Unauthenticated arbitrary file read in GitLab CE/EE lets remote attackers retrieve files from the GitLab server via the repository commits API, which fails to confine paths and does not enforce authentication. All 18.7 releases through 19.3.2 are affected across the fix lines (before 19.1.8, 19.2.6, and 19.3.2). This is confirmed actively exploited (CISA KEV) and publicly available exploit code exists, making it an emergency-patch priority for any internet-reachable GitLab instance.
Sensitive credential and configuration disclosure in GitLab Enterprise Edition allows an authenticated user with Duo Chat access to exfiltrate Advanced Search (Elasticsearch) instance configurations and stored credentials by supplying a specially crafted GraphQL subscription argument that bypasses serialization and forces an internal server object lookup. It affects EE 18.3 through 19.1.8, 19.2 through 19.2.6, and 19.3 through 19.3.2, was reported by GitLab, and publicly available exploit code exists (HackerOne #4012289). No CISA KEV listing at time of analysis, so this is POC-backed but not confirmed as actively exploited.
Remote code execution in The Events Calendar plugin for WordPress (StellarWP) affects all versions up to and including 6.17.4, allowing unauthenticated attackers to run arbitrary PHP on the server via unsafe deserialization. The is_safe_widget_instance guard is bypassed because PHP fires magic methods during pre-parse and enable_rendering_widget_copied() forges a valid wp_hash integrity attribute before unserialize() executes; the malicious block markup reaches the sink through the V2 single-event template running do_blocks() over buffered comment HTML. Reported by Wordfence with a CVSS of 9.8; no public exploit identified at time of analysis, though the vulnerability is well-documented with pinpointed source-line references.
Privilege escalation in the MemberPress Corporate Accounts WordPress plugin (≤1.5.39) allows authenticated subscribers holding a corporate account to create new administrator accounts or hijack existing ones by overwriting their email addresses. The root cause is a mass assignment flaw in the `add_sub_account_user` function, which forwards the raw `userdata` POST array directly to WordPress's `wp_insert_user()` without stripping sensitive keys such as `role` or `ID`. Wordfence reported the vulnerability; a partial patch was released in version 1.5.39, meaning even the latest disclosed version may still be exploitable in some code paths. No public exploit code or CISA KEV listing has been identified at time of analysis.
Local file inclusion and remote code execution in GEO my WP WordPress plugin (≤4.5.5.3) allow unauthenticated attackers to include arbitrary PHP files via the `gmw_posts_locator_ajax_info_window_loader` AJAX handler, which accepted attacker-controlled template paths and passed them to a PHP `require` statement without adequate allowlist enforcement. At minimum this exposes sensitive PHP files such as wp-config.php; when PEAR is installed with `register_argc_argv` enabled, attackers can leverage pearcmd.php to write and execute arbitrary PHP code, achieving full unauthenticated RCE. No public exploit has been identified at time of analysis, though the Wordfence advisory and vulnerable source code are publicly available, substantially reducing the development effort for a proof-of-concept.
Sandbox escape in wasm2c (wabt ≤ 1.0.41) allows an attacker controlling WebAssembly content to achieve arbitrary read/write of host process memory and code execution by exploiting an unchecked calloc() return value during funcref table allocation. When calloc() fails, table->data is left NULL while table->size retains the guest-declared element count, causing bounds checks to pass and element accesses to resolve to absolute low-memory addresses - fully defeating the isolation wasm2c exists to provide. Firefox's RLBox sandboxing of Graphite, Hunspell, Ogg, Expat, and Woff2 libraries is affected, and a public proof-of-concept ('table flip') is available, though exploitation requires specific memory-failure conditions to be present.
Remote code execution in The Events Calendar WordPress plugin (StellarWP) through version 6.17.3 lets unauthenticated attackers run arbitrary PHP on the server by abusing Element_Classes::parse_array(). A plain-array widget 'classes' payload evades the is_safe_widget_instance() object check and reaches a callable-invocation sink; the chain fires when do_blocks() renders a single-event page whose comment area contains a crafted wp:legacy-widget block. Reported by Wordfence with a 9.8 CVSS; no public exploit identified at time of analysis, and the flaw is only reachable on sites that enable comments on tribe_events posts.
Remote code execution in the Masteriyo LMS WordPress plugin before 3.4.1 allows an attacker holding a minimal account (e.g. subscriber/student) to inject arbitrary PHP objects via user-supplied metadata that is unserialized on read-back, and to leverage a gadget class in a bundled library to write and execute arbitrary code on the server (CWE-502). A weaker unauthenticated variant of the same flaw yields arbitrary file write rather than full code execution. Publicly available exploit detail exists via WPScan; EPSS is low (0.17%, 6th percentile) and there is no public exploit identified as weaponized in the wild.
Remote code execution in the DS Ad Rotator WordPress plugin (all versions through 0.8) allows unauthenticated attackers to upload arbitrary files, including PHP scripts, because the image upload handler enforces no capability check, no nonce verification, and no file-type validation. Any anonymous visitor can drop a web shell into a web-accessible directory and execute it for full server compromise. WPScan reports the flaw with a public advisory; no public exploit is identified at time of analysis and EPSS risk is low (0.20%), but the exploitation technique is trivial and well understood.
Authentication bypass in the Frontegg SAML SSO WordPress plugin through version 1.0.1 lets unauthenticated remote attackers log in as any user, including administrators, because the plugin establishes a session from a SAML authentication response without verifying its cryptographic signature or issuer. Attackers can also create arbitrary accounts, giving them a persistent foothold. No public exploit identified at time of analysis; EPSS is low (0.19%, 8th percentile) but this reflects lack of observed activity, not difficulty of exploitation.
Unauthenticated remote code execution in the 'WP images upload on piclect' WordPress plugin (versions through 1.0) arises because the plugin writes uploaded files to a publicly accessible directory without validating the filename or MIME/content type. Any remote attacker can upload a PHP file and request it directly to run arbitrary code as the web server. Reported by WPScan with a maximal 9.8 CVSS; no public exploit code is identified at time of analysis and EPSS remains low at 0.16%.
Unauthenticated site takeover in the WP Component WordPress plugin through version 2.2.4 stems from an AJAX-style action exposed to logged-out users that performs no capability or nonce validation and blindly writes an attacker-supplied option name and value. Because the handler can overwrite arbitrary wp_options entries, an attacker can flip 'users_can_register' on and set 'default_role' to administrator, then self-register an admin account. Reported by WPScan; carries CVSS 9.8 with EPSS 0.14% (3rd percentile) and no public exploit identified at time of analysis.
Arbitrary file deletion in the CODE MONKEYS PROPOSALS WordPress plugin (all versions through 1.0.1) allows any authenticated user - including a low-privileged subscriber - to delete arbitrary files on the server, because the plugin neither validates the user-supplied file path nor checks the caller's capability. Deleting critical files such as wp-config.php can force WordPress into a reinstallation state, enabling full site takeover. Reported by WPScan; publicly available exploit code exists via the WPScan advisory, though EPSS remains low at 0.15% (4th percentile) and it is not listed in CISA KEV.
Arbitrary file deletion in the WebTotem Backups WordPress plugin (through version 1.0.1) allows any authenticated low-privilege user, including a subscriber, to delete arbitrary files on the server. The plugin fails on three fronts at once: it does not validate the user-supplied file path, performs no capability check on the requester, and discards the outcome of its own CSRF nonce check. Deleting critical files such as wp-config.php can trigger a full site takeover. No public exploit has been identified at time of analysis and EPSS is low (0.11%), but the flaw was reported by WPScan.
Stack buffer overflows in sngrep through 1.8.4 allow unauthenticated remote attackers to crash or execute arbitrary code on any host running sngrep while actively capturing SIP traffic. The flaws reside in `call_get_attribute()` (src/sip_call.c) and `msg_get_attribute()` (src/sip_msg.c), where unbounded `sprintf` calls copy SIP header values - including Call-ID, X-Call-ID, Reason, From, To, Contact, and request/response strings - into a fixed 255-byte stack buffer without length enforcement. No public exploit code or CISA KEV listing has been identified at time of analysis, but the upstream fix commit is publicly accessible, making independent weaponization feasible.
Man-in-the-middle interception of protected ICS communications affects the ASE/Kalkitech ASE2000 V2 Communication Test Set versions 2.35 through 2.37 on Windows, whose IEC 60870-5-104 TLS client (Task Mode) improperly validates server certificates. A network-positioned attacker can present a certificate containing multiple simultaneous defects that the client accepts, defeating TLS authentication and exposing/altering traffic between the test set and a downstream RTU/IED. No public exploit code or CISA KEV listing is identified at time of analysis, and no EPSS score was provided; risk is elevated by the ICS/OT context rather than by evidence of active exploitation.
Remote code execution is achievable in Tutor LMS WordPress plugin (≤4.0.7) via a PHP Object Injection flaw in the withdrawal account AJAX handler that exploits a subtle interaction between `esc_sql()` percent-escaping and PHP serialized string-length declarations. Authenticated attackers with subscriber-level access — or unauthenticated attackers on sites with user registration enabled, the typical eLearning configuration — can inject an arbitrary serialized object stream and trigger the well-documented `GuzzleHttp\Cookie\FileCookieJar` POP chain to write a webshell to an attacker-specified path. No public exploit or KEV listing is confirmed at time of analysis, but a fix changeset is available and the POP chain is reliably reachable due to the plugin's bundled PayPal Composer autoloader.
Out-of-bounds read in zstd-jni versions 1.2.0 through 1.5.7-13 exposes JVM-based applications to service termination and partial memory disclosure when attacker-controlled offset or length values are passed to the ZstdDictDecompress constructor without bounds validation. The missing guard allows values that exceed the backing byte array, causing the JNI layer to read past the array boundary into native memory, which can abort the JVM process. A vendor-released patch is confirmed in v1.5.7-14; no public exploit code or CISA KEV listing has been identified at time of analysis.
Missing authorization in WWBN AVideo's Scheduler email plugin exposes private subscriber email addresses, live-stream titles, and scheduled job metadata to any unauthenticated network attacker who can supply a valid site-wide daily token. The daily token is obtainable without authentication from publicly accessible Live pages, making the attack effectively unauthenticated for instances with open Live pages. No public exploit code has been identified at time of analysis, but the attack path is mechanically straightforward and the confidentiality impact is high given the exposure of user email addresses.
Unauthenticated stored XSS with missing authorization controls in the BE REST Endpoints WordPress plugin (≤1.0.0) enables persistent script injection across all pages rendering affected widgets. The plugin exposes widget management REST endpoints with no authorization enforcement whatsoever, allowing any unauthenticated network caller to create, update, or delete widgets while injecting arbitrary JavaScript that is stored without sanitization. Every subsequent visitor - including administrators - who loads a page rendering those widgets will execute the injected payload in their browser, making session-theft and site takeover realistic downstream impacts.
Privilege escalation in the Add User Autocomplete WordPress plugin before 1.2 allows any authenticated user - including subscribers - to self-assign the administrator role on a WordPress multisite installation by submitting a crafted site-membership invitation request with an attacker-controlled role parameter. The plugin performs no capability check (no `current_user_can()`) and no nonce validation before accepting and creating the invitation, making the attack trivial for any account holder. No public exploit or CISA KEV listing is identified at time of analysis; EPSS sits at 0.13% (3rd percentile), but the low barrier (subscriber-level auth) makes any multisite deployment with this plugin a meaningful lateral escalation risk.
Out-of-bounds write in snappy-java through 1.1.10.8 allows unauthenticated remote attackers to crash the JVM by supplying valid compressed data whose decompressed size exceeds the caller-provided destination ByteBuffer capacity. The `Snappy.uncompress(ByteBuffer, ByteBuffer)` method passes the destination buffer directly to the native Snappy decompressor via JNI without first asserting that its capacity can accommodate the full decompressed output, causing native-layer writes past the buffer boundary and abrupt JVM process termination. No public exploit code or active exploitation has been identified at time of analysis, but the attack is trivially constructible by any attacker familiar with the Snappy wire format against applications that process untrusted compressed input through this specific API overload.
Unauthenticated SQL injection in the SAMO Forms WordPress plugin (≤1.0.0) allows remote attackers to query the underlying database without any credentials. Multiple plugin endpoints fail to sanitize or escape user-supplied input before incorporating it into SQL queries, enabling classic and potentially blind SQLi attacks. No public exploit code has been identified at time of analysis, and EPSS sits at 0.19% (9th percentile), suggesting no observed widespread exploitation despite the low attack complexity.
Unauthenticated SQL injection in the Album Cover Finder WordPress plugin (≤0.7.0) exposes database contents to remote attackers without any credentials. The CVSS S:C vector indicates the injection can reach data beyond the plugin's own scope - most critically, WordPress core tables containing hashed admin passwords and user data. No public exploit code has been identified and EPSS sits at 0.18% (7th percentile), suggesting low observed exploitation activity despite the severity score; no vendor-released patch has been confirmed at time of analysis.
Unauthenticated arbitrary file read in the Yogeta WP Cloud WordPress plugin (through version 1.0) allows any remote attacker to download arbitrary files from the server, including sensitive credential files such as wp-config.php, database configuration, and OS-level files like /etc/passwd. The plugin exposes a public endpoint that passes a user-supplied file path directly to a file-read function with no path validation and no authorization check, enabling full server-side file disclosure. Reported by WPScan with no patch available at time of analysis; no public exploit is identified at time of analysis, and EPSS stands at a low 0.16%, though the unauthenticated network-accessible nature makes this easily exploitable when the plugin is active.
Remote code execution in vLLM's LlavaOnevision2 processor loader allows an attacker who controls a model repository to execute arbitrary code on systems that load that model, bypassing the trust_remote_code=False safety parameter entirely. All vLLM installations prior to version 0.28.0 are affected when loading LlavaOnevision2-architecture models; the security control that operators rely on to safely evaluate third-party models is silently non-functional for this processor class. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, but the attack requires only the ability to publish a model to an accessible registry and social-engineer a user into loading it.
Heap buffer overflow in Freeciv's worklist_load() function allows memory corruption when a crafted savegame file declares a worklist length exceeding the fixed MAX_LEN_WORKLIST bound of 64 entries. Both savegame format v2 (savegame2.c) and v3 (savegame3.c) code paths are vulnerable in all releases before 3.2.6, meaning any user or server operator who loads a malicious .sav file may have heap-adjacent struct fields overwritten, potentially enabling arbitrary code execution. No public exploit has been identified at time of analysis, but the patch diff is publicly available on GitHub, lowering the bar for future weaponization.
PHP Object Injection in the wpstorecart WordPress plugin (through 5.0.7) exposes an unauthenticated deserialization endpoint bundled as an add-on, permitting attackers to inject arbitrary PHP objects without class restrictions. Exploitation to full system compromise (RCE) is contingent on the presence of a suitable POP gadget chain elsewhere in the WordPress environment - a condition that is common on complex WordPress installations running multiple plugins. No public exploit code has been identified at time of analysis, and EPSS sits at 0.16% (5th percentile), reflecting low current exploitation activity.
Stored cross-site scripting in the YayPricing WordPress plugin before 3.5.7 lets any authenticated subscriber-role user inject arbitrary JavaScript into the plugin's pricing rules via an unprotected REST API endpoint that lacks authorization checks. The payload persists server-side and executes in the browser of any WordPress administrator who subsequently opens the YayPricing settings page, enabling session hijacking or full administrative account takeover. No public exploit code has been identified at time of analysis, and the vendor-released fix is available in version 3.5.7.
MCPHub's embedded OAuth 2.0 authorization server before v1.0.32 allows an attacker who intercepts a victim's authorization code to redeem it for valid access tokens without supplying a client secret or PKCE verifier. The root cause is a logic inversion in client authentication: the pre-fix condition checked `if (clientSecret && client.clientSecret)`, meaning that omitting the secret in a token request caused the entire secret-validation block to be skipped, even for confidential clients with a registered secret. Simultaneously, PKCE enforcement was absent for public clients, leaving no proof-of-possession check between code issuance and token exchange. Vendor-released patch v1.0.32 is available; no public exploit or CISA KEV listing has been identified at time of analysis.
Time-based blind SQL injection in rtMedia for WordPress, BuddyPress and bbPress (all versions through 4.7.11) enables unauthenticated remote attackers to exfiltrate arbitrary data from the WordPress database. The flaw stems from RTMediaQuery::query() merging raw $_REQUEST input into internal query parameters while only validating top-level array keys, allowing the nested 'compare' subvalue to bypass input validation and reach an unparameterized SQL sink. Exploitation requires only that a public-facing page exist with an rtMedia shortcode present - no authentication, interaction, or special server configuration is needed. No public exploit code or CISA KEV listing was identified at time of analysis.
Unauthenticated credential token disclosure in the Zonify WordPress plugin before 1.0.5 exposes the site's stored service account login token to any remote attacker without authentication. The plugin fails to perform any WordPress capability check or authentication verification before returning the stored token, allowing retrieval by any network-reachable actor. An attacker who obtains the token can then authenticate to the site owner's linked third-party service account, effectively achieving full account takeover of the integrated service. No public exploit code has been identified at time of analysis, and EPSS stands at 0.18%, but the zero-barrier exploitation profile - unauthenticated, low complexity, network-accessible - makes the vulnerability trivial to abuse once discovered.
Sandbox escape in Flatpak before 1.18.1 allows a malicious sandboxed application to gain arbitrary read and write access to host filesystem paths, with direct escalation to code execution outside the sandbox. The root cause is missing symlink validation in Flatpak's app data directory bind-mount logic: attacker-controlled path components (such as the 'tmp' directory under ~/.var/app/APP_ID/cache/) can be replaced with symlinks pointing to arbitrary host locations, which the Linux kernel resolves when bwrap processes the bind-mount. No public exploit has been identified at time of analysis, and this is catalogued as a separate issue from the related CVE-2026-76925.
Remote code execution against WordPress sites is achievable through the Gpx2Graphics plugin (through version 0.3) by exploiting a missing CSRF token check and absent file-type validation on the plugin's upload handler. An unauthenticated attacker who tricks a logged-in WordPress administrator into visiting a crafted web page can silently deposit an arbitrary PHP webshell in a web-accessible directory, then invoke it to execute OS commands under the web server's identity. No public exploit or active exploitation has been identified at time of analysis; EPSS is 0.14% (4th percentile), indicating low current mass-exploitation probability.
Privilege escalation in the Temporary Login Without Password WordPress plugin (versions 1.5 through 1.9.8) allows a site-level administrator on a WordPress multisite network to elevate their own account or grant a newly provisioned temporary login to network super admin status. The missing authorization check in the account-provisioning and account-promotion logic completely bypasses the multisite privilege boundary, enabling a subordinate site admin to seize control of the entire WordPress network without any additional user interaction. Vendor-released patch is available in version 1.9.9; no public exploit identified at time of analysis, and EPSS is low at 0.14%.
Privilege escalation via IDOR in the Amelia 'Booking for Appointments and Events Calendar' WordPress plugin before 2.4.10 allows users holding plugin-level customer or employee management permissions to overwrite the email address and password of any linked WordPress account, achieving full account takeover of other users including administrators. The flaw stems from missing entitlement verification when editing customer or employee records: the plugin confirms the actor holds management rights within Amelia but never confirms ownership of the underlying WordPress account being modified. No public exploit or active exploitation (CISA KEV) has been identified; EPSS is 0.14% (4th percentile). A vendor-released patch exists at version 2.4.10.
Uncontrolled memory allocation in vLLM's transcription endpoint before 0.28.0 allows authenticated API clients to crash the entire server process by submitting FLAC audio files with forged, inflated sample rate headers. Because vLLM commonly operates as a shared API server across multiple tenants, a single authenticated attacker can deny service to all concurrent users. VulnCheck reported this with a CVSS 4.0 score of 7.1; no public exploit code or CISA KEV listing has been identified at time of analysis.
Stored Cross-Site Scripting in the Export & Import WPBakery Page Builder WordPress plugin (through 1.0.2) is achievable by any remote attacker who can lure a logged-in administrator into visiting a forged page. The plugin's template-import endpoint lacks CSRF protection and fails to sanitize imported template data before persisting and reflecting it, meaning a crafted template injected via a forged POST request stores malicious JavaScript that executes in the administrator's browser session. No public exploit is identified at time of analysis, and EPSS sits at 0.11%, suggesting limited opportunistic targeting.
Stack overflow denial-of-service in msgpack-java through 0.9.12 allows unauthenticated remote attackers to crash individual deserialization requests by sending crafted payloads containing deeply nested MessagePack arrays or maps. The root cause is unbounded recursion in `MessageUnpacker.unpackValue()` (lines 646-664), which processes nested structures without any depth limit, exhausting the JVM thread stack and throwing an unhandled `StackOverflowError`. No public exploit or active exploitation has been identified; impact is limited to per-request availability disruption rather than full service termination.
Missing authentication in WWBN AVideo's Live plugin allows unauthenticated remote attackers to inject arbitrary socket notification messages to any administrator whose live stream key is known. The endpoint `/plugin/Live/socketMessageLiveOwner.json.php` validates that the stream *owner* holds admin privileges but performs no caller authentication (`User::isLogged()` is never invoked) and enforces no CSRF token, meaning the caller-identity check is entirely absent. No patch was available at time of publication; VulnCheck reported the issue against commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier.
Missing authorization in WWBN AVideo's Bookmark plugin exposes chapter names from password-protected videos to unauthenticated network attackers. The `getBookmarks.json.php` PHP endpoint accepts a video ID parameter and returns bookmark/chapter metadata without verifying that the requester holds the video password or any session credential, bypassing the password-protection model entirely for this data class. Exploitation is trivial given network access and a valid video ID; no KEV listing or public POC exists at time of analysis.
Missing authorization in the PlayerSkins mediaSession.json.php endpoint of WWBN AVideo exposes protected video metadata to unauthenticated network attackers. By supplying a video ID parameter to this endpoint, any remote attacker can retrieve the title and owner email address of password-protected videos without providing credentials, defeating the access-control intent of password protection. No public exploit or KEV listing is identified at time of analysis, and the CVSS 4.0 score of 6.9 reflects a narrowly scoped confidentiality impact limited to metadata rather than video content.
Unauthenticated information disclosure in WWBN AVideo exposes internal menu configuration data via the plugin/TopMenu/menus.json.php endpoint, which lacks any authentication check. Remote unauthenticated attackers can send a plain GET request to retrieve all menu data, including names of admin-only and inactive menus that are intentionally hidden from the public navbar. No public exploit or active exploitation has been identified, but the endpoint requires zero preconditions against any network-accessible AVideo instance through the affected commit.
Unauthenticated information disclosure in WWBN AVideo through commit c3edcc274c exposes inactive admin menu items and embedded secret query parameters via the unprotected `plugin/TopMenu/menuItems.json.php` PHP endpoint. Any network-reachable attacker can POST a `menuId` parameter to retrieve admin-tool URLs that are hidden from the public navbar, including secret tokens or keys embedded directly in those URLs. While the direct impact is limited confidentiality exposure (CVSS 4.0 VC:L), the leaked secret query parameters represent a stepping stone that could enable follow-on attacks against otherwise-obscured admin functionality. No public exploit code or active exploitation has been identified at time of analysis.
Unauthenticated information disclosure in WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 exposes owner user identifiers and personalized ad creative URLs for password-protected videos via the unguarded adsInfo API endpoint. Any network-accessible attacker can call the adsInfo endpoint with an arbitrary videos_id parameter and receive the video owner's internal user ID and ad-targeting data without credentials. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Missing authorization in WWBN AVideo's video_from_program API endpoint allows unauthenticated network attackers to enumerate private playlist contents - including names, owner information, and video titles for password-protected playlists - without any credentials. All AVideo deployments through commit c3edcc274c389816d434acadac07ee78eaf330c1 are affected; the server-side API performs no ownership or session validation before returning playlist metadata. No active exploitation is listed in CISA KEV and no public exploit code has been identified, but the zero-complexity network vector makes this trivially exploitable against any reachable instance.
Missing authorization in WWBN AVideo's ImageGallery list.json.php endpoint allows unauthenticated attackers to enumerate password-protected gallery file listings and retrieve the exposed image files directly without credentials. All AVideo installations through commit c3edcc274c389816d434acadac07ee78eaf330c1 are affected when the ImageGallery plugin is active. No public exploit code or active exploitation has been identified at time of analysis, though the attack requires no technical sophistication and is trivially automatable.
Unauthenticated information disclosure in WWBN AVideo exposes private playlist data for any user when an attacker supplies a target's user identifier to the playlistsFromUser.json.php endpoint. The root flaw is improper cache keying that fails to scope responses to the requesting user's session, allowing Favorite and Watch Later playlists to leak across user contexts. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Unauthenticated information disclosure in WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 exposes password-protected video metadata to anonymous remote attackers via a missing authorization check on the videosAndroid.json.php endpoint. Any unauthenticated guest can retrieve sensitive owner data - including email addresses, last login timestamps, filenames, and hashIds - with a trivial GET request, bypassing the password-protection intent entirely. No public exploit code or CISA KEV listing has been identified at time of analysis, but the zero-authentication, zero-complexity attack surface makes opportunistic mass harvesting straightforward.
Unbounded audio extraction in vLLM 0.10.2-0.27.x enables remote denial of service against NanoNemotronVL model deployments. The root cause is an asymmetric protection gap: `_extract_audio_from_videos` in `nano_nemotron_vl.py` calls `load_audio_pyav` without the size or duration guard parameters enforced on the direct audio upload path, bypassing the `VLLM_MAX_AUDIO_DECODE_DURATION_S` and `VLLM_MAX_AUDIO_DECODE_BYTES` environment variable limits entirely. An attacker submitting a maliciously compressed video via the multimodal inference API forces the server to allocate gigabytes of memory during audio decoding, crashing the service. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-released patch is available in vLLM 0.28.0.