS vector, CWE, or reference URLs are available in the provided intelligence. The affected component, impact class, and exploitation conditions are entirely unknown at this time.
Path traversal in Veno File Manager 4.4.9 exposes arbitrary server files to authenticated super administrators via two crafted HTTP requests targeting /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php. The vulnerability allows directory escape through unsanitized path parameters, enabling disclosure of sensitive files such as configuration files, credentials, or system data accessible to the web server process. A public proof-of-concept repository exists on GitHub (jfs-jfs/CVE-2026-37066), and no public exploit has been confirmed as actively exploited per CISA KEV.
Header type injection in Spring for Apache Kafka's default mapper configuration allows any Kafka producer with access to a consumed topic to inject java.net.InetAddress objects through the spring_json_header_types message header, triggering DNS resolution on the consumer host. All applications using @KafkaListener with the default JsonKafkaHeaderMapper or DefaultKafkaHeaderMapper - spanning versions 2.8.x through 4.1.0 - are affected without any non-default configuration required. No public exploit code has been identified at time of analysis, and the CVE is not listed in CISA KEV.
Unauthorized file access in Veno File Manager 4.4.9 exposes any user-uploaded file to other authenticated users via the /vfm-admin/ajax/streamvid.php streaming endpoint, which applies no per-user authorization enforcement before returning file content. An attacker holding a valid account on the same instance can craft a GET request to retrieve files belonging to any other user, provided the target file's path and filename are known. A public proof-of-concept repository exists at github.com/jfs-jfs/CVE-2026-37070; no active exploitation is confirmed by CISA KEV.