Stored XSS in Concrete CMS 8.3.0-9.5.2 permits a registered user with calendar event creation rights to inject script payloads via unsanitized event names that later execute in an administrator's browser through unescaped rendering in the dashboard "Waiting For Me" workflow notification block. Because the injected script runs under an active administrator session, an attacker can leverage it to silently create a new administrator account, achieving full CMS compromise. No active exploitation or public proof-of-concept has been identified; the vendor has released version 9.5.3 as the fix and assigned this a CVSS 4.0 score of 7.3.
Memory corruption in Apple's image-handling code across iOS 27, iPadOS 27, macOS Golden Gate 27 and visionOS 27 allows an attacker to achieve arbitrary code execution when a user processes a maliciously crafted image. Apple removed the vulnerable code entirely in the 27-generation releases, which are the only versions containing the fix; all earlier supported builds remain affected. The flaw is rated 7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H), meaning exploitation needs local positioning plus some user interaction, and there is no public exploit code or CISA KEV entry identified at time of analysis.
An out-of-bounds write (CWE-787) in the Apple frameworks that parse 3D model files lets a maliciously crafted model corrupt memory when it is opened on an affected device, potentially giving the attacker code execution in the context of the processing application. The flaw affects iOS/iPadOS before 26.7 and 27, macOS Sequoia before 15.8, macOS Tahoe before 26.7, macOS Golden Gate 27, tvOS before 27, visionOS before 27 and watchOS before 27, and Apple has shipped fixes for all of them. Exploitation likelihood is low: EPSS is 0.17% (7th percentile), CISA SSVC records exploitation as 'none' and the vulnerability is not in KEV — no public exploit code has been identified, and the local attack vector with required user interaction makes mass exploitation unlikely.
Memory corruption in Apple's 3D model parsing pipeline allows a local attacker with low privileges to trigger a classic buffer overflow (CWE-120) on iOS/iPadOS, macOS, tvOS, visionOS and watchOS when a victim opens a maliciously crafted 3D model file. Apple addressed the flaw with improved memory handling in iOS 26.7/27, iPadOS 26.7/27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27 and watchOS 27. Exploitation requires local access and user interaction, no public exploit code has been identified at time of analysis, and the EPSS score is very low at 0.17% (7th percentile), so this is a credible patching priority for Apple fleets rather than a mass-exploitation emergency.
PHP object injection in October CMS (composer package october/system) allows an attacker-controlled serialized payload stored in a widget session key to be passed to unserialize() without an allowed_classes restriction, enabling instantiation of arbitrary classes and reachable gadget chains — potentially yielding PHP code execution as the web server user. The flaw is reachable only when the niche opt-in cms.safe_mode setting is enabled and a backend user with CMS markup editing access is not fully trusted, so standard production installations with Safe Mode off are not exposed. Public proof-of-concept code exists and vendor patches ship in 3.7.17 and 4.2.x; exploitation is not confirmed in CISA KEV, and the vendor's own CVSS score (3.3) is far below what the stated code-execution impact would normally imply.
Privilege escalation in October CMS 3.x and 4.x lets an authenticated backend user who holds CMS markup editing rights break out of the Twig Safe Mode sandbox and impersonate an existing superuser. The bypass chains two weaknesses: the Laravel session store is handed to Twig templates with unrestricted method access, and raw SQL methods (selectRaw, whereRaw, orderByRaw, joinSub) leak through Eloquent's __call forwarding so a template can run arbitrary queries and then overwrite the admin_auth session key. Publicly available exploit code exists, but exploitation requires cms.safe_mode to be explicitly enabled, a deliberately untrusted markup editor account, and a pre-existing superuser whose session can be forged — a combination that October CMS states does not occur in standard production deployments.
CSV formula injection in Apache Syncope allows authenticated low-privilege users to embed spreadsheet formula payloads in their own user attributes. When an administrator exports users to CSV and opens the file in a spreadsheet application such as Microsoft Excel or LibreOffice Calc, the stored formula is evaluated in the spreadsheet's execution context - enabling data exfiltration from the spreadsheet or arbitrary command execution on the administrator's workstation. No public exploit code has been identified at time of analysis, and SSVC classifies exploitation status as none and not automatable.
Stored cross-site scripting via authorization bypass in Concrete CMS 9.2.0-9.5.2 allows an authenticated content editor to inject persistent JavaScript into the HTML head element of every page served by the site. The REST API page update endpoint (PUT /ccm/api/1.0/pages/{cID}) enforces only basic content-editing authorization, omitting checks for page-property, page-template, and page-type changes; the `header_extra_content` attribute is rendered unescaped site-wide. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the stored XSS payload targets all visitors including privileged reviewers, enabling session hijacking and effective privilege escalation in multi-user editorial deployments.
Authenticated non-administrator users in File Browser 2.5.0-2.63.23 can recursively delete directories beyond their authorized scope by exploiting an error-cleanup path in the direct-upload endpoint. A POST to an existing directory target with `?override=true` causes `writeFile` to fail; the failure-cleanup unconditionally invokes `Fs.RemoveAll` on the request path without evaluating the `Perm.Delete` permission or the `checkDescendants` rule walk enforced by legitimate delete operations. No patched version is available at time of analysis, and no public exploit or KEV listing has been identified.
XML External Entity injection in IBM Business Automation Workflow allows authenticated remote attackers to read arbitrary server-side files or exhaust memory by submitting crafted XML payloads to processing endpoints. Both containerized (Kubernetes/OpenShift) and traditional on-premises deployments across versions 24.0.0 through 26.0.0 are confirmed affected. No public exploit code or CISA KEV listing exists at time of analysis; IBM has released interim fixes for all four affected version branches.
Stack-based buffer overflow in the Tenda W20E router firmware (version 15.11.0.61068_1546_841_CN_TDC) allows a low-privileged remote attacker to crash the device by sending a crafted HTTP request with an oversized IPMacBindRule argument to the formIPMacBindAdd handler. A public researcher advisory exists on GitHub from Amalll-Sec, indicating the vulnerability has been analyzed and documented with reproduction steps. Impact is assessed as high availability loss; remote code execution has not been independently confirmed from available data but cannot be excluded given the CWE-121 class.
XML external entity (XXE) injection in IBM MQ 9.1.x, 9.2.x, 9.3.x, 9.4.x LTS/CD and 10.0.0.0 lets a remote attacker who holds low-privileged MQ access submit specially crafted XML that the product parses without disabling external entity resolution. Successful exploitation can disclose sensitive local files (confidentiality impact rated High) or exhaust memory and degrade availability (rated Low), yielding an overall CVSS base score of 7.1. There is no indication of confirmed active exploitation (no CISA KEV listing) and no public exploit code identified at time of analysis, though the vulnerability is trivially automatable once parser entry points are reachable.
XML external entity (XXE) injection in IBM MQ (9.1, 9.2, 9.3, 9.4 LTS/CD lines and 10.0.0.0) lets a remote attacker who can already authenticate to MQ and get XML content parsed by the product cause the parser to resolve attacker-supplied external entities. Successful exploitation exposes sensitive information readable by the MQ process (high confidentiality impact) and can consume memory resources, degrading availability. CVSS 3.1 scores this 7.1 (AV:N/AC:L/PR:L/UI:N), so exploitation requires low-privileged authenticated access rather than being fully unauthenticated; no public exploit code or CISA KEV entry was present in the supplied intelligence at time of analysis.
XML External Entity (XXE) injection in IBM Business Automation Workflow containers and traditional deployments allows an authenticated remote attacker to read arbitrary files from the server or perform server-side request forgery due to vulnerable XML processing enabled by default in programming model artifacts. Affected versions span the 24.0.0, 24.0.1, 25.0.0, and 26.0.0 release lines, all below their respective latest interim fixes. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
An XML external entity (XXE) injection flaw in IBM MQ's reply-message processing lets an authenticated attacker who can place messages on a queue cause the broker to resolve externally defined entities, resulting in arbitrary file disclosure from the MQ server and server-side request forgery against internal networks. The issue spans a wide swath of supported releases - MQ 9.1 LTS through 9.1.0.37, 9.2 LTS through 9.2.0.43, 9.3 LTS through 9.3.0.41 and 9.3 CD through 9.3.5.1, 9.4 LTS through 9.4.0.25 and 9.4 CD through 9.4.5.1, plus MQ 10.0.0.0 Managed File Transfer. IBM rates it CVSS 7.1 (AV:N/AC:L/PR:L/UI:N, high confidentiality, low integrity impact); no public exploit code and no CISA KEV entry were identified at time of analysis.
Heap memory exhaustion in filebrowser through 2.63.23 allows any authenticated user to crash the server by sending arbitrarily large WebSocket messages to the /api/command endpoint. The server buffers incoming WebSocket frames before performing permission checks, meaning the DoS path is reachable regardless of whether the EnableExec setting is active or the user holds Execute permission - conditions administrators typically rely on to restrict command access. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
An out-of-bounds read in Apple's kernel (CWE-125) lets an app already running on the device read past the end of a kernel buffer, potentially leaking kernel memory or crashing the system. Affected platforms span iOS/iPadOS before 26.6.1, macOS Sequoia before 15.8, macOS Tahoe before 26.6.2, and tvOS, visionOS and watchOS before 27, with a CVSS 3.1 base of 7.1 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H). There is no CISA KEV listing and no public exploit identified at time of analysis; EPSS is 0.20% (10th percentile), so this is a local, app-mediated kernel hardening issue rather than a remotely exploitable emergency.
Missing CSRF token validation on the orphaned block removal action (`removeOrphanedBlocks`) in Concrete CMS 9.0.0 through 9.5.2 enables remote attackers to permanently destroy all block content on any page the victim can edit. By tricking an authenticated editor into loading a crafted URL, an attacker triggers deletion of every block on the targeted page's current version; blocks not aliased elsewhere are additionally purged from the global Blocks table and their block-type data tables, making the destruction irreversible without a database backup. No public exploit code identified at time of analysis; the Concrete CMS security team assigned a CVSS 4.0 score of 7.1 reflecting high integrity impact gated on one user interaction.
XML External Entity injection in Flowable flowable-engine through 8.0.0 allows authenticated users holding process deployment privileges to exfiltrate arbitrary local files or perform server-side request forgery against internal network endpoints. The vulnerability resides in ProcessDiagramLayoutFactory.parseXml(), which processes user-supplied BPMN XML without disabling external entity resolution, and is present in both the main flowable-engine module and the legacy flowable5-engine (Activiti-derived) module. No public exploit code has been identified at time of analysis, and no confirmed patched release version is available from the referenced data.
Expression Language injection in Activiti through 7.1.0.M6 allows authenticated users to execute arbitrary code within the Spring application context. The ExpressionResolver fails to validate hash-brace deferred expressions (#{...}) when stored as process variables, meaning crafted payloads bypass the existing expression filter. When a BPMN mail task subsequently evaluates a variable-backed body field, the stored #{...} expression is resolved in the full Spring EL context, enabling method invocation on any registered application bean. No public exploit has been identified at time of analysis, and exploitation requires an authenticated user with process variable write access.
Path traversal in PyMuPDF's object-extraction CLI lets a crafted PDF, EPUB, XPS, or FB2 file write arbitrary files outside the user-selected output directory. The extract_objects() font branch joins an attacker-controlled BaseFont name onto the output path without stripping '../' or absolute-path sequences (CWE-22), yielding a CVSS 4.0 base score of 7.1 with high integrity impact but no confidentiality loss. A fix is available upstream in commit b2c8f3a; no public exploit code or CISA KEV activity is known at time of analysis.
Gallery - Private Photo Vault 1.0.41 (Android, by Brain Trust) exposes an unauthenticated HTTP server on TCP port 8080 that is reachable by any device on the same local network, serving full directory listings and file contents from Android external storage - the very media the app is marketed to protect. Any network-adjacent attacker can trivially enumerate and exfiltrate photos, videos, and other files without credentials or user interaction. No public exploit code is required beyond a standard web browser or curl; Fluid Attacks' advisory confirms a proof-of-concept exists, but no CISA KEV listing has been identified at time of analysis.
Missing authorization on three License API admin endpoints in laradashboard through 1.2.2 allows any authenticated low-privileged user to read, overwrite, or delete premium module license keys without admin rights. The affected endpoints - GET /api/admin/licenses/show, POST /api/admin/licenses/store, and POST /api/admin/licenses/remove - perform no role or permission check beyond basic authentication, exposing confidential license material and enabling destructive writes. A POC reportedly exists per SSVC exploitation status; no confirmed active exploitation is recorded in CISA KEV.
Memory exhaustion in File Browser through 2.63.23 allows authenticated users with download permission to trigger unbounded server memory consumption via the subtitle conversion endpoint. The endpoint loads entire .srt, .ass, or .ssa files into memory without size constraints, and concurrent requests amplify impact to a full denial of service. A proof-of-concept exists per SSVC data, though no active exploitation has been confirmed and the vulnerability is not listed in the CISA KEV catalog.
Missing authorization in Mattermost's playbook run creation allows authenticated channel members to add arbitrary users to restricted channels by abusing the run owner field. Affected versions span three active release trains (11.9.x, 11.8.x, 11.7.x) and the LTS branch (10.11.x). An attacker with only channel-member access can silently bypass channel membership-management permissions to grant themselves or others access to content they are not authorized to view, producing a confidentiality exposure rated C:H in the CVSS vector. No public exploit code or CISA KEV listing has been identified at time of analysis.
Stored cross-site scripting in Concrete CMS versions 5.0.0 through 9.5.2 lets an editor-level account inject unsanitized custom style values through the Block Design dialog, which are then written into page CSS via a DOM sink and execute in the browser of any higher-privileged user who views the affected page. Because the payload runs in an administrator's session, an editor can hijack the admin session and escalate to full administrative control of the site. No public exploit code or in-the-wild exploitation is identified at time of analysis (SSVC Exploitation: none; not listed in CISA KEV), and the vendor-rated CVSS v4.0 score is 7.0 with a passive user-interaction requirement (UI:P).
Stored XSS in Concrete CMS 9.0.0-9.5.2 allows a low-privileged user with delegated access to the Page Containers dashboard to inject malicious script via a crafted container icon value that breaks out of an img src attribute due to missing output encoding. The payload persists in the database and executes in the authenticated session of any administrator or editor who subsequently views the Containers dashboard list or editor views, enabling session token theft and unauthorized privileged CMS actions. No public exploit code and no CISA KEV listing have been identified at time of analysis; the vendor released a fix in version 9.5.3.
Stacked SQL injection in Apache Syncope (3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2) allows an authenticated administrator holding adequate entitlements to execute arbitrary SQL against the backend database by supplying malicious content in the unsanitized entityKey and opEvent parameters, which are concatenated into statements that also allow stacked (multi-statement) execution. The vendor assigned a 9.8 score with a PR:N vector, but the explicitly stated gating precondition - a privileged Syncope administrator with the relevant entitlements - means the realistic attack vector is PR:H (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), so unauthenticated or low-privileged users cannot reach the vulnerable code path. Risk signals are otherwise subdued: EPSS is 0.56% (45th percentile), SSVC records Exploitation: none, and no CISA KEV listing or public exploit code has been identified at time of analysis, so exploitation potential scales with the number of privileged operator accounts and the network reachability of the admin console/REST API rather than with mass-scanning activity.
Arbitrary file rename across the Joomla filesystem is possible in SP Page Builder (Free and Pro) versions 4.0.0 through 6.9.0 due to missing directory confinement in the media rename controller task. Authenticated administrators or users with media management permissions can pair any valid media identifier with an unrelated filesystem path, bypassing the boundary checks that protect other folder operations in the same controller. An attacker exploiting this flaw can rename files outside the intended media directory - including renaming configuration.php - effectively taking the entire Joomla site offline or disrupting its integrity. No public exploit or active exploitation has been identified at time of analysis.
HTTP response splitting in a2a-java 1.2.0 allows attackers who control push notification authentication credentials to inject arbitrary HTTP headers by embedding CR/LF characters in the Authorization header assembled by `BasePushNotificationSender.dispatchNotification()`. The root cause is direct concatenation of client-supplied `scheme` and `credentials` fields into an outbound HTTP header without CRLF sanitization. No public exploit has been identified at time of analysis; vendor-confirmed patch is available as v1.3.0.Final.
HTTP CONNECT tunnel authentication bypass in goproxy through v15.3 permits unauthenticated remote clients to establish arbitrary TCP tunnels through a proxy that has basic authentication configured, completely nullifying the access control mechanism. Attackers send CONNECT requests without an Authorization header and the proxy accepts them unconditionally, enabling relay of arbitrary TCP traffic to otherwise-restricted destinations. No public exploit code or active exploitation has been identified at time of analysis, but the attack requires no credentials, no user interaction, and only basic HTTP client capability.
Improper SSH host key validation in andreashappe/cochise through version 0.4.1 allows a network-positioned attacker to perform Man-in-the-Middle attacks against SSH sessions established by the tool. The vulnerable component is the `asyncssh.connect()` call in `src/cochise/ssh_connection.py`, where the SSH Host Key Handler fails to verify server host keys, enabling silent impersonation of target SSH hosts. A public proof-of-concept exists as GitHub issue #13; no vendor patch has been released and the maintainer had not responded to the disclosure at time of reporting.
GrowthBook through version 5.0.1 leaks raw warehouse SQL queries, schema details, table names, filter values, and datasource identifiers via unauthenticated public report and experiment endpoints. Any party who obtains a publicly shared report or experiment identifier can retrieve these internal data warehouse details without authentication. No public exploit or active exploitation has been identified, but the exposed SQL and schema intelligence can directly inform subsequent attacks against the underlying data warehouse infrastructure.
Path traversal in MikroTik RouterOS's container package OCI/tar image extraction enables an authenticated administrator to be induced into importing a crafted container image that writes arbitrary files outside the container root onto the device's persistent data partition with root privileges. The vulnerability fires entirely at import time via the `/container/add` endpoint - the container never needs to start - enabling file creation, deletion via overlayfs whiteout, directory creation, and hardlink creation on the host filesystem. No public exploit has been identified and SSVC rates exploitation as none, but the 7.23.x long-term branch remains unpatched indefinitely, with container-7.23.3.npk and container-7.23.4.npk confirmed byte-identical.
Argument injection in HKUDS nanobot's ExecTool shell execution guard allows remote unauthenticated attackers to bypass the command allowlist/denylist filter by embedding newline or carriage-return characters in a command string, causing injected shell segments to execute without inspection. Affected versions are nanobot 0.2.0 and 0.2.1; the root cause is that `_split_shell_segments()` recognized `;` and `|` as command-chain delimiters but not `\n` or `\r`, so a payload on its own line was never checked against allow/deny patterns. No public exploit or CISA KEV listing is identified; patch commit af582246 is available.
Unauthenticated server-side request forgery in Suite Numérique Docs through 5.6.1 allows any anonymous attacker who knows a public document UUID to make the application's cors-proxy endpoint issue outbound HTTP requests to arbitrary hosts, including internal network resources. By abusing DNS time-of-check-time-of-use race conditions and shared address-space bypasses, an attacker can reach internal services and exfiltrate image content that the proxy fetches on their behalf. No public exploit code or CISA KEV entry is associated with this issue at time of analysis, and the confidentiality impact is assessed as limited, so this is a moderate-priority SSRF rather than a catastrophic one — but open, unauthenticated Docs instances should be treated as internet-facing proxies into their own networks until patched.
Broken delegated-administration authorization in Apache Syncope's Reconciliation service lets an authenticated administrator invoke pull and push operations without holding the required entitlements, because the entitlement checks on those endpoints are incomplete. The flaw affects Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2, and is fixed in 4.0.8 and 4.1.3. There is no public exploit identified at time of analysis and SSVC records exploitation status as none, though CISA's framework rates the technical impact as total and the weakness as automatable.
Privilege escalation in Apache Syncope's internal JWT authentication (CWE-266) lets a low-privileged authenticated user obtain full administrator rights when the JWKS settings used to sign internal JWTs are disclosed. It affects Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2, and is fixed in 4.0.8 and 4.1.3. No public exploit identified at time of analysis, and CISA SSVC records exploitation status as none, though the flaw is assessed as automatable with total technical impact.
Missing directory confinement in SP Page Builder's media upload endpoint allows high-privileged authenticated users to write files into arbitrary directories beneath the Joomla web root. The `folder` request parameter bypasses the extension's own boundary checks and is passed directly to `Folder::create()` and `File::upload()`, enabling file placement in sensitive paths such as `administrator/`, `templates/`, and `cli/`. Exploitation is bounded by Joomla's PATH input filter, which prevents traversal above the web root, and the component does not overwrite existing files. No public exploit or active exploitation has been identified at time of analysis.
Unauthenticated CAPTCHA bypass in SP Page Builder Pro (Joomla extension, versions 5.1.4-6.9.0) allows any remote attacker to defeat form bot-protection by supplying attacker-controlled CAPTCHA parameters directly in the HTTP request. The optin_form addon reads the CAPTCHA type, expected answer, and enabled flag from user-supplied request data instead of the server-stored configuration, reducing verification to a trivially solvable md5($captcha_question) == $captcha_answer check where the attacker supplies both operands. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though SSVC classifies it as automatable, making large-scale scripted abuse realistic.
CAPTCHA verification in SP Page Builder Pro's Contact, Opt-in, and Form Builder addons can be defeated on any Joomla site running versions 3.2.6 through 6.9.0 by submitting the parameter view_type=module alongside any non-empty token string. The addon silently discards the CAPTCHA plugin's actual onCheckAnswer verification result and substitutes a trivially-satisfied non-empty-string check whenever this attacker-controlled parameter is present, rendering all configured CAPTCHA types ineffective for forms placed inside SP Page Builder modules. No public exploit has been identified at time of analysis, but the bypass is trivially automatable per SSVC assessment, requiring only a single parameter change in a standard form POST.
Use-after-free in Open5GS AMF component versions 2.0.x through 2.7.x allows network-reachable attackers to corrupt memory in the Access and Mobility Management Function process by triggering the old AMF discovery fallback handler with a crafted interaction. The root cause is premature deallocation of the SBI transaction structure (`ogs_sbi_xact_remove`) before the `discovery_option` argument derived from that structure is fully consumed; the fix relocates the free call past all dependent uses. No public exploit code has been identified; an upstream patch commit is available.
Cypher injection in Apache Syncope's Neo4j graph database persistence layer allows attackers to craft malicious FIQL search queries that escape intended query boundaries, potentially exposing or manipulating identity governance data. All three active release branches are affected - 3.0.x through 3.0.16, 4.0.x through 4.0.7, and 4.1.x through 4.1.2 - indicating a longstanding architectural deficiency in the FIQL-to-Cypher translation path. No public exploit has been identified at time of analysis, but injection flaws in identity management systems carry elevated risk due to the sensitivity of stored credentials, roles, and relationships.
Unauthenticated REST API access on Contec's CPSN-MCB271 series Remote I/O Coupler Unit (Server Type) allows any network-reachable attacker to read industrial I/O sensor values and issue output control commands without credentials. The vulnerability arises from a complete absence of authentication on the device's REST interface, exposing physical process control functions directly over the network. No public exploit code or active exploitation has been identified at time of analysis, though the CVSS 4.0 base score of 6.9 (AV:N/AC:L/AT:N/PR:N/UI:N) reflects a straightforward, condition-free exploitation path.
Database field disclosure in four Regular Labs Joomla extensions - Advanced Module Manager, Conditional Content, Content Templater, and ReReplacer - allows an authenticated high-privilege user to read arbitrary database fields outside the intended scope. The Conditions editor feature accepts user-supplied database table and column names from the HTTP request, which are quoted as SQL identifiers (preventing SQL injection) but are not restricted to the tables and columns supported by Regular Labs integrations. An attacker with administrative access can therefore query unrelated database fields, potentially exposing sensitive Joomla database content such as user records or configuration values. No public exploit code or active exploitation is identified at time of analysis.
XML External Entity (XXE) injection in IBM MQ's mqweb MFT REST API allows network-accessible, low-privileged attackers holding MFT publish authority to read sensitive files from the MQ server filesystem or cause denial of service. Affected deployments span seven release trains across LTS and CD channels from version 9.1 through 10.0.0.0. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; exploitation is constrained by both authentication and a specific MFT publish privilege requirement.
Out-of-bounds write in the Zephyr RTOS ITE it51xxx I2C target driver allows a malicious or compromised I2C master to corrupt embedded controller firmware memory by sending a write transaction exceeding 256 bytes while the controller operates in buffer mode. The FIFO interrupt handler target_i2c_isr_fifo() accumulated bytes into a fixed-size buffer without a pre-write bounds check, enabling overflow into the adjacent target_out_buffer and following static device data in the interrupt handler context. No software privilege on the victim controller is required; the attacker needs physical or electrical access to the I2C bus with both CONFIG_I2C_TARGET and CONFIG_I2C_TARGET_BUFFER_MODE enabled. No public exploit exists and this vulnerability is not listed in CISA KEV at time of analysis.
A use-after-free write in the Zephyr RTOS ITE IT82xx2 USB device-controller driver (drivers/usb/udc/udc_it82xx2.c) affects Zephyr 4.0.0 through 4.4.1 and allows a malicious USB host to create a kernel heap-corruption primitive on the device side. When a multi-packet OUT transfer is received on a non-control endpoint, the driver re-arms the endpoint to keep filling the same net_buf while simultaneously handing that buffer to the upper USB device stack, which may free and recycle it while DMA continues; the completing packet is also submitted a second time, corrupting the event slist and causing a double net_buf_unref(). Exploitation is physical (USB attach) with no authentication or user interaction required, giving a reliable denial of service and plausible adjacent-pool memory corruption; no public exploit code or CISA KEV listing was identified for this CVE at time of analysis.
OAuth redirect URI allowlist bypass in Mattermost's Dynamic Client Registration allows remote unauthenticated attackers to register OAuth clients with attacker-controlled callback hosts. The flaw arises from glob patterns being matched against the raw redirect URI string rather than against parsed URL components, enabling an attacker to embed an allowlisted host or path inside the query string of a malicious URI (e.g., https://evil.com/callback?trusted.example.com/path). A victim who completes the OAuth authorization flow with the rogue client will have their authorization code sent to the attacker's host, enabling potential account takeover. No public exploit or active exploitation (CISA KEV) is confirmed at time of analysis.
ASRock Polychrome SYNC/RGB kernel driver improperly restricts I/O port access via its IOCTL interface, allowing any authenticated local user to force an OS reboot. The driver, installed as part of ASRock's RGB lighting control software for motherboards and VGA cards, accepts crafted IOCTL requests without sufficient validation of target I/O ports, enabling a low-privileged local attacker to cause system-wide availability failure. No public exploit or KEV listing exists at time of analysis; the TWCERT advisory is the primary disclosure source.