OS command injection in Contec FX5000, FX4000, and FX3000 series industrial data loggers and remote I/O units allows authenticated network attackers to execute arbitrary operating system commands on affected devices. Exploitation requires valid credentials to the device management interface but no additional configuration or user interaction, giving a successful attacker full command execution capability at OS level. Reported by JPCERT and coordinated via JVN; no public exploit code exists and the vulnerability is not listed in CISA KEV at time of analysis.
Remote buffer overflow in the Totolink A3002MU router's boa web server allows authenticated network attackers to overflow a fixed-size buffer in the formIpv6Setup handler by supplying an oversized `static_ipv6` argument, potentially enabling arbitrary code execution with root privileges on the device. The vulnerability affects firmware version Hh-B20211125.1046 and a proof-of-concept exploit has been publicly disclosed to GitHub. No vendor-released patch has been identified in available references at time of analysis.
Incorrect privilege assignment in the AWS Temporary Elevated Access Management (TEAM) solution for IAM Identity Center (all versions before 1.5.1) permits any authenticated application user to read, approve, modify, or revoke arbitrary access requests - effectively enabling self-approval of elevated permissions to AWS accounts managed by the TEAM deployment. The root cause is an improperly scoped Cognito Identity Pool that fails to enforce authorization boundaries between regular requesters and privileged approvers or administrators, compounded by client-side derivation of account names and roles. No public exploit has been identified at time of analysis, and SSVC rates exploitation status as none.
Path traversal in Contec SGA1000 allows a network attacker with FTP credentials to read and overwrite arbitrary files on the device filesystem. Reported by JPCERT and documented in JVN advisory JVNVU99009004, the flaw affects all known SGA1000 versions and exposes sensitive server-side files - including configuration, credentials, and system data - to unauthorized disclosure and modification via crafted FTP path arguments. No public exploit code or confirmed active exploitation has been identified at time of analysis.
Path traversal via FTP in Contec FX5000, FX4000, and FX3000 series industrial programmable controllers allows an authenticated FTP user to read or modify arbitrary files on the device filesystem. The affected products span a broad range of industrial OT endpoints including Ethernet, serial, and wireless variants. With no public exploit identified and a CVSS 4.0 score of 8.6, the primary risk is to environments where FTP access is exposed to untrusted users or network segments without adequate segmentation.
PraisonAI's WhatsApp and Linear bot webhook handlers fail open when their shared-secret environment variables are unset: HMAC signature verification is skipped entirely and the raw JSON body is parsed and dispatched as a trusted platform event. Any remote client that can reach the bot's webhook route (default /webhook) can forge WhatsApp messages or Linear AgentSession/Comment events without authentication, impersonating platform users and injecting attacker-controlled content into agent prompts and actions. The flaw affects releases before 4.6.59, is trivially automatable with a single unsigned HTTP POST, and no public exploit code or active exploitation has been identified at time of analysis.
SQL injection in the Alior Bank 'raty' PrestaShop module's toggleCategoryPromotionAction method allows an authenticated backoffice user with product or category edit privileges to inject arbitrary SQL via the unsanitized POST parameter 'status', which is passed directly into SQL UPDATE queries. Affected versions span two release branches: raty 9.0.5-9.0.7 and 8.1.9-8.1.11, with fixes available in 9.0.8 and 8.1.12 respectively. No public exploit code has been identified at time of analysis, and SSVC rates exploitation as none with the attack not automatable.
SQL injection in the Alior Bank 'raty' PrestaShop module (versions 8.0.0-8.1.10 and 9.0.0-9.0.6) permits authenticated backoffice users to inject arbitrary SQL through three unsanitized POST parameters embedded directly in UPDATE queries across product and category hook methods. Successful exploitation enables unauthorized read and modification of the underlying store database, including customer records and sensitive configuration data. Fixed in versions 8.1.11 and 9.0.7 per CERT-PL advisory; no public exploit identified at time of analysis.
Path traversal leading to remote code execution in LaraDashboard 0.9.2-1.2.2 allows an authenticated user holding only the delegated settings.edit permission to delete arbitrary host-filesystem files or restore a ZIP archive from any on-disk location, writing arbitrary content into application directories and achieving code execution. CoreUpgradeController and BackupService::deleteBackup() concatenate user-supplied filename parameters directly onto the storage/app/core-backups base path without normalization, basename() sanitization, or boundary verification - and the associated form requests validate only string length, not path content. No patched version was available at time of publication; no public exploit has been identified at time of analysis.
Authenticated SQL injection in JoomShaper's SP Page Builder Joomla extension (versions 5.2.1-6.9.0) lets backend-privileged users perform time-based blind SQL injection against the full Joomla database, including credential hash and active session tables. The `plgContentSppagebuilder::onContentAfterSave()` content plugin method directly concatenates a POST-supplied array element into a raw SQL `WHERE` clause without quoting or integer casting, and Joomla's own ARRAY input filter provides no sanitization of element values. No public exploit code has been identified at time of analysis, and SSVC rates exploitation status as none.
Arbitrary code execution is possible on Contec CAN 2.0B series communication converter units (CAN-2-WF wireless LAN and CAN-2-USB USB variants) via unrestricted file upload. A remote attacker holding high-privilege credentials can upload a specially crafted file to the device's web interface, resulting in code execution directly on the embedded unit. Reported by JPCERT/CC with a vendor advisory; no public exploit or CISA KEV listing identified at time of analysis.
Server-Side Request Forgery in PraisonAI's multi-agent web tooling allows an authenticated user to exfiltrate internal service responses by supplying a hostname whose DNS A record resolves to a loopback, RFC-1918, link-local, or cloud-metadata address. The SSRF guard in `SpiderTools._validate_url` → `_host_is_blocked` inspects only literal IP encodings and silently falls through for any DNS hostname, meaning a static internal A record is sufficient - no DNS rebinding race is required. Affected are praisonaiagents versions up to 1.6.48 (per GHSA) across the `scrape_page`, `crawl`, `extract_links`, `extract_text`, and `@url` mention-fetch surfaces; the fix ships in praisonaiagents 1.6.58/1.6.59 and PraisonAI 4.6.58. No public exploit identified at time of analysis, though SSVC notes a proof-of-concept exists.
Ekia File Manager 1.2.7 for Android ships an exported ContentProvider (com.ekia.filecontrolmanager.OpenFileProvider) that declares no android:permission, readPermission, or writePermission, so any other app on the same device can invoke it. The provider maps the caller-supplied URI path straight to a filesystem path and passes it to new File(...), letting a malicious local app make the File Manager process read, create, overwrite, or delete every file that process can reach. The issue is not in CISA KEV, EPSS is only 0.11% (2nd percentile), and no public exploit tooling was identified in the supplied data, so real-world priority depends almost entirely on whether untrusted apps can be installed on the target device.
Incorrect authorization in PingFederate's administrative expression evaluation endpoint allows authenticated low-privilege administrative users to invoke expression testing functionality reserved for higher-privileged roles. The CVSS 4.0 vector (8.5, PR:L) confirms exploitation requires an existing administrative account, but the substantial downstream impact (SC:H/SI:H/SA:H) reflects that PingFederate acts as an identity broker - compromising its expression evaluation capability cascades to every system relying on it for authentication and authorization decisions. No public exploit has been identified at time of analysis, and there is no CISA KEV listing.
Kernel memory corruption in Apple macOS can be triggered when a user mounts a maliciously crafted disk image, causing unexpected system termination or corruption of kernel memory. Apple addressed the CWE-120 buffer overflow with improved bounds checking in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27. No public exploit code and no active exploitation have been identified, and the EPSS score is low (0.21%, 12th percentile), so practical exposure is dominated by local file-delivery scenarios rather than remote mass exploitation.
Let me synthesize the analysis. Key facts: - CVE-2026-82049: CPython tarfile module's data and tar extraction filters vulnerable to crafted archives containing a hard link to a symbolic link. Affects CPython 3.13 and earlier (EUVD says CPython 0 <3.14.0). - CVSS 4.0: 8.4, AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - CWE-59: Link Following - Patch available from vendor (commits in GitHub) - SSVC: Exploitation none, Automatable no, Technical Impact total - Tags: Information Disclosure - No KEV, no POC noted. The source code evidence relates to os.link follow_symlinks fix (gh-81793 / issue 85527). Interesting — the diff relates to os.link following symlinks, which is related infrastructure for the tarfile fix. Hmm, the diff is about os.link's follow_symlinks default. And test_inspect unsupported signatures {'chmod', 'link', 'utime'}. So the fix likely involved making tarfile hard link extraction use follow_symlinks=False... Actually the root cause: tarfile creating hard links to symlinks, which resolves outside destination. Wait — actually the CVE description says hard link to a symbolic link can modify perms/mtime of a file outside the destination directory, or expose contents of that file within extracted tree. The fix in os.link enables follow_symlinks=False so that link extraction doesn't follow symlink targets. Actually the diff makes os.link follow symlinks by default on Linux (a behavior change, aligning Linux with macOS). Hmm, that seems the opposite. Let's think: Prior to the change, on Linux, os.link() did NOT follow symlinks (like linkat without AT_SYMLINK_FOLLOW), creating a hard link to the symlink itself. The change makes it follow symlinks by default. Hmm. So the fix makes the link point to the target file... That could actually be the vulnerability: a hard link to a symlink → link created to symlink itself → chmod/utime on the hard link modifies the target of the symlink? Wait. Actually: if you hard link the symlink itself, then chmod/ex
A local unprivileged user can hijack the Control Interface of another workload in Eclipse Ankaios 0.1.0 through 1.0.2 by pre-creating the agent's predictable run-folder path hierarchy and Control Interface FIFOs under the shared default location `$TMPDIR/ankaios`. Because the agent reuses an existing directory or FIFO based only on an existence/file-type check — without verifying ownership or permissions — it treats the attacker-owned pipes as the legitimate Control Interface and executes requests under that workload's configured `controlInterfaceAccess` permissions, enabling workload impersonation and unauthorized reading or modification of the cluster's desired state. The flaw is CWE-379 (insecure temporary file/permissions), carries a CVSS 4.0 base score of 8.4 (AV:L/PR:L/AT:P, high confidentiality and integrity impact), and has no public exploit code or CISA KEV listing at time of analysis; EPSS is 0.09%, consistent with a local, non-automatable attack. The vendor released v1.0.3 with an ownership/permission validation check (PR #799).
MISP's interactive CLI shell (≤2.5.45) enforces access control independently from the web application, creating at least six distinct authorization gaps that allow authenticated local users to retrieve sensitive credentials and bypass record-level ACLs. Feed HTTP authorization headers (Feed.headers), server synchronization authkeys, sharing-group memberships, and feed visibility restrictions are all enforced correctly in the web tier but not in the CLI, while the `use` command allows a user to establish an unauthorized record context without proving read rights. No public exploit has been identified and the vulnerability is not listed in CISA KEV, but the combination of plaintext credential disclosure and authorization bypass makes this a high-priority patch for any MISP deployment where non-site-admin personnel have shell access to the host.
DLL hijacking in the Rakuten Kobo Desktop Application installer for Windows allows arbitrary code execution at the privilege level of the installing user. The installer performs an insecure DLL search, loading libraries from its own working directory before trusted system paths; if an attacker pre-positions a crafted DLL in that directory, execution is hijacked when the victim runs the installer. Reported by JPCERT and covered by a vendor security advisory; no public exploit code or CISA KEV listing identified at time of analysis.
Unauthenticated retrieval of Stripe Checkout Session objects in the MarcosCamara01 Ecommerce Template (before commit 91e273c) exposes buyer personally identifiable information to anyone holding a session id. The GET handler at /api/stripe/checkout_sessions calls stripe.checkout.sessions.retrieve() and returns the full object — buyer name, email, phone, billing address, amount paid and internal userId — without ever calling auth.api.getSession() or verifying that the session belongs to the caller, even though sibling endpoints such as POST /api/stripe/payment already enforced authentication. Exploitation is not confirmed in the wild and no public exploit code was identified, but the session_id is written into the buyer's own success_url (/result?session_id={CHECKOUT_SESSION_ID}), so it leaks through Referer headers, analytics, access logs and shared-machine browser history, making the flaw practically reachable rather than purely theoretical.
A local sandbox-escape flaw in Apple macOS (CWE-284, improper access control via faulty state management) allows a malicious application to break out of its App Sandbox and operate outside the restricted environment it was granted. Affected versions are macOS Sequoia before 15.8, macOS Tahoe before 26.7, and macOS Golden Gate before 27, with Apple shipping fixes in all three (support.apple.com advisories 149035, 149042, 149043). CVSS 3.1 rates it 8.2 (AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N), but EPSS is only 0.19% (9th percentile), there is no CISA KEV listing, and no public exploit code has been identified at time of analysis — so this is a high-severity, low-current-activity issue whose priority is driven by the App Sandbox being a core macOS security boundary rather than by observed exploitation.
Authorization bypass in Zalando Skipper's `opaAuthorizeRequestWithBody` filter allows unauthenticated remote attackers to deliver forbidden request bodies to upstream services by inflating the declared `Content-Length` beyond the configured OPA body-size limit. When a body exceeds `-open-policy-agent-max-request-body-size` (default 1 MB), `ExtractHttpBodyOptionally` skips body extraction and returns nil bytes to OPA, causing deny-on-presence Rego policies to evaluate an empty `parsed_body` and fail open, while the complete forbidden payload is still forwarded upstream unchanged. This is an incomplete remediation of CVE-2026-50197 - the prior fix addressed only chunked/HTTP-2 requests with negative `Content-Length`; the oversized `Content-Length` path was never considered. No public exploit has been identified at time of analysis, though the GHSA advisory includes a working reproduction harness.
IBM Cloud Pak for Data System (Yosemite 1.0) version 3.0.5.2 exposes sensitive information to remote attackers because it continues to negotiate weak or deprecated cryptographic protocols, rated CVSS 8.2 (AV:N/AC:L/PR:N/UI:N, C:H/I:L/A:N) with a high confidentiality impact. Any deployment running the affected 3.0.5.2 build on a reachable network segment is in scope, and per CISA's SSVC evaluation the flaw is automatable though no active exploitation has been observed. There is no public exploit code identified at time of analysis, and the vendor has published a fix via IBM support documentation.
A regular-expression denial-of-service (ReDoS) flaw in DotVVM's routing engine (DotvvmRoute.IsMatch / DotvvmRouteParser.RouteRegex) lets a remote requester send a long, near-matching URL path and force excessive regex backtracking, tying up a worker thread for roughly one second per request. Only applications that declare routes with multiple unconstrained parameters inside a single path segment (e.g. "edit/{a}-{b}-{c}/done") are exposed; fully constrained or slash-separated routes are unaffected. The issue is fixed in DotVVM 4.2.11, 4.3.15 and 5.0.0-preview09-final, which apply a one-second regex timeout and then permanently switch the route to the .NET non-backtracking engine (or return HTTP 503 on runtimes older than .NET 8). There is no CISA KEV entry and no public exploit code identified at time of analysis, and CISA's SSVC assessment rates Exploitation as none and Automatable as no.
Privilege escalation in Microsoft Windows 11 version 26H1 stems from a double-free (CWE-415) in Secure Kernel Mode that lets a locally authenticated attacker holding high privileges corrupt kernel memory and reach an execution context above the normal kernel boundary. Successful exploitation yields complete loss of confidentiality, integrity, and availability for the affected component and the assets it protects (CVSS 8.2, S:C), effectively bypassing VBS-backed protections. No public exploit code or active exploitation is currently identified, and SSVC rates exploitation as 'none' and automatable as 'no'; Microsoft has released a patch in the 10.0.28000.2956 servicing build.
PraisonAI deployments that opt out of authentication by setting PRAISONAI_CALL_AUTH=disabled expose the /api/v1/
Credential disclosure in Contec's Remote I/O Coupler Unit (Server Type) CPSN-MCB271 enables an attacker who obtains a device backup file to recover sensitive credentials stored within it in an insufficiently protected form. The root cause (CWE-522) means credentials are not rendered unrecoverable within backup archives, so any party who accesses a backup file can extract usable authentication material. Reported by JPCERT/CC with a CVSS 4.0 score of 8.2, no public exploit code has been identified and the vulnerability is not listed in CISA KEV.
IMAP command injection in the PraisonAI praisonaiagents email tools before 1.6.59 lets LLM-controlled arguments (from_addr, subject, query, message_id) break out of quoted IMAP SEARCH criteria and inject arbitrary IMAP commands, giving access to, modification of, or deletion of mailbox data. Exploitation requires an agent deployed with email credentials configured (EMAIL_ADDRESS and EMAIL_PASSWORD) and with the search_emails, reply_email, or archive_email tools exposed, plus an attacker able to steer the tool-call arguments — typically via crafted or indirect prompt injection reaching the agent. The advisory includes a static proof-of-concept data-flow trace, and CISA's SSVC assessment records exploitation status as 'poc'; the flaw is not listed in CISA KEV, and no EPSS score was supplied.
Heap corruption triggered by a race condition in the Zscaler Client Connector (ZCC) ZPA tunnel handler allows remote, unauthenticated attackers to crash the client process and, under conditions requiring successful heap grooming, potentially execute code in the context of that process. Only ZCC builds below 4.6.0.486, 4.7.0.350, 4.8.0.267 and 4.9.0.412 are affected, and the practical outcome is more reliably a denial-of-service (client crash) than dependable code execution because the underlying race is non-deterministic and hard to win. No public exploit has been identified at time of analysis and the risk is low-immediacy (EPSS ~0.23%, 14th percentile; SSVC Exploitation: none, Automatable: no), despite the vendor's CVSS 8.1 rating.
Parsing a maliciously crafted file on an unpatched Mac can crash the affected application or leak contents of process memory, caused by an out-of-bounds read (CWE-125) in Apple's file-handling code. Apple has fixed the flaw in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27, with advisories published at support.apple.com. There is no public exploit code identified at time of analysis and no CISA KEV listing, and the EPSS probability is low at 0.19% (9th percentile), so this rates as a patch-on-schedule issue rather than an emergency.
Race condition in Apple's kernel allows a local user on iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27 to cause unexpected system termination or read kernel memory. Apple fixed the flaw with additional validation, publishing advisories 149034-149038; there is no public exploit code and no confirmed active exploitation (EPSS 0.16%, SSVC exploitation: none).
Improper input validation in Zscaler Client Connector for Android and ChromeOS (builds prior to 4.2.0.152) lets an attacker with elevated local privileges on the endpoint feed malformed input to the connector and bypass Zscaler's traffic inspection and access controls, with a CVSS 8.1 (AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L) rating that reflects total loss of the security control's integrity. The flaw is not remotely exploitable and requires high privileges (root or equivalent device-admin context) on the affected Android or ChromeOS device, and there is no public exploit identified at time of analysis. EPSS is 0.12% (2nd percentile) and CISA SSVC records exploitation 'none', automatable 'no' with total technical impact — a low-likelihood, patch-promptly issue rather than an emergency.
Race condition in Apple's kernel state management lets a malicious sandboxed app escape its sandbox and execute arbitrary code with kernel privileges on iOS, iPadOS, macOS, tvOS, visionOS and watchOS. Exploitation requires a timing window to be won (CVSS AC:H) but no user interaction beyond launching the app, and success yields full control of the affected device. Apple shipped fixes in iOS/iPadOS 26.7 and 27, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27; no public exploit code or CISA KEV listing was present in the provided data, and no EPSS
A use-after-free flaw in Apple's kernel affects iOS and iPadOS before 26.7, macOS Sequoia before 15.8, and macOS Golden Gate before 27, allowing a locally running app to corrupt kernel memory or cause unexpected system termination. The issue is a local, low-privilege memory-safety defect (CWE-416) rated CVSS 7.8, and Apple has shipped fixes in iOS 26.7, iPadOS 26.7, macOS Golden Gate 27 and macOS Sequoia 15.8. There is no indication of active exploitation (no CISA KEV listing) and no public exploit code identified, with EPSS at 0.19% (9th percentile) suggesting low near-term exploitation likelihood at scale.
A use-after-free in Apple macOS kernel memory management allows a locally installed and executed app to escalate to kernel privileges and run arbitrary code with full system control. Affected releases are macOS before Sequoia 15.8, before Tahoe 26.7, and before Golden Gate 27; Apple shipped fixes in all three branches. The flaw is a local privilege escalation (CVSS 7.8, AV:L/PR:L) rather than a remote code execution bug, and there is no public exploit code or CISA KEV listing identified at time of analysis, so real-world exploitation currently depends on an attacker first getting a malicious app onto the target Mac.
Out-of-bounds write in Apple's file-parsing code affects iOS/iPadOS 27 and earlier, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27, allowing a maliciously crafted file to corrupt memory when processed. Apple addressed the flaw with improved bounds checking across all listed platforms, and CVSS 3.1 scores it 7.8 (AV:L/AC:L/PR:L/UI:N) with high confidentiality, integrity, and availability impact, even though the advisory text itself describes only unexpected app termination. No publicly available exploit code and no CISA KEV listing were identified at time of analysis, and EPSS is 0.18% (7th percentile), indicating low near-term exploitation likelihood.
Kernel-level out-of-bounds write (CWE-787) in the macOS SMB client stack allows a malicious SMB server to corrupt kernel memory when a target Mac connects to it, potentially yielding kernel code execution or a system crash. All macOS branches are affected: Sequoia before 15.8, Tahoe before 26.7, and macOS Golden Gate versions before 27. Apple has released patches for all three branches; there is no public exploit code identified, no CISA KEV listing, and EPSS is low (0.17%, 6th percentile), so exploitation is currently assessed as targeted/manual rather than widespread.
Local privilege escalation in Apple macOS lets a low-privileged local process obtain root via improper path validation (CWE-22), affecting macOS versions prior to Sequoia 15.8, Tahoe 26.7 and Golden Gate 27. Apple addressed the flaw with improved path validation, and the CVSS 7.8 vector (AV:L/AC:L/PR:L/UI:N, total CIA impact) reflects a reliable but non-automatable local escalation requiring an existing code-execution foothold. There is no CISA KEV listing and no public exploit identified at time of analysis; exploitation status is 'none' per CISA SSVC and the issue is not considered automatable.
An out-of-bounds write in Apple macOS lets a malicious or compromised app running as a normal, unprivileged user corrupt memory and escalate to root privileges on the affected system. The flaw is fixed in macOS Golden Gate 27, macOS Tahoe 26.7, and macOS Sequoia 15.8; all earlier releases of those branches remain exposed (CWE-787, CVSS 7.8, AV:L/PR:L/UI:N). No public exploit code has been identified at time of analysis, and CISA's SSVC assessment rates exploitation as 'none' and non-automatable, so practical risk is currently confined to local post-compromise privilege escalation rather than mass remote attacks.
A path traversal flaw (CWE-22) in Apple macOS is addressed by improved path validation and allows an attacker who controls a network directory server to execute arbitrary code with root privileges on a connecting client. Affected are macOS Sequoia before 15.8, macOS Tahoe before 26.7, and macOS Golden Gate before 27. Apple has shipped fixes in all three release trains. There is no public exploit code and no CISA KEV listing at time of analysis, and the CVSS 3.1 vector (7.8, AV:L/PR:L) reflects a local vector requiring the attacker to already hold a foothold as a directory service rather than a remote unauthenticated path.
Local arbitrary code execution affects IBM App Connect Enterprise releases 13.0.1.0 through 13.0.8.0 and 12.0.1.0 through 12.0.12.27, caused by improper neutralization of special elements used in an OS command (CWE-78). Successful exploitation lets a local attacker run commands in the context of the App Connect Enterprise runtime, yielding high confidentiality, integrity, and availability impact (CVSS 3.1 base 7.8, AV:L/AC:L/PR:N/UI:R). IBM has published a fix; CISA SSVC records Exploitation: none and Automatable: no, and no public exploit code or KEV listing was identified at time of analysis.
A local privilege-escalation flaw in Apple's operating system family lets a malicious app already running on the device obtain root privileges by exploiting a missing authorization check. Apple addressed the issue with 'additional restrictions' in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, and visionOS 27, and the CVSS 3.1 score is 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation is not confirmed: the issue is not in CISA KEV, no public exploit code is identified, and CISA's SSVC assessment lists exploitation as 'none' and automatable as 'no', though technical impact is rated 'total' once root is achieved.
Apple macOS contains a local privilege-escalation flaw in which an application running on the system can escalate to root because entitlement checks were insufficient. Apple addressed the issue with additional entitlement validation, fixing it in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27; earlier releases (pre-15.8, pre-26.7) remain vulnerable. The attack is local (CVSS AV:L) and requires the attacker to already have code running as an ordinary user, so exploitation is typically a second-stage payload delivered by a malicious app or initial social-engineering lope rather than a remote network attack. No public exploit code and no CISA KEV entry were identified at time of analysis, and no EPSS score was supplied by the contributing sources.
Local privilege escalation in Apple macOS lets an application running with standard user privileges obtain root, giving an attacker full control of the host once code executes on the machine. The flaw is an improper access-control check (CWE-284) that Apple addressed with improved validation logic, fixed in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27. No public exploit code has been identified and the vulnerability is not in CISA KEV; CISA's SSVC assessment rates exploitation as 'none' and automatable as 'no', so risk is concentrated in environments where untrusted local code can be executed.
Insecure deserialization in IBM App Connect Enterprise (12.0.1.0 through 12.0.12.27 and 13.0.1.0 through 13.0.8.0) allows a local attacker to execute arbitrary code with the privileges of the affected runtime, provided the attacker can get a user or process to handle crafted serialized content. CVSS 3.1 scores this 7.8 (AV:L/AC:L/PR:N/UI:R, C/I/A all High), and CWE-502 identifies the root cause as untrusted deserialization. No public exploit code has been identified and CISA's SSVC assessment records exploitation status 'none' with automatable 'no'; IBM has published a vendor fix referenced in its support advisory.
A race condition in Apple macOS (fixed in macOS Tahoe 26.6) allows a locally executed malicious application to escalate privileges and gain root on the host. The flaw is reachable by a low-privileged local process without user interaction beyond running the app, and it has a 7.8 CVSS base score reflecting total loss of confidentiality, integrity and availability for the vulnerable component. There is no CISA KEV listing, no vendor confirmation of in-the-wild exploitation, and no public exploit code identified at time of analysis; CISA's SSVC assessment rates exploitation as 'none' and automatable as 'no', indicating a targeted rather than wormable threat.
Local privilege escalation in Apple macOS Sequoia (before 15.7.8) and macOS Tahoe (before 26.6) lets a malicious application already running as a normal user obtain root privileges. Apple addressed the flaw by adding restriction checks in its permission-handling code, disclosing it only as 'a permissions issue'; fixed versions are macOS Sequoia 15.7.8 and macOS Tahoe 26.6. There is no CISA KEV listing and no public exploit code identified at time of analysis, and CISA's SSVC assessment rates exploitation as 'none' and automatable as 'no', so this is a patching-during-normal-maintenance item rather than an emergency remote threat.
Apple macOS contains a local privilege-escalation flaw in which an application running under an ordinary user account can abuse insufficient access-control checks to obtain root privileges. Devices are affected if they run macOS versions below Sequoia 15.8, Tahoe 26.7 or Golden Gate 27, and Apple has shipped fixes for all three release lines. CVSS 3.1 scores this 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and CISA's SSVC rates technical impact as total, but there is no CISA KEV listing, no reported exploitation and no public exploit code identified at time of analysis, so this is best treated as a high-value post-compromise escalation primitive rather than an imminent remote threat.
Local privilege escalation in Apple macOS allows a malicious or compromised application already running on the system to obtain root privileges. The flaw is a permissions-handling defect (CWE-280) that Apple addressed by adding additional restrictions, with fixes shipping in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27. Exploitation requires local code execution as a normal user (AV:L, PR:L) and, per CISA SSVC, is not automatable with no known exploitation activity; no public exploit code or EPSS signal was provided at time of analysis.
Local applications on macOS versions prior to 27 can escalate to root privileges because the operating system fails to properly validate entitlements before granting privileged operations (CWE-280). An attacker who can get a user to launch — or who can otherwise run — a crafted app on the target Mac gains full root-level control of the system, with high impact to confidentiality, integrity, and availability. The flaw is fixed in macOS Golden Gate 27 per Apple's advisory; no CISA KEV listing, no public exploit code, and no EPSS score were provided at time of analysis, so this is currently a patching-hygiene issue rather than a confirmed active threat.