Local applications on macOS versions prior to 27 can escalate to root privileges because the operating system fails to properly validate entitlements before granting privileged operations (CWE-280). An attacker who can get a user to launch — or who can otherwise run — a crafted app on the target Mac gains full root-level control of the system, with high impact to confidentiality, integrity, and availability. The flaw is fixed in macOS Golden Gate 27 per Apple's advisory; no CISA KEV listing, no public exploit code, and no EPSS score were provided at time of analysis, so this is currently a patching-hygiene issue rather than a confirmed active threat.
Insecure deserialization in IBM App Connect Enterprise releases 13.0.1.0 through 13.0.8.0 and 12.0.1.0 through 12.0.12.27 lets a local attacker run arbitrary code on the host running the integration node or toolkit. The flaw rates CVSS 7.8 (AV:L/AC:L/PR:N/UI:R) with total loss of confidentiality, integrity and availability, but CISA's SSVC assessment records no known exploitation and low automatability, and no public exploit code has been identified at time of analysis. IBM has published a fix; the exact patched build is not enumerated in the supplied data, so the vendor advisory should be consulted for the precise version.
Local privilege escalation in the NetworkManager-l2tp VPN plugin allows any local user who can create and activate their own L2TP profile to inject a newline into connection properties (vpn.data / vpn.secrets), so the root-running pluto daemon executes an attacker-supplied leftupdown command and yields root on the host. Fedora builds 1.52.0 through 1.52.3 and EPEL builds 1.20.0 through 1.20.23 are affected; fixed versions 1.52.4 and 1.20.24 are published upstream. There is no CISA KEV listing and no public exploit identified at time of analysis, although a public technical writeup of the 'newline to root' technique is referenced and the identical bug class was previously exploited in CVE-2018-10900 (NetworkManager-vpnc).
Race condition in Microsoft Edge (Chromium-based) builds prior to 152.0.4191.66 lets an attacker who already holds low-privileged code execution inside the browser win a narrow timing window and elevate to full privileges outside the Chromium sandbox. The flaw is CWE-362 (concurrent execution on a shared resource with improper synchronization) and carries a CVSS 3.1 score of 7.8 with a Scope:Changed rating, indicating a successful exploit crosses a security boundary rather than simply corrupting the renderer. Exploitation is local, timing-dependent (AC:H) and non-automatable per CISA SSVC; no public exploit code or CISA KEV entry is associated with this CVE at time of analysis, and a vendor patch is available.
An out-of-bounds write in GIMP's Lighting Effects filter allows memory corruption when a victim opens a specially crafted lighting preset file, resulting in a crash or potentially arbitrary code execution in the context of the GIMP process. The CVSS vector (AV:L/UI:R) confirms the attack is file-driven and requires a user to open the malicious preset, so no remote unauthenticated path exists; exploitation depends on social engineering. Red Hat is the reporting party and its CPE data lists RHEL 6 through 9, but no public exploit code, EPSS score, or CISA KEV entry was supplied, so status is no public exploit identified at time of analysis.
Apache Storm 3.0.0 through 3.1.0 (excluding 3.1.0) lets a topology submitter control the local destination name of each localized blob via the topology.blobstore.map setting, and the Nimbus/supervisor code builds that destination path without normalization and force-deletes whatever already exists before creating a symlink. Using ../ segments, a submitter can therefore cause recursive deletion of arbitrary supervisor-owned files and plant a symlink that makes a later worker launch execute attacker-chosen code as another tenant's OS user, defeating the isolation that supervisor.run.worker.as.user is meant to enforce. No public exploit code or CISA KEV listing was found at time of analysis, and SSVC records exploitation status as none with automatable set to no; the patch is Apache Storm 3.1.0.
Heap-based buffer overflow in GIMP's Paint Shop Pro (PSP) file format loader allows arbitrary code execution when a victim opens a crafted PSP image file. The flaw stems from a size mismatch between the buffer allocated for a compressed selection channel and the actual decompressed output, triggering an out-of-bounds write on the heap. No public exploit has been identified at time of analysis, but the file-open trigger makes this a realistic phishing or drive-by vector against GIMP users on Red Hat Enterprise Linux 6-9.
Heap-based buffer overflow in GIMP's ICO file loader allows arbitrary code execution or application crash when a user opens a specially crafted ICO file containing an embedded PNG image. The root cause is an integer overflow during buffer size calculation (CWE-787, with CWE-190 as the precipitating cause), causing an undersized heap allocation that overflows when decoded pixel data is written. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.
Privilege escalation to root in Parallels Desktop for Mac via argument injection into a tar command executed by the root-owned dispatcher service. Any local user - no admin rights required - can connect to the world-writable `/var/run/prl_disp_service.socket`, authenticate via `PrlSrv_LoginLocal` without signature verification, and then pass a crafted appliance path through `PrlSrv_InstallAppliance` that embeds a quote character to escape the Qt `QProcess::splitCommand` argument boundary, injecting `--use-compress-program=<binary>` into macOS tar and running arbitrary code as root. No public exploit has been identified at time of analysis, but the exploitation path requires no special conditions beyond a local user account.
The MFC (Multi Format Codec) encoder driver in Samsung Exynos mobile and wearable processors contains a double-free vulnerability triggered by improper cleanup of dma_buf references during error handling paths. The flaw spans seventeen Exynos SoC variants - Exynos 850 through 2600 mobile series and W920/W930/W1000 wearable chips - present in Samsung Galaxy smartphones and Galaxy Watch devices, and can lead to kernel heap corruption with potential local privilege escalation to arbitrary kernel-mode code execution. No active exploitation has been confirmed (not listed in CISA KEV) and no public proof-of-concept is identified in the available input data.
MCP Atlassian, the Model Context Protocol server that bridges AI clients to Confluence and Jira, resolves client-supplied attachment paths on the server itself, so a remote client with write-tool access can read arbitrary files from the server host in versions before 0.22.0. The confluence_upload_attachment, confluence_upload_attachments and jira_update_issue tools all funnel an unconfined file_path into os.path.abspath() plus open(), and the resulting bytes are uploaded to Atlassian as an attachment — giving the attacker a convenient exfiltration channel for server files, environment-held Atlassian credentials, or other tenants' data. The vendor advisory includes a working proof-of-concept (publicly available exploit code exists), but no active exploitation is confirmed (no CISA KEV listing); the CVSS 3.1 score is 7.7 with EPSS not provided in the input. Only local single-user stdio deployments are outside the trust boundary.
XML external entity (XXE) injection in the PxXMLInput operator of IBM DataStage on Cloud Pak for Data 5.4.0.0 lets an authenticated remote attacker submit crafted XML so that the job's XML parser resolves external entities, exposing host files and internal network resources. The flaw is confidentiality-only (CVSS 7.7, C:H/I:N/A:N) and requires valid credentials plus a job that feeds attacker-influenced XML into the PxXMLInput stage. IBM has published a vendor fix; there is no CISA KEV listing and no public exploit identified at time of analysis.
Cleartext credential exposure in Suprema BioStar 2 (before 2.9.12) and BioStar X (before 1.0.2) allows any authenticated API user to retrieve Active Directory service account credentials in plaintext via a single GET request to the /api/v2/setting/adserversetting endpoint. The CVSS scope change (S:C) reflects that the real impact extends far beyond BioStar 2 itself - the exposed AD credentials can grant an attacker access to the entire Windows domain, enabling lateral movement and privilege escalation. A public proof-of-concept exploit is available on GitHub (mda1r/biostar2-ad-credential-exposure), significantly lowering the bar for exploitation.
Unexpected system termination is possible on unpatched Apple macOS hosts because of an out-of-bounds read that a remote attacker can trigger without authentication or user interaction. Apple addressed the flaw with improved bounds checking in macOS Tahoe 26.7, macOS Sequoia 15.8, and macOS Golden Gate 27, but the affected system component is not named in the public advisories. No public exploit code has been identified and CISA's SSVC assessment records exploitation as 'none' while flagging the issue as automatable with partial technical impact; the CVSS 7.5 score is driven entirely by availability loss, with no confidentiality or integrity impact.
Resource exhaustion in Apple macOS allows a remote, unauthenticated attacker to deny service to legitimate users by feeding input that the operating system fails to bound correctly. Apple fixed the flaw with improved input validation in macOS Tahoe 26.7, macOS Sequoia 15.8, and macOS Golden Gate 27. It is rated 7.5 with an availability-only impact (CWE-400), and while no public exploit code or observed exploitation has been identified, the attack is network-reachable and fully automatable per CISA's SSVC assessment.
Symlink path traversal in File Browser ≤2.63.23 lets authenticated low-privilege users bypass configured deny rules to read and overwrite restricted files. The access-control engine evaluates rules against the lexically requested path but does not re-apply those rules after resolving symbolic links to their targets, creating a security boundary gap that is exploitable wherever an attacker can access an in-scope symlink pointing outside their permitted tree. A proof-of-concept exists per SSVC analysis; no public exploit code has been confirmed in CISA KEV at time of analysis.
Apple iOS 18.7.10 and iPadOS 18.7.10 ship a fix for an input-validation flaw (CWE-20) that lets a remote attacker crash or otherwise deny service on unpatched devices, with Apple rating the impact as a full availability loss (CVSS 7.5, AV:N/AC:L/PR:N/UI:N/A:H). Every iPhone or iPad still running a version below 18.7.10 is potentially affected. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, so this is currently a patch-promptly issue rather than an emergency.
Arbitrary file write in IBM Db2 11.5.x and 12.1.x allows a remote unauthenticated attacker to write files to attacker-controlled paths on the database server due to improper validation of file path inputs. The vulnerability carries CWE-22 (Path Traversal) and was disclosed by IBM with a patch available at their support portal. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis, though the PR:N/AC:L CVSS vector signals low-friction remote reachability.
Improper access control in IBM Sterling File Gateway (6.2.0.0 through 6.2.0.6_1, 6.2.1.0-6.2.1.2, and 6.2.2.0-6.2.2.1) lets a remote, unauthenticated attacker reach file-transfer data they should not be able to see. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H) describes a trivially reachable, no-credentials-required read of sensitive information with no integrity or availability impact. No public exploit code or CISA KEV entry was present in the supplied intelligence at the time of analysis, and IBM has published a vendor fix.
Cisco Secure Email Gateway and Cisco Secure Email and Web Manager ship a hardening release that fixes multiple internally discovered input-validation defects grouped under CVE-2026-76442 (CWE-1284, improper validation of specified quantity in input). Successful exploitation by an unauthenticated remote attacker degrades availability (CVSS 3.1 7.5, AV:N/AC:L/PR:N/UI:N, C:N/I:N/A:H) on the affected appliances, potentially interrupting mail flow and administrative access. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV; CISA's SSVC assessment rates exploitation as none and automatable as no, so weaponization is not currently expected.
Stored cross-site scripting in the Regular Labs Modals extension for Joomla (all versions before 17.0.0) allows high-privileged content authors to inject executable browser URL schemes - such as javascript: - into modal destination fields, which the extension passes unvalidated into both the generated anchor href and the iframe source path. When any site visitor subsequently renders the affected page, the stored payload executes as JavaScript in their browser without requiring the Pro JavaScript Events feature to be enabled. No public exploit has been identified at time of analysis; the vendor-released fix is version 17.0.0.
Stored cross-site scripting in the Modals Pro extension for Joomla (regularlabs.com) versions prior to 17.0.0 allows an authenticated Author-level user to inject executable JavaScript via documented event handler options (on-open, on-closed) embedded in article content. The extension intentionally supports JavaScript lifecycle events for modal dialogs but fails to enforce access control distinguishing which roles may supply executable code versus static configuration parameters - enabling a lower-privileged author to weaponize a trusted-user feature. When a higher-privileged user views the crafted article, the modal fires the injected script in their browser context. No public exploit or CISA KEV listing exists at time of analysis.
Stored cross-site scripting in regularlabs.com's Tabs & Accordions (Free and Pro) extension for Joomla, versions prior to 3.1.0, allows a privileged authenticated attacker to inject and permanently persist arbitrary JavaScript into page output by supplying a crafted value in the rtla-alias configuration field. The extension's link-rewriting renderer embeds the alias directly into an HTML onclick attribute as a JavaScript string argument, applying neither JavaScript-string escaping nor HTML-attribute encoding, so a crafted alias breaks both quoting contexts and executes in every subsequent visitor's browser. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
IBM Verify Identity Access (formerly IBM Security Verify Access) fails to adequately validate or bound the resources consumed by incoming requests, allowing a remote, unauthenticated attacker to drive resource exhaustion and deny service to legitimate users. Affected builds include Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001, in both software and container form factors. IBM has released a fix, EPSS is low at 0.21% (11th percentile), and there is no public exploit identified at time of analysis.
Missing entitlement checks in Apple's iOS and iPadOS, tvOS, watchOS, and visionOS (all versions before the 27 release train) allow a locally installed app to read device attributes it is not authorized to access and combine them into a persistent fingerprint of the user. Only devices running an affected platform with an attacker-supplied app already installed are exposed; the independent assessment re-scores the issue as local-access with confidentiality-only impact (AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), which is materially lower than the supplied CVSS 3.1 vector (AV:N, 7.5) that treats the flaw as remotely reachable. There is no indication of active exploitation, KEV status is not set, and no public exploit code has been identified at time of analysis; EPSS is 0.19% (9th percentile), consistent with a low near-term exploit probability. Apple has released fixes in iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27.
Apple iOS and iPadOS before version 27 leak cross-application information through the handling of user preferences, allowing a locally installed app to enumerate which other apps are present on the device. Apple addressed the privacy flaw in iOS 27 and iPadOS 27; EPSS is only 0.17% (7th percentile), there is no CISA KEV listing, and no public exploit code identified at time of analysis. The practical impact is user profiling and device fingerprinting rather than code execution or data theft.
A logic flaw in Apple macOS Sequoia, Tahoe, and Golden Gate allows an application running on the target Mac to force unexpected system termination, producing a denial-of-service condition that can crash the host and force a reboot. The flaw is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27 per Apple's advisories, and no public exploit code has been identified at time of analysis. EPSS is very low (0.17%, 6th percentile) and the issue is not listed in CISA KEV, so near-term mass exploitation is unlikely.
Out-of-bounds memory access in the macOS SMB client kernel component allows a malicious or compromised SMB server to corrupt kernel memory when a victim connects to it, resulting in unexpected system termination or potentially kernel-level code execution. All macOS releases prior to Sequoia 15.8, Tahoe 26.7, and Golden Gate 27 are affected. Apple has released fixed versions (support.apple.com advisories 149035, 149042, 149043); no public exploit code has been identified and EPSS is low at 0.17% (6th percentile), though the flaw is unauthenticated from the network perspective and requires only that the victim initiate an SMB connection.
Improper handling of persistent identifiers in Apple's mobile and desktop operating systems allows an app installed on the device to recognize the same user across app reinstalls, defeating the identifier-reset behavior that users and administrators rely on for privacy. Apple states the issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, and visionOS 27, and the affected CPE set covers all earlier releases of iOS/iPadOS, macOS, and visionOS. No public exploit code or CISA KEV entry has been reported at time of analysis, and EPSS is only 0.16% (6th percentile), so this is a privacy-integrity hardening fix rather than an emergency remote-code-execution patch.
Improper state management in Apple's operating systems (iOS/iPadOS, tvOS, visionOS, watchOS) allows a locally installed app to read a persistent account identifier that should have remained isolated, resulting in information disclosure. Affected platforms are all versions prior to the 27 release train on each OS. Vendor patches are available (iOS 27, iPadOS 27, tvOS 27, visionOS 27, watchOS 27), no public exploit code has been identified at time of analysis, and EPSS is very low (0.15%, 5th percentile). The supplied CVSS vector (AV:N/PR:N) does not match the description's local-app precondition, so treat the 7.5 score with caution.
Improper state management in Apple iOS, iPadOS, and watchOS allows an installed app to track a user across other apps and websites without the user's permission, effectively defeating the platform's cross-app tracking consent controls. The flaw affects iOS/iPadOS releases before 26.7 and before 27, plus watchOS before 27, and is remediated by the iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, and watchOS 27 updates. Exploitation requires a hostile app on the device rather than remote network access; EPSS is 0.15% (5th percentile), there is no CISA KEV listing or public exploit identified, and SSVC rates exploitation as 'none' with partial technical impact.
Sandboxed applications on Apple macOS can break out of their App Sandbox because of a logic error in the sandbox's validation checks, and Apple has fixed the issue in macOS 27 "Golden Gate". Any Mac running a macOS release earlier than 27 is affected, and successful exploitation gives a malicious app access to files, services, and resources it should never have been able to reach, matching the integrity-only impact (C:N/I:H) in the published vector. No public exploit code and no CISA KEV entry were identified at the time of analysis, and the EPSS score of 0.15% (5th percentile) suggests the flaw is not currently being exploited at scale.
User fingerprinting on Apple iOS and iPadOS devices running versions earlier than 26.6 allows an installed application to identify and track the device owner through sensitive data that Apple has now relocated as part of version 26.6. Per the authoritative assessment, this is an on-device, local-execution privacy flaw (CWE-359) with no additional privileges or user interaction required beyond the app running, and its impact is limited to tracking/fingerprinting rather than data theft, code execution, or system compromise; the supplied AV:N/high-confidentiality vector is not borne out by analysis. Exploitation requires getting a malicious or privacy-abusing app onto the device via the App Store, sideloading, MDM/enterprise provisioning, or TestFlight, and devices already updated to iOS/iPadOS 26.6 are not affected. There is no public exploit identified at time of analysis, no CISA KEV listing, and EPSS is low at 0.14% (4th percentile).
Alchemy CMS versions prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6 expose an unauthenticated API endpoint (GET /api/pages/nested) that returns the complete page tree without any authorization check, leaking restricted (member-only) and unpublished draft page metadata to anonymous callers. Appending the elements=true parameter causes PageTreeSerializer to additionally dump element and ingredient content from those restricted pages, fully bypassing the access control enforced by the sibling show and index actions. The vendor advisory includes working reproduction steps, and SSVC records that proof-of-concept exploitation is available and automatable, though no CISA KEV listing or EPSS score was supplied.
Path traversal in the PraisonAI multi-agent framework (pip package `praisonaiagents`) prior to version 1.6.59 lets anyone who can inject text into an agent prompt read arbitrary files as the process user. The `MentionsParser._process_file_mention` handler resolves an `@file:` mention against the workspace, and when that lookup fails it silently falls back to `Path(file_path)` with no traversal, symlink, or workspace-boundary check, exposing credentials, SSH/AWS keys, `.env` files, source code and system configuration. A public proof-of-concept exists (SSVC exploitation status: poc) and the flaw is fully automatable, but there is no evidence of active exploitation (not in CISA KEV, no EPSS data supplied); a vendor patch ships in praisonaiagents 1.6.59.
Unauthenticated path traversal in PraisonAI's Jobs API (versions prior to 4.6.59) allows any remote caller to read arbitrary files on the server. The `agent_file` field in `POST /api/v1/runs` accepts absolute or directory-traversing filesystem paths with no validation, allowlist, or authentication gate; the executor passes the value directly to `yaml.safe_load(open(agent_file))`. An attacker with network access to port 8005 can exfiltrate credentials, SSH private keys, environment variables, and any file readable by the service account. A working proof-of-concept is publicly available in the GitHub security advisory GHSA-p4pj-vh7h-6cqh.
A pre-installed peer application on the same device can abuse the Zscaler Client Connector to tear down the Zscaler tunnel, force the user to be logged out, and toggle packet capture on affected ChromeOS and Android builds prior to 4.2.0.152. The flaw is rated CVSS 7.5 with a local attack vector, high complexity and low privileges, reflecting that an attacker must already have a separate app installed on the managed endpoint rather than reaching the connector over the network. No public exploit code or active exploitation has been identified, and CISA's SSVC assessment rates exploitation as 'none' and automatable as 'no', so this is primarily an endpoint-hardening and asset-inventory concern rather than an urgent patch-emergency.
Incorrect authorization in Apache Syncope's delegated administration module allows an authenticated delegated administrator to exercise privileges over a sibling Realm they were never granted access to, by exploiting a prefix-string matching flaw in the Realm hierarchy enforcement code. Affected releases span the entire 3.0.x (through 3.0.16), 4.0.x (through 4.0.7), and 4.1.x (through 4.1.2) branches. No public exploit has been identified and SSVC confirms no active exploitation; vendor-released patches 4.0.8 and 4.1.3 are available and should be applied promptly by any organization using delegated multi-tenant Realm structures.
Apache Syncope 3.0.x, 4.0.x and 4.1.x expose signed JWT access tokens through a REST endpoint to an administrator holding sufficient entitlements, letting that actor replay the stolen tokens to impersonate more privileged users. The vulnerable ranges are 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2; upgrading to 4.0.8 or 4.1.3 resolves the issue. No public exploit code or confirmed active exploitation has been identified at time of analysis, and EPSS data was not provided.
OIDC client secret exposure in Apache Syncope enables any authenticated user to retrieve complete OIDC provider configurations - including OAuth 2.0 client secrets - via the SSO provider listing API, regardless of the caller's assigned entitlements or role. Affected versions span 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2. No public exploit has been identified at time of analysis, and vendor-released patches are available as versions 4.0.8 and 4.1.3 per the Apache advisory.
Sensitive AES key material is written in plaintext to Apache Syncope application logs under a specific misconfiguration condition. When an operator configures an AES key whose byte length deviates from standard values (16, 24, or 32 bytes), Syncope silently pads it with random characters to reach a valid length - and then logs the resulting padded key value. Any party with access to the application logs (e.g., log aggregation systems, monitoring personnel, or local server access) can recover the full AES encryption key, potentially allowing decryption of data protected by that key. No public exploit has been identified at time of analysis; vendor-released patches exist in versions 4.0.8 and 4.1.3.
Stored cross-site scripting in the Regular Labs Snippets extensions for Joomla (Free < 7.0.0, Pro < 11.0.0) allows a lower-privileged Joomla author to inject malicious script into Snippet content by passing an unsafe value through the extension's article tag variable substitution mechanism, specifically via the url option. Because the affected versions do not validate the article author's trust level before substituting their tag-supplied variables into security-sensitive positions defined by a trusted Snippet author, the injected payload executes in the browser of any higher-privileged user who views the rendered article. No public exploit code or CISA KEV listing has been identified at time of analysis.
Stored cross-site scripting in Quick Index (Free/Pro) extension for Joomla allows a privileged attacker to inject persistent script payloads by supplying a crafted class configuration value that breaks out of its HTML attribute context. Because Quick Index generates executable HTML output after Joomla's built-in content security filter has already processed plugin syntax, the platform's native XSS protection cannot intercept the injected payload. All versions prior to 5.0.5 are affected; no public exploit code or CISA KEV listing has been identified at time of analysis.
Stored XSS in regularlabs.com's Articles Anywhere Joomla extension (versions prior to 20.0.0) lets authenticated article authors inject arbitrary JavaScript via link event handler options (onclick, onmouseover) in plugin syntax tags. The injected payload bypasses Joomla's built-in Author content filter because Articles Anywhere renders the event handler attributes into live HTML after the CMS filter has already processed the content. No public exploit has been identified at time of analysis, but the filter-bypass is architectural and cannot be mitigated without patching.
Stack-based buffer overflow in the camera driver of Samsung Exynos mobile processors (1330, 1380, 1480, 1580, 1680, 2400, 2500, 2600) allows a local low-privileged attacker to crash the camera subsystem or corrupt adjacent kernel memory by sending a malformed message to the driver. The vendor's CVSS vector (S:C, I:H, A:H) indicates that impact extends beyond a simple denial of service to potential kernel-level integrity corruption, though the advisory text describes only DoS - this discrepancy suggests the stack overflow may be exploitable beyond a crash. No public exploit code or active exploitation (KEV) has been identified at time of analysis.
HTTP/1.1 request smuggling in http4s blaze allows a remote client to desynchronize message boundaries between blaze's hand-written Java wire parser and a fronting proxy, enabling front-end authorization bypass, response-queue poisoning on pooled backend connections, or cache poisoning. All deployments of blaze prior to 0.23.18, and the 1.0.0 milestone line from 1.0.0-M1 through 1.0.0-M41, are affected via five independent parser laxities that are reachable from a default BlazeServerBuilder with no non-default configuration. Exploitation is not confirmed in the wild and no public exploit code was identified at time of analysis; CISA SSVC records exploitation as none and automatable as no, and no EPSS score was supplied with the source data.
Timing side-channel in pay-rails Pay (≤ 11.6.1) allows unauthenticated remote attackers to recover the Paddle Billing webhook HMAC signature byte-by-byte and forge webhook events. The Pay::Webhooks::PaddleBillingController compares the computed SHA-256 HMAC against the attacker-supplied h1 header value with Ruby's non-constant-time String#==, so response timing leaks how much of the digest prefix matches. A forged, correctly signed webhook is accepted and enqueued as a Pay::Webhooks::ProcessJob, letting the attacker drive billing state changes such as provisioning paid features, recording refunds, or triggering customer notifications; public exploit code / PoC-level analysis exists per the SSVC exploitation status, and the flaw is fixed in 11.6.2.
Stored XSS in Concrete CMS 9.0.0-9.5.2 allows an authenticated editor to escalate privileges to administrator by injecting malicious JavaScript into the custom page alias name (customAliasName) field. The Edit Alias dialog applied only a trim() call to the submitted value with no HTML encoding or output neutralization, causing the alias to render unescaped in the administrative Sitemap panel. Any administrator or editor who subsequently opens the Sitemap panel automatically executes the stored payload, enabling session hijacking and full privilege escalation from editor to administrator. No public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV.
Stored XSS in Concrete CMS before 9.5.3 allows a user with edit_block permission to inject malicious JavaScript into a page's YouTube embed block by supplying an unsanitized iframe width or height value. Because only PHP's trim() is applied before the values are written into HTML attribute context, an attacker can persist an event-handler payload that executes in every visitor's browser - and, when the victim holds administrative privileges, the script acts with those privileges. No public exploit code or active exploitation has been identified at time of analysis; the vendor has patched the issue in version 9.5.3.
Stored XSS in Concrete CMS 8.3.0-9.5.2 permits a registered user with calendar event creation rights to inject script payloads via unsanitized event names that later execute in an administrator's browser through unescaped rendering in the dashboard "Waiting For Me" workflow notification block. Because the injected script runs under an active administrator session, an attacker can leverage it to silently create a new administrator account, achieving full CMS compromise. No active exploitation or public proof-of-concept has been identified; the vendor has released version 9.5.3 as the fix and assigned this a CVSS 4.0 score of 7.3.