Safebrowsing information omission in Google Chrome on macOS prior to 153.0.8010.36 allows a remote unauthenticated attacker to bypass system access restrictions by delivering a crafted HTML page that causes Chrome's Safe Browsing subsystem to silently suppress or lose security-relevant signals. The CVSS vector (PR:N/UI:R/I:H) reflects that a victim need only visit a malicious page, after which Safebrowsing protections fail to surface warnings - exposing users to malicious downloads or sites without Chrome's normal safety guardrails. No public exploit code exists and EPSS is very low (0.20%, 10th percentile); no CISA KEV listing at time of analysis.
Incorrect authorization in Google Chrome's Extensions subsystem (prior to 153.0.8010.36) allows a remote attacker to bypass system access restrictions by delivering a crafted Chrome extension to a victim who interacts with it. The flaw, rooted in CWE-863 (Incorrect Authorization), enables integrity violations - specifically circumventing the permissions and access controls that govern what extension code can do on the host system. No public exploit or active exploitation (CISA KEV) has been identified; EPSS is 0.20% (9th percentile), consistent with Chromium's own 'Medium' severity classification.
Incorrect authorization in Chrome's WebUI component allows a remote unauthenticated attacker to bypass system access restrictions and gain unauthorized access to privileged internal Chrome pages by luring a victim to visit a crafted HTML page. All Chrome desktop versions prior to 153.0.8010.36 are affected; Google patched this in the stable channel released September 2026. No public exploit has been identified at time of analysis, and the EPSS score of 0.19% (9th percentile) reflects minimal current exploitation pressure.
Incorrect authorization in the WebAppInstalls subsystem of Google Chrome before 153.0.8010.36 enables a remote attacker who has already compromised the renderer process to bypass Chrome's site isolation via a crafted HTML page combined with social engineering. This is a chained, second-stage exploit - not a standalone vulnerability - requiring a prior renderer compromise before the WebAppInstalls flaw can be weaponized. Chromium rates it 'Medium' and EPSS sits at 0.19%, consistent with the high exploitation prerequisite; no public exploit code or CISA KEV listing exists.
Safebrowsing in Google Chrome prior to 153.0.8010.36 can be bypassed through improper state validation (CWE-754), enabling a remote attacker to suppress Chrome's phishing and malware protection warnings by delivering a crafted HTML page to a victim. The integrity-only impact (CVSS I:H, C:N, A:N) reflects that successful exploitation undermines Chrome's access restriction enforcement rather than directly exfiltrating data, but it clears the path for downstream malware delivery or credential harvesting that Safebrowsing would otherwise have blocked. No public exploit code exists and the vulnerability is absent from the CISA KEV catalog; EPSS at 0.18% (8th percentile) corroborates low current weaponization probability.
Navigation component information leak in Google Chrome prior to 153.0.8010.36 enables an attacker who has already compromised the renderer process to bypass site isolation and exfiltrate cross-origin data via a crafted HTML page. This is a second-stage exploit component: it cannot be chained without a prior renderer compromise, which significantly elevates the effective attack complexity despite the AV:N/AC:L CVSS surface reading. Chromium's own severity rating is 'Medium', consistent with the prerequisite constraint. No public exploit identified at time of analysis; EPSS at 0.18% (8th percentile) reflects the elevated bar for exploitation.
Incorrect authorization in Chrome's Omnibox (address bar) prior to version 153.0.8010.36 allows a remote attacker to bypass system access restrictions and gain unauthorized access to privileged browser pages. Exploitation requires luring a victim to visit a crafted HTML page, making this a social-engineering-dependent integrity attack. No public exploit code has been identified and EPSS sits at 0.18%, consistent with Chromium's own 'Medium' severity rating despite the NVD CVSS score of 6.5.
Site isolation bypass in Google Chrome prior to 153.0.8010.36 allows a remote attacker to subvert cross-origin integrity guarantees by directing a victim to visit a crafted HTML page, exploiting incorrect authorization checks (CWE-863) in Chrome's Isolated component. The CVSS score rates integrity impact as High with no privileges required, but user interaction is necessary and confidentiality impact is assessed as none. No public exploit code exists and SSVC marks exploitation as none; EPSS stands at 0.18%, suggesting low observed threat activity despite the patch being available.
Missing authorization in Chrome's FileSystem component allows a remote attacker to bypass system access restrictions via a crafted HTML page, requiring social engineering to achieve user interaction. Affects all Chrome versions prior to 153.0.8010.36 across desktop platforms. With PR:N and I:H in the CVSS vector, an unauthenticated attacker who tricks a user into visiting a malicious page can achieve high-integrity impact against the local filesystem without confidentiality or availability consequences.
SiteIsolation incorrect authorization in Google Chrome prior to 153.0.8010.36 allows a remote attacker who has already compromised the renderer process to bypass cross-origin access restrictions via a crafted HTML page. The flaw (CWE-863) carries a CVSS 6.5 with high integrity impact and no confidentiality or availability dimension, consistent with a second-stage sandbox-escape component rather than a standalone entry point. No public exploit has been identified at time of analysis, and the EPSS score of 0.18% (7th percentile) reflects very low observed exploitation probability; Chromium's own severity rating of 'Medium' aligns with this assessment.
Missing authorization in Chrome's FileSystem API allows a remote unauthenticated attacker to bypass system-level file access restrictions by luring a user to a crafted HTML page. Affected versions are all Chrome releases prior to 153.0.8010.36. The CVSS vector (I:H, C:N) indicates high integrity impact with no confidentiality exposure, meaning the attacker can write or modify files accessible through the FileSystem API without reading them. No public exploit has been identified and EPSS sits at 0.18% (7th percentile), consistent with Chromium's own 'Medium' severity rating.
Improper access controls in Tanium Comply allow an authenticated low-privileged network user to perform write operations beyond their authorization level, resulting in high integrity impact. Three active release branches are affected: 2.32, 2.35, and 2.37, each with specific fixed builds released by Tanium under advisory TAN-2026-029. No public exploit code has been identified and this vulnerability is not listed in CISA KEV, though the network-accessible, low-complexity vector lowers the bar for exploitation by any authenticated user.
Sensitive information disclosure in Google Chrome's Mobile component on iOS (versions prior to 153.0.8010.36) allows remote unauthenticated attackers to leak confidential browser data by luring victims to a crafted HTML page through social engineering. The flaw is platform-specific - affecting only the iOS Mobile code path, not desktop or Android - and is fixed in the 153.0.8010.36 stable channel release. No active exploitation is confirmed (not in CISA KEV) and EPSS probability is 0.17% (7th percentile), consistent with Chromium's own 'Low' severity rating, which contrasts with the NVD CVSS 6.5 Medium score.
Cross-origin information leakage in Google Chrome's Select element (all versions prior to 153.0.8010.36) allows a remote unauthenticated attacker to infer sensitive user state by observing behavioral discrepancies in how the `<select>` element renders when a victim browses to a crafted HTML page. The root cause is CWE-203 (Observable Discrepancy), a classic browser side-channel class that enables cross-site information inference - for example, whether a user is authenticated to a third-party origin or has visited specific URLs. No public exploit has been identified at time of analysis, and EPSS sits at 0.17% (7th percentile), consistent with the Chromium team's own 'Low' severity rating despite NVD's CVSS 6.5.
Observable SVG discrepancy in Google Chrome prior to 153.0.8010.36 enables remote attackers to infer sensitive cross-origin information by inducing measurable rendering behavioral differences via a crafted HTML page. The root cause is CWE-203, a side-channel class where an attacker observes system behavior variations to deduce protected state. No public exploit code or active exploitation is identified; Chromium's own 'Low' severity designation and an EPSS of 0.17% (7th percentile) together indicate limited real-world exploitation likelihood despite the NVD's C:H confidentiality metric.
Observable DOM discrepancy in Google Chrome prior to 153.0.8010.36 enables cross-origin information leakage via a CWE-203 side-channel, allowing a remote attacker to infer sensitive data from a victim's browser state. Exploitation requires social engineering to lure the target to a crafted HTML page, satisfying the required user interaction. No public exploit code or CISA KEV listing is associated with this vulnerability, and the EPSS score of 0.17% (7th percentile) reflects low observed exploitation interest at time of analysis.
Sensitive information disclosure in the Enterprise component of Google Chrome on Windows allows a remote attacker to obtain protected data by luring a user to a crafted HTML page. All Chrome releases on Windows prior to 153.0.8010.36 are affected. No public exploit has been identified at the time of analysis, and with an EPSS of 0.17% (7th percentile), opportunistic mass exploitation is unlikely in the near term despite the high confidentiality impact rating.
An interpretation conflict (CWE-436) in Google Chrome's Safe Browsing handling on macOS allows a remote attacker to bypass system access restrictions by convincing a victim to open a crafted file, all the way up to and including Chrome 153.0.8010.36. Exploitation requires the victim to interact with the file (CVSS UI:R) and yields an integrity-only impact (C:N/I:H/A:N), which is consistent with Chromium's own 'Low' severity rating despite the 6.5 base score. There is no CISA KEV listing and no public exploit identified; EPSS is only 0.17% (7th percentile), and Google has shipped a fix in version 153.0.8010.36.
Sensitive information disclosure in Google Chrome's Editing subsystem allows a remote unauthenticated attacker to exfiltrate browser-accessible data by luring a user to a crafted HTML page. All Chrome versions prior to 153.0.8010.36 on desktop are affected. No public exploit has been identified and SSVC assigns no active exploitation, making this a low operational priority despite the CVSS 6.5 score.
Sensitive information disclosure in Google Chrome's Transactions Platform component prior to version 153.0.8010.36 enables remote attackers to extract unspecified sensitive data by directing a user to a crafted HTML page. The Transactions Platform is likely tied to Chrome's Web Payments API or payment handler subsystem, making transaction-context data a plausible disclosure surface. No public exploit code exists and EPSS sits at 0.16% (6th percentile); however, the vendor-assigned CVSS C:H metric indicates the leaked data carries meaningful sensitivity, creating a tension with Chromium's own 'Low' internal severity classification.
A crafted series of RTSP and HTTP requests sent to LIVE555 Streaming Media 2026.02.26 triggers a use-after-free in SocketDescriptor::tcpReadHandler1 (liveMedia/RTPInterface.cpp), crashing the media server and terminating all active streams. The flaw is reachable over the network without credentials, and because LIVE555 is embedded in IP cameras, streaming appliances and media servers, one crash can disrupt many downstream viewers at once. No public exploit code and no CISA KEV entry were identified at time of analysis, EPSS places exploitation probability at roughly 0.15% (5th percentile), and the supplied references do not state an exact fixed build number.
Hardcoded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a remote low-privileged attacker to bypass cryptographic protection mechanisms, resulting in high confidentiality impact. Both the Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) deployment modes are affected. Dell has released corrective updates via advisory DSA-2026-382, and no public exploit or active exploitation has been identified at time of analysis.
Stored Cross-Site Scripting in the Podlove Podcast Publisher WordPress plugin (all versions through 4.5.5) allows authenticated contributor-level users to inject persistent arbitrary JavaScript into episode pages via the episode_contributor comment parameter. The vulnerability is compounded by two design flaws: contributor comments are stored in a plugin-managed custom database table that bypasses WordPress core's wp_kses_post sanitization filter, and the save_post hook fires without a nonce check, removing CSRF protection that would otherwise limit exploitation. No public exploit code or CISA KEV listing has been identified at time of analysis.
Stored Cross-Site Scripting in the WP Crowdfunding WordPress plugin (≤2.2.1, by Themeum) allows authenticated subscribers to inject persistent JavaScript via the `first_name` parameter in the plugin's user profile dashboard. When an administrator views the attacker's user profile via the `?show_user_id=` URL parameter, the payload executes in the admin's browser session, enabling cross-privilege script execution from a subscriber-level account to an administrative context. No public exploit code has been identified and the CVE is absent from CISA KEV, though a patch commit exists in the plugin SVN repository.
Stored Cross-Site Scripting in the My Calendar - Accessible Event Manager WordPress plugin (all versions through 3.8.3) allows authenticated contributors to inject persistent malicious scripts via the `fallback`/`substitute` shortcode attributes. The attack exploits a gap between WordPress's save-time and render-time processing: hex-encoded payloads like `\x3cscript\x3e` pass through `wp_kses_post` as harmless literal strings at save time, but WordPress core's `shortcode_parse_atts()` calls `stripcslashes()` at render time, converting those sequences into live angle brackets before they reach the unescaped output sink. No public exploit code or active exploitation (CISA KEV) has been confirmed; the scope-changed CVSS 6.4 rating reflects impact on any visitor to an injected page.
Stored Cross-Site Scripting in the myCred gamification plugin for WordPress allows authenticated contributors to inject persistent malicious scripts via the 'wrapper' shortcode attribute in the sell-content addon. All plugin versions through 3.2.4 are affected. Any site visitor who loads a page containing the poisoned shortcode will execute the attacker's payload in their browser, enabling session hijacking, credential theft, or admin account compromise. No public exploit or KEV listing is present at time of analysis, but the contributor-level prerequisite is a low bar on sites with open registration.
Stored Cross-Site Scripting in the Graphina - Charts and Graphs For Elementor WordPress plugin (all versions through 3.1.11) allows authenticated contributors to inject persistent malicious scripts via the 'iq_tree_tree_chart_template' widget setting. Because the scope changes (S:C), injected payloads execute in the browser context of any visitor who loads the affected page, enabling session hijacking, credential theft, or drive-by malware delivery. The vulnerability stems from insufficient sanitization of widget input and missing output escaping in the TreeChart rendering path, with specific vulnerable code identified by Wordfence at TreeChart.js:146, tree-chart.php:19, GraphinaFunction.php:1653, and GraphinaElementorControls.php:1446. No public exploit code or CISA KEV listing is confirmed at time of analysis.
Stored Cross-Site Scripting in the My Calendar - Accessible Event Manager WordPress plugin (≤3.8.3) allows any authenticated contributor to inject persistent JavaScript into site pages via unsanitized shortcode attributes. The payload executes in the browsers of all users who subsequently visit the affected page, potentially enabling session hijacking, credential theft, or malicious redirects. No active exploitation has been confirmed; an upstream fix commit is available on GitHub though a tagged release version has not been independently confirmed.
Improper Authentication in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged remote attacker to bypass authentication controls and gain unauthorized access to protected resources, resulting in high confidentiality and integrity compromise. Both the Appliance variant (versions prior to 5.36.00.16) and Application variant (versions prior to 5.36.00.00) are affected. Dell has released patched versions and published advisory DSA-2026-382; no public exploit or CISA KEV listing has been identified at time of analysis.
Improper access controls in Tanium Comply allow authenticated low-privileged users to bypass object-level authorization and access or manipulate compliance data belonging to other users or tenants. Affecting three active release branches (2.32, 2.35, 2.37), the flaw is rooted in CWE-639 (Authorization Bypass Through User-Controlled Key), a class of vulnerability commonly known as Insecure Direct Object Reference (IDOR). Tanium self-disclosed and patched the issue via advisory TAN-2026-038; no public exploit or active exploitation has been identified at time of analysis.
Unsynchronized multithreaded access in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged remote attacker to cause denial of service and potentially minor data integrity or confidentiality impact. Both the Appliance variant (fixed in 5.36.00.16) and Application variant (fixed in 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis.
WeasyPrint ≤v69.0 silently bypasses application-configured url_fetcher restrictions in two write_pdf() channels, enabling arbitrary local file read and SSRF in server-side PDF rendering pipelines. The xmp_metadata parameter fetches attacker-controlled URLs using the default unrestricted URLFetcher and embeds the response bytes verbatim in the generated PDF, while the stylesheets parameter applies fetched CSS with transitive propagation through @import chains - both ignoring any restrictive fetcher set on HTML(). No public exploit is listed in KEV, but the advisory includes complete working PoC code demonstrating credential file exfiltration.
Unbounded heap growth in MCP Kotlin SDK versions 0.7.0-0.12.0 allows an attacker-controlled byte-stream producer to OOM-kill the hosting JVM process via the stdio transport. The ReadBuffer.append() method writes all incoming data into a kotlinx.io.Buffer with no size cap, and frame extraction only triggers on newline arrival - a peer that never sends a newline causes indefinite accumulation. Both StdioServerTransport and StdioClientTransport compound the exposure by using Channel.UNLIMITED queues with no backpressure, amplifying heap consumption before any size guard could intervene. No public exploit identified at time of analysis; vendor-released patch available in version 0.13.0.
Denial of service in GPAC's ROUTE/LCT demuxer (src/media_tools/route_dmx.c) is triggerable when the framework processes a crafted ROUTE session, causing uncontrolled resource consumption that ends in a crash or hang. Affected builds include the source tree at commit c2dee3aff638cd96f9617ac5b17dc2868cd90ef3, with the flaw fixed upstream in commit 3c4e6c5b3e0c6fa9b16d55599701a08354538fab. Exploitation is not confirmed in CISA KEV, no public exploit code has been identified at time of analysis, and EPSS is only 0.14% (4th percentile), so real-world urgency is modest despite the 6.2 CVSS base score.
ECDSA signature forgery is possible in mirage-crypto-ec before 2.2.0 for OCaml because the P256, P384, and P521 pub_of_octets functions accept 0x00 - the encoding of the elliptic curve point at infinity - as a valid public key. Any application relying on this library to verify ECDSA signatures against externally-supplied public keys can be deceived into accepting signatures crafted without knowledge of any private key. No public exploit has been identified at time of analysis, but the attack is conceptually elementary for anyone familiar with elliptic curve arithmetic.
HarmonyOS 6.1.0's event notification module contains a permission control flaw (CWE-275) that allows a locally-executing process without elevated privileges to disrupt the availability of the notification service. Both the CVSS vector (C:N/I:N/A:H) and Huawei's own bulletin text confirm the impact is strictly an availability denial - confidentiality and integrity are unaffected. Huawei has published remediation across four September 2026 bulletin categories covering consumer devices, smart displays, wearables, and laptops, indicating the flaw spans the full HarmonyOS device ecosystem. No public exploit code has been identified at time of analysis.
Permission control vulnerability in the app management module of Huawei HarmonyOS and EMUI allows a local unprivileged attacker to disrupt device availability without requiring any user interaction or elevated privileges. Affected platforms span nine versions across both HarmonyOS (4.0.0 through 4.3.3) and EMUI (14.0.0 through 16.0.0), covering a broad swath of active Huawei consumer devices. No public exploit has been identified at time of analysis, and Huawei has disclosed this through their September 2026 security bulletin.
Authenticated decryption in mirage-crypto before 2.2.0 for OCaml violates the security invariant of AEAD schemes by writing decrypted plaintext into the caller-supplied output buffer before the authentication tag is verified. When a forged tag is detected, `AES.GCM.authenticate_decrypt_into` and `Chacha20.authenticate_decrypt_into` return `false`, but the destination buffer already contains the full unverified plaintext. Applications that process buffer contents without rigidly checking the boolean return value - or where timing or compiler behavior creates subtle access windows - may consume attacker-controlled forged plaintext as if it were authenticated. No public exploit or KEV listing has been identified at time of analysis.
Reflected Cross-Site Scripting in the Product Filter for WooCommerce by WBW WordPress plugin (woobewoo) allows unauthenticated network attackers to inject arbitrary JavaScript via the unsanitized 'wpf_fid' parameter. All plugin versions through 3.4.2 are affected on any WordPress/WooCommerce installation running the plugin. Successful exploitation requires social engineering - a victim must click a crafted URL targeting a store page where the plugin's filter recalculation output is rendered - enabling session hijacking, credential theft, or further escalation against authenticated users including store administrators.
Out-of-bounds memory read in the WebView component of Google Chrome on Android allows an attacker who has already compromised the renderer process to escape the sandbox and read arbitrary memory via a crafted HTML page. The vulnerability is fixed in Chrome 153.0.8010.36; all prior Android Chrome versions are affected. No public exploit code has been identified and EPSS probability is low at 0.22%, though the scope-changed confidentiality impact is significant if renderer compromise is already achieved.
Reflected Cross-Site Scripting in the User Access Manager WordPress plugin (all versions through 2.3.18) allows unauthenticated attackers to inject arbitrary JavaScript via the unsanitized 'tab_group_section' GET parameter rendered in admin settings views. Successful exploitation requires tricking a privileged WordPress user - most dangerously an administrator - into clicking a crafted URL, at which point the injected script executes in their browser session, enabling session hijacking, credential theft, or unauthorized administrative actions. No public exploit code or CISA KEV listing has been identified at time of analysis; however, Wordfence has published full technical details including vulnerable source line references, lowering the barrier for independent exploitation.
Open redirect exploitation in Yordam Informatics Technology's Library Information and Document Automation Program enables unauthenticated network-based phishing attacks against end users. Versions from v22.1 up to (but not including) v22.2 fail to validate redirect target URLs, allowing attackers to craft legitimate-looking library system URLs that silently forward victims to attacker-controlled sites. The Scope:Changed designation in the CVSS vector confirms the impact crosses from the server component into the user's browser session, enabling credential harvesting or malware delivery under the trusted domain's brand. No public exploit code or active exploitation has been identified at time of analysis.
yshopmall through version 3.3 exposes an unauthenticated file upload endpoint (/api/upload) that performs no file type validation, allowing attackers to place arbitrary HTML, JSP or other executable content on the server. Because uploaded files are reachable from the application's origin, a crafted HTML file can execute script in a victim's browser session (reflected/stored XSS, CVSS 6.1, CWE-79), and a JSP upload could escalate to server-side code execution if the upload directory is served by a JSP-capable container. Exploitation requires a victim to open the attacker-supplied file URL (UI:R); there is no CISA KEV entry and no confirmed public exploit, and EPSS is low at 0.14% (3rd percentile), indicating limited observed activity rather than mass scanning.
Stored cross-site scripting in zhitan-ems 1.0.0 allows remote attackers to execute arbitrary JavaScript in a victim's browser by uploading a malicious SVG file through the /equipmentFile/upload endpoint. SVG files support embedded script content, and the application fails to sanitize or restrict SVG payloads before serving them, causing the browser to execute attacker-controlled code in the application's origin context. No public exploit code has been identified at time of analysis, and EPSS at 0.14% (3rd percentile) indicates minimal observed exploitation activity.
Out-of-bounds memory write in wpa_supplicant on Samsung Mobile Devices (Android 14 through 17) enables an adjacent unauthenticated attacker to corrupt process memory, with the CVSS 4.0 vector confirming potential high-confidentiality impact - likely exposure of Wi-Fi credentials or session keying material held in the wpa_supplicant process. Samsung resolved this in the SMR Sep-2026 Release 1 patch for all four affected Android generations. No public exploit code exists and the vulnerability is not listed in the CISA KEV catalog at time of analysis.
Timing side-channel in mirage-crypto-ec before 2.4.0 for OCaml enables remote cryptographic key recovery by exploiting secret-dependent timing variations during NIST elliptic-curve scalar multiplication table lookups. Affected applications performing ECDH key agreement or ECDSA signing - including TLS endpoints built on this library - leak private key material through measurable latency differences. No active exploitation is confirmed (no CISA KEV listing), but the C:H CVSS impact rating accurately reflects that successful key recovery constitutes full confidentiality compromise of the cryptographic material.
Improper input validation in Chrome's built-in Passwords component (all versions prior to 153.0.8010.36) enables a remote, unauthenticated attacker to potentially leak sensitive stored credential data via crafted network traffic. The flaw is rated CVSS 5.9 (AC:H), with Chromium assigning a 'Medium' severity consistent with the meaningful exploitation complexity required. No public exploits or active exploitation have been identified at time of analysis.
Race condition in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to cause denial of service by exploiting improper synchronization of shared resources. Both the Appliance and Application deployment forms are affected across versions prior to 5.36.00.16 and 5.36.00.00 respectively, as confirmed by Dell advisory DSA-2026-382. No public exploit code has been identified at time of analysis.
Cleartext transmission of sensitive information via the HttpsUpgrades component in Google Chrome on iOS (versions prior to 153.0.8010.36) exposes user data to network-positioned attackers through crafted traffic. The HttpsUpgrades mechanism, which is responsible for automatically promoting HTTP requests to HTTPS, fails under certain conditions on iOS, leaving sensitive request content unencrypted in transit. With no public exploit identified and high attack complexity required (network positioning), the real-world risk is moderate despite the C:H confidentiality impact.
Dell Secure Connect Gateway (SCG) 5.0 is affected by a network-exploitable TOCTOU race condition (CWE-367) that an unauthenticated remote attacker can leverage to cause denial of service. The appliance and application variants are both affected, with fixed versions at 5.36.00.16 and 5.36.00.00 respectively per Dell advisory DSA-2026-382. Notably, the vendor's CVSS vector includes low confidentiality and integrity impact metrics (C:L/I:L/A:L) beyond what the published description's DoS-only framing suggests, implying possible additional undisclosed effects from successful race exploitation.