An out-of-bounds write in Apple macOS is triggered when a user connects to a malicious WebDAV server, resulting in unexpected application termination. The flaw affects macOS Sequoia before 15.8, macOS Tahoe before 26.7, and macOS Golden Gate before 27, and is reachable over the network with no privileges required but with user interaction (the victim must initiate the WebDAV connection). Apple addressed it by removing the vulnerable code and shipped fixes in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27; no public exploit code or active exploitation has been identified at time of analysis, and the CVSS 3.1 score is 6.5 with availability-only impact.
A use-after-free (CWE-416) in the Apple macOS SMB client allows a maliciously crafted SMB network share to crash the operating system, causing system termination. Exploitation requires the user to mount the attacker-controlled share (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H, base 6.5), so impact is limited to denial of service with no confidentiality or integrity loss. Apple has released fixes in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7; there is no CISA KEV listing and no public exploit code identified, and EPSS is low at 0.17% (6th percentile).
An out-of-bounds read in Apple's macOS SMB client allows a malicious SMB server to leak kernel memory to an attacker when a user connects to a shared folder, fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Exploitation requires the victim to initiate a connection to an attacker-controlled or compromised SMB share (CVSS UI:R), so it is user-interaction dependent rather than wormable, and the raw impact is confidentiality only — kernel memory disclosure, not code execution. EPSS is very low (0.17%, 6th percentile), there is no CISA KEV listing, and no public exploit code has been identified; SSVC rates exploitation as 'none', automatable as 'no', and technical impact as 'partial'.
An unauthenticated attacker positioned within radio range of an Apple iPhone or iPad can send specially crafted wireless input that causes the device to terminate unexpectedly (crash/restart), due to an input validation failure in the affected platform. The flaw is rated CVSS 6.5 (AV:A, A:H) and affects iOS and iPadOS before version 27; Apple has released a fixed version and no public exploit code or active exploitation has been identified (EPSS 0.14%, 4th percentile). Impact is limited to availability - there is no confidentiality or integrity impact.
An out-of-bounds write in Apple macOS (all versions prior to macOS 27 'Golden Gate') allows a maliciously crafted disk image to corrupt kernel memory when mounted, causing unexpected system termination. Apple addressed the flaw by removing the vulnerable code rather than adding a bounds check, and a vendor patch is available in macOS 27. There is no CISA KEV listing and no public exploit code identified at time of analysis; EPSS is very low at 0.14% (4th percentile), so exploitation appears opportunistic at most.
Processing maliciously crafted web content in Apple's WebKit-based browser stack can disclose sensitive user information across Safari 27, iOS/iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 and earlier. Apple classifies the root cause as an improper privilege management (permissions) issue and fixed it by removing the vulnerable code rather than adding a check, per the vendor advisories referenced for CVE-2026-64753. Real-world urgency is currently low: EPSS is 0.14% (4th percentile), there is no CISA KEV listing or public exploit identified at time of analysis, and CISA's SSVC assessment is exploitation:none / automatable:no / technical impact:partial, while a vendor patch is already available.
Authentication bypass in IBM WebSphere Application Server 8.5 and 9.0 allows an unauthenticated attacker positioned on an adjacent network segment to reach request-handling functionality that performs no authorization check (CWE-862) and read sensitive information from the response. IBM has released a vendor patch, and there is no public exploit code or CISA KEV entry associated with this issue at time of analysis, so exploitation is not confirmed actively exploited. CVSS rates it 6.5 with confidentiality-only impact and PR:N/UI:N, but no EPSS score was supplied, leaving real-world exploitation likelihood unquantified.
Server-side request forgery in the MCP Atlassian MCP server (versions 0.17.0 through 0.21.x) allows remote unauthenticated attackers to force the server to make outbound requests to internal addresses such as the cloud metadata endpoint 169.254.169.254. The flaw is an incomplete-fix TOCTOU: validate_url_for_ssrf resolves and approves the attacker-supplied X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url host once at middleware time, but the actual HTTP client re-resolves the raw hostname at connect time with no IP pinning, so a DNS-rebinding name can pass validation with a public IP and then resolve to a link-local or RFC1918 address. Exploitation is a documented, publicly described proof-of-concept rather than confirmed in-the-wild activity (no CISA KEV listing), and the vendor has released version 0.22.0 as the fix.
Authenticated denial of service in IBM Db2 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on Linux, UNIX and Windows (including Db2 Connect Server) lets a remote attacker with a valid database session crash the engine by triggering a null pointer dereference. The impact is availability-only (CVSS 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), so confidentiality and integrity of stored data are not directly at risk, but any application or Db2 Connect client depending on the affected instance loses service. No public exploit code has been identified at time of analysis, the flaw is not in CISA KEV, SSVC rates exploitation and automatable both as none/no, and no EPSS score was supplied in the intelligence feed.
IBM Db2 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on Linux, UNIX and Windows (including Db2 Connect Server) can be driven into a denial-of-service condition by a remote attacker who holds valid database credentials, through uncontrolled consumption of server resources. The flaw is rated CVSS 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), so the impact is loss of availability only - no confidentiality or integrity exposure is claimed. Patch exists via IBM support document 7286983; there is no public exploit identified at time of analysis and CISA's SSVC assessment records exploitation as 'none'.
Remote denial of service in the Zephyr RTOS IPv6 Neighbor Discovery stack: an adjacent, unauthenticated attacker sends a Router Advertisement whose Reachable Time field is set to 1, which collapses the randomized reachable-time calculation in net_if_ipv6_calc_reachable_time() to exactly 0 ms. On builds compiled with CONFIG_ASSERT the zero value trips NET_ASSERT("Zero reachable timeout!") and kills the kernel, while assertion-free builds arm a K_MSEC(0) timer that fires immediately, pushing confirmed neighbors into perpetual STALE re-solicitation. Quoted CVSS is
Authenticated topology submission in Apache Storm Nimbus 3.0.0 through 3.0.x allows any authenticated Storm user to read arbitrary files accessible to the Nimbus daemon by supplying a server-side path as the uploadedJarLocation argument to submitTopology or submitTopologyWithOpts, bypassing the intended beginFileUpload flow entirely. Nimbus copies the targeted file into a topology blob and automatically grants the submitter read access via blob ACLs, enabling retrieval of Kerberos keytabs, TLS private keys, and ZooKeeper credentials through standard blob download APIs. A proof of concept was submitted alongside disclosure; upgrade to Apache Storm 3.1.0 is the required remediation.
Apache Syncope contains a Groovy sandbox bypass (CWE-94 code injection) that lets an administrator holding entitlements over the Implementations console register a malicious Groovy Command class whose untrusted code executes in a static CommandArgs initializer, escaping the intended script sandbox. Affected releases span 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2; exploitation requires a privileged, already-authenticated administrator account (CVSS 3.1 vector PR:H, score 6.5) rather than an anonymous attacker. There is no public exploit identified and the vulnerability is not in CISA KEV, but because Syncope is an identity governance and provisioning platform, successful abuse yields high confidentiality and integrity impact over managed identity data - CISA's SSVC assessment rates technical impact as 'total' while noting exploitation has not been observed and the attack is not automatable.
Mattermost's Playbooks plugin can be crashed by an authenticated user via a malformed REST request that references a property field belonging to a different run than specified. Affected versions span the 10.11.x, 11.7.x, 11.8.x, and 11.9.x release branches, per vendor advisory MMSA-2026-00684. No active exploitation has been identified, and impact is scoped to availability loss of the Playbooks plugin rather than the core Mattermost server.
Mattermost server crashes or becomes unavailable when an authenticated user sends multiple SDP messages compressed with zlib that decompress to arbitrarily large sizes, exploiting the absence of any decompressed-size cap. Affected are all Mattermost instances running versions 11.9.0, 11.8.4 and earlier in the 11.8.x line, 11.7.7 and earlier in the 11.7.x line, and 10.11.22 and earlier in the 10.11.x line. No public exploit code has been identified at time of analysis, and the CVE has not been added to the CISA KEV catalog.
Unbounded memory allocation during image decoding in Mattermost 10.11.x through 11.9.x allows any authenticated user to trigger a denial-of-service condition against the server. By uploading a specially crafted image - such as a decompression bomb - through any of several upload surfaces (profile picture, channel file attachment, team icon, or custom brand image), an attacker can cause the Mattermost server process to exhaust available memory. No public exploit code or active exploitation has been identified at time of analysis; the vendor addressed this under advisory MMSA-2026-00719.
Incorrect authorization enforcement in Apache Doris lets any authenticated user read data they were never granted privileges to access, breaking tenant and role isolation in the MPP database. The flaw affects the 2.0.x–2.1.x, 3.0.x, 4.0.0–4.0.7 and 4.1.0–4.1.3 lines, is remotely reachable by any low-privileged account without user interaction, and is rated CVSS 6.5 with confidentiality-only impact. Apache has published fixed releases 4.0.8 and 4.1.4; no public exploit code and no confirmed active exploitation were identified in the available intelligence.
Untrusted pointer dereference in the camera driver of Samsung Exynos 1580 and 2500 mobile processors allows a local low-privileged attacker to cause denial of service or leak limited kernel information across security boundaries by sending a malformed message to the driver. The scope-changed CVSS vector (S:C) indicates impact extends beyond the immediate process context into privileged system components. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Authenticated command injection in IBM i Access Family releases 1.1.2.0 through 1.1.9.15 allows a logged-in user to run arbitrary operating-system commands under their own normal user privileges by supplying a session file whose contents are parsed without proper input validation. Because the injected commands execute only with the rights of the invoking account, the confidentiality, integrity and availability impact is limited rather than system-wide. No public exploit code or CISA KEV activity is identified at time of analysis, and no EPSS score was supplied with the input data.
An authentication bypass in IBM WebSphere Application Server 9.0 and 8.5 allows an attacker on an adjacent network segment to reach and invoke an administrative console servlet without valid credentials, because the servlet is missing the authorization check that should gate it (CWE-862). Successful exploitation gives low-level confidentiality and integrity exposure plus a high availability impact on the affected server. IBM has released a vendor patch, and there is no CISA KEV listing, no publicly available exploit code, and no EPSS signal in the supplied data, so the practical risk is concentrated in environments where the admin console is reachable from an untrusted adjacent network.
Insufficient HTML sanitization in the WSO2 API Manager Publisher Portal and Developer Portal lets untrusted input be rendered without encoding, so malicious JavaScript injected into API documentation executes in the browser of anyone who opens the affected document. Attackers need an authenticated portal account with permission to author or edit API documentation, then can act on behalf of any user viewing that documentation depending on that user's session privileges. No public exploit code or active exploitation has been identified, and the vendor has released patched update levels for all affected release trains.
IBM i Access Client Solutions (ACS) versions 1.1.2.0 through 1.1.9.15 fail to properly validate user-supplied input in the emulator macro 'RunProgram' action, allowing an authenticated user to execute arbitrary operating-system commands with normal user privileges through a crafted macro. The flaw is a classic OS command injection (CWE-78) reachable over the network at low complexity, but it grants no privilege escalation beyond the invoking user's own rights, which is why IBM rates it 6.3 rather than critical. There is no public exploit code and no CISA KEV listing at time of analysis, so this is a hardening and lateral-movement concern rather than an urgent emergency patch item.
Improper input validation in the STRPCCMD CL command handling of IBM i Access Client Solutions (IBM i Access Family 1.1.2.0 through 1.1.9.15) lets an authenticated IBM i user inject and execute arbitrary operating-system commands on the machine running the ACS client, using only that user's normal privileges. IBM rated the issue CVSS 6.3 (AV:N/AC:L/PR:L/UI:N, low confidentiality/integrity/availability impact) and classifies it as OS command injection (CWE-78). There is no public exploit identified at time of analysis and no CISA KEV listing, so exploitation is not confirmed as active.
A race condition in Apple's kernel state handling lets a locally installed app corrupt kernel memory or trigger unexpected system termination across iOS/iPadOS, macOS, tvOS, visionOS, and watchOS. Apple addressed the flaw in iOS 18.7.10 and 26.6, iPadOS 18.7.10 and 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, and tvOS/visionOS/watchOS 26.6, so exploitation is limited to unpatched devices running a malicious app plus user interaction. No public exploit code and no active exploitation are known; EPSS is 0.17% (6th percentile) and CVSS rates it 6.3, reflecting a local, high-complexity attack with no confidentiality impact.
OS command injection in HackingBuddyGPT up to version 0.5.0 allows a remote low-privileged attacker to execute arbitrary commands on the host running the tool by manipulating input processed by the `ssh_run_command` function in `src/hackingBuddyGPT/extensions/ssh_run_command.py`. The function fails to sanitize shell metacharacters before constructing and executing SSH commands, creating a classic CWE-78 unsanitized-input-to-shell scenario. A publicly available proof-of-concept exploit exists (GitHub issue #150), and the maintainer has not responded to the disclosure; no patch has been released as of this analysis.
OS command injection in MacCMS10 2026.1000.4055 allows an authenticated administrator to execute arbitrary system commands on the underlying server via the Template Handler component by submitting a crafted URL-encoded path parameter. A public proof-of-concept exploit exists, referenced through a GitHub issue report against the project repository. No vendor patch has been released; the project maintainer has not responded to the disclosure.
OS command injection in D-Link DWR-M921 router firmware 1.1.52 permits authenticated remote attackers to execute arbitrary operating system commands by manipulating the sysCmd parameter submitted to the /boafrm/formsysCmd endpoint in the Boa embedded web server. Successful exploitation gives the attacker shell-level control over the device, enabling full compromise of routing, VPN, and wireless functions. A public proof-of-concept exploit has been disclosed on GitHub; no KEV listing or confirmed in-the-wild exploitation has been recorded at time of analysis.
Server-side request forgery in the Huly Platform print service (pod-print) through version 0.7.426 lets an authenticated workspace member hand an arbitrary URL to the print endpoint, which Puppeteer fetches and renders back as a downloadable PDF or image. Because no hostname allowlist is enforced, the headless browser can be steered at internal metadata services (e.g. cloud IMDS endpoints) and other network-internal hosts, turning the platform into an internal network proxy and credential-leak vector. No CISA KEV listing and no publicly available exploit code were identified at time of analysis, and CISA SSVC records exploitation as 'none' with automatable 'no'.
Let me synthesize. Product: Siglet / Eclipse Data Plane Core. The description mentions "Siglet" refresh token handler, CPE says eclipse_data_plane_core. Primary product name — 1-3 words. Probably "Eclipse Data Plane Core" or "Siglet". Let me pick "Siglet" — hmm, the CPE is Eclipse Data Plane Core. The description says "In Siglet current and past versions". Siglet appears to be a component within Eclipse Data Plane Core (Eclipse Dataspace Components). Tags list Eclipse Data Plane Core. I'll use "Eclipse Data Plane Core" as primary? The rules say pick primary product. The CPE is the authoritative affected product. But description says Siglet. Hmm. I'll say "Siglet" — actually product_name 1-3 words only. Let me choose "Eclipse Data Plane Core" (4 words? Eclipse, Data, Plane, Core = 4 words). That violates 1-3 words. "Siglet" is 1 word. I'll go with "Siglet". Hmm, but the affected products refer to Eclipse Data Plane Core. Perhaps Siglet is the SSI/token component. I'll use "Siglet" as product name and mention Eclipse Data Plane Core in affected_products. Actually, to be safe, maybe "Eclipse Data Plane Core" — 4 words is over. Let's use "Siglet". CVSS 6.3, vector CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N — network, high complexity, no privileges, no UI, low impact on C/I/A. CWE-290: Authentication Bypass by Spoofing. Issue: refresh token handler does not enforce proof of possession of the issuer DID. So an attacker who obtains a refresh token (or can present a refresh token) without proving possession of the private key corresponding to the issuer DID can redeem it — token theft/replay allows issuing new access tokens. That's authentication bypass by spoofing: the token handler accepts a refresh token without verifying the DID key binding. Affected versions: Eclipse Data Plane Core 0.1.0 ≤ 0.1.3 and commit range a6f7d4cc... < 882fe22d... Patch: Available from vendor. The commit 882fe22db42bc67abfd0304c4cdb141b762c35d1 is likely the fix com
DOM-based cross-site scripting in TripleLift's video-bundle.js ad rendering script allows unauthenticated remote attackers to execute arbitrary JavaScript within a publisher's domain by sending crafted postMessage events without origin validation. The attack requires social engineering a victim into visiting an attacker-controlled page, which then fires malicious postMessage payloads at any publisher page running the TripleLift video ad script. Successful exploitation enables session hijacking and unauthorized DOM manipulation in the victim's browser context on the publisher domain. A publicly available proof-of-concept exists; no KEV listing at time of analysis.
Server-side request forgery in netease-youdao LobsterAI affects the `buildBrowserConfig` function within the Browser Network Configuration component, enabling remote attackers to manipulate the application into making forged outbound network requests to attacker-specified targets. Versions 2026.6.15, 2026.8.28, 2026.9.3, and 2026.9.4 are confirmed affected per EUVD enumeration and NVD CPE wildcard coverage. A public proof-of-concept exploit is hosted on GitHub Gist; no vendor patch has been released, and the originating GitHub issue was closed automatically due to inactivity, suggesting no upstream remediation is forthcoming.
IBM Common Licensing Agent and ART versions 9.0 through 9.0.0.2 enforce input validation only on the client side, leaving the server-side API unprotected against modified requests. An attacker with local access can intercept or craft requests that bypass client-enforced restrictions, submitting values the application was not designed to accept, leading to unintended behavior - most critically characterized by IBM as high availability impact. No public exploit or active exploitation has been identified; SSVC classifies technical impact as partial with exploitation status as none.
Use-after-free
Use-after-free in GPAC's `gf_node_unregister` function (scenegraph/base_scenegraph.c) allows an attacker to cause a crash or limited memory corruption by supplying a crafted MP4, BT, or XMT scene file. The vulnerability arises from improper cleanup ordering of proto field default node values during scene graph teardown, with additional related issues in the BT and XMT scene loaders. A public proof-of-concept exploit exists (GitHub issue #3801 and dedicated write-up), though the CVSS 4.0 score of 2.1 and all-Low impact metrics indicate reliable code execution is unlikely - DoS via crash is the primary realistic outcome. No CISA KEV listing exists.
Use-after-free in GPAC's scene graph management allows remote attackers to cause memory corruption via a crafted multimedia scene file. The flaw exists in `gf_node_changed_internal` within `base_scenegraph.c` and is triggered when GPAC's BT/XMT scene loaders fail to properly track node lifecycle, leaving dangling references to freed nodes in `def_nodes` lists and proto field structures. A public proof-of-concept exploit has been disclosed and the vendor has released a fix in tag abi-16.23. No confirmed active exploitation (KEV) is recorded at time of analysis.
Link-following (symlink) handling in NanoClaw's agent-to-agent attachment forwarding lets an authenticated, low-privileged user cause the service to read or modify files outside the intended attachment directory. The flaw is in forwardAttachedFiles() in src/modules/agent-to-agent/agent-route.ts and affects every NanoClaw release from 2.1.0 through 2.1.17; the attack is network-reachable and requires no user interaction. Public exploit code exists and the vendor fix is identified as commit 3f9ed607b7e7a4872747295f75286f1c377d7c33, but real-world risk is currently low (CVSS 4.0 base 2.1, EPSS 0.29%, no CISA KEV listing).
Memory corruption in marcobambini Gravity scripting language versions 0.9.0 through 0.9.7 allows remote attackers with low-privilege access to trigger undefined behavior via crafted JSON input processed by gravity_json.c, potentially causing a crash or exploitable memory state in embedding applications. The root cause is a two-pass JSON parser design flaw where u.object.values is used as a size counter during the first pass but incremented with pointer arithmetic on a null pointer - undefined behavior per the C standard, confirmed to trap under -fsanitize=undefined. A publicly available proof-of-concept exists as GitHub issue #448; no active exploitation has been identified in the wild.
SQL injection in itsourcecode Leave Management System 1.0 lets a low-privileged, authenticated user manipulate the 'ID' argument of /module/company/index.php to run attacker-controlled SQL against the application's database. The flaw is a classic CWE-89 injection reachable over the network with no user interaction, but it requires an existing account on the application (CVSS 4.0 PR:L; assessed CVSS 3.1 PR:L), which is the main barrier to abuse. Publicly available exploit code exists (a proof-of-concept is linked from the VulDB submission and a GitHub issue), so the practical barrier is low for anyone who already holds credentials; however, EPSS is only 0.25% (16th percentile) and there is no CISA KEV listing, so signals converge on LOW real-world priority despite the injection class.
Out-of-bounds read in FFmpeg's convolution video filter (libavfilter/vf_convolution.c, function setup_3x3) affects releases 4.4.0–4.4.6, 5.1.0–5.1.8, 6.1.0–6.1.4, 7.1.0–7.1.3 and 8.0.0–8.0.1, allowing crafted media input to read past allocated buffers and potentially disclose memory or crash the process. Publicly available exploit code exists via the FFmpeg issue tracker, and the fix commit (8970658472d1 / e24b9820b4) has been published, with corrected releases 4.4.7, 5.1.9, 6.1.5, 7.1.4, 8.0.2, 8.1.1 and 9.0. Impact is limited: CVSS 2.1, and exploitation requires the non-default convolution filter to be applied to attacker-influenced input, so this is a low-severity hardening issue rather than an urgent patch-now event.
Authorization bypass via Insecure Direct Object Reference (IDOR) in SourceCodester Inventory Management System 1.0 allows authenticated remote attackers to access arbitrary invoice records by manipulating the ID parameter in invoice.php. The flaw is classified as CWE-639 (Authorization Bypass Through User-Controlled Key), meaning the application trusts a user-supplied identifier to gate access without server-side ownership verification. A publicly available proof-of-concept exploit exists on GitHub; no public KEV or active exploitation has been confirmed at the time of analysis.
Improper authorization in cosmicstack-labs mercury-agent's PermissionManager.checkShellCommand function (versions 1.1.0 through 1.1.13) allows authenticated remote attackers to bypass the shell command permission gate enforced in mercury-agent/src/capabilities/permissions.ts. A public exploit was released via GitHub issue #101, and the vendor has not responded to the coordinated disclosure. The CVSS 4.0 base score is 2.1 (low), reflecting constrained impact due to authentication prerequisites and limited C/I/A blast radius, with no CISA KEV listing confirmed at time of analysis.
SQL injection in itsourcecode Sales and Inventory System 1.0 allows an authenticated remote attacker to manipulate backend database queries via the unsanitized prodcode parameter in /pages/pro_edit1.php. A public proof-of-concept exploit exists on GitHub, lowering the barrier to exploitation for any attacker holding a low-privilege account. The CVSS 4.0 score of 2.1 reflects constrained partial database read, write, and availability impact rather than full compromise, and no active exploitation has been reported.
Cross-site scripting (CWE-79) in IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001, including the corresponding container editions, allows a remote unauthenticated attacker to run script in the browser of a logged-in user who follows a crafted link, potentially hijacking an authenticated session or performing actions as that user. The CVSS 3.1 base score is 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), which reflects the need for victim interaction and the limited but scope-changing confidentiality and integrity impact typical of reflected XSS. There is no public exploit code identified at time of analysis, no confirmed active exploitation (not in CISA KEV), and the EPSS probability is only 0.20% (10th percentile), so this is a patching-hygiene issue rather than an emergency response item.
An incorrect-authorization flaw in Apple's Bluetooth state management allows an already-installed app to obtain Bluetooth access it was never granted, undermining the platform's per-app permission model on iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27 - but only on versions prior to those releases. Apple fixed the issue through improved state handling and published coordinated advisories for every affected platform; a local attacker or malicious app is required, so this is not remotely reachable without code execution already on the device. No public exploit code has been identified and EPSS is very low (0.20%, 10th percentile), so this rates as a patching-hygiene item rather than an emergency.
An out-of-bounds write in the Apple macOS kernel allows a locally running application to corrupt kernel memory, potentially causing unexpected system termination or arbitrary kernel memory writes. The flaw affects macOS releases prior to Sequoia 15.8, Tahoe 26.7, and Golden Gate 27, with a CVSS base score of 6.1 (AV:L/AC:L/PR:L/UI:N) reflecting the requirement for local code execution with attacker-controlled privileges. No public exploit code has been identified at time of analysis, and EPSS probability is very low (0.16%, 6th percentile), suggesting targeted rather than opportunistic exploitation; CISA KEV does not list this CVE.
Server-side request forgery in cosmicstack-labs Mercury Agent (versions 1.1.0 through 1.1.13) lets an attacker who can influence the `path` argument of the GitHub API handler force the agent to issue requests to arbitrary hosts, including internal services reachable from the agent's network position. The flaw is in the githubRequest function of src/utils/github.ts (CWE-918), and publicly available exploit code exists — the reporter's tracking issue (#81) on the project repository is public. The maintainer was informed early through an issue report but has not responded, so no vendor-released fix is confirmed at time of analysis.
Mercury Agent versions through 1.1.13 gate shell execution by validating commands before canonicalizing them, so a caller with low privileges can craft input that passes the raw-string permission check yet resolves to a protected target, disclosing restricted data over the network. The flaw is a validate-before-canonicalize ordering error (CWE-180) in checkShellCommand within src/capabilities/permissions.ts, and publicly available exploit code exists via the project's own issue tracker. The project was notified early but has not responded, so no vendor fix is available, and the CVSS 4.0 base score of 2.1 reflects only a limited confidentiality impact.
Reflected cross-site scripting in itsourcecode Loan Management System 1.0 allows a remote, unauthenticated attacker to inject arbitrary script through the 'page' argument processed by navbar.php, because the value is echoed back into the HTML response without output encoding. Publicly available exploit code exists (a GitHub issue referenced from the CVE record), and the CVSS 4.0 base score is only 2.1 because exploitation requires the victim to interact and the demonstrated impact is limited to integrity (VI:L) with no confidentiality or availability loss and no scope change. It is not reported as actively exploited and no CISA KEV entry is present.
A use-after-free in GPAC's scene-graph handling (gf_sg_script_load path) lets a crafted MP4/VRML scene file corrupt memory when processed by MP4Box or any application embedding libgpac. Publicly available exploit code exists and the flaw is remotely deliverable, though exploitation requires the victim or an ingestion pipeline to actually open the malicious media file (UI:P). A vendor fix is available in release abi-16.23 / commit 9eb40df4448b88d6a6ce3454657c06f47eff0b24, and the CVSS 4.0 base score is only 2.1 because confidentiality, integrity and availability impacts are all rated Low.
GPAC's MP4Box (through commit f1219cde) crashes with a null pointer dereference in gf_node_list_get_child when it parses a crafted BT or XMT scene description that targets a non-child node field, giving attackers a denial-of-service against anyone who opens the malicious file. Publicly available exploit code exists (linked from the CVE references), and the vendor has already shipped a fix in release abi-16.23 (commit afca1f1181668d85941d51ed1adf647807d5d975), yet CVSS 4.0 scores the issue only 2.1 because impact is limited to availability and exploitation requires the victim to feed the file to GPAC. The CVE record has no KEV listing, so this is a PoC-level, low-severity crash bug rather than an actively exploited threat.