Unauthenticated information disclosure in OpenPanel (openpanel-dev/openpanel) exposes argon2id password hashes and full report configurations to any caller possessing a share link. The share lookup API endpoint fails to enforce access controls, returning sensitive account credentials and proprietary business intelligence data - event names, filters, and breakdown dimensions - without validating the caller's identity or authorization. No public exploit code or CISA KEV listing has been identified at time of analysis, but the vulnerability is trivially exploitable by anyone who obtains a share link.
Password-protected live stream bypass in AVideo exposes RTMP stream keys, HLS playlist URLs, and AES-128 decryption keys to unauthenticated remote callers via two compounding failures. The PHP-side stats API (`Live::_getStats()` in `plugin/Live/Live.php`) returns protected transmission credentials regardless of password check outcome - including the hidden_applications branch invoked when `canSeeLiveFromLiveKey()` denies access. Independently, the shipped NGINX configuration leaves the `/live` location serving `.m3u8` playlists, AES-128 segment encryption keys, and `.ts` segments without any `auth_request` directive (the `auth_key_check` in the `.key` block is commented out), allowing full stream decryption without the configured password. No patched version was available at time of the advisory.
Privilege escalation in the Capgo (capgo.app) backend through version 12.242.4 allows an authenticated API key holder to impersonate a more privileged sibling key by supplying its numeric ID in the `x-limited-key-id` header, bypassing the intended parent-child delegation hierarchy entirely. The middleware's `checkKeyByIdPg()` resolves the caller-supplied key ID using only the ID, expiration state, and owning `user_id`, while `validateSubkeyUser()` only checks that both keys share an owner - neither function verifies that the resolved key is an actual descendant of the authenticating key. An `apikey_manager` key can therefore silently acquire `app_admin` permissions via `setSubkeyAuthContext` without knowledge of the target key's secret; the issue was confirmed on release 12.242.4 after a prior incomplete fix (GHSA-8h52-44r7-w343), and no patched version was available at time of advisory.
Unvalidated deserialization input in t-digest 3.1-3.3 exposes any service calling MergingDigest.fromBytes on attacker-controlled data to denial of service - the method reads length and capacity fields from the serialized header and uses them directly to allocate and index arrays without bounds checking, triggering ArrayIndexOutOfBoundsException or NegativeArraySizeException and aborting the parsing thread. Any analytics pipeline or API endpoint that accepts serialized t-digest state from external callers is vulnerable to remote, unauthenticated thread termination. No public exploit code has been identified at time of analysis, and this CVE is not in the CISA KEV catalog.
Cross-site scripting in Angular's server-side rendering engine (`@angular/platform-server`) allows arbitrary JavaScript execution in a victim's browser when attacker-controlled data reaches a `ProcessingInstruction` DOM node serialized inside an HTML5 RAWTEXT fallback container. Affected Angular versions prior to 20.3.30, 21.2.22, and 22.1.4 use a `domino` library build that escapes `>` in ProcessingInstruction data but not `<`, permitting a crafted closing tag such as `</noscript>` to prematurely terminate the RAWTEXT container and cause sibling elements to render as live HTML. The vulnerability is confirmed by GitHub Security Advisory GHSA-j3r3-mxqp-r2p4 with patches released across all three active Angular major release lines; no public exploit or CISA KEV listing exists at time of analysis.
Buffer overflow in the Apple Notification Center Service (ANCS) event handler of the Pavlok Behavioral Conditioning Wearable allows unauthenticated adjacent-network attackers to achieve full compromise of the wearable device and potentially the paired Apple host. The vulnerability resides in firmware versions up to build 20260707 and is exploitable by any attacker within Bluetooth Low Energy range without credentials. A proof-of-concept has been published (CVSS 4.0 E:P); the vendor did not respond to coordinated disclosure, and no patch has been released.
Stored XSS in SP Property (a Joomla real estate extension by joomshaper.com) before version 4.1.4 allows unauthenticated remote attackers to inject persistent JavaScript payloads into property listings and related content. Multiple template files across both frontend views and administrator list tables rendered user-supplied attributes and text values directly into HTML without contextual output escaping, enabling the stored payload to execute in the browser of any user who views the affected page - including Joomla administrators. No public exploit code has been identified and this vulnerability is not currently listed in CISA KEV, but the stored nature and admin-context execution make this a high-priority remediation target for any site running the affected extension.
CyberPanel before 3.0.5 allows attackers who have obtained an administrator's password to bypass two-factor authentication entirely on API endpoints by deriving valid API tokens from the password alone, without satisfying the TOTP requirement. This reduces 2FA-protected admin accounts to effective single-factor authentication at the API layer, enabling full administrative operations or session creation. The fix is available in version 3.0.5 per the GitHub security advisory; no public exploit or active exploitation has been identified at time of analysis.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.11.5 allows unauthenticated remote attackers to coerce the application server into fetching arbitrary internal network resources by supplying malicious URLs to the platform's URL-processing functionality. The scope-changed CVSS vector (S:C/C:H) reflects that exploitation exposes systems beyond Langflow itself - including cloud metadata services, internal APIs, and private network hosts accessible from the Langflow host. No public exploit has been identified at time of analysis; a vendor patch is available via IBM's support portal.
Improper access control in NI SystemLink and NI SystemLink Server (all versions through 26.5.0, 2026 Q3) allows a network-authenticated user with limited privileges to access host operating system files and directories that should be restricted. The root cause is CWE-862 (Missing Authorization) - the application authenticates the user but fails to enforce authorization boundaries between SystemLink application scope and the underlying host OS file system. No active exploitation or public proof-of-concept has been identified at time of analysis; the vulnerability is confirmed by NI's own security advisory.
Heap out-of-bounds write in Tesseract OCR 5.5.3 and earlier allows an attacker who controls a crafted `.traineddata` model file to corrupt heap memory during LSTM inference, leading to a crash or potentially controlled code execution. The root cause is an inconsistency between `source_` (sized from deserialized `na_`) and the write count used by `WriteTimeStepPart` and `AddTimeStepPart` (driven by `ns_` from the CI gate WeightMatrix dim1), leaving two functions unbounded after prior hardening patched sibling routines. No fixed release is available at time of analysis; an upstream fix exists only as a commit. No public exploit identified at time of analysis.
Heap out-of-bounds write and read in Tesseract OCR Engine 5.5.3 and earlier allows an attacker who can supply a crafted `.traineddata` model file to corrupt heap memory during LSTM inference, potentially achieving information disclosure, a crash, or controlled heap corruption leading to code execution. The flaw lies in `FullyConnected::DeSerialize`, which loads layer dimension scalars `ni_` and `no_` without cross-validating them against the actual weight matrix dimensions; when `Forward` is subsequently called, `MatrixDotVector` writes into a scratch buffer sized by `no_` but indexed by the actual matrix row count, and reads from a buffer sized by `ni_` but indexed by column count minus one. No fixed release has been issued as of this analysis; an upstream fix commit exists on GitHub.
Stack-based buffer overflow in Tesseract OCR 5.5.3 and earlier corrupts the stack during legacy engine initialization, enabling denial of service and potential control-flow hijacking when a crafted `.traineddata` file is processed. The flaw originates in `Classify::ReadNormProtos` (normmatch.cpp), where unbounded `std::istream::operator>>(char*)` extraction into a fixed 61-byte stack buffer allows a 99-character NORMPROTO token to overwrite up to 39 bytes beyond the buffer boundary during `TessBaseAPI::Init`. No fixed release is available at time of analysis; an upstream fix commit exists but has not been tagged as a release, and no public exploit has been identified at time of analysis.
Heap out-of-bounds write in Tesseract OCR 5.5.3 and earlier allows an attacker who supplies a crafted .traineddata language file to corrupt heap memory during legacy OCR classifier initialization, with potential for controlled code execution. The flaw is in ReadIntTemplates in src/classify/intproto.cpp, which reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATA_INTTEMP file component and uses them directly as loop bounds - storing heap pointers into fixed-capacity struct arrays without validating against compile-time maximums. No patched release exists as of this review, though a fix commit is present in the repository; no public exploit has been identified.
Heap out-of-bounds write in Tesseract OCR 5.5.3 and earlier allows an attacker who controls the loaded .traineddata model file to corrupt heap memory, crash the process, or potentially achieve code execution. The root cause is in GenericVector::read (src/ccutil/genericvector.h): the serialized `reserved` field allocates the backing buffer while the independent `size_used_` field drives the callback write loop, with no invariant check enforcing size_used_ ≤ reserved. A crafted TESSDATA_INTTEMP component with version_id ≥ 4 exploits this by setting reserved small and size_used_ large, triggering the write overrun through fontinfo_table_.read during legacy classifier initialization. No public exploit and no CISA KEV entry exist at time of analysis; an upstream commit fix exists but no patched release has been published.
Cross-site scripting via Angular's server-side rendering package (@angular/platform-server) allows arbitrary JavaScript execution in end-user browsers when untrusted input is serialized inside template content nested within fallback raw-content elements (noscript, iframe, noembed, noframes) on versions prior to 20.3.30, 21.2.22, and 22.1.4. The root cause is a traversal bug in Angular's Domino serializer: the ancestor-tag walk that determines whether closing tags must be escaped stopped at DocumentFragment boundaries (the type returned by template.content), so unescaped closing tags could break out of their container and activate attacker-controlled markup when the browser's HTML5 RAWTEXT parser processes the server-rendered HTML. No public exploit or CISA KEV listing exists at time of analysis, but the Renderer2 imperative DOM construction path is unconditionally exploitable in all affected versions regardless of schema configuration.
Path traversal in the knowns code generation template engine (versions through 0.33.0) allows unauthenticated remote attackers to read and write arbitrary files outside the project root when a victim developer processes a malicious template. The flaw in template_engine.go (lines 318-344 and 625-636) permits directory-traversal sequences in template destination paths, enabling attackers to overwrite shell initialization files (e.g., ~/.bashrc, ~/.profile) for persistent code execution or exfiltrate credential files from the developer's host. No public exploit has been identified at time of analysis and this CVE is not listed in CISA KEV, but the full read/write impact on a developer workstation represents significant supply-chain risk.
Unauthenticated arbitrary file deletion in the Advanced Product Fields Extended for WooCommerce WordPress plugin (versions <= 3.1.6) allows remote attackers to delete any file accessible to the web server process via a path traversal flaw. The scope-changed CVSS vector (S:C) reflects that an attacker can reach beyond the plugin's own file space - targeting WordPress core files such as wp-config.php, .htaccess, or even server-level configuration - resulting in complete site takedown or broader server disruption. Patchstack reported this vulnerability; no public exploit code or CISA KEV listing has been identified at time of analysis.
Proxy settings hijack in Autodesk Fusion Desktop (versions 2705.0.0 through 2705.1.10) allows a maliciously crafted add-in to silently overwrite the application's persistent network proxy configuration without user notification or consent, redirecting all authenticated Fusion network traffic through an attacker-controlled intermediary. The root cause is CWE-15 (External Control of System or Configuration Setting) - Fusion's add-in API imposes no authorization check or user-consent requirement on proxy configuration writes, and the modified setting persists across sessions. No public exploit has been identified and the vulnerability is not listed in the CISA KEV catalog; Autodesk has released a fix in version 2705.1.11 under advisory ADSK-SA-2026-0016.
WWBN AVideo's restream subsystem allows any authenticated user holding `canStream` permission to mint authorization tokens for restream objects they do not own, by sending crafted requests to `getRestream.json.php` without ownership validation. Exchanging that token against `getLiveKey.json.php` exposes the victim's stored stream key for YouTube, Twitch, or arbitrary RTMP destinations - granting the attacker full publish access to another user's live streaming channel. No public exploit code has been identified at time of analysis, and the vulnerability is tracked by VulnCheck via GitHub security advisory GHSA-7jf4-mmqm-7p7x.
Privilege escalation in capgo.app (npm package `capgo` ≤ 12.207.1) allows an authenticated org_member to promote an external account to org_admin or org_billing_admin by exploiting a missing role-rank comparison in the `validateInvite()` function of the invite-new-user Edge Function. The invitation-acceptance path compounds the issue by using the Supabase service-role key, which bypasses two dedicated database triggers designed to enforce privilege boundaries, resulting in full administrative control over the organization's apps, channels, members, and billing. No public exploit is identified at time of analysis; an upstream fix is available via PR #3096.
Authenticated remote code execution is possible in BurgerEditor versions 3.2.0-3.4.0 (and 2.28.0-2.30.0 per EUVD data) via unrestricted file upload, allowing a logged-in attacker to upload arbitrary PHP files and execute server-side code. The vulnerability stems from insufficient validation of uploaded file types (CWE-434), enabling placement of attacker-controlled executables in a web-accessible location. No public exploit code or active exploitation has been identified at time of analysis, though the attack is straightforward once authentication is obtained.
Cross-tenant path traversal in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a low-privileged authenticated attacker to overwrite ruleset files owned by other tenants on the same platform instance. The flaw (CWE-22) exploits insufficient path sanitization in a multi-tenant context, enabling one tenant's user to corrupt another tenant's data integration rule definitions. No public exploit code has been identified at time of analysis, and IBM has released a patch via advisory at ibm.com/support/pages/node/7286562.
Command injection in Lenovo's Tianxi AI Agent PC Application allows a local user, tricked into opening a specially crafted link, to execute arbitrary operating system commands on the affected machine. The vulnerability is rooted in inadequate sanitization of link content that the application processes through what is likely a registered URI scheme or deep-link handler. The product is distributed exclusively in the Chinese market, limiting global exposure, but the high C/I/A impact (VC:H/VI:H/VA:H in CVSS 4.0) means full user-context compromise is achievable with a single successful interaction.
SSRF in AWS Systems Manager Agent's port-forwarding feature allows an authenticated remote user to bypass the link-local address denylist and reach the EC2 Instance Metadata Service (IMDS), enabling theft of the managed instance's temporary IAM role credentials. The bypass exploits insufficient canonicalization of IP addresses before denylist evaluation - alternate representations of 169.254.169.254 (hex, decimal, IPv6-mapped, etc.) pass the check unblocked. With stolen credentials, the attacker can exercise the instance's full IAM role permissions from outside the instance. No public exploit identified at time of analysis, but the release notes confirm the fix explicitly canonicalizes IPs and extends the denylist to include ECS/EKS credential endpoints.
Improper authorization in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows remote authenticated low-privilege users to delete arbitrary RabbitMQ queues or exchanges, causing a denial of service across the platform's messaging infrastructure. The CVSS scope-changed metric (S:C) confirms the impact radiates beyond DataStage itself into the underlying RabbitMQ broker relied upon by dependent platform services, elevating the effective blast radius. No public exploit code has been identified and this vulnerability is not listed in CISA KEV.
Server-Side Request Forgery in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant - regardless of project membership or assigned role - to weaponize the shared ds-canvas pod as a network proxy by fully controlling the scheme, host, port, and path of outbound WSDL fetches it performs. The pod's position on the OpenShift overlay network grants reach to co-tenant services, in-cluster CP4D APIs, and link-local IMDS-style addresses, and the fetched body is reflected verbatim to the caller, enabling cross-tenant data exfiltration and internal service reconnaissance. No public exploit or KEV listing has been identified at time of analysis; vendor patch is available.
Command injection in Renovate's Gradle Wrapper manager module allows a repository contributor to execute arbitrary OS commands on self-hosted Renovate instances. Open-source versions before 44.14.7 and Mend Renovate CE/EE before 15.4.0 fail to escape the `distributionUrl` value read from a repository-controlled `gradle/wrapper/gradle-wrapper.properties` file before passing it to the Gradle Wrapper CLI, enabling shell metacharacter injection. Exploitation is constrained to self-hosted deployments explicitly configured with `binarySource=docker` and `gradleWrapper` in `allowedUnsafeExecutions`; no public exploit code or active exploitation has been identified at time of analysis.
Local privilege escalation in Lenovo Rescue and Smart Assistant (LMSA) enables a local authenticated user to execute arbitrary code with elevated privileges by exploiting a capture-and-replay authentication bypass (CWE-290) in the application's privileged service layer. The vulnerability is strictly local in scope per the CVSS 4.0 vector (AV:L/PR:L), limiting the threat to attackers who already hold a standard user account on an affected Lenovo device. Lenovo has published advisory LEN-217409 with remediation guidance; no public exploit has been identified at time of analysis.
Privilege escalation in the Lenovo Filez Client application allows a local authenticated user to gain elevated system rights via improper file or directory permissions (CWE-276). The CVSS 4.0 score of 8.5 reflects a meaningful local attack path with low complexity and no special attack requirements, though exploitation is bounded by the requirement for an existing local foothold. No active exploitation or public proof-of-concept has been identified at time of analysis.
Command injection in Renovate's Maven Wrapper manager allows an attacker with write access to a scanned repository to execute arbitrary OS commands on the host running Renovate when `binarySource=docker` mode is active. Unescaped `distributionType` values from `maven-wrapper.properties` are passed directly to a shell, giving the attacker full code execution in the Renovate process context. No public exploit or CISA KEV listing exists at time of analysis; vendor-released patch is available at version 44.14.7.
Cross-tenant SQL injection in OpenPanel's analytics filter builder allows authenticated attackers with project-scoped read credentials to exfiltrate other organizations' analytics data and profile PII. Unvalidated `profile.*` filter column identifiers are interpolated directly into ClickHouse WHERE clauses, enabling blind boolean oracle attacks that bypass project isolation boundaries. No public exploit code has been identified at time of analysis, but the low authentication bar and confirmed cross-tenant scope change make this a genuine priority for any multi-tenant OpenPanel deployment.
Stack-based buffer overflow in the Bosch Sensortec BHI385 SensorAPI C library allows a malicious or compromised sensor or bus participant to corrupt host firmware stack memory, leading to denial of service or arbitrary code execution. The flaw resides in bhi385_parse_debug_message() (bhi385_parse.c), which reads an 8-bit message length directly from the attacker-controlled FIFO event payload and passes it unchecked to memcpy targeting a fixed 17-byte stack buffer - any length byte above 16 overwrites adjacent stack data. No public exploit or CISA KEV listing has been identified at time of analysis, but the vendor has published an advisory under BOSCH-SA-223618.
Improper export of Android application components in Lenovo File Manager (Chinese-market distribution) enables a locally authenticated user or co-installed application to read or modify files that the application designates as protected. The root cause is CWE-926, where one or more Android components - likely a content provider or activity - are exported without enforcing the application's own authorization logic. No public exploit code exists and the vulnerability has not been added to CISA KEV; however, the CVSS 4.0 score of 8.4 reflects genuine high-impact file access if an attacker can install a companion malicious application on the target device.
OS command injection in TP-Link Deco BE11000 V2's TDDP (TP-Link Device Debug Protocol) module enables unauthenticated adjacent-network attackers to execute arbitrary commands with root privileges by sending a single crafted UDP packet. The vulnerability results in complete device compromise, covering unauthorized command execution, configuration modification, and total loss of confidentiality, integrity, and availability. A vendor firmware patch is available via the TP-Link support page; no public exploit has been identified at time of analysis.
Cleartext storage of sensitive information in NI SystemLink and NI SystemLink Server (all versions through 2026 Q3, ≤26.5.0) allows a local low-privileged user to read credentials, API keys, or other secrets written to disk without encryption. The vulnerability is rooted in CWE-312 and carries a CVSS 4.0 score of 8.4, reflecting high confidentiality and integrity impact for local access. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
NoSQL injection in the MongoDB integration for Laravel PHP allows a remote unauthenticated attacker to subvert equality filter operations across three specific API code paths. When user-controlled input delivers an operator-shaped array to the `where` (equality), `find`, or `delete` methods, MongoDB interprets the array as a query condition rather than a literal value - enabling unauthorized document reads and out-of-scope document deletion. No confirmed active exploitation or public exploit code exists at time of analysis, but the integrity and availability impacts (VI:H, VA:H in CVSS 4.0) are severe given that bulk or arbitrary document deletion may be irreversible.
Authorization bypass in HashiCorp Consul's catalog node-write path allows any authenticated principal holding a node-write token-scoped to any node name whatsoever-to delete a different node's catalog registration and seize that node's identity within the service mesh. All Consul open-source and Enterprise versions prior to the fixed releases are affected, making shared or multi-tenant Consul clusters with delegated node-write tokens particularly exposed. No public exploit code or active exploitation has been identified at time of analysis, but the low access complexity and the typically discoverable nature of node IDs make this a credible lateral-movement and disruption vector in production service-mesh deployments.
Incomplete log sanitization in Renovate before 44.14.4 causes Mutual TLS private keys to be written in cleartext to application logs, exposing mTLS credentials to anyone with log read access. When hostRules[].httpsPrivateKey is configured directly (rather than via the documented secrets mechanism), the value is redacted in the field context but leaks verbatim wherever it appears elsewhere in log output - including interpolated log messages and aliased configuration keys. Recovery of the private key enables an attacker to impersonate the Renovate client in mTLS handshakes against downstream protected services. No public exploit has been identified at time of analysis.
Flextype CMS REST API routes through version 1.0.0-alpha.3 transmit API authentication token pairs as URL query string parameters, causing them to be persistently recorded in web server access logs, proxy logs, CDN logs, and monitoring systems. Any party with read access to those log stores - including system administrators, shared-hosting neighbors, compromised monitoring infrastructure, or log-aggregation services - can extract valid tokens and use them for full API access. No public exploit identified at time of analysis, but exploitation requires only standard log-reading tools and the vulnerability is trivially exploitable once log access is obtained.
Unauthenticated configuration tampering in OpenNMS Horizon allows any attacker with network reach to the web interface to disable event definitions and SNMP data collection by sending HTTP PATCH requests to unprotected /api/v2 REST API endpoints. The Spring Security authorization policy in applicationContext-spring-security.xml defined intercept-url rules for GET, POST, PUT, and DELETE but omitted PATCH entirely, leaving /api/v2/eventconf/**, /api/v2/datacollectionconf/**, /api/v2/snmp-config/**, and /api/v2/trapd/** open to unauthenticated writes. Changes are persisted and reloaded into the running system, silently suppressing alarm generation and stopping metric collection - an attacker can blind the monitoring platform before conducting further operations.
Use-after-free in the reactive client-side encryption component of the MongoDB Java Driver allows a party that can cancel an in-flight encrypted operation to crash the hosting application process. The flaw surfaces only when the reactive encryption stack is active and KMS credentials are fetched on demand - a specific non-default configuration - making the affected population a subset of all Java Driver deployments. No public exploit code or active exploitation has been identified at time of analysis; impact is confined to availability (process termination), with no confidentiality or integrity consequence.
An authenticated user of IBM DataStage on Cloud Pak for Data 5.4.0.0 can abuse path traversal (CWE-22) in file path handling to write to or delete arbitrary files on the platform's shared storage, compromising data integrity and availability for other jobs and tenants using that storage. The flaw is remotely reachable with a valid low-privileged account (CVSS 8.1, AV:N/PR:L, C:N/I:H/A:H) and a vendor patch is available from IBM; there is no CISA KEV listing and no confirmed public exploit, and EPSS is a modest 0.50% (41st percentile), indicating opportunistic rather than widespread exploitation pressure.
Persistent API key access in IBM Langflow OSS 1.0.0-1.11.5 allows authenticated remote attackers to continue executing AI workflows and extracting sensitive data even after their user accounts have been deactivated. The vulnerability stems from insufficient session expiration (CWE-613): API keys issued to users are not invalidated when those accounts are disabled, leaving a persistent backdoor for former users or compromised credentials. No public exploit or CISA KEV listing exists at time of analysis, but the CVSS reflects High confidentiality and High integrity impact, driven by the ability to both execute flows and access sensitive pipeline data.
Denial of service in IBM Db2 11.5.0-11.5.9 and 12.1.0-12.1.5 allows a low-privileged authenticated network user to disable specific server functionality under certain conditions, producing both availability and integrity impact. The root cause is CWE-269 (Improper Privilege Management): the server fails to enforce correct privilege boundaries around a particular Db2 operation, allowing a user whose authorization should not extend to that action to invoke it. No public exploit has been identified at time of analysis; IBM has released a patch and the vendor advisory is the sole remediation reference.
Improper privilege management in IBM WebSphere Application Server 8.5 and 9.0 lets an authenticated user who holds a low-privilege administrative role modify security configuration, resulting in information disclosure or denial of service. The flaw is remotely reachable with low complexity (CVSS 3.1 base 8.1, AV:N/AC:L/PR:L/UI:N) but requires valid administrative credentials, so it is an insider/privileged-abuse issue rather than an unauthenticated attack path. EPSS is only 0.19% (9th percentile), there is no CISA KEV listing and no public exploit identified at time of analysis; IBM has published a fix.
Cross-tenant secret disclosure in Apache Camel K's custom resource resolution allows an authenticated tenant to reference secrets by name in the shared operator namespace, bypassing authorization boundaries that should isolate tenants from each other. Versions from 2.0.0 before 2.9.3 and from 2.10.1 before 2.10.2 are affected in multi-tenant deployments. No public exploit or active exploitation has been identified; Apache has released fixes in versions 2.9.3, 2.10.2, and 2.11.0.
Unauthenticated privilege escalation in the SiteSkite WordPress plugin (versions ≤ 2.1.5) allows a remote attacker to gain elevated privileges within a WordPress installation without any authentication. The vulnerability is classified under CWE-266 (Incorrect Privilege Assignment), meaning the plugin incorrectly grants elevated roles or capabilities during some reachable code path. With full C:H/I:H/A:H impact and PR:N, successful exploitation results in complete compromise of the affected WordPress site, though AC:H signals a non-trivial exploitation condition such as a race condition, specific request sequence, or timing-dependent logic.
Missing authorization in the WP-Stateless WordPress plugin (versions up to and including 4.4.1) allows authenticated subscriber-level users to modify plugin settings they should have no access to. WP-Stateless manages Google Cloud Storage offloading for WordPress media; unauthorized settings changes by a low-privileged user can corrupt the GCS integration, break media delivery, or reconfigure the storage bucket in ways that degrade site availability. No public exploit code has been identified at time of analysis, though the Patchstack advisory confirms the vulnerability.
Unauthenticated PHP Object Injection in Wise Chat WordPress plugin versions up to and including 3.4 allows a remote attacker to achieve high-impact compromise of confidentiality, integrity, and availability by passing crafted serialized data to an unprotected deserialization point. Exploitation requires a viable POP gadget chain within the target WordPress environment, keeping the practical bar elevated despite requiring no credentials. No KEV listing or public POC has been identified at time of analysis.