Reflected Cross-Site Scripting in the Interactive Geo Maps WordPress plugin (versions <= 1.6.30) allows unauthenticated remote attackers to inject and execute arbitrary JavaScript in a victim's browser by luring them to click a crafted URL. The vulnerability carries a CVSS 7.1 with scope change, meaning the injected script executes in the context of the victim's authenticated WordPress session rather than the plugin's own origin. No public exploit or active CISA KEV listing has been identified at time of analysis, though Patchstack has published a vulnerability entry.
Unauthenticated stored or reflected Cross-Site Scripting in the MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin (versions <= 5.13.1) allows remote attackers to inject arbitrary JavaScript that executes in a victim's browser when they visit an affected page. The CVSS vector (PR:N, S:C) confirms exploitation requires no authentication and crosses into the browser security context, making this a meaningful risk on any WordPress site running the affected plugin. No public exploit code or CISA KEV listing has been identified at time of analysis, though Patchstack has documented the issue.
Unauthenticated cross-site scripting in the Upsell Order Bump Offer for WooCommerce plugin (WP Swings) allows remote attackers to inject malicious scripts into victim browsers by tricking authenticated users into visiting a crafted URL. All versions through 3.1.5 are confirmed affected per CPE data published by Patchstack. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Missing authorization in Craft CMS 5.0.0-RC1 through 5.10.10 allows an authenticated low-privilege author to overwrite another user's asset files in shared folders. The flaw in AssetsController::actionReplaceFile occurs because the target asset is resolved by folder and filename after the replacePeerFiles permission check has already executed - omitting the assetId parameter in the request causes the application to silently bypass the peer-replacement gate. The vendor released a fix in version 5.10.11; no public exploit code has been identified at time of analysis.
Craft CMS versions 5.0.0-RC1 through 5.10.10 allow an authenticated low-privileged contributor to permanently delete canonical entry content by exploiting a broken authorization chain in ElementsController::actionDeleteForSite(). The method authorizes deletion against the user's provisional draft rather than the canonical element, then propagates the destructive action to the canonical record without re-verifying deleteEntriesForSite permission. Deleted content bypasses the recycle bin and is unrecoverable, making this an integrity-destroying flaw despite its mid-range CVSS score. No public exploit code is identified at time of analysis.
Symlink traversal in util-linux's X-mount.subdir mount option allows a local unprivileged user with an fstab-authorized entry to redirect mount resolution to arbitrary host paths, achieving privilege escalation or container escape on Linux 6.15+ kernels. The root cause is that AT_SYMLINK_NOFOLLOW, passed to open_tree() in the detached-tree fast path, only blocks final-component symlinks - not intermediate path components - leaving an attacker who can plant a symlink in a middle directory able to substitute the intended subdirectory with any host path. Affected platforms include Red Hat Enterprise Linux 7-10, Red Hat Hardened Images, and Red Hat OpenShift Container Platform 4; no public exploit has been identified at time of analysis.
Server-side request forgery in Mailpit's link-checking and proxy functionality allows unauthenticated remote attackers to bypass the IsInternalIP deny list and reach restricted internal network destinations. The deny list in net.go failed to include the Azure WireServer address (168.63.129.16/32) and the RFC 2765/6145 IPv4-translated IPv6 prefix (::ffff:0:0:0/96), enabling DNS rebinding-style attacks where attacker-controlled hostnames resolve to these unblocked addresses. When Mailpit is deployed in Azure environments, this specifically enables access to the platform metadata channel used by the Azure host agent. No public exploit or KEV listing identified at time of analysis.
Insecure credential storage in UpSignOn for Windows (before 7.19.0) exposes the biometric unlock key from the Windows PasswordVault API to any standard process running in the same user session, requiring no authentication prompt. An attacker with low-privilege local code execution can retrieve this key, decrypt the protected vault files on disk, and export the entire password manager contents in cleartext. No public exploit has been identified at time of analysis, and the vendor-released patch is available in version 7.19.0.
Cleartext vault data in UpSignOn for Windows before 7.19.0 persists in process memory after the application locks, exposing all stored secrets to any local attacker with standard user privileges. Using the Windows PROCESS_VM_READ permission, an attacker can call ReadProcessMemory() against UpSignOn.exe and extract entry names, URLs, usernames, passwords, TOTP secrets, and notes in plaintext - defeating the lock screen's security guarantee. No public exploit code is identified at time of analysis and no CISA KEV listing exists, but the technique is well within the reach of any attacker with local access to the workstation.
Sensitive key retention in UpSignOn for Windows before 7.19.0 allows a local attacker with low privileges to recover the master password and decrypt the entire password vault. The backup key used to protect an encrypted master password backup is retained in the memory of UpSignOn.exe even after the vault is re-locked, enabling an attacker who can read process memory to extract it, decrypt the master password backup stored in v6-vault1.DATA.txt, and subsequently export all stored credentials in cleartext. No public exploit has been identified at time of analysis, but the attack chain is mechanically straightforward once local access is established.
SAML assertion replay in Grafana Enterprise allows an attacker who obtains a valid signed SAML response to authenticate as the victim user without re-authenticating. When the non-default `allow_idp_initiated` setting is enabled, the SAML library globally suppresses InResponseTo field validation - a field that normally binds each response to a specific originating request - across all SAML flows, including SP-initiated ones that should still enforce it. This anti-replay failure is limited to Grafana Enterprise with an explicit opt-in configuration change; Grafana OSS is unaffected. No public exploit code has been identified and the vulnerability is not in CISA KEV.
Server-Side Request Forgery with full response exfiltration in Open edX Platform's Studio CMS video download endpoint allows authenticated course staff to pivot from the application server into internal networks. A course staff user submits an attacker-controlled URL in the `files[].url` parameter; the CMS backend unconditionally fetches the target via `requests.get(url, allow_redirects=True)` and packages the raw response bytes into a ZIP returned to the caller. Redirect chaining is enabled and no timeout is enforced on the fetch path, enabling blind SSRF amplification and potential cloud-metadata credential theft. No public exploit or active exploitation has been identified at time of analysis. The fix, committed at 00b7c3c, restricts fetches to URL allowlisted from the course's own VAL-registered video encodings.
Rank Math SEO WordPress plugin before version 1.0.277 allows any authenticated user with at least the Author role to modify SEO indexing metadata on WordPress content, taxonomy terms, and user profiles they do not own, due to a missing object-ownership check. This enables authors to suppress other users' content from the site's XML sitemap and search engine index, causing targeted de-indexing attacks in multi-author environments. A publicly available proof-of-concept exploit exists, and a vendor-released patch (1.0.277) is available.
Instructors in MasterStudy LMS WordPress Plugin versions before 3.7.46 can read quiz questions, correct answers, and explanations belonging to other instructors by supplying arbitrary question identifiers in plugin requests. The root cause is CWE-639 (IDOR - Authorization Through User-Controlled Key): the plugin exposes question IDs without verifying that the requesting instructor owns them. A public proof-of-concept is available via WPScan, and a vendor patch has been released at version 3.7.46.
Privilege escalation in the Rank Math SEO WordPress plugin (versions before 1.0.277) lets any authenticated Author-role user modify SEO metadata on taxonomy terms they have no editorial rights over, and overwrite post titles belonging to other users. The root cause is a missing capability check in the bulk metadata update handler, compounded by unsafe object identifier reuse across object types (taxonomy terms and posts), which allows the same request to reach unintended target objects. A public exploit is documented by WPScan and a vendor patch (v1.0.277) has been released.
Insecure direct object reference (IDOR) in Rank Math SEO WordPress plugin before 1.0.277 allows authenticated users with the Author role or above to read the title, body, and SEO metadata of other users' non-public posts (drafts, private, pending) without authorization. The plugin fails to verify that the requesting user has permission to access the specific post ID supplied in the request. A publicly available exploit exists per WPScan, and a vendor patch (1.0.277) has been released. No active exploitation confirmed in CISA KEV at time of analysis.
Uncontrolled memory consumption in Grafana's SQL macro evaluator allows authenticated users with query permissions to crash the Grafana server process via a bypass of the prior CVE-2026-33375 fix. By injecting the timeGroup macro into a WHERE clause rather than the positions blocked by the original regex-based patch, attackers cause the macro evaluator to consume unbounded memory, terminating the server. Microsoft SQL Server, PostgreSQL, and MySQL data source integrations are all confirmed affected, and no public exploit has been identified at time of analysis.
Credential exfiltration via SSRF in LiteLLM proxy (AI Gateway) prior to versions 1.88.6 and 1.96.2 allows any authenticated proxy user to redirect outbound LLM provider calls to an attacker-controlled endpoint, causing the proxy to transmit its operator-configured API keys and other secrets to that destination. Vulnerable routing parameters - api_base, base_url, model_list, fallbacks, and litellm_credential_name - could be injected through nested request fields, path values, and bracket-notation form data that incomplete validation across five proxy modules failed to intercept. No public exploit code has been identified at time of analysis; vendor-released patches are confirmed at versions 1.88.6 and 1.96.2.
Memory exhaustion denial of service in Filebeat's HTTP ingestion endpoint allows an authenticated low-privileged attacker to crash the Filebeat process by sending specially crafted compressed payloads that trigger unbounded decompression (a decompression-bomb / zip-bomb pattern). Affected versions span the 8.x and 9.x branches, with patched releases 8.19.18 and 9.3.1 published under Elastic Security Advisory ESA-2026-165. No public exploit code or CISA KEV listing has been identified at time of analysis, and exploitation is constrained to attackers who can reach the HTTP input endpoint.
Sensitive token logging in Boruta Server before 0.10.0 allows any party with read access to business event logs - including log aggregation systems and the built-in administration log viewer - to recover live OAuth 2.0 and OpenID Connect credentials. Exposed values include access tokens, refresh tokens, authorization codes, agent tokens, direct-post codes, ID tokens, and VP tokens logged during normal authorization and token issuance flows. An attacker who recovers these credentials can impersonate users or clients on any resource server that trusts the stolen tokens until expiration or explicit revocation. No public exploit or active exploitation has been identified.
Information leakage via the MediaCapture component in Google Chrome prior to 152.0.7977.75 enables a remote attacker to exfiltrate sensitive browser-side data by directing a user to a specially crafted HTML page. The flaw (CWE-200) resides in Chrome's implementation of the W3C Media Capture API, which handles camera, microphone, and display-capture device access, and may expose captured media content or associated metadata beyond the intended same-origin boundary. Google has released a fix in the 152.0.7977.75 stable channel update; no public exploit has been identified at time of analysis.
Incorrect authorization in Chrome's Autofill component on Android (prior to 152.0.7977.75) exposes sensitive Autofill-stored data - potentially including saved credentials, addresses, or payment details - to a remote attacker who can socially engineer a victim into visiting a crafted HTML page. The flaw is platform-specific to Chrome on Android and requires active user interaction via social engineering, which limits real-world exploitation friction somewhat. Google has released a patch and no public exploit code has been identified at time of analysis.
Incorrect authorization in Chrome's SiteSettings component (versions prior to 152.0.7977.75) allows an unauthenticated remote attacker to bypass system-level site access restrictions via a crafted HTML page. The attack requires user interaction - the victim must visit the attacker-controlled page - and the primary impact is a high-integrity authorization bypass, potentially allowing a malicious page to access system resources (e.g., geolocation, camera) that should be gated behind permission prompts. No public exploit code or CISA KEV listing exists at time of analysis, and the EPSS score of 0.17% reflects low near-term exploitation probability despite Chrome's massive global deployment footprint.
Stored cross-site scripting in the Gallery PhotoBlocks WordPress plugin (versions <= 1.3.4) allows authenticated contributors to inject malicious scripts into gallery content, which execute in the browsers of higher-privileged users such as editors or administrators who view the affected content. The scope change (S:C in the CVSS vector) reflects the cross-context impact: attacker-controlled script runs in the victim's authenticated session, enabling session hijacking, credential theft, or unauthorized administrative actions. No public exploit code has been identified at time of analysis, and no KEV listing was found.
Origin policy bypass in Google Chrome's Omnibox (address bar) prior to version 152.0.7977.75 allows remote attackers using social engineering and crafted network traffic to circumvent the web same-origin policy, enabling high-integrity cross-origin manipulation. The CVSS vector confirms user interaction is required, meaning the attack cannot be fully automated and depends on deceiving the victim. No public exploit code or active exploitation has been identified; EPSS of 0.16% (5th percentile) reflects low near-term exploitation probability.
Kibana's request processing layer fails to enforce memory allocation limits, allowing any authenticated low-privilege user to trigger unbounded heap consumption and deny service to all users of the instance. Elastic's advisory ESA-2026-163 discloses the issue across all Kibana branches and releases fixes in versions 8.19.16, 9.3.5, and 9.4.2. No public exploit code or active exploitation has been identified at time of analysis.
Path traversal in Kibana's Fleet feature enables a low-privileged user with Fleet write access to craft resource paths that redirect a subsequent administrative delete operation onto unintended internal Kibana resources, causing unauthorized data destruction. Affected versions are Kibana prior to 8.19.18 and 9.4.3; Elastic released fixes for both branches under ESA-2026-157. No public exploit code or active exploitation has been identified at time of analysis, but the two-actor attack pattern (attacker plants, admin triggers) meaningfully constrains real-world exploitability.
Stored cross-site scripting in WCFM Marketplace (WordPress WooCommerce multivendor plugin) through version 3.8.2 allows authenticated contributors to inject persistent malicious JavaScript into marketplace content. When a higher-privileged user such as a site administrator or shop manager views the injected content, the payload executes within their browser session - enabling session hijacking, credential theft, or administrative actions performed on the attacker's behalf via the scope change. Reported by Patchstack; no public exploit code or active exploitation has been identified.
Broken access control in WP Event Solution WordPress plugin (versions <= 4.1.22) exposes unauthenticated network attackers to unauthorized actions against event management functionality, resulting in partial integrity and availability impact. The CVSS vector (PR:N/UI:N/AC:L) confirms this is trivially exploitable by any internet-reachable attacker with no authentication or user interaction required. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though the low barrier to exploitation warrants prompt patching on public-facing WordPress installations.
Stored Cross-Site Scripting in the Easy Waveform Player WordPress plugin (≤1.2.2) allows authenticated Contributor-level users to inject arbitrary JavaScript via the shortcode_easywaveformplayer() function due to missing input sanitization and output escaping. The payload persists server-side and executes in every visitor's browser upon page load, with scope change enabling cross-origin script execution. No public exploit or CISA KEV listing has been identified at time of analysis; a patch commit (changeset 3674516) is visible in the WordPress plugin SVN repository.
Account takeover in Keycloak's first-broker-login flow allows a network attacker with their own account on a social identity provider to hijack a victim's active account-linking session and bind their own social identity to the victim's local Keycloak profile. The verification proof generated during the social IdP linking handshake is not cryptographically bound to the specific upstream identity being verified, enabling a substitution attack that grants the attacker persistent authenticated access to the victim's local account and any downstream SSO-protected services. No public exploit code has been identified at time of analysis, and the vulnerability has not been added to the CISA KEV catalog.
Stored XSS in Elegant Themes' Divi WordPress theme (all versions through 4.27.6) allows authenticated attackers with Contributor-level access to inject persistent JavaScript payloads that execute against any visitor of an affected page. The vulnerability chains two compounding flaws: the save-time sanitization filter `et_builder_sanitize_dynamic_content_fields()` only recognizes the modern `@ET-DC@...@` marker format, while the rendering engine silently accepts and converts a legacy JSON format, bypassing sanitization entirely; a second flaw in the `post_meta_key` resolver skips `wp_kses_post()` output encoding when `enable_html` is set to `on`, feeding raw `get_post_meta()` output directly into page HTML. A patch was released in version 4.27.7 per the Divi changelog. No public exploit has been identified at time of analysis.
Stored Cross-Site Scripting in Elegant Themes' Divi WordPress theme (all versions through 4.27.6) enables authenticated contributors to plant a `javascript:` URI in the `redirect_url` parameter of the `et_pb_contact_form` shortcode, which executes in any visitor's browser upon contact form submission. The flaw arises from using `esc_attr()` instead of `esc_url()` for sanitization and the parameter's absence from the `$url_options` URL-sanitization array, allowing the raw URI to reach client-side JavaScript that assigns it to `window.location.href`. No public exploit code or CISA KEV listing has been identified at time of analysis, but Divi's enormous deployment footprint makes this a meaningful aggregate risk despite the Contributor access prerequisite.
Agent configuration takeover in Jenkins 2.579 and earlier allows an attacker holding Agent/Configure permission on any single agent to overwrite any other agent's configuration by embedding the target agent's name in a crafted XML document submitted to the REST API or CLI update endpoints. Successful exploitation grants the attacker full control of the victim agent's configuration and exposes its inbound agent secret and environment variables - primitives that enable agent impersonation and lateral movement within the CI/CD infrastructure. No public exploit code or CISA KEV listing has been identified at time of analysis; patches are available as Jenkins 2.580 and LTS 2.568.3.
Out-of-bounds write in Samsung TizenFX's MediaBufferBase component allows a local low-privileged attacker to corrupt memory by supplying unchecked array indices through the Tizen.Multimedia media buffer API. The vulnerable indexer property in `Tizen.Multimedia.Common.Internal.MediaBufferBase` lacked all bounds validation prior to fixes introduced in upstream PRs #7814 and #7815, admitting negative or oversized index values. Under high-complexity conditions, successful exploitation can produce high integrity and availability impact - crashing the multimedia subsystem or enabling controlled memory corruption - on Tizen-based devices such as Samsung Smart TVs and Galaxy Watch wearables. No public exploit exists and no active exploitation has been confirmed.
Path traversal in Kibana's Fleet feature enables a low-privileged user to manipulate Fleet administration actions taken by higher-privileged users, causing those actions to target unintended resources - including deleting accounts with elevated privileges. The attack exploits a confused-deputy pattern (CWE-22/CAPEC-126): the attacker crafts a traversal payload through their low-privileged access, then waits for an admin to perform a routine Fleet operation, at which point the admin's elevated context executes the deletion against the attacker-controlled target. Fixed versions are Kibana 8.19.17, 9.3.6, and 9.4.3 per the Elastic security advisory ESA-2026-159. No public exploit or CISA KEV listing is present at time of analysis.
Denial of service in simular-ai Agent-S up to version 0.3.2 allows low-privileged remote attackers to disrupt the GUI action execution workflow by manipulating action parameters in grounding.py. The attack targets the model-generated action budget processing logic, causing improper resource handling (CWE-404) that results in agent availability loss. A public proof-of-concept titled 'AgentS_Action_Parameter_Budget_DoS_Report' is available on GitHub; the vendor did not respond to coordinated disclosure, leaving no official patch in place.
Uncontrolled resource consumption in ntegrals openbrowser's Browser Agent Message Construction component allows remote attackers to degrade availability by crafting malicious messages that exhaust agent resources. The affected code resides in packages/core/src/agent/agent.ts, and the flaw requires passive user interaction (UI:P) per the CVSS 4.0 vector, limiting full automation. A public proof-of-concept has been published on GitHub; the vendor was notified but did not respond, and no patch exists.
Uncontrolled memory allocation in RightNow-AI OpenFang up to version 0.6.9 allows remote low-privileged attackers to degrade or crash the service by sending crafted input to the shell_exec function in the openfang-runtime crate. The CVSS 4.0 vector (AV:N/PR:L/VA:L) confirms network-reachable, authenticated exploitation with limited availability impact and no confidentiality or integrity exposure. A public proof-of-concept exploit is available on GitHub (CVE/OpenFang_ShellExec_Output_Buffer_DoS_Report), and the vendor did not respond to disclosure - no patch has been released.
Denial of service in simular-ai Agent-S 0.3.1/0.3.2 allows authenticated remote attackers to crash or exhaust the CodeAgent service by sending crafted input to code_agent.py. The root cause is CWE-404 (Improper Resource Shutdown or Release), meaning a resource - likely a subprocess, file handle, or socket - is not properly released on certain code paths, enabling resource exhaustion. A public proof-of-concept is available on GitHub; no vendor patch exists as the vendor did not respond to disclosure.
Denial of service in zhayujie CowAgent up to version 2.1.7 allows a low-privileged remote attacker to crash or degrade availability by manipulating input to the Bash Tool component (agent/tools/bash/bash.py). The root cause is CWE-404 (Improper Resource Shutdown or Release), suggesting the Bash Tool fails to bound, drain, or release output buffers when executing shell commands - consistent with the public PoC title 'CowAgent_Bash_Output_Buffer_DoS_Report'. A proof-of-concept exploit is publicly available on GitHub, though no patch has been released and the vendor was unresponsive to disclosure.
Stored cross-site scripting in the Drupal Monster Menus contrib module (versions 0.0.0 through 9.5.3) allows malicious script payloads to be persistently injected into navigation or menu rendering contexts, executing in the browsers of subsequent authenticated visitors. The CVSS scope-change flag (S:C) confirms the attack crosses session boundaries, enabling session hijacking, credential theft, or further lateral movement within the Drupal application. No public exploit code has been identified at time of analysis, and Drupal's security team has released an advisory (SA-CONTRIB-2026-116) with a patch.
Stored cross-site scripting in the Drupal Slick Carousel contributed module (all releases before 2.1.0) allows injection of persistent malicious scripts into carousel-rendered content. Any authenticated user or visitor who loads a page containing the compromised carousel triggers script execution in their browser, potentially exposing session tokens and enabling unauthorized actions performed under the victim's identity. The Drupal Security Team has released a patch via sa-contrib-2026-117; no public exploit code or confirmed active exploitation has been identified at time of analysis.
Denial of service in zhayujie CowAgent up to version 2.1.3 allows a low-privileged remote attacker to crash or hang the agent service by sending a crafted input to the BrowserTool component in `agent/tools/browser/browser_tool.py`. The underlying cause (CWE-404) is improper resource shutdown or release - likely a browser subprocess or evaluation call that hangs indefinitely rather than timing out cleanly. A public proof-of-concept exists on GitHub; the vendor was unresponsive to disclosure, and no patch has been released.
The webhook shared secret stored in Nexus Repository 3's capability configuration is returned unmasked via the capability read API, exposing a sensitive HMAC credential to any account holding the nexus:capabilities:read privilege. Affected versions span 3.2.0 through 3.95.x - a broad exposure window stretching back to an early release - with a confirmed fix in version 3.96.0 published by Sonatype. No public exploit or active exploitation has been identified, but a leaked webhook secret enables downstream abuse including forging authenticated webhook payloads or validating intercepted outbound events targeting CI/CD or pipeline endpoints.
Stored cross-site scripting in OpenCart 4.1.0.3 and 4.1.0.4 allows an authenticated low-privilege user (e.g., a customer account) to inject malicious script into the address_1 field via the Autocomplete Workflow in catalog/controller/account/address.php, which then executes in the browser of any user who subsequently views the stored address data. A public proof-of-concept exploit is available on GitHub. The vendor did not respond to the coordinated disclosure, so no official patch has been issued.
Stored cross-site scripting in OpenCart 4.1.0.3 and 4.1.0.4 allows an authenticated customer to inject malicious script content via the `firstname` field in `catalog/controller/account/edit.php`, which executes in the browser of any user (likely an admin or staff member) who triggers the Autocomplete Workflow over customer data. A public proof-of-concept is available on GitHub. No vendor patch exists - the vendor did not respond to the coordinated disclosure.
Quadratic CPU exhaustion in HTTPX2's Server-Sent Events parser allows a malicious or compromised SSE endpoint to deny service to Python applications using httpx2.Client.sse() or httpx2.AsyncClient.sse() in versions 2.5.0 through 2.9.x. The _SSELineDecoder.decode() method in _sse.py repeatedly copies and rescans its entire in-memory buffer each time a new chunk arrives for an unterminated line, producing O(n²) processing work proportional to the length of the crafted line. A crafted stream can consume excessive CPU, blocking a synchronous worker thread indefinitely or starving an asynchronous event loop. No public exploit identified at time of analysis; a vendor-released patch is available in version 2.10.0.
Path traversal in Reader Tools PDF Reader App 98.8 on Android permits a local low-privileged attacker to manipulate the `_display_name` parameter supplied via a deep link to the `ActSplashNew.handleDeeplink` function, enabling file reads or writes outside the application's intended sandbox. The affected CPE (`cpe:2.3:a:reader_tools:pdf_reader_app`) covers version 98.8 on Android; the vendor did not respond to the coordinated disclosure, and no patch has been released. A public proof-of-concept exploit exists, but real-world impact is bounded by the local-only attack vector and low individual component impacts.
Path traversal in AirAsia MOVE App for Android (versions up to 12.47.1) allows a locally present low-privileged attacker to escape intended directory boundaries via unsanitized handling of the `_display_name` argument inside `com.airasia.core.utils.RealPathUtil.getRealPath`. Exploitation yields limited integrity and availability impact constrained by Android's SELinux sandbox, with no confidentiality exposure. A public proof-of-concept document exists; the vendor did not respond to coordinated disclosure, and no patch has been released.