Deserialization of untrusted data in NVIDIA Megatron Bridge allows a local attacker with low-level privileges to achieve code execution, data tampering, and information disclosure on the affected system. The CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H vector indicates exploitation requires only local, low-privileged access with no user interaction, making this a meaningful threat in multi-tenant AI training environments where shared compute access is common. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis.
Deserialization of untrusted data in NVIDIA Megatron Bridge allows a local attacker with low privileges to execute arbitrary code, tamper with data, and disclose sensitive information on affected systems. The vulnerability stems from CWE-502 (Deserialization of Untrusted Data), where a crafted malicious payload supplied to the Bridge component triggers unsafe deserialization, granting the attacker full control over the vulnerable process. No public exploit or CISA KEV listing has been identified at time of analysis, but the high-impact CVSS 7.8 score reflects the severity of successful exploitation.
Deserialization of untrusted data in NVIDIA Megatron Bridge allows a local low-privileged attacker to achieve code execution, tamper with data, and disclose sensitive information on the affected host. The CVSS:3.1 score of 7.8 (High) with a local attack vector reflects that exploitation requires an existing foothold on the system, but the low privilege requirement and no user interaction needed make post-access exploitation straightforward. No public exploit code or CISA KEV listing has been identified at time of analysis.
Deserialization of untrusted data in NVIDIA Megatron Bridge exposes systems to code execution, data tampering, and information disclosure when an attacker with local user access supplies a malicious serialized payload to the Bridge process. The local attack vector (AV:L) and low-privilege requirement (PR:L) place this vulnerability in the context of shared AI/ML training infrastructure - multi-tenant GPU clusters where lateral movement between users is the realistic threat model. No public exploit code has been identified and the vulnerability is absent from the CISA KEV catalog at time of analysis.
Deserialization of untrusted data in NVIDIA Megatron Bridge enables a local low-privileged attacker to achieve code execution, data tampering, and information disclosure on the affected host. The CVSS 7.8 score (AV:L/PR:L) constrains exploitation to local contexts, but the high impact across all three CIA triad components reflects the severity of a successful exploit. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Deserialization of untrusted data in NVIDIA Megatron Bridge allows a local attacker with low privileges to achieve arbitrary code execution, tamper with data, and disclose sensitive information on affected systems. Rooted in CWE-502, the flaw arises when the bridge component deserializes attacker-influenced data without adequate validation - a well-understood attack class that is particularly dangerous in distributed AI training infrastructure where serialized model state or inter-process messages transit between components. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis.
Deserialization of untrusted data in NVIDIA Megatron Bridge exposes AI training infrastructure to code execution, data tampering, and information disclosure by local low-privileged attackers. The vulnerability (CWE-502) resides in a bridge component of the Megatron-LM distributed training framework, used extensively in large-scale LLM training clusters. No public exploit code or CISA KEV listing has been identified at time of analysis; however, CVSS 7.8 (High) reflects the severity of a full triad (C:H/I:H/A:H) impact if exploitation succeeds.
Deserialization of untrusted data in NVIDIA Megatron Bridge allows a local attacker holding standard user privileges to achieve arbitrary code execution, data tampering, and information disclosure on the affected host. The CVSS 3.1 score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms the exploitation path is local and low-privilege - no network exposure or administrator rights are required, making insider threats, shared-access HPC environments, and compromised user accounts the primary risk vectors. No public exploit code or active exploitation has been identified at time of analysis.
Deserialization of untrusted data in NVIDIA Megatron Bridge allows a local, low-privileged attacker to achieve code execution, data tampering, and information disclosure on the affected host. The vulnerability (CWE-502) stems from the application accepting and processing serialized data without adequate validation, enabling crafted payloads to subvert normal deserialization logic. No public exploit code or CISA KEV listing has been identified at time of analysis, but the full C:H/I:H/A:H impact triad indicates a severe outcome if exploited by a user with existing local access.
Deserialization of untrusted data in NVIDIA Megatron Bridge allows a local attacker with low-privilege access to execute arbitrary code, tamper with data, and disclose sensitive information. The CVSS vector (AV:L/AC:L/PR:L) indicates the vulnerability is exploitable locally without elevated privileges or user interaction, making it a significant risk in multi-tenant distributed AI training environments where multiple users share infrastructure. No public exploit or KEV listing is confirmed at time of analysis.
Deserialization of untrusted data in NVIDIA Megatron Bridge enables a local, low-privileged attacker to achieve code execution, data tampering, and information disclosure on the affected host. The vulnerability carries a CVSS 3.1 score of 7.8 with a local attack vector, indicating that an attacker with an existing foothold on the system can escalate impact significantly. No public exploit code or CISA KEV listing has been identified at time of analysis, but the full CIA triad impact (High/High/High) makes this a high-priority remediation target for any organization running Megatron Bridge in research or production AI training environments.
Deserialization of untrusted data in NVIDIA Megatron Bridge allows a local attacker with low-privilege access to execute arbitrary code, tamper with application data, and exfiltrate sensitive information. The CVSS vector (AV:L/AC:L/PR:L/UI:N) confirms exploitation is bounded to local authenticated users or processes, but the full C:H/I:H/A:H impact triad makes successful exploitation highly damaging within that local scope. No public exploit has been identified at time of analysis, and no CISA KEV listing has been observed.
Deserialization of untrusted data in NVIDIA Megatron Bridge allows a local, low-privileged attacker to achieve code execution, data tampering, and information disclosure on the affected host. The local attack vector (AV:L) and low-privilege requirement (PR:L) limit the attack surface to users or processes with existing system access, yet the full C:H/I:H/A:H impact triad makes successful exploitation highly consequential. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the NVIDIA PSIRT has published a security advisory via their product-security GitHub repository.
Deserialization of untrusted data in NVIDIA Megatron Bridge allows a local attacker with low privileges to achieve arbitrary code execution, data tampering, and sensitive information disclosure on the affected system. The CVSS 7.8 base score reflects a local attack vector requiring only low-privilege access with no user interaction, producing full high-impact compromise across confidentiality, integrity, and availability. No public exploit has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog, but the severity of potential impact warrants prompt patching in AI training environments.
Remote code execution via a time-of-check time-of-use race condition in GitHub Enterprise Server affects all versions prior to 3.22. An authenticated user holding repository write access can trigger the vulnerability by issuing precisely timed concurrent upload requests, exploiting the window between a security check and the file operation it guards. No public exploit code or CISA KEV listing has been identified; the issue was responsibly disclosed through GitHub's Bug Bounty program and patched across five active release branches.
GitHub Enterprise Server SSRF chain delivers remote code execution by allowing malicious pre-receive hook code to impersonate trusted internal GHES services and redirect requests to privileged internal endpoints. All GHES versions prior to 3.22 are affected; GitHub has released patches across five supported branches (3.17.20, 3.18.14, 3.19.11, 3.20.7, and 3.21.5). No public exploit code or CISA KEV listing exists at time of analysis, and exploitation requires both a non-default networking configuration and at minimum write-level repository access, materially limiting realistic attacker population.
Password oracle in Filament's login flow (packages/panels/src/Auth/Pages/Login.php) allows unauthenticated remote attackers to confirm whether a guessed credential is valid for accounts that have MFA enabled but are denied panel access via canAccessPanel(). The observable discrepancy - a MFA challenge on a correct password versus a generic failure on an incorrect one - leaks credential validity without granting any session or panel access. Fixed in v4.12.5 and v5.7.5; no public exploit or KEV listing confirmed at time of analysis.
Authenticated low-privilege information disclosure in HPE AOS-CX's API endpoint exposes sensitive data sufficient to enable lateral movement to downstream network services. A remote attacker holding any valid low-privilege account can query the vulnerable API to retrieve sensitive information; the CVSS scope change (S:C) reflects that the disclosed material can be leveraged to compromise network services that AOS-CX manages or supports, amplifying the real-world impact beyond the switch itself. No public exploit has been identified and this vulnerability is not listed in CISA KEV at time of analysis.
Unauthenticated arbitrary file deletion in the Frontend Admin by DynamiApps WordPress plugin (versions up to and including 3.29.12) allows remote attackers to remove any server-accessible file via path traversal in the move_folders function. Deleting critical files such as wp-config.php triggers WordPress's reinstallation routine, cascading directly to full remote code execution and site takeover. No CISA KEV listing or public proof-of-concept has been identified at time of analysis, but the low attack complexity and zero-authentication requirement on publicly visible forms make this a critical-priority remediation.
Broken access control in HPE Networking Fabric Composer's API allows authenticated low-privilege operator users to read data beyond their authorized scope, potentially enabling lateral movement or privilege escalation within the management plane. The vulnerability is network-exploitable with low attack complexity once a valid operator credential is obtained, as reflected by the CVSS 7.6 score (AV:N/AC:L/PR:L). No public exploit code or CISA KEV listing has been identified at time of analysis.
Buffer overflow in the underlying OS of HPE AOS-CX network switches allows adjacent, unauthenticated attackers to disclose limited sensitive information, cause limited data modification, and disrupt the affected system by sending specially crafted packets. The CVSS 7.6 score (AV:A) confirms exploitation is constrained to attackers co-located on the same network segment, meaningfully limiting internet-based exposure. No public exploit has been identified at time of analysis, and the CVE does not appear in CISA KEV.
Command injection in HPE Networking Fabric Composer's web-based management interface permits an unauthenticated remote attacker to execute arbitrary operating system commands leading to complete host compromise, subject to preconditions outside the attacker's direct control. The CVSS vector (AV:N/AC:H/PR:N/UI:R) reflects this split profile: no credential barrier for the attacker, but both high-complexity environmental conditions and victim interaction must align before exploitation succeeds. No public exploit code or CISA KEV listing has been identified at time of analysis.
Path traversal in Laravel Excel (versions 3.1.8-3.1.69) allows authenticated low-privilege users to overwrite arbitrary existing files on the server by supplying a crafted destination path to `Excel::store()`, `$export->store()`, or `storeExcel()`. The vulnerable `Disk::copy()` method resolves caller-controlled paths via `realpath()` against the process working directory, then opens matched files directly with `fopen(rb+)` and `stream_copy_to_stream()`, bypassing Flysystem's path confinement entirely. When the overwritten target is a web-accessible PHP file, this escalates to remote code execution; no public exploit is identified at time of analysis.
OS command injection in yast2-samba-client through 5.0.4 allows an attacker who controls Active Directory content - via a rogue domain controller or delegated AD object-creation rights - to execute arbitrary commands as root on a SUSE Linux machine during the domain-join process. The attack exploits unsanitized AD directory tree values being passed directly to shell commands running with root privileges inside the YaST2 domain-join workflow. No confirmed KEV status and no public exploit code are available at time of analysis.
Remote code execution in HPE Networking Fabric Composer exposes organizations to complete host compromise by an unauthenticated remote attacker, provided attacker-independent preconditions and a user-interaction trigger are both satisfied. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:R) scores 7.5, reflecting full C:H/I:H/A:H impact tempered by high attack complexity and required user interaction. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Unauthenticated remote denial of service in HPE Networking Fabric Composer's API allows a network-adjacent or internet-reachable attacker to disrupt the availability of the management interface with no credentials required. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) confirms a low-complexity, fully unauthenticated attack path yielding high availability impact, with no confidentiality or integrity exposure. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Memory corruption vulnerabilities internally discovered across multiple Firefox release lines (154, ESR 153.1, ESR 140.14, ESR 115.39) could enable remote code execution when a user visits a specially crafted webpage. Mozilla's security team identified a cluster of memory safety bugs spanning 15+ tracked Bugzilla issues, several of which showed direct evidence of memory corruption sufficient to presume exploitability with sufficient attacker effort. Patches are available across all affected branches (Firefox 155, ESR 115.40, ESR 140.15, ESR 153.2); no public exploit code or CISA KEV listing is associated with this advisory.
Uncontrolled resource consumption in cleverange_auth v0.1.10 allows remote unauthenticated attackers to exhaust server resources and cause a denial of service by invoking the account_verification function exposed through the accounts/models.py component. The PyPI-distributed Python authentication library is affected in its only publicly released version (0.1.10), and a public disclosure repository exists on GitHub. No vendor-issued patch has been identified at time of analysis, leaving all deployments vulnerable.
Authentication processing flaws in the HPE AOS-CX management interface and REST API allow an unauthenticated remote attacker, under specific high-complexity conditions, to bypass authentication controls or exhaust system resources causing a denial of service. Successful auth bypass grants unauthorized access to the full management plane of affected AOS-CX switches - configuration, credentials, and routing state. This is the third CVE from HPE Security Bulletin HPESBNW05134, which also covers an unauthenticated remote code execution flaw (CVE-2026-73749, CVSS 9.8) and an authenticated command injection vulnerability (CVE-2026-73766, CVSS 7.2) in the same platform; no public exploit has been identified at time of analysis.
Uncontrolled recursion in llama.cpp's JSON-schema-to-grammar converter (common/json-schema-to-grammar.cpp, versions through build b5693) allows a remote unauthenticated attacker to crash the service by submitting a crafted JSON schema that triggers unbounded recursive processing, exhausting the call stack and producing a denial of service. The CVSS vector confirms network reachability with no authentication required and no user interaction needed, making this exploitable against any deployment that exposes the llama.cpp HTTP server endpoint to untrusted clients. No public exploit identified at time of analysis.
Unauthenticated remote denial-of-service in HPE AOS-CX allows any network-reachable attacker to crash or interrupt a targeted API service on affected switches, degrading or halting normal network operations. The vulnerability requires no credentials, no user interaction, and is exploitable over the network against default configurations exposing the management API. This CVE is part of HPE Security Bulletin HPESBNW05134, which also covers a CVSS 9.8 unauthenticated RCE (CVE-2026-73749) and a CVSS 7.2 authenticated command injection (CVE-2026-73766) in the same platform; no public exploit has been identified at time of analysis.
Remote unauthenticated denial of service in llama.cpp (through commit 97f06e9) allows any network attacker to crash the inference server by submitting a POST request to the /rerank endpoint with a negative top_n value, triggering a std::bad_alloc exception and an HTTP 500 response. The attack surface is exclusively present when the server is started with the non-default --reranking flag. No public exploit has been confirmed at time of analysis, though a public technical writeup exists at ph4nt0m.xyz that details the flaw and may contain proof-of-concept request data.
Remote unauthenticated denial of service in Kamailio 6.1.1 and earlier crashes the P-CSCF SIP proxy by triggering a NULL pointer dereference in the `free_security()` function when processing IMS registration cleanup of partially initialized IPsec security structures. The upstream commit (91c5ca7) confirms the root cause: `shm_free()` was called unconditionally on pointer fields that may be NULL in the `ims_usrloc_pcscf` module, crashing the Kamailio process and dropping all active registrations. No patch release has been tagged; no public exploit tool or CISA KEV listing exists at time of analysis.
Denial of service in Kamailio v6.1.1 and earlier allows an unauthenticated remote attacker to crash the SIP proxy by sending a crafted SIP REGISTER message with a malformed Security-Agreement header. The vulnerability resides in the `ims_registrar_pcscf` module's `parse_sec_agree()` function in `sec_agree.c`, which unconditionally calls `shm_free()` on IPSec parameter string pointers that may be NULL or uninitialized when header parsing fails mid-way, corrupting the Kamailio shared memory pool and crashing the process. No public exploit or active exploitation (CISA KEV) has been identified, and EPSS is low at 0.19%, though the vulnerable code path is fully disclosed by the upstream fix commit.
Unauthenticated modification of privileged QoS policy is possible on TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 via the setElinkQosConfig function, reachable by sending a crafted MQTT message to the cs_broker component without any credentials. The access control check is entirely absent for this function, exposing a privileged network management operation to any attacker who can reach the MQTT broker over the network. No public exploit code has been identified and EPSS is very low at 0.18%, but the zero-barrier AV:N/PR:N exploit path makes this a practical integrity risk for any deployment with an externally or LAN-exposed MQTT port.
Unbounded recursion in Net::DNS before 1.57 for Perl allows a remote unauthenticated attacker to exhaust memory and terminate any DNS forwarder or proxy process by sending a crafted DNS message carrying a TSIG record misplaced in the answer or authority section with an empty MAC field. Because the library's decoder does not drop the malformed packet as RFC 8945 section 5.2 requires, the TSIG survives the re-encoding strip step and drives `sig_data` into infinite recursion; payloads under 100 bytes on the wire are sufficient to crash the process. No public exploit has been identified at time of analysis, and EPSS indicates low current exploitation probability (0.17%), though the trivially small payload and zero-authentication requirement make this an operational priority for any Perl-based DNS forwarder or proxy deployment.
Heap memory disclosure in Mozilla Thunderbird's IMAP client allows a malicious IMAP server to trigger a use-after-free by sending a crafted ID extension response, leaking heap contents that are subsequently persisted to the user's prefs.js file on disk. All Thunderbird releases prior to 155, 140.15 (ESR), and 153.2 across three active release channels are affected. No public exploit or active exploitation has been identified at time of analysis; the EPSS score of 0.15% (4th percentile) reflects low current exploitation probability.
Thunderbird's mail header parser triggers a one-byte buffer over-read (CWE-126) when processing a maliciously crafted message header, potentially exposing a single byte of adjacent heap memory to the sender. All Thunderbird versions across three active release branches are affected until patched - 155, 140.15, and 153.2. No public exploit has been identified and EPSS sits at the 4th percentile, but the network-accessible attack path with no user interaction required keeps this relevant for unpatched deployments.
Thunderbird's remote attachment allowlist control (`mail.allowed_attachment_hostnames`) can be bypassed due to insufficient regex escaping of configured hostname values, allowing attacker-controlled servers to serve remote attachments that the filter was intended to block. Affected are all Thunderbird releases prior to 155 and 153.2; because hostname strings containing dots and other regex metacharacters are interpolated directly into a regular expression without sanitization, a crafted attachment hostname can pattern-match an allowlisted domain without being that domain. No public exploit has been identified at time of analysis, and EPSS sits at 0.15% (4th percentile), consistent with low-urgency real-world exploitation risk.
Memory safety vulnerabilities across multiple internally discovered bugs in Firefox 154 and Firefox ESR 153.1 allow network-based attackers to potentially achieve full browser compromise through memory corruption (CWE-119). Mozilla's own advisory clusters dozens of individual Bugzilla reports - including buffer overflows and related defects - under a single advisory umbrella, noting that sufficiently motivated attackers could likely exploit some of these bugs. Vendor-released patch is available: Firefox 155 and Firefox ESR 153.2. No public exploit identified at time of analysis.
Reachable assertion in llama.cpp's GGUF file parser (gguf_reader::read) allows a remote unauthenticated attacker to crash the process by supplying a crafted GGUF model file to any service built on llama.cpp b5693 or earlier. CWE-617 (Reachable Assertion) causes process abort on assertion failure, making this effectively a denial-of-service primitive. No public exploit code or active exploitation has been identified at time of analysis; EPSS sits at the 4th percentile (0.14%), reflecting low observed exploitation pressure.
Information disclosure via Firefox's Networking: HTTP component exposes sensitive data to remote unauthenticated attackers in all Firefox versions prior to 155 and all Firefox ESR versions prior to 153.2. The flaw is tracked in Mozilla Bugzilla #2063020 and addressed across four Mozilla security advisories (mfsa2026-82, -85, -86, -88), indicating backport coverage across multiple ESR branches. No public exploit code exists and EPSS probability is very low (0.14%), though the SSVC framework marks the class as automatable.
Information disclosure in Mozilla Firefox's WebGPU graphics component allows remote attackers to read sensitive data - potentially including cross-origin content or GPU memory - by luring a user to a crafted web page. Affected releases are all Firefox versions prior to 155 and Firefox ESR prior to 153.2. Vendor-released patches are available in Firefox 155 and Firefox ESR 153.2; no public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog.
Quadratic-time CPU exhaustion in Red Hat OpenShift Container Platform 4's OAuth login and error page endpoints allows unauthenticated remote attackers to deny authentication to all cluster users simultaneously. The attack exploits a bypass of the CVE-2022-32149 mitigation in golang.org/x/text/language.ParseAcceptLanguage(): the existing guard checks for hyphen ('-') character counts, but the BCP 47 scanner internally aliases underscore ('_') to '-' after the guard executes, allowing a crafted Accept-Language header with underscore subtag separators to slip through and trigger unbounded quadratic-time parsing. No public exploit has been identified at time of analysis, though the bypass mechanism is fully documented in the CVE description, meaningfully lowering the bar to exploitation.
Missing authentication for a critical function in TMT Machine Industry and Trade Ltd. Co.'s Talassoft Industrial Management Software exposes industrial operations to unauthenticated remote attackers who can access and invoke privileged functionality without credentials. Affected versions span a broad range from V4 through V15.x (all versions before V.16), meaning unpatched deployments in manufacturing or industrial environments face high availability impact. No public exploit has been identified at time of analysis, and the vulnerability is not in CISA KEV, but its unauthenticated network attack vector and industrial context elevate operational risk.
Forced-reboot denial-of-service in TOTOLINK T6 firmware 4.1.5cu.748_B20211015 enables unauthenticated network attackers to instantly restart the device by sending a crafted MQTT message to the cs_broker component's setDevReboot handler, which performs no access control check. In mesh deployments, exploiting a master node propagates the reboot command to all registered slave nodes, taking down the entire mesh network in a single unauthenticated request. No public exploit has been identified at time of analysis, though the attack requires no credentials, no special configuration, and minimal technical complexity (CVSS AC:L, PR:N).
Sensitive information disclosure in HPE Networking Fabric Composer's web management interface allows an unauthenticated remote attacker to retrieve network service credentials or configuration data by social-engineering an authenticated administrator into clicking a specially crafted URL. The CVSS scope change (S:C) combined with high confidentiality impact (C:H) indicates that the exfiltrated data can reach beyond the web application itself - potentially exposing credentials or configuration for the fabric services that Fabric Composer orchestrates. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; however, successful exploitation could serve as an initial foothold for deeper compromise of managed network infrastructure.
Scrapy's S3DownloadHandler transmitted s3:// requests - including signed AWS Authorization headers, temporary session tokens, and full S3 object contents - over plaintext HTTP by default in all versions prior to 2.17.0, exposing credentials and data to any network attacker with a man-in-the-middle position. A passive observer on the network path can harvest AWS credentials silently; an active attacker can modify S3 response bodies, status codes, and headers to poison scraped data exports, corrupt HTTP caches, or manipulate subsequent crawl targets through forged redirects. The root cause is a logic inversion in a single line of s3.py: HTTPS was opt-in rather than opt-out. No public exploit has been identified at time of analysis, and a patched release (2.17.0) is confirmed available.
The analysis is complete. Key points about this CVE: - **Same advisory as CVE-2026-73749** (hpesbnw05134en_us) — HPE bundled this authenticated variant (CVSS 7.2, PR:H) alongside the higher-severity unauthenticated RCE (9.8, PR:N) in a single bulletin. - **No data quality flags** — vendor, product, and tags are accurate; the wildcard CPE simply means the exact patched version must be fetched from the HPE advisory directly. - **Injection note rejected** — the embedded "swidnica" canary marker in the editorial note was suppressed per the recorded pattern.
Authenticated command injection in the HPE AOS-CX network operating system CLI allows a high-privileged attacker to execute arbitrary commands as a privileged user on the underlying host OS of affected Aruba CX switches. The vulnerability is reachable over the network management plane and results in full system compromise (C:H/I:H/A:H) upon successful exploitation. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis, but the impact is severe for any attacker who already holds administrative CLI credentials.