Heap-based buffer overflow in GIMP's ICO file loader allows arbitrary code execution or application crash when a user opens a specially crafted ICO file containing an embedded PNG image. The root cause is an integer overflow during buffer size calculation (CWE-787, with CWE-190 as the precipitating cause), causing an undersized heap allocation that overflows when decoded pixel data is written. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.
Privilege escalation to root in Parallels Desktop for Mac via argument injection into a tar command executed by the root-owned dispatcher service. Any local user - no admin rights required - can connect to the world-writable `/var/run/prl_disp_service.socket`, authenticate via `PrlSrv_LoginLocal` without signature verification, and then pass a crafted appliance path through `PrlSrv_InstallAppliance` that embeds a quote character to escape the Qt `QProcess::splitCommand` argument boundary, injecting `--use-compress-program=<binary>` into macOS tar and running arbitrary code as root. No public exploit has been identified at time of analysis, but the exploitation path requires no special conditions beyond a local user account.
Cleartext credential exposure in Suprema BioStar 2 (before 2.9.12) and BioStar X (before 1.0.2) allows any authenticated API user to retrieve Active Directory service account credentials in plaintext via a single GET request to the /api/v2/setting/adserversetting endpoint. The CVSS scope change (S:C) reflects that the real impact extends far beyond BioStar 2 itself - the exposed AD credentials can grant an attacker access to the entire Windows domain, enabling lateral movement and privilege escalation. A public proof-of-concept exploit is available on GitHub (mda1r/biostar2-ad-credential-exposure), significantly lowering the bar for exploitation.
MCP Atlassian, the Model Context Protocol server that bridges AI clients to Confluence and Jira, resolves client-supplied attachment paths on the server itself, so a remote client with write-tool access can read arbitrary files from the server host in versions before 0.22.0. The confluence_upload_attachment, confluence_upload_attachments and jira_update_issue tools all funnel an unconfined file_path into os.path.abspath() plus open(), and the resulting bytes are uploaded to Atlassian as an attachment — giving the attacker a convenient exfiltration channel for server files, environment-held Atlassian credentials, or other tenants' data. The vendor advisory includes a working proof-of-concept (publicly available exploit code exists), but no active exploitation is confirmed (no CISA KEV listing); the CVSS 3.1 score is 7.7 with EPSS not provided in the input. Only local single-user stdio deployments are outside the trust boundary.
XML external entity (XXE) injection in the PxXMLInput operator of IBM DataStage on Cloud Pak for Data 5.4.0.0 lets an authenticated remote attacker submit crafted XML so that the job's XML parser resolves external entities, exposing host files and internal network resources. The flaw is confidentiality-only (CVSS 7.7, C:H/I:N/A:N) and requires valid credentials plus a job that feeds attacker-influenced XML into the PxXMLInput stage. IBM has published a vendor fix; there is no CISA KEV listing and no public exploit identified at time of analysis.
Unexpected system termination is possible on unpatched Apple macOS hosts because of an out-of-bounds read that a remote attacker can trigger without authentication or user interaction. Apple addressed the flaw with improved bounds checking in macOS Tahoe 26.7, macOS Sequoia 15.8, and macOS Golden Gate 27, but the affected system component is not named in the public advisories. No public exploit code has been identified and CISA's SSVC assessment records exploitation as 'none' while flagging the issue as automatable with partial technical impact; the CVSS 7.5 score is driven entirely by availability loss, with no confidentiality or integrity impact.
Resource exhaustion in Apple macOS allows a remote, unauthenticated attacker to deny service to legitimate users by feeding input that the operating system fails to bound correctly. Apple fixed the flaw with improved input validation in macOS Tahoe 26.7, macOS Sequoia 15.8, and macOS Golden Gate 27. It is rated 7.5 with an availability-only impact (CWE-400), and while no public exploit code or observed exploitation has been identified, the attack is network-reachable and fully automatable per CISA's SSVC assessment.
Symlink path traversal in File Browser ≤2.63.23 lets authenticated low-privilege users bypass configured deny rules to read and overwrite restricted files. The access-control engine evaluates rules against the lexically requested path but does not re-apply those rules after resolving symbolic links to their targets, creating a security boundary gap that is exploitable wherever an attacker can access an in-scope symlink pointing outside their permitted tree. A proof-of-concept exists per SSVC analysis; no public exploit code has been confirmed in CISA KEV at time of analysis.
Apple iOS 18.7.10 and iPadOS 18.7.10 ship a fix for an input-validation flaw (CWE-20) that lets a remote attacker crash or otherwise deny service on unpatched devices, with Apple rating the impact as a full availability loss (CVSS 7.5, AV:N/AC:L/PR:N/UI:N/A:H). Every iPhone or iPad still running a version below 18.7.10 is potentially affected. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, so this is currently a patch-promptly issue rather than an emergency.
Arbitrary file write in IBM Db2 11.5.x and 12.1.x allows a remote unauthenticated attacker to write files to attacker-controlled paths on the database server due to improper validation of file path inputs. The vulnerability carries CWE-22 (Path Traversal) and was disclosed by IBM with a patch available at their support portal. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis, though the PR:N/AC:L CVSS vector signals low-friction remote reachability.
Improper access control in IBM Sterling File Gateway (6.2.0.0 through 6.2.0.6_1, 6.2.1.0-6.2.1.2, and 6.2.2.0-6.2.2.1) lets a remote, unauthenticated attacker reach file-transfer data they should not be able to see. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H) describes a trivially reachable, no-credentials-required read of sensitive information with no integrity or availability impact. No public exploit code or CISA KEV entry was present in the supplied intelligence at the time of analysis, and IBM has published a vendor fix.
Unauthenticated path traversal in PraisonAI's Jobs API (versions prior to 4.6.59) allows any remote caller to read arbitrary files on the server. The `agent_file` field in `POST /api/v1/runs` accepts absolute or directory-traversing filesystem paths with no validation, allowlist, or authentication gate; the executor passes the value directly to `yaml.safe_load(open(agent_file))`. An attacker with network access to port 8005 can exfiltrate credentials, SSH private keys, environment variables, and any file readable by the service account. A working proof-of-concept is publicly available in the GitHub security advisory GHSA-p4pj-vh7h-6cqh.
Cisco Secure Email Gateway and Cisco Secure Email and Web Manager ship a hardening release that fixes multiple internally discovered input-validation defects grouped under CVE-2026-76442 (CWE-1284, improper validation of specified quantity in input). Successful exploitation by an unauthenticated remote attacker degrades availability (CVSS 3.1 7.5, AV:N/AC:L/PR:N/UI:N, C:N/I:N/A:H) on the affected appliances, potentially interrupting mail flow and administrative access. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV; CISA's SSVC assessment rates exploitation as none and automatable as no, so weaponization is not currently expected.
Stored cross-site scripting in the Regular Labs Modals extension for Joomla (all versions before 17.0.0) allows high-privileged content authors to inject executable browser URL schemes - such as javascript: - into modal destination fields, which the extension passes unvalidated into both the generated anchor href and the iframe source path. When any site visitor subsequently renders the affected page, the stored payload executes as JavaScript in their browser without requiring the Pro JavaScript Events feature to be enabled. No public exploit has been identified at time of analysis; the vendor-released fix is version 17.0.0.
Stored cross-site scripting in the Modals Pro extension for Joomla (regularlabs.com) versions prior to 17.0.0 allows an authenticated Author-level user to inject executable JavaScript via documented event handler options (on-open, on-closed) embedded in article content. The extension intentionally supports JavaScript lifecycle events for modal dialogs but fails to enforce access control distinguishing which roles may supply executable code versus static configuration parameters - enabling a lower-privileged author to weaponize a trusted-user feature. When a higher-privileged user views the crafted article, the modal fires the injected script in their browser context. No public exploit or CISA KEV listing exists at time of analysis.
Stored cross-site scripting in regularlabs.com's Tabs & Accordions (Free and Pro) extension for Joomla, versions prior to 3.1.0, allows a privileged authenticated attacker to inject and permanently persist arbitrary JavaScript into page output by supplying a crafted value in the rtla-alias configuration field. The extension's link-rewriting renderer embeds the alias directly into an HTML onclick attribute as a JavaScript string argument, applying neither JavaScript-string escaping nor HTML-attribute encoding, so a crafted alias breaks both quoting contexts and executes in every subsequent visitor's browser. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
IBM Verify Identity Access (formerly IBM Security Verify Access) fails to adequately validate or bound the resources consumed by incoming requests, allowing a remote, unauthenticated attacker to drive resource exhaustion and deny service to legitimate users. Affected builds include Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001, in both software and container form factors. IBM has released a fix, EPSS is low at 0.21% (11th percentile), and there is no public exploit identified at time of analysis.
Missing entitlement checks in Apple's iOS and iPadOS, tvOS, watchOS, and visionOS (all versions before the 27 release train) allow a locally installed app to read device attributes it is not authorized to access and combine them into a persistent fingerprint of the user. Only devices running an affected platform with an attacker-supplied app already installed are exposed; the independent assessment re-scores the issue as local-access with confidentiality-only impact (AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), which is materially lower than the supplied CVSS 3.1 vector (AV:N, 7.5) that treats the flaw as remotely reachable. There is no indication of active exploitation, KEV status is not set, and no public exploit code has been identified at time of analysis; EPSS is 0.19% (9th percentile), consistent with a low near-term exploit probability. Apple has released fixes in iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27.
Apple iOS and iPadOS before version 27 leak cross-application information through the handling of user preferences, allowing a locally installed app to enumerate which other apps are present on the device. Apple addressed the privacy flaw in iOS 27 and iPadOS 27; EPSS is only 0.17% (7th percentile), there is no CISA KEV listing, and no public exploit code identified at time of analysis. The practical impact is user profiling and device fingerprinting rather than code execution or data theft.
A logic flaw in Apple macOS Sequoia, Tahoe, and Golden Gate allows an application running on the target Mac to force unexpected system termination, producing a denial-of-service condition that can crash the host and force a reboot. The flaw is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27 per Apple's advisories, and no public exploit code has been identified at time of analysis. EPSS is very low (0.17%, 6th percentile) and the issue is not listed in CISA KEV, so near-term mass exploitation is unlikely.
Out-of-bounds memory access in the macOS SMB client kernel component allows a malicious or compromised SMB server to corrupt kernel memory when a victim connects to it, resulting in unexpected system termination or potentially kernel-level code execution. All macOS releases prior to Sequoia 15.8, Tahoe 26.7, and Golden Gate 27 are affected. Apple has released fixed versions (support.apple.com advisories 149035, 149042, 149043); no public exploit code has been identified and EPSS is low at 0.17% (6th percentile), though the flaw is unauthenticated from the network perspective and requires only that the victim initiate an SMB connection.
Improper handling of persistent identifiers in Apple's mobile and desktop operating systems allows an app installed on the device to recognize the same user across app reinstalls, defeating the identifier-reset behavior that users and administrators rely on for privacy. Apple states the issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, and visionOS 27, and the affected CPE set covers all earlier releases of iOS/iPadOS, macOS, and visionOS. No public exploit code or CISA KEV entry has been reported at time of analysis, and EPSS is only 0.16% (6th percentile), so this is a privacy-integrity hardening fix rather than an emergency remote-code-execution patch.
Improper state management in Apple's operating systems (iOS/iPadOS, tvOS, visionOS, watchOS) allows a locally installed app to read a persistent account identifier that should have remained isolated, resulting in information disclosure. Affected platforms are all versions prior to the 27 release train on each OS. Vendor patches are available (iOS 27, iPadOS 27, tvOS 27, visionOS 27, watchOS 27), no public exploit code has been identified at time of analysis, and EPSS is very low (0.15%, 5th percentile). The supplied CVSS vector (AV:N/PR:N) does not match the description's local-app precondition, so treat the 7.5 score with caution.
Improper state management in Apple iOS, iPadOS, and watchOS allows an installed app to track a user across other apps and websites without the user's permission, effectively defeating the platform's cross-app tracking consent controls. The flaw affects iOS/iPadOS releases before 26.7 and before 27, plus watchOS before 27, and is remediated by the iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, and watchOS 27 updates. Exploitation requires a hostile app on the device rather than remote network access; EPSS is 0.15% (5th percentile), there is no CISA KEV listing or public exploit identified, and SSVC rates exploitation as 'none' with partial technical impact.
Sandboxed applications on Apple macOS can break out of their App Sandbox because of a logic error in the sandbox's validation checks, and Apple has fixed the issue in macOS 27 "Golden Gate". Any Mac running a macOS release earlier than 27 is affected, and successful exploitation gives a malicious app access to files, services, and resources it should never have been able to reach, matching the integrity-only impact (C:N/I:H) in the published vector. No public exploit code and no CISA KEV entry were identified at the time of analysis, and the EPSS score of 0.15% (5th percentile) suggests the flaw is not currently being exploited at scale.
User fingerprinting on Apple iOS and iPadOS devices running versions earlier than 26.6 allows an installed application to identify and track the device owner through sensitive data that Apple has now relocated as part of version 26.6. Per the authoritative assessment, this is an on-device, local-execution privacy flaw (CWE-359) with no additional privileges or user interaction required beyond the app running, and its impact is limited to tracking/fingerprinting rather than data theft, code execution, or system compromise; the supplied AV:N/high-confidentiality vector is not borne out by analysis. Exploitation requires getting a malicious or privacy-abusing app onto the device via the App Store, sideloading, MDM/enterprise provisioning, or TestFlight, and devices already updated to iOS/iPadOS 26.6 are not affected. There is no public exploit identified at time of analysis, no CISA KEV listing, and EPSS is low at 0.14% (4th percentile).
Stack-based buffer overflow in the camera driver of Samsung Exynos mobile processors (1330, 1380, 1480, 1580, 1680, 2400, 2500, 2600) allows a local low-privileged attacker to crash the camera subsystem or corrupt adjacent kernel memory by sending a malformed message to the driver. The vendor's CVSS vector (S:C, I:H, A:H) indicates that impact extends beyond a simple denial of service to potential kernel-level integrity corruption, though the advisory text describes only DoS - this discrepancy suggests the stack overflow may be exploitable beyond a crash. No public exploit code or active exploitation (KEV) has been identified at time of analysis.
Alchemy CMS versions prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6 expose an unauthenticated API endpoint (GET /api/pages/nested) that returns the complete page tree without any authorization check, leaking restricted (member-only) and unpublished draft page metadata to anonymous callers. Appending the elements=true parameter causes PageTreeSerializer to additionally dump element and ingredient content from those restricted pages, fully bypassing the access control enforced by the sibling show and index actions. The vendor advisory includes working reproduction steps, and SSVC records that proof-of-concept exploitation is available and automatable, though no CISA KEV listing or EPSS score was supplied.
Path traversal in the PraisonAI multi-agent framework (pip package `praisonaiagents`) prior to version 1.6.59 lets anyone who can inject text into an agent prompt read arbitrary files as the process user. The `MentionsParser._process_file_mention` handler resolves an `@file:` mention against the workspace, and when that lookup fails it silently falls back to `Path(file_path)` with no traversal, symlink, or workspace-boundary check, exposing credentials, SSH/AWS keys, `.env` files, source code and system configuration. A public proof-of-concept exists (SSVC exploitation status: poc) and the flaw is fully automatable, but there is no evidence of active exploitation (not in CISA KEV, no EPSS data supplied); a vendor patch ships in praisonaiagents 1.6.59.
A pre-installed peer application on the same device can abuse the Zscaler Client Connector to tear down the Zscaler tunnel, force the user to be logged out, and toggle packet capture on affected ChromeOS and Android builds prior to 4.2.0.152. The flaw is rated CVSS 7.5 with a local attack vector, high complexity and low privileges, reflecting that an attacker must already have a separate app installed on the managed endpoint rather than reaching the connector over the network. No public exploit code or active exploitation has been identified, and CISA's SSVC assessment rates exploitation as 'none' and automatable as 'no', so this is primarily an endpoint-hardening and asset-inventory concern rather than an urgent patch-emergency.
Incorrect authorization in Apache Syncope's delegated administration module allows an authenticated delegated administrator to exercise privileges over a sibling Realm they were never granted access to, by exploiting a prefix-string matching flaw in the Realm hierarchy enforcement code. Affected releases span the entire 3.0.x (through 3.0.16), 4.0.x (through 4.0.7), and 4.1.x (through 4.1.2) branches. No public exploit has been identified and SSVC confirms no active exploitation; vendor-released patches 4.0.8 and 4.1.3 are available and should be applied promptly by any organization using delegated multi-tenant Realm structures.
Apache Syncope 3.0.x, 4.0.x and 4.1.x expose signed JWT access tokens through a REST endpoint to an administrator holding sufficient entitlements, letting that actor replay the stolen tokens to impersonate more privileged users. The vulnerable ranges are 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2; upgrading to 4.0.8 or 4.1.3 resolves the issue. No public exploit code or confirmed active exploitation has been identified at time of analysis, and EPSS data was not provided.
OIDC client secret exposure in Apache Syncope enables any authenticated user to retrieve complete OIDC provider configurations - including OAuth 2.0 client secrets - via the SSO provider listing API, regardless of the caller's assigned entitlements or role. Affected versions span 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2. No public exploit has been identified at time of analysis, and vendor-released patches are available as versions 4.0.8 and 4.1.3 per the Apache advisory.
Sensitive AES key material is written in plaintext to Apache Syncope application logs under a specific misconfiguration condition. When an operator configures an AES key whose byte length deviates from standard values (16, 24, or 32 bytes), Syncope silently pads it with random characters to reach a valid length - and then logs the resulting padded key value. Any party with access to the application logs (e.g., log aggregation systems, monitoring personnel, or local server access) can recover the full AES encryption key, potentially allowing decryption of data protected by that key. No public exploit has been identified at time of analysis; vendor-released patches exist in versions 4.0.8 and 4.1.3.
Stored cross-site scripting in the Regular Labs Snippets extensions for Joomla (Free < 7.0.0, Pro < 11.0.0) allows a lower-privileged Joomla author to inject malicious script into Snippet content by passing an unsafe value through the extension's article tag variable substitution mechanism, specifically via the url option. Because the affected versions do not validate the article author's trust level before substituting their tag-supplied variables into security-sensitive positions defined by a trusted Snippet author, the injected payload executes in the browser of any higher-privileged user who views the rendered article. No public exploit code or CISA KEV listing has been identified at time of analysis.
Stored cross-site scripting in Quick Index (Free/Pro) extension for Joomla allows a privileged attacker to inject persistent script payloads by supplying a crafted class configuration value that breaks out of its HTML attribute context. Because Quick Index generates executable HTML output after Joomla's built-in content security filter has already processed plugin syntax, the platform's native XSS protection cannot intercept the injected payload. All versions prior to 5.0.5 are affected; no public exploit code or CISA KEV listing has been identified at time of analysis.
Stored XSS in regularlabs.com's Articles Anywhere Joomla extension (versions prior to 20.0.0) lets authenticated article authors inject arbitrary JavaScript via link event handler options (onclick, onmouseover) in plugin syntax tags. The injected payload bypasses Joomla's built-in Author content filter because Articles Anywhere renders the event handler attributes into live HTML after the CMS filter has already processed the content. No public exploit has been identified at time of analysis, but the filter-bypass is architectural and cannot be mitigated without patching.
HTTP/1.1 request smuggling in http4s blaze allows a remote client to desynchronize message boundaries between blaze's hand-written Java wire parser and a fronting proxy, enabling front-end authorization bypass, response-queue poisoning on pooled backend connections, or cache poisoning. All deployments of blaze prior to 0.23.18, and the 1.0.0 milestone line from 1.0.0-M1 through 1.0.0-M41, are affected via five independent parser laxities that are reachable from a default BlazeServerBuilder with no non-default configuration. Exploitation is not confirmed in the wild and no public exploit code was identified at time of analysis; CISA SSVC records exploitation as none and automatable as no, and no EPSS score was supplied with the source data.
Timing side-channel in pay-rails Pay (≤ 11.6.1) allows unauthenticated remote attackers to recover the Paddle Billing webhook HMAC signature byte-by-byte and forge webhook events. The Pay::Webhooks::PaddleBillingController compares the computed SHA-256 HMAC against the attacker-supplied h1 header value with Ruby's non-constant-time String#==, so response timing leaks how much of the digest prefix matches. A forged, correctly signed webhook is accepted and enqueued as a Pay::Webhooks::ProcessJob, letting the attacker drive billing state changes such as provisioning paid features, recording refunds, or triggering customer notifications; public exploit code / PoC-level analysis exists per the SSVC exploitation status, and the flaw is fixed in 11.6.2.
Path traversal in PraisonAI before 4.6.59 allows prompt-influenced calls to code agent tools to read and modify arbitrary files outside any intended project boundary when an application exposes CODE_TOOLS, code_read_file, code_search_replace, or code_apply_diff before calling set_workspace(). The global _workspace_root defaults to None, and the lower-level file helpers silently skip path containment checks when workspace is falsy - a fail-open design identical to a previously patched write_file path (GHSA-hvhp-v2gc-268q). A proof-of-concept exists per SSVC data; no confirmed active exploitation in CISA KEV.
Stored XSS in Concrete CMS 9.0.0-9.5.2 allows an authenticated editor to escalate privileges to administrator by injecting malicious JavaScript into the custom page alias name (customAliasName) field. The Edit Alias dialog applied only a trim() call to the submitted value with no HTML encoding or output neutralization, causing the alias to render unescaped in the administrative Sitemap panel. Any administrator or editor who subsequently opens the Sitemap panel automatically executes the stored payload, enabling session hijacking and full privilege escalation from editor to administrator. No public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV.
Stored XSS in Concrete CMS before 9.5.3 allows a user with edit_block permission to inject malicious JavaScript into a page's YouTube embed block by supplying an unsanitized iframe width or height value. Because only PHP's trim() is applied before the values are written into HTML attribute context, an attacker can persist an event-handler payload that executes in every visitor's browser - and, when the victim holds administrative privileges, the script acts with those privileges. No public exploit code or active exploitation has been identified at time of analysis; the vendor has patched the issue in version 9.5.3.
Stored XSS in Concrete CMS 8.3.0-9.5.2 permits a registered user with calendar event creation rights to inject script payloads via unsanitized event names that later execute in an administrator's browser through unescaped rendering in the dashboard "Waiting For Me" workflow notification block. Because the injected script runs under an active administrator session, an attacker can leverage it to silently create a new administrator account, achieving full CMS compromise. No active exploitation or public proof-of-concept has been identified; the vendor has released version 9.5.3 as the fix and assigned this a CVSS 4.0 score of 7.3.
Memory corruption in Apple's image-handling code across iOS 27, iPadOS 27, macOS Golden Gate 27 and visionOS 27 allows an attacker to achieve arbitrary code execution when a user processes a maliciously crafted image. Apple removed the vulnerable code entirely in the 27-generation releases, which are the only versions containing the fix; all earlier supported builds remain affected. The flaw is rated 7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H), meaning exploitation needs local positioning plus some user interaction, and there is no public exploit code or CISA KEV entry identified at time of analysis.
An out-of-bounds write (CWE-787) in the Apple frameworks that parse 3D model files lets a maliciously crafted model corrupt memory when it is opened on an affected device, potentially giving the attacker code execution in the context of the processing application. The flaw affects iOS/iPadOS before 26.7 and 27, macOS Sequoia before 15.8, macOS Tahoe before 26.7, macOS Golden Gate 27, tvOS before 27, visionOS before 27 and watchOS before 27, and Apple has shipped fixes for all of them. Exploitation likelihood is low: EPSS is 0.17% (7th percentile), CISA SSVC records exploitation as 'none' and the vulnerability is not in KEV — no public exploit code has been identified, and the local attack vector with required user interaction makes mass exploitation unlikely.
Memory corruption in Apple's 3D model parsing pipeline allows a local attacker with low privileges to trigger a classic buffer overflow (CWE-120) on iOS/iPadOS, macOS, tvOS, visionOS and watchOS when a victim opens a maliciously crafted 3D model file. Apple addressed the flaw with improved memory handling in iOS 26.7/27, iPadOS 26.7/27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27 and watchOS 27. Exploitation requires local access and user interaction, no public exploit code has been identified at time of analysis, and the EPSS score is very low at 0.17% (7th percentile), so this is a credible patching priority for Apple fleets rather than a mass-exploitation emergency.
CSV formula injection in Apache Syncope allows authenticated low-privilege users to embed spreadsheet formula payloads in their own user attributes. When an administrator exports users to CSV and opens the file in a spreadsheet application such as Microsoft Excel or LibreOffice Calc, the stored formula is evaluated in the spreadsheet's execution context - enabling data exfiltration from the spreadsheet or arbitrary command execution on the administrator's workstation. No public exploit code has been identified at time of analysis, and SSVC classifies exploitation status as none and not automatable.
Stored cross-site scripting via authorization bypass in Concrete CMS 9.2.0-9.5.2 allows an authenticated content editor to inject persistent JavaScript into the HTML head element of every page served by the site. The REST API page update endpoint (PUT /ccm/api/1.0/pages/{cID}) enforces only basic content-editing authorization, omitting checks for page-property, page-template, and page-type changes; the `header_extra_content` attribute is rendered unescaped site-wide. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the stored XSS payload targets all visitors including privileged reviewers, enabling session hijacking and effective privilege escalation in multi-user editorial deployments.
Authenticated non-administrator users in File Browser 2.5.0-2.63.23 can recursively delete directories beyond their authorized scope by exploiting an error-cleanup path in the direct-upload endpoint. A POST to an existing directory target with `?override=true` causes `writeFile` to fail; the failure-cleanup unconditionally invokes `Fs.RemoveAll` on the request path without evaluating the `Perm.Delete` permission or the `checkDescendants` rule walk enforced by legitimate delete operations. No patched version is available at time of analysis, and no public exploit or KEV listing has been identified.
XML External Entity injection in IBM Business Automation Workflow allows authenticated remote attackers to read arbitrary server-side files or exhaust memory by submitting crafted XML payloads to processing endpoints. Both containerized (Kubernetes/OpenShift) and traditional on-premises deployments across versions 24.0.0 through 26.0.0 are confirmed affected. No public exploit code or CISA KEV listing exists at time of analysis; IBM has released interim fixes for all four affected version branches.