Arbitrary Python code execution in IBM Langflow OSS 1.0.0-1.11.5 is possible for any authenticated low-privileged user by embedding malicious code in custom components within stored flows. The root cause is a missing server-side authorization check (CWE-862) - the platform executes custom Python component logic without verifying whether the caller has sufficient privileges to run arbitrary code, not a failure to authenticate them. IBM has released a patch via support advisory 7286666; no public exploit or CISA KEV listing has been identified at time of analysis.
Privilege escalation on the GeoVision GV-LPC2211 license plate capture camera (firmware V1.13) allows an authenticated Guest-level user to overwrite the device's administrative configuration and replace the administrator password via the SSVR service, resulting in full device takeover. The root cause is CWE-862 (Missing Authorization): the SSVR service does not enforce authorization boundaries between the Guest role and administrator-level configuration operations. No public exploit or CISA KEV listing has been identified at time of analysis, but the network-accessible attack surface and low privilege bar make this a meaningful risk in any deployment where Guest accounts are enabled or accessible.
Container escape in IBM Aspera Enterprise WebApps 1.0.0-1.0.5 allows a local attacker with low privileges inside the container to break out to the underlying host due to unrestricted system call access. The CVSS vector (S:C/C:H/I:H/A:H) reflects full host compromise as the post-escape impact, not merely container-level damage. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; IBM has released a patch.
Out-of-bounds read in zstd-jni versions 1.5.5-6 through 1.5.7-13 exposes JVM-based applications to memory disclosure or process crashes when processing attacker-controlled Zstd-compressed data. The `Zstd.getFrameContentSize` method and `ZstdInputStreamNoFinalizer` both fail to reject negative `srcPosition` and `len` arguments before marshalling them into the native Zstd frame-header parser, allowing a negative value to bypass Java-side bounds checks and trigger out-of-bounds reads in the underlying C layer. No public exploit code or CISA KEV listing has been identified; the vendor-released fix is version 1.5.7-14.
Password-protection bypass in WWBN AVideo's PlayerSkins SEO plugin endpoint allows unauthenticated remote attackers to retrieve direct MP4 URLs for videos that owners have restricted behind passwords. The flaw resides in `plugin/PlayerSkins/seo.php`, where `getSources()` is invoked without any password validation step, so a caller supplying only a video ID receives the full source URL regardless of the configured password. All AVideo deployments through commit c3edcc274c389816d434acadac07ee78eaf330c1 are affected; no public exploit or CISA KEV listing has been identified at time of analysis.
Capgo's MFA enforcement is defeated by an authentication assurance level (AAL) mismatch across two distinct code paths: the Edge JWT middleware (foundJWT() in supabase/functions/_backend/utils/hono_middleware.ts) accepts Supabase JWTs without inspecting the aal claim, and the direct RBAC path (checkPermissionPg() calling public.rbac_check_permission_direct() in rbac.ts) authorizes operations by user ID alone, bypassing the assurance-level check that public.verify_mfa() correctly enforces. An attacker holding only the victim's account password can authenticate, receive an aal1 JWT, exercise privileged RBAC operations without triggering any MFA challenge, mint a persistent app_admin API key, and modify production OTA channel configurations - all of which survive logout of the original aal1 session. No patched version has been released; all versions of capgo.app are affected, and the advisory includes a validated proof-of-concept demonstrating bundle swap on a production channel.
Privilege escalation in Anchor CMS through 0.12.7 allows any authenticated low-privilege user (editor or user role) to create new administrator accounts or hijack the existing administrator's password by directly POSTing to unprotected admin/users/add and admin/users/edit endpoints. The CMS fails to enforce role-based access control at the controller level, meaning the admin user-management routes accept low-privilege session tokens without verifying elevated permissions. A publicly available proof-of-concept exists via a referenced GitHub gist; no vendor-released patch has been identified at time of analysis, and the project appears to be unmaintained at version 0.12.7.
Privilege escalation in knowns through 0.33.0 permits authenticated read-only agent sessions to bypass authorization controls entirely by invoking the project.set action, which is unconditionally exempted from the permission guard in the internal permissions subsystem. An attacker with any level of agent access can repoint the server to an arbitrary project directory, converting read-only access into write-capable access over the newly targeted directory. No public exploit code and no active exploitation are confirmed at time of analysis; the vulnerability is reported by VulnCheck referencing the upstream GitHub security advisory.
Privilege escalation and arbitrary code execution affect Netskope Endpoint DLP (EPDLP) on Windows, where a privileged local user can send a crafted message to the EPDLP inter-process communication port to trigger a CWE-190 integer overflow, corrupting process memory. The vulnerability is gated behind two explicit non-default conditions - the EPDLP module must be active in the client configuration, and Windows Memory Integrity (HVCI/VBS) must be disabled on the host. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Remote code execution in Craft CMS allows any authenticated Control Panel user holding only the minimum `accessCp` permission to execute arbitrary operating system commands as the PHP web worker process. The flaw (GHSA-9c4j-cjw3-r3xx, CWE-470) bypasses the assumption that non-administrative CP users are restricted to content management operations. Vendor-released patch version 5.10.13 is confirmed; no public exploit or CISA KEV listing exists at time of analysis.
Denial of service in NASA-JPL ION-DTN before 4.2.1-a.1 allows unauthenticated remote attackers to crash the ION process by sending a single crafted BPv7 bundle with a zero-length payload block. The `canonicalizePayloadBlock()` function in `bpsec_util.c` forwards `bundle->payload.length` directly to `zco_clone()` without a zero-value guard; when that value is zero, the CHKZERO assertion fails, `sm_Abort()` is invoked, and the process terminates via SIGABRT. Critically, the crash occurs before any HMAC verification, so no credential, key, or prior session state is needed to trigger it.
Path traversal in ICEcoder through version 8.1 enables authenticated low-privilege users to move arbitrary files from outside the web document root into web-accessible directories by injecting traversal sequences into the `oldFileName` parameter of rename and move operations. The flaw, located in `lib/file-control.php` around line 198, allows an attacker to expose sensitive server-side file contents via direct HTTP retrieval while simultaneously deleting the original - combining information disclosure with destructive write impact. No public exploit code or active exploitation has been confirmed at time of analysis, though the referenced Caycon advisory includes precise source code pointers that make reproduction straightforward.
OS command injection in ICEcoder through 8.1 allows authenticated low-privilege users to execute arbitrary operating system commands as the web-server user. The flaw resides in lib/properties.php (line 37), where a user-supplied filesystem directory path is passed without any shell metacharacter escaping into a popen() call. An attacker with ICEcoder login access can create a directory whose name embeds shell metacharacters, then invoke the Properties function to trigger command execution. No public exploit or CISA KEV listing is confirmed at time of analysis, but a detailed researcher advisory with source-code references is publicly available on GitHub.
Path traversal in ICEcoder through version 8.1 allows authenticated low-privilege attackers to read, write, or delete arbitrary files on the host filesystem by submitting traversal sequences or absolute paths to the file-control endpoint. The root cause is a PHP logic error in File::check() where the document-root confinement check compares the return value of realpath() against boolean true - a comparison that can never evaluate to true in PHP, since realpath() returns a string or false - rendering the entire path-restriction mechanism permanently inoperative. A detailed public advisory identifying the exact vulnerable code line is available via VulnCheck and GitHub; no patch version has been confirmed at time of analysis.
Unauthenticated information disclosure in OpenPanel (openpanel-dev/openpanel) exposes argon2id password hashes and full report configurations to any caller possessing a share link. The share lookup API endpoint fails to enforce access controls, returning sensitive account credentials and proprietary business intelligence data - event names, filters, and breakdown dimensions - without validating the caller's identity or authorization. No public exploit code or CISA KEV listing has been identified at time of analysis, but the vulnerability is trivially exploitable by anyone who obtains a share link.
Password-protected live stream bypass in AVideo exposes RTMP stream keys, HLS playlist URLs, and AES-128 decryption keys to unauthenticated remote callers via two compounding failures. The PHP-side stats API (`Live::_getStats()` in `plugin/Live/Live.php`) returns protected transmission credentials regardless of password check outcome - including the hidden_applications branch invoked when `canSeeLiveFromLiveKey()` denies access. Independently, the shipped NGINX configuration leaves the `/live` location serving `.m3u8` playlists, AES-128 segment encryption keys, and `.ts` segments without any `auth_request` directive (the `auth_key_check` in the `.key` block is commented out), allowing full stream decryption without the configured password. No patched version was available at time of the advisory.
Privilege escalation in the Capgo (capgo.app) backend through version 12.242.4 allows an authenticated API key holder to impersonate a more privileged sibling key by supplying its numeric ID in the `x-limited-key-id` header, bypassing the intended parent-child delegation hierarchy entirely. The middleware's `checkKeyByIdPg()` resolves the caller-supplied key ID using only the ID, expiration state, and owning `user_id`, while `validateSubkeyUser()` only checks that both keys share an owner - neither function verifies that the resolved key is an actual descendant of the authenticating key. An `apikey_manager` key can therefore silently acquire `app_admin` permissions via `setSubkeyAuthContext` without knowledge of the target key's secret; the issue was confirmed on release 12.242.4 after a prior incomplete fix (GHSA-8h52-44r7-w343), and no patched version was available at time of advisory.
Unvalidated deserialization input in t-digest 3.1-3.3 exposes any service calling MergingDigest.fromBytes on attacker-controlled data to denial of service - the method reads length and capacity fields from the serialized header and uses them directly to allocate and index arrays without bounds checking, triggering ArrayIndexOutOfBoundsException or NegativeArraySizeException and aborting the parsing thread. Any analytics pipeline or API endpoint that accepts serialized t-digest state from external callers is vulnerable to remote, unauthenticated thread termination. No public exploit code has been identified at time of analysis, and this CVE is not in the CISA KEV catalog.
Cross-site scripting in Angular's server-side rendering engine (`@angular/platform-server`) allows arbitrary JavaScript execution in a victim's browser when attacker-controlled data reaches a `ProcessingInstruction` DOM node serialized inside an HTML5 RAWTEXT fallback container. Affected Angular versions prior to 20.3.30, 21.2.22, and 22.1.4 use a `domino` library build that escapes `>` in ProcessingInstruction data but not `<`, permitting a crafted closing tag such as `</noscript>` to prematurely terminate the RAWTEXT container and cause sibling elements to render as live HTML. The vulnerability is confirmed by GitHub Security Advisory GHSA-j3r3-mxqp-r2p4 with patches released across all three active Angular major release lines; no public exploit or CISA KEV listing exists at time of analysis.
Buffer overflow in the Apple Notification Center Service (ANCS) event handler of the Pavlok Behavioral Conditioning Wearable allows unauthenticated adjacent-network attackers to achieve full compromise of the wearable device and potentially the paired Apple host. The vulnerability resides in firmware versions up to build 20260707 and is exploitable by any attacker within Bluetooth Low Energy range without credentials. A proof-of-concept has been published (CVSS 4.0 E:P); the vendor did not respond to coordinated disclosure, and no patch has been released.
Stored XSS in SP Property (a Joomla real estate extension by joomshaper.com) before version 4.1.4 allows unauthenticated remote attackers to inject persistent JavaScript payloads into property listings and related content. Multiple template files across both frontend views and administrator list tables rendered user-supplied attributes and text values directly into HTML without contextual output escaping, enabling the stored payload to execute in the browser of any user who views the affected page - including Joomla administrators. No public exploit code has been identified and this vulnerability is not currently listed in CISA KEV, but the stored nature and admin-context execution make this a high-priority remediation target for any site running the affected extension.
CyberPanel before 3.0.5 allows attackers who have obtained an administrator's password to bypass two-factor authentication entirely on API endpoints by deriving valid API tokens from the password alone, without satisfying the TOTP requirement. This reduces 2FA-protected admin accounts to effective single-factor authentication at the API layer, enabling full administrative operations or session creation. The fix is available in version 3.0.5 per the GitHub security advisory; no public exploit or active exploitation has been identified at time of analysis.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.11.5 allows unauthenticated remote attackers to coerce the application server into fetching arbitrary internal network resources by supplying malicious URLs to the platform's URL-processing functionality. The scope-changed CVSS vector (S:C/C:H) reflects that exploitation exposes systems beyond Langflow itself - including cloud metadata services, internal APIs, and private network hosts accessible from the Langflow host. No public exploit has been identified at time of analysis; a vendor patch is available via IBM's support portal.
Improper access control in NI SystemLink and NI SystemLink Server (all versions through 26.5.0, 2026 Q3) allows a network-authenticated user with limited privileges to access host operating system files and directories that should be restricted. The root cause is CWE-862 (Missing Authorization) - the application authenticates the user but fails to enforce authorization boundaries between SystemLink application scope and the underlying host OS file system. No active exploitation or public proof-of-concept has been identified at time of analysis; the vulnerability is confirmed by NI's own security advisory.
Heap out-of-bounds write in Tesseract OCR 5.5.3 and earlier allows an attacker who controls a crafted `.traineddata` model file to corrupt heap memory during LSTM inference, leading to a crash or potentially controlled code execution. The root cause is an inconsistency between `source_` (sized from deserialized `na_`) and the write count used by `WriteTimeStepPart` and `AddTimeStepPart` (driven by `ns_` from the CI gate WeightMatrix dim1), leaving two functions unbounded after prior hardening patched sibling routines. No fixed release is available at time of analysis; an upstream fix exists only as a commit. No public exploit identified at time of analysis.
Heap out-of-bounds write and read in Tesseract OCR Engine 5.5.3 and earlier allows an attacker who can supply a crafted `.traineddata` model file to corrupt heap memory during LSTM inference, potentially achieving information disclosure, a crash, or controlled heap corruption leading to code execution. The flaw lies in `FullyConnected::DeSerialize`, which loads layer dimension scalars `ni_` and `no_` without cross-validating them against the actual weight matrix dimensions; when `Forward` is subsequently called, `MatrixDotVector` writes into a scratch buffer sized by `no_` but indexed by the actual matrix row count, and reads from a buffer sized by `ni_` but indexed by column count minus one. No fixed release has been issued as of this analysis; an upstream fix commit exists on GitHub.
Stack-based buffer overflow in Tesseract OCR 5.5.3 and earlier corrupts the stack during legacy engine initialization, enabling denial of service and potential control-flow hijacking when a crafted `.traineddata` file is processed. The flaw originates in `Classify::ReadNormProtos` (normmatch.cpp), where unbounded `std::istream::operator>>(char*)` extraction into a fixed 61-byte stack buffer allows a 99-character NORMPROTO token to overwrite up to 39 bytes beyond the buffer boundary during `TessBaseAPI::Init`. No fixed release is available at time of analysis; an upstream fix commit exists but has not been tagged as a release, and no public exploit has been identified at time of analysis.
Heap out-of-bounds write in Tesseract OCR 5.5.3 and earlier allows an attacker who supplies a crafted .traineddata language file to corrupt heap memory during legacy OCR classifier initialization, with potential for controlled code execution. The flaw is in ReadIntTemplates in src/classify/intproto.cpp, which reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATA_INTTEMP file component and uses them directly as loop bounds - storing heap pointers into fixed-capacity struct arrays without validating against compile-time maximums. No patched release exists as of this review, though a fix commit is present in the repository; no public exploit has been identified.
Heap out-of-bounds write in Tesseract OCR 5.5.3 and earlier allows an attacker who controls the loaded .traineddata model file to corrupt heap memory, crash the process, or potentially achieve code execution. The root cause is in GenericVector::read (src/ccutil/genericvector.h): the serialized `reserved` field allocates the backing buffer while the independent `size_used_` field drives the callback write loop, with no invariant check enforcing size_used_ ≤ reserved. A crafted TESSDATA_INTTEMP component with version_id ≥ 4 exploits this by setting reserved small and size_used_ large, triggering the write overrun through fontinfo_table_.read during legacy classifier initialization. No public exploit and no CISA KEV entry exist at time of analysis; an upstream commit fix exists but no patched release has been published.
Cross-site scripting via Angular's server-side rendering package (@angular/platform-server) allows arbitrary JavaScript execution in end-user browsers when untrusted input is serialized inside template content nested within fallback raw-content elements (noscript, iframe, noembed, noframes) on versions prior to 20.3.30, 21.2.22, and 22.1.4. The root cause is a traversal bug in Angular's Domino serializer: the ancestor-tag walk that determines whether closing tags must be escaped stopped at DocumentFragment boundaries (the type returned by template.content), so unescaped closing tags could break out of their container and activate attacker-controlled markup when the browser's HTML5 RAWTEXT parser processes the server-rendered HTML. No public exploit or CISA KEV listing exists at time of analysis, but the Renderer2 imperative DOM construction path is unconditionally exploitable in all affected versions regardless of schema configuration.
Path traversal in the knowns code generation template engine (versions through 0.33.0) allows unauthenticated remote attackers to read and write arbitrary files outside the project root when a victim developer processes a malicious template. The flaw in template_engine.go (lines 318-344 and 625-636) permits directory-traversal sequences in template destination paths, enabling attackers to overwrite shell initialization files (e.g., ~/.bashrc, ~/.profile) for persistent code execution or exfiltrate credential files from the developer's host. No public exploit has been identified at time of analysis and this CVE is not listed in CISA KEV, but the full read/write impact on a developer workstation represents significant supply-chain risk.
Unauthenticated arbitrary file deletion in the Advanced Product Fields Extended for WooCommerce WordPress plugin (versions <= 3.1.6) allows remote attackers to delete any file accessible to the web server process via a path traversal flaw. The scope-changed CVSS vector (S:C) reflects that an attacker can reach beyond the plugin's own file space - targeting WordPress core files such as wp-config.php, .htaccess, or even server-level configuration - resulting in complete site takedown or broader server disruption. Patchstack reported this vulnerability; no public exploit code or CISA KEV listing has been identified at time of analysis.
Proxy settings hijack in Autodesk Fusion Desktop (versions 2705.0.0 through 2705.1.10) allows a maliciously crafted add-in to silently overwrite the application's persistent network proxy configuration without user notification or consent, redirecting all authenticated Fusion network traffic through an attacker-controlled intermediary. The root cause is CWE-15 (External Control of System or Configuration Setting) - Fusion's add-in API imposes no authorization check or user-consent requirement on proxy configuration writes, and the modified setting persists across sessions. No public exploit has been identified and the vulnerability is not listed in the CISA KEV catalog; Autodesk has released a fix in version 2705.1.11 under advisory ADSK-SA-2026-0016.
WWBN AVideo's restream subsystem allows any authenticated user holding `canStream` permission to mint authorization tokens for restream objects they do not own, by sending crafted requests to `getRestream.json.php` without ownership validation. Exchanging that token against `getLiveKey.json.php` exposes the victim's stored stream key for YouTube, Twitch, or arbitrary RTMP destinations - granting the attacker full publish access to another user's live streaming channel. No public exploit code has been identified at time of analysis, and the vulnerability is tracked by VulnCheck via GitHub security advisory GHSA-7jf4-mmqm-7p7x.
Privilege escalation in capgo.app (npm package `capgo` ≤ 12.207.1) allows an authenticated org_member to promote an external account to org_admin or org_billing_admin by exploiting a missing role-rank comparison in the `validateInvite()` function of the invite-new-user Edge Function. The invitation-acceptance path compounds the issue by using the Supabase service-role key, which bypasses two dedicated database triggers designed to enforce privilege boundaries, resulting in full administrative control over the organization's apps, channels, members, and billing. No public exploit is identified at time of analysis; an upstream fix is available via PR #3096.
Authenticated remote code execution is possible in BurgerEditor versions 3.2.0-3.4.0 (and 2.28.0-2.30.0 per EUVD data) via unrestricted file upload, allowing a logged-in attacker to upload arbitrary PHP files and execute server-side code. The vulnerability stems from insufficient validation of uploaded file types (CWE-434), enabling placement of attacker-controlled executables in a web-accessible location. No public exploit code or active exploitation has been identified at time of analysis, though the attack is straightforward once authentication is obtained.
Cross-tenant path traversal in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a low-privileged authenticated attacker to overwrite ruleset files owned by other tenants on the same platform instance. The flaw (CWE-22) exploits insufficient path sanitization in a multi-tenant context, enabling one tenant's user to corrupt another tenant's data integration rule definitions. No public exploit code has been identified at time of analysis, and IBM has released a patch via advisory at ibm.com/support/pages/node/7286562.
Command injection in Lenovo's Tianxi AI Agent PC Application allows a local user, tricked into opening a specially crafted link, to execute arbitrary operating system commands on the affected machine. The vulnerability is rooted in inadequate sanitization of link content that the application processes through what is likely a registered URI scheme or deep-link handler. The product is distributed exclusively in the Chinese market, limiting global exposure, but the high C/I/A impact (VC:H/VI:H/VA:H in CVSS 4.0) means full user-context compromise is achievable with a single successful interaction.
SSRF in AWS Systems Manager Agent's port-forwarding feature allows an authenticated remote user to bypass the link-local address denylist and reach the EC2 Instance Metadata Service (IMDS), enabling theft of the managed instance's temporary IAM role credentials. The bypass exploits insufficient canonicalization of IP addresses before denylist evaluation - alternate representations of 169.254.169.254 (hex, decimal, IPv6-mapped, etc.) pass the check unblocked. With stolen credentials, the attacker can exercise the instance's full IAM role permissions from outside the instance. No public exploit identified at time of analysis, but the release notes confirm the fix explicitly canonicalizes IPs and extends the denylist to include ECS/EKS credential endpoints.
Improper authorization in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows remote authenticated low-privilege users to delete arbitrary RabbitMQ queues or exchanges, causing a denial of service across the platform's messaging infrastructure. The CVSS scope-changed metric (S:C) confirms the impact radiates beyond DataStage itself into the underlying RabbitMQ broker relied upon by dependent platform services, elevating the effective blast radius. No public exploit code has been identified and this vulnerability is not listed in CISA KEV.
Server-Side Request Forgery in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant - regardless of project membership or assigned role - to weaponize the shared ds-canvas pod as a network proxy by fully controlling the scheme, host, port, and path of outbound WSDL fetches it performs. The pod's position on the OpenShift overlay network grants reach to co-tenant services, in-cluster CP4D APIs, and link-local IMDS-style addresses, and the fetched body is reflected verbatim to the caller, enabling cross-tenant data exfiltration and internal service reconnaissance. No public exploit or KEV listing has been identified at time of analysis; vendor patch is available.
Command injection in Renovate's Gradle Wrapper manager module allows a repository contributor to execute arbitrary OS commands on self-hosted Renovate instances. Open-source versions before 44.14.7 and Mend Renovate CE/EE before 15.4.0 fail to escape the `distributionUrl` value read from a repository-controlled `gradle/wrapper/gradle-wrapper.properties` file before passing it to the Gradle Wrapper CLI, enabling shell metacharacter injection. Exploitation is constrained to self-hosted deployments explicitly configured with `binarySource=docker` and `gradleWrapper` in `allowedUnsafeExecutions`; no public exploit code or active exploitation has been identified at time of analysis.
Local privilege escalation in Lenovo Rescue and Smart Assistant (LMSA) enables a local authenticated user to execute arbitrary code with elevated privileges by exploiting a capture-and-replay authentication bypass (CWE-290) in the application's privileged service layer. The vulnerability is strictly local in scope per the CVSS 4.0 vector (AV:L/PR:L), limiting the threat to attackers who already hold a standard user account on an affected Lenovo device. Lenovo has published advisory LEN-217409 with remediation guidance; no public exploit has been identified at time of analysis.
Privilege escalation in the Lenovo Filez Client application allows a local authenticated user to gain elevated system rights via improper file or directory permissions (CWE-276). The CVSS 4.0 score of 8.5 reflects a meaningful local attack path with low complexity and no special attack requirements, though exploitation is bounded by the requirement for an existing local foothold. No active exploitation or public proof-of-concept has been identified at time of analysis.
Command injection in Renovate's Maven Wrapper manager allows an attacker with write access to a scanned repository to execute arbitrary OS commands on the host running Renovate when `binarySource=docker` mode is active. Unescaped `distributionType` values from `maven-wrapper.properties` are passed directly to a shell, giving the attacker full code execution in the Renovate process context. No public exploit or CISA KEV listing exists at time of analysis; vendor-released patch is available at version 44.14.7.
Cross-tenant SQL injection in OpenPanel's analytics filter builder allows authenticated attackers with project-scoped read credentials to exfiltrate other organizations' analytics data and profile PII. Unvalidated `profile.*` filter column identifiers are interpolated directly into ClickHouse WHERE clauses, enabling blind boolean oracle attacks that bypass project isolation boundaries. No public exploit code has been identified at time of analysis, but the low authentication bar and confirmed cross-tenant scope change make this a genuine priority for any multi-tenant OpenPanel deployment.
Stack-based buffer overflow in the Bosch Sensortec BHI385 SensorAPI C library allows a malicious or compromised sensor or bus participant to corrupt host firmware stack memory, leading to denial of service or arbitrary code execution. The flaw resides in bhi385_parse_debug_message() (bhi385_parse.c), which reads an 8-bit message length directly from the attacker-controlled FIFO event payload and passes it unchecked to memcpy targeting a fixed 17-byte stack buffer - any length byte above 16 overwrites adjacent stack data. No public exploit or CISA KEV listing has been identified at time of analysis, but the vendor has published an advisory under BOSCH-SA-223618.
Improper export of Android application components in Lenovo File Manager (Chinese-market distribution) enables a locally authenticated user or co-installed application to read or modify files that the application designates as protected. The root cause is CWE-926, where one or more Android components - likely a content provider or activity - are exported without enforcing the application's own authorization logic. No public exploit code exists and the vulnerability has not been added to CISA KEV; however, the CVSS 4.0 score of 8.4 reflects genuine high-impact file access if an attacker can install a companion malicious application on the target device.
OS command injection in TP-Link Deco BE11000 V2's TDDP (TP-Link Device Debug Protocol) module enables unauthenticated adjacent-network attackers to execute arbitrary commands with root privileges by sending a single crafted UDP packet. The vulnerability results in complete device compromise, covering unauthorized command execution, configuration modification, and total loss of confidentiality, integrity, and availability. A vendor firmware patch is available via the TP-Link support page; no public exploit has been identified at time of analysis.
Cleartext storage of sensitive information in NI SystemLink and NI SystemLink Server (all versions through 2026 Q3, ≤26.5.0) allows a local low-privileged user to read credentials, API keys, or other secrets written to disk without encryption. The vulnerability is rooted in CWE-312 and carries a CVSS 4.0 score of 8.4, reflecting high confidentiality and integrity impact for local access. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.