Local File Inclusion in the Divi Ajax Filter WordPress plugin (all versions through 5.1.2) lets remote unauthenticated attackers include and execute arbitrary .php files on the server via the 'custom_loop_template' parameter. Reported by Wordfence and rated CVSS 9.8, it enables access-control bypass, sensitive-data disclosure, and - where an attacker can plant a .php file (e.g. through an upload) - remote code execution. No public exploit has been identified at time of analysis and the plugin is not in CISA KEV.
Unauthenticated remote code execution in Voltronic Power SNMP Web Pro 1.1 lets remote attackers gain root on the device by POSTing a crafted tar archive to the upload.cgi firmware-update endpoint. Because the archive is extracted into a privileged directory and its contents executed as root without any credential check, a single request yields full system compromise. Publicly available exploit code exists (VulnCheck advisory plus a GitHub PoC); this is not yet listed in CISA KEV.
Privilege escalation to root/SYSTEM in IXON VPN Client before 1.4.7 lets an attacker inject arbitrary configuration directives via a CRLF (improper neutralization, CWE-93) flaw: the client's local configuration interface accepts changes without authenticating or verifying the requester's origin, writes those values to a file, and a privileged subprocess later consumes them. By embedding line-ending sequences the attacker smuggles additional directives that run with elevated privileges. Because the malicious config persists across client restarts and OS reboots while the VPN keeps functioning normally, the compromise is stealthy with no user-visible change. No public exploit identified at time of analysis; no CISA KEV listing.
Unauthenticated remote root compromise of ASUS Control Center (Enterprise/ACC) is possible by chaining a missing-authentication flaw, an SSRF, and hard-coded credentials: an attacker retrieves the product's encryption key over a plain HTTP request, which causes a local service to enable SSH on port 2222, then logs in with built-in credentials to gain a root shell. From that shell an attacker can read, write, and delete all ACC data and remotely control every managed server, PC, and workstation in the environment. ASUS assigns CVSS 4.0 base 10.0; no public exploit identified at time of analysis.
Unauthenticated remote code execution in PowerJob Worker 5.1.2 (and likely earlier) stems from the /worker/deployContainer HTTP endpoint being reachable on the default transport port with no authentication, letting a remote attacker deploy and run an arbitrary container/module and thereby execute code on the worker host. PowerJob is a widely-forked open-source Java distributed job-scheduling framework, and the worker component is the execution plane that runs scheduled tasks. A public gist referenced alongside the advisory appears to contain proof-of-concept material, though the entry is not listed in CISA KEV.
Remote code execution and full site takeover affect the AI Website Builder WordPress plugin (GitHub build 1.0.0), whose REST API routes perform no authorisation or nonce validation. Unauthenticated attackers can install and activate arbitrary plugins and themes, import content from a URL they control, write an arbitrary file into wp-content/uploads, and delete site content and media - any of the code-installation paths yields RCE, and the arbitrary uploads file write is directly RCE on hosts that serve PHP from the uploads directory. No public exploit identified at time of analysis, but the trivial unauthenticated network attack surface (CVSS 9.8) makes this a critical-priority issue for any site running the affected build.
We need answer as JSON only. Need synthesize. Need follow all rules. Need inspect input. CVE-2026-75429. Description: PowerJob versions 4.x through 5.1.2 contain unauthenticated remote code execution vulnerability in /friend/process endpoint of Server-Worker transport layer. CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. CWE-287 auth bypass. EPSS 0.62 percentile 47. Reported by mitre. CPE cpe:2.3:a:n/a:n/a. Tags Authentication Bypass, RCE, N A. ENVA EUVD. Affected versions EUVD ["n/a n/a"]. References GitHub PowerJob, docker compose, gist, NVD, PoC repo, vuldb. Need produce fields. Let's ensure all plain string except data_quality_flags array. Product_name: PowerJob. 1-3 words. Summary: original synthesis, not copy. Say "Unauthenticated remote code execution in PowerJob 4.x through 5.1.2 allows remote attackers to execute arbitrary code via the /friend/process endpoint in the Server-Worker transport layer." Mention active exploitation? KEV not provided? Input no KEV status. Need use only KEV status if explicitly. No KEV. POC? References include GitHub repo "CVE-2026-75429_PowerJob_friend_process_RCE" likely POC exists. Input doesn't have POC field but reference indicates public PoC. We can say publicly available exploit code exists based on reference? The rule says if POC=YES in input, but input doesn't label POC. We can use references to infer POC exists? Risk assessment uses POC availability. Need be careful. We can say "a public exploit/POC repository is referenced" maybe. Summary should mention if POC exists and EPSS. EPSS 0.62% low. Also "no public exploit identified"? But reference title suggests exploit. Use "public exploit code is referenced" as inference. But "Exploitation status — use ONLY these phrases": if KEV=YES confirmed actively exploited; if POC=YES but no KEV: publicly available exploit code exists; if neither: no public exploit identified at time of analysis. We don't have POC=YES field but has ref. Is there an input POC? No. But multi-source int
Remote code execution in DocsGPT 0.15.0 and earlier arises from its custom-prompt feature, which passes user-supplied prompt content into Jinja template rendering with no sanitization or sandboxing. An unauthenticated attacker can submit crafted template expressions to achieve server-side template injection (SSTI) that escalates to full RCE on the host running the chatbot backend. VulDB has published an entry and a public writeup/PoC repository exists, though the flaw is not listed in CISA KEV and SSVC records exploitation status as 'none'.
SQL injection in IBM Operational Decision Manager (versions 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, 9.5.0.0, 9.5.0.1, and 9.6.0.0) lets a remote unauthenticated attacker inject arbitrary SQL statements and abuse database write functionality to drop a web shell into the application web root, escalating a data-access flaw into full remote code execution. The CVSS 9.8 rating reflects unauthenticated network reach with full confidentiality, integrity, and availability impact. No public exploit is identified at time of analysis, but the attack primitive (SQLi-to-webshell) is well understood and reliably weaponizable.
Analysis complete. The JSON synthesis is above. Key findings for **CVE-2026-78745** (Weyon/HiDPT HiDPTAndroid on Hi3751V350): - **Vulnerability**: Unauthenticated RCE via a network-reachable ADB daemon (adbd) with authorization bypassed/disabled — CWE-284, an exposed privileged debug interface, not a memory bug. - **Signals cross-referenced**: CVSS 9.8 is technically defensible on affected devices, but EPSS is low (0.42%, 35th pct), it's not in KEV, and a public PoC exists (`n0c71v3x/CVE-2026-78745`). Real-world exposure is bounded by whether adbd is reachable beyond the LAN — consumer TVs typically sit behind NAT. - **Metadata problems flagged**: wrong "Google" vendor tag (Android-based ≠ Google product), "N A" placeholder tag, and an `n/a:n/a` CPE. No prompt-injection note was present in this input (it was clean). Saved to memory as `cve-2026-78745.md` with an index entry.
Done. The analysis is above as the JSON object. Key points of the synthesis: - **Same FreeIPMI 1.6.19 cluster** as CVEs 85504/85507/85508 already tracked — all client-side stack overflows (CWE-121) triggered by a malicious/compromised BMC returning oversized responses. - **CVSS 9.8 is overstated**: this is a client-side/rogue-BMC flaw, not an internet-facing service. I assessed it down to `AC:H/UI:R` (needs attacker control of a BMC plus an operator/job initiating the FRU read). - **Metadata is clean** — vendor tag, CPE, and CWE all correct, and no embedded injection note this time — so `data_quality_flags` is `[]`. - Fix confirmed as 1.6.19; no EPSS/KEV/POC signal, so exploitation status is unknown. Memory updated with the new CVE note and index entry.
Stack-based buffer overflow in GNU FreeIPMI's ipmi-oem tool (before 1.6.19) affects the _output_dell_system_info_cmc_ipv6_info routine reached through the 'dell get-system-info cmc-ipv6-info' subcommand. Because the flaw lies in code that parses the response returned by a Dell CMC/BMC, an attacker who controls (or can MITM) the IPMI device an operator queries can corrupt the client's stack and potentially execute code on the management host. This is one of several FreeIPMI OEM-parser overflows fixed together in 1.6.19 (disclosed on oss-security 2026-08-28); no public exploit identified at time of analysis.
Stack-based buffer overflow in FreeIPMI's ipmi-oem utility (all versions before 1.6.19) can corrupt memory in the client host when the 'dell get-system-info cmc-info' subcommand parses a CMC info response, potentially leading to code execution in the context of the operator running the tool. The flaw lives in the response-handling routine _output_dell_system_info_cmc_info (ipmi-oem/ipmi-oem-dell.c), so it is triggered by the data returned from the queried BMC/CMC rather than by an inbound network request. No public exploit identified at time of analysis, and it is not in CISA KEV; EPSS data was not provided.
Stack-based buffer overflow in FreeIPMI's ipmi-oem utility (versions before 1.6.19) lets a malicious or compromised Dell iDRAC BMC corrupt the memory of the client host running the 'dell get-system-info idrac-info' subcommand, potentially achieving code execution in the context of the operator (often root). The flaw sits in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c, which copies attacker-influenced OEM response data into a fixed-size stack buffer without bounds checking. No public exploit identified at time of analysis; disclosed via oss-security and fixed in FreeIPMI 1.6.19.
Stack-based buffer overflow in GNU FreeIPMI before 1.6.19 lets a malicious or compromised Fujitsu iRMC BMC corrupt client memory when the FreeIPMI tooling parses malformed Fujitsu SEL 'long text' responses in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text. Successful exploitation can crash the client or execute arbitrary code in the context of the process reading the System Event Log (typically ipmi-sel or libfreeipmi consumers). No public exploit is identified at time of analysis, and the flaw is fixed in FreeIPMI 1.6.19.
Authentication bypass in IBM i (the operating system for IBM Power servers, formerly OS/400) versions 7.3, 7.4, 7.5, and 7.6 allows a remote attacker to gain unauthorized access by supplying malformed or manipulated authentication parameters that the system fails to validate correctly. Rated CVSS 9.8, the flaw grants full compromise of confidentiality, integrity, and availability without prior credentials. No public exploit identified at time of analysis, and EPSS is low (0.32%, 24th percentile), indicating no observed mass exploitation despite the critical score.
Unauthenticated account takeover in the ACPT (Premium) WordPress plugin (versions up to and including 2.0.66) lets remote attackers hijack any account, including administrators. The plugin's submit() handler processes anonymous form submissions without verifying that the submitter is authorized to modify the targeted user, then passes an attacker-controlled user ID to wp_update_user(), allowing the attacker to overwrite that user's email address and password. Reported by Wordfence; no public exploit and no CISA KEV listing at time of analysis, but the CVSS 9.8 rating reflects a trivially weaponizable full-compromise path where a vulnerable form is exposed.
Remote code execution in easyadmin v2.0.2.2 lets attackers with access to the background management interface upload a crafted file of a dangerous type (e.g. a PHP webshell) and execute arbitrary code, gaining server-level privileges. The flaw is a classic unrestricted file upload (CWE-434) in an admin-only feature; the description specifies authenticated access despite the provided CVSS vector marking it as requiring no privileges. EPSS is low (0.24%, 15th percentile) and there is no evidence of active exploitation, though a researcher issue writeup is referenced.
We need to produce a JSON object with specific fields. The input describes CVE-2026-75171. Need to synthesize from all data. We have: product HubCore v.14.1.1. Description: An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component. CVSS 9.8 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. CWE-384 (Session Fixation? Wait CWE-384 is "Session Fixation"? Actually CWE-384: Session Fixation. Yes). EPSS 0.22% percentile 13%. Reported by mitre. CPE cpe:2.3:a:n/a:n/a:*:*:*:*:*:*:*:*. Tags: Privilege Escalation, Session Fixation, N A. ENVD EUVD-2026-71442, affected versions ["n/a n/a"]. References: hubcore.ai, github research, NVD, vuldb. Now, need to fill each field as a plain string. Let's go field by field. product_name: "HubCore" is specific product. One to three words: "HubCore". summary: 2-3 sentence plain-language synthesis. Not copy description. Start with impact verb and product. E.g. "Privilege escalation in HubCore v14.1.1 allows remote attackers to hijack sessions via improper handling of the HUBCOREID session cookie." Need mention if actively exploited (KEV not present, no KEV data). No POC? There is a GitHub repository link, likely contains vulnerability research. We can say "publicly available research exists" but not necessarily exploit code. Data doesn't explicitly say POC. We have "Reported by mitre" but no POC flag. We can infer from GitHub link maybe a vulnerability research but not confirmed POC. The input has a reference to GitHub repository "vulnerability-research" likely contains details, possible proof-of-concept. But we should be careful. Tags include "Privilege Escalation, Session Fixation". We can say "Exploitation requires no authentication and is remotely exploitable according to CVSS vector." EPSS low. Also "no public exploit identified at time of analysis" unless we infer GitHub is a POC? It's a research repo, likely contains proof-of-concept. But not explicitly "POC". The fie
Account takeover in slimkit ThinkSNS+ v2.4 allows a remote unauthenticated attacker to hijack arbitrary user accounts by abusing the password-reset flow, where the ResetPasswordController.php component continues to accept verification codes after they should have expired. Because expired codes remain valid (enabling reuse/replay of a code well past its lifetime), an attacker can complete a password reset for a targeted account and gain full control. No public exploit code is confirmed, though a detailed technical writeup exists; EPSS is low (0.21%) and the issue is not on CISA KEV.
Missing authentication on the MQTT broker of CDAC's Trueview 6.0.23.4 lets any remote attacker with network reach to TCP port 1883 open an MQTT session and freely subscribe to or publish on all topics. Because the broker requires no credentials, an attacker can read every message flowing through the system and inject arbitrary messages, undermining the confidentiality and integrity of whatever data and control functions Trueview routes over MQTT. EPSS is low (0.21%, 11th percentile) and SSVC records no observed exploitation, but the flaw is fully automatable with total technical impact; no public exploit code is identified at time of analysis, though a GitHub writeup documents the issue.
SQL injection in OASYS sysoa 1.0 lets remote attackers inject arbitrary SQL through the unsanitized 'outtype' parameter of the /outaddresspaging endpoint. The CVSS 3.1 vector (PR:N) indicates no authentication is required, and the advisory claims the flaw can be escalated to arbitrary code execution. A public write-up with proof-of-concept details exists on GitHub, though EPSS estimates only a 0.20% exploitation probability and the CVE is not on CISA KEV - no public exploit is confirmed weaponized in the wild.
Remote code execution in esoTalk v1.0.0g4 arises from configuration comment injection that allows attacker-controlled input reaching ETMemberModel, ETMemberController and ET.class.php to be persisted into a PHP configuration file and subsequently interpreted as code (CWE-94). Documented only in a third-party Notion writeup with no public exploit tool; EPSS is low at 0.19% (9th percentile). No public exploit identified at time of analysis and the CVE is not in CISA KEV.
Session hijacking in the Canva Android App before 2.376.0 lets an attacker-controlled web page interact with the Canva application using the victim's authenticated session because an external origin could be loaded inside a privileged WebView (CWE-940). A threat actor who lures a user into loading a malicious page can send requests to Canva as the user, reading and modifying account data. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
We need answer JSON only. Need synthesize. Let's parse input. CVE-2026-77822: IBM ContextForge MCP Gateway. Description: allow remote authenticated attacker to obtain sensitive information due to SSRF via DNS rebinding. CVSS 9.6 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N. CWE-918. EPSS 0.21 (11%) low. Patch available vendor. CPE cpe:2.3:a:ibm:contextforge_mcp_gateway:*:*:*:*:*:*:*:*. Tags SSRF, IBM, Contextforge Mcp Gateway. SSVC Exploitation none, Automatable no, Technical total. EUVD affected <= v1.0.8. References IBM support, NVD, vuldb. Need produce fields. product_name: "IBM ContextForge MCP Gateway" it's 4? "ContextForge MCP Gateway" maybe 3? Product name specific. IBM ContextForge MCP Gateway is 4 words if IBM counts. Request 1-3 words ONLY. "ContextForge MCP Gateway" (3). Could use "IBM ContextForge" but not exact? Use "ContextForge MCP Gateway". Summary: 2-3 sentence original synthesis. Need mention remote authenticated attacker obtains sensitive info due to SSRF via DNS rebinding, IBM ContextForge MCP Gateway <=1.0.8, patch available, no active exploitation per SSVC none, EPSS low, not KEV. Don't copy description. Start with impact. "Sensitive information disclosure in IBM ContextForge MCP Gateway up to 1.0.8 allows authenticated remote attackers to abuse server-side request forgery via DNS rebinding, achieving high confidentiality and integrity impact across systems." That's good. Mention patch available, no known exploitation, low EPSS. Technical_context: explain SSRF via DNS rebinding against MCP Gateway. CWE-918. CPE exact. Affected all versions up to 1.0.8. Underlying technology: MCP = Model Context Protocol? IBM ContextForge MCP Gateway likely a gateway for MCP servers. DNS rebinding allows initial URL validation to pass for allowed host then DNS response changes to internal IP after validation. Attacker with low privileges can cause gateway to make requests to internal services. Could explain. Root cause improper validation/allowlisting of hostnames r
Cross-tenant RBAC hijacking in IBM Observability with Instana Agent Operator (Builds 1.0.303-1.0.323) lets an authenticated Kubernetes tenant overwrite or delete another tenant's shared cluster-level RBAC binding. Because cluster-scoped RBAC objects are keyed only by the bare custom-resource name with no namespace disambiguation, a low-privileged tenant who creates a same-named InstanaAgent CR in a namespace they control can silently clobber or revoke a victim tenant's ClusterRoleBinding, destroying that agent's cluster monitoring access. No public exploit identified at time of analysis; a vendor patch is available.
Remote code execution in OpenTalker SadTalker allows attackers to run arbitrary OS commands by supplying audio files whose names contain shell metacharacters, which are interpolated unescaped into ffmpeg command lines during video muxing (CWE-78). Any deployment that accepts attacker-influenced audio uploads and then generates video is affected; the flaw was reported by VulnCheck with an accompanying advisory, though no public exploit code or active exploitation has been identified at time of analysis. The CVSS 4.0 base score of 9.3 reflects unauthenticated network-triggerable full-system compromise.
OS command injection in getomni-ai's zerox 1.1.20 (the node-zerox document-to-markdown library) lets remote attackers execute arbitrary shell commands by supplying a document URL whose file extension contains command-substitution syntax. The unsanitized extension is interpolated into shell commands run by poppler utilities during file download, so injection fires before any document processing. Reported by VulnCheck; no public exploit code is identified at time of analysis and it is not in CISA KEV, though the fix issue is public.
Unauthenticated OS command injection in XING Inc.'s CPTrans-ME-X allows remote attackers to inject and execute arbitrary operating-system commands on the device without any credentials. The flaw (CWE-78) carries a CVSS 4.0 base score of 9.3 with full confidentiality, integrity, and availability impact, meaning a successful attacker gains complete control of the affected unit. No public exploit identified at time of analysis, and the device is not listed in CISA KEV.
Remote code execution in SonicWall Network Security Manager (NSM) On-Prem 4.3.0 and earlier allows a SuperAdmin-authenticated attacker to inject arbitrary OS commands through the management interface, executing them on the underlying host with the privileges of the management application. Because exploitation requires the highest-tier SuperAdmin role (CVSS PR:H), the real-world attack surface is narrower than the 9.1 score alone suggests. There is no public exploit identified at time of analysis and no KEV listing.
Unauthenticated remote method dispatch in the Aim 3.29.1 ML experiment-tracking server lets attackers reach the tracking RPC endpoint without any credentials and invoke arbitrary methods via an unguarded getattr call. Because there is no allowlist, an attacker can register a client, instantiate Repo resources, and call methods that read experiment data or delete runs; VulnCheck's advisory frames the same dispatch primitive as achieving full remote code execution. No public exploit is identified at time of analysis, though VulnCheck has published a detailed advisory describing the attack.
Arbitrary file read and write in excel-mcp-server 0.1.8 lets attackers escape the intended Excel workspace when the server runs in stdio mode with the EXCEL_FILES_PATH environment variable unset. Because path confinement is not enforced, unchecked absolute or traversal paths passed to the read and write tools reach any file the server process can access, enabling disclosure of secrets and overwrite of arbitrary files (CWE-22). Reported by VulnCheck; the issue is tracked upstream (issue #149) with no public exploit identified at time of analysis.
Authentication bypass in Traefik reverse proxy before v2.11.55 lets remote unauthenticated attackers defeat any route protected by the digestAuth middleware. The flaw stems from the middleware returning an empty secret for unknown usernames rather than rejecting them, so an attacker can craft a mathematically valid digest response from that empty secret and arbitrary credentials. Reported by VulnCheck with a fix in v2.11.55; no public exploit identified at time of analysis, though the trivial nature of the bypass makes weaponization straightforward.
Server-side request forgery and model spoofing in lm-sys FastChat let unauthenticated remote attackers register arbitrary workers via the controller's /register_worker endpoint, which performs no authentication. By registering a malicious worker address under a legitimate model's name, an attacker can silently intercept user prompts, uploaded images, and model responses, or coerce the controller into probing internal network ports across the worker mesh. No public exploit identified at time of analysis; the issue was reported by VulnCheck and CVSS 4.0 is scored 9.3.
Unauthenticated arbitrary file read and write in TEN Framework 0.11.71 lets remote attackers hit the TMAN Designer file-content API (POST/PUT to /api/designer/v1/file-content) with no credentials, reading any file the service can access and writing attacker-controlled content to arbitrary system paths. Because the write primitive can drop SSH authorized_keys, cron jobs, or executable graph files, it escalates directly to remote code execution. Reported by VulnCheck; no public exploit identified at time of analysis and it is not in CISA KEV.
Unauthenticated message injection and server-side request forgery in TeamWiseFlow xiaobei through 5.5.2 let remote attackers reach the agent pipeline without any credentials. The webhook endpoints implement neither authentication nor signature validation (CWE-306), so an attacker can POST crafted payloads to the /webhook_worktool handler to inject arbitrary messages, and abuse the handler's unvalidated media-URL fetching to make the server issue requests to internal services. No public exploit identified at time of analysis, but the flaw is remotely reachable against default deployments and was independently reported by VulnCheck.
Hard-coded credentials in Lightstar's SmartIT Desktop Manager allow unauthenticated remote attackers to authenticate with a fixed, built-in password and gain remote access to managed user hosts. Reported through TWCERT, the flaw affects all currently listed versions of the product with no version qualifier in the CPE. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the trivial exploitation path (a static shared secret) makes weaponization straightforward once the credential is disclosed.
Credential disclosure in Lightstar's SmartIT Desktop Manager lets unauthenticated remote attackers extract the SSH service-account username and password for the SmartIT Agent directly from the shipped application source code (CWE-798). Because the same hard-coded SSH credentials are reused across deployments, recovering them once yields authenticated SSH access to managed agents, enabling remote command execution and full compromise of endpoints under management. No public exploit has been identified at time of analysis, but retrieval requires no more than reading the product's own code.
Unauthenticated device login in XING Inc.'s CPTrans-ME-X AV signal-transport appliance is possible via a hard-coded password (CWE-259): anyone who knows the built-in credential can authenticate over the network and gain full control of the device. The flaw was coordinated through JPCERT/CC (JVN JVN32505330) and carries a CVSS 4.0 base score of 9.3 with high confidentiality, integrity, and availability impact. No public exploit has been identified at time of analysis, and the product is niche, but the fixed credential makes exploitation trivial once the value is known.
Unauthenticated remote device takeover in XING (XING Inc./JOYSOUND) CPTrans-ME-X arises from a shipped default password (CWE-1393) that anyone aware of the credential can use to log in with full privileges. The flaw affects all firmware revisions of this Japanese commercial audio/video rack transmission accessory and grants complete control over confidentiality, integrity, and availability. No public exploit code has been identified, and it is not on CISA KEV, but the trivial nature of default-credential abuse makes exploitation straightforward once the credential is known.
reCAPTCHA v3 bot protection in the Grav Form plugin (getgrav/grav-plugin-form) 8.0.6 through 9.1.19 can be fully bypassed by an anonymous remote attacker who submits a token under the wrong field name. Because the plugin picks which reCAPTCHA validation branch to run based only on which response field key appears in the payload, sending a v3 token in the v2 field (g-recaptcha-response) forces the v2 code path, which never checks the risk score threshold or the expected action. There is publicly available advisory detail from VulnCheck but no public exploit identified at time of analysis and no evidence of active exploitation.
Remote code execution in Nango before 0.71.6 allows unauthenticated attackers to run arbitrary JavaScript inside the runner process by invoking the runner tRPC server's exposed 'start' procedure. The runner fails to enforce the RUNNER_SECRET_KEY environment variable, so any actor with network reach to the runner port can trigger code execution. Reported by VulnCheck; a vendor patch is available (v0.71.6) and publicly available exploit code exists via the VulnCheck advisory, though it is not listed in CISA KEV.
Remote code execution in LaVague 0.2.35, an LLM-driven web-automation agent framework, arises because PythonFromMarkdownExtractor.extract_as_object evaluates language-model output that is derived from attacker-influenced web page content. An attacker who controls or poisons a page the agent visits can use indirect prompt injection to coerce the model into emitting Python that is then eval'd and executed on the operator's host with no human review. Reported by VulnCheck (CWE-94); no public exploit identified at time of analysis and it is not listed in CISA KEV.
Remote code execution in sift.js 17.1.3 arises because the library enumerates query keys with for...in, which traverses the prototype chain, and dispatches the $where operator by compiling its string value via new Function whenever CSP_ENABLED is unset (the default). An attacker who can either supply an untrusted query object containing a string $where, or who has established a prototype-pollution primitive elsewhere in the process (setting Object.prototype.$where), achieves arbitrary JavaScript execution - in the pollution case even benign calls like sift({}) trigger it. Reported by VulnCheck; no public exploit identified at time of analysis, though the advisory documents the mechanism in detail.
Arbitrary file read in Postgres MCP Pro 0.3.0 (crystaldba/postgres-mcp) lets attackers bypass restricted-mode SQL safeguards by invoking file-reading functions such as pg_read_file inside FROM-clause RangeFunction nodes, which the function-name allowlist fails to inspect. Any client able to submit queries to the MCP server can therefore read files accessible to the PostgreSQL service account despite the tool's safety controls. No public exploit identified at time of analysis, and the flaw is not in CISA KEV; the technique is described in a VulnCheck advisory and GitHub issue #178.
Remote unauthenticated command execution in ConfigServer Security & Firewall (CSF) arises from an insecure Apache configuration that maps /usr/bin as a CGI directory on the Messenger v3 HTTPS virtual host. An attacker whose IP has been blocked by CSF can request any executable under /usr/bin and have it run as the Apache user, turning a blocklist-facing service into an arbitrary command-execution vector. WebPros fixed the flaw in CSF 16.31; no public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Remote code execution in PowerJob Server 5.1.2 (and likely earlier releases) stems from a predictable/hardcoded HS256 signing key used for the server's JWT authentication, letting an unauthenticated remote attacker forge valid admin session tokens and drive PowerJob's job-execution features to run arbitrary code. PowerJob is an open-source distributed task-scheduling framework, and because the secret is derived by a default provider rather than randomly generated, any exposed instance is trivially impersonatable. Publicly available exploit code exists (a proof-of-concept gist), though there is no CISA KEV listing or confirmed in-the-wild exploitation at time of analysis.
Arbitrary file write via Zip Slip in SonicWall Network Security Manager (NSM) On-Prem (versions 4.3.0 and earlier) allows an authenticated attacker to extract archive entries outside the intended destination directory by uploading a specially crafted archive containing path-traversal sequences in member names. Because the management platform processes uploaded archives without validating extracted paths, an attacker with the required privileges can overwrite files on the host, potentially escalating to code execution or configuration tampering across the firewall management fabric. No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV.
Server-side request forgery in OpenPanel before 2.3.0 lets unauthenticated remote attackers coerce the panel server into issuing arbitrary outbound requests via the GET /tools/site-checker endpoint, which accepts a fully client-controlled URL with no private-IP filtering or DNS-rebinding defenses. Attackers can reach localhost, internal-only services, and cloud metadata endpoints, harvesting HTTP response titles, headers, status codes, and SSL certificate details. Reported by VulnCheck with a fix in 2.3.0; no public exploit identified at time of analysis, though the endpoint is trivially reachable.
Path-based access-control bypass in @fastify/middie (Fastify's Express-style middleware engine) versions 9.1.0 through 9.3.3 lets an unauthenticated remote attacker skip path-scoped middleware - including authentication and authorization - by sending an absolute-form request target. Middie matches middleware against the raw request target while the Fastify router resolves absolute-form targets to their path before dispatch, so the handler runs but the guarding middleware does not. No public exploit was identified at time of analysis, but the flaw is trivially triggerable and remediated in 9.3.4.