PraisonAI's TypeScript MCP server (npm package `praisonai`, versions 1.5.0 through 1.7.1) exposes an HTTP JSON-RPC transport that performs no authentication or authorization, so any network client that can reach the listening port can call tools/call, resources/read, or prompts/get and trigger registered handlers with the server process's credentials and privileges. The server's startHttp() binds the unspecified address (all interfaces) with no host restriction and ignores the Authorization header entirely; the CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8) confirms this is unauthenticated and remotely reachable, though exploitation requires the operator to have enabled the HTTP transport and made the port network-reachable. Publicly available exploit code exists (a public gist), but there is no evidence of confirmed active exploitation, and the EPSS score is low at 0.64% (49th percentile); the vendor-released fix is version 1.7.2.
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a victim's local MCP listener while preserving an attacker-controlled `Host` and `Origin`. The server accepts those headers and reaches the MCP initialization path instead of rejecting the request at the HTTP boundary. Version 2.1.30 contains a patch.
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYNAMIC_API_URL=true` is set, the server reads the `X-GitLab-API-URL` HTTP request header and uses it as the base URL for all outbound GitLab API calls made within that request. The server validates that the value is a well-formed URL (`new URL(dynamicApiUrl)`) but applies no allowlist or hostname restriction. The server then attaches the victim's `Private-Token` to every outbound fetch that uses the redirected URL. Any caller who can reach the HTTP transport can set `X-GitLab-API-URL` to an attacker-controlled host. The next GitLab API call the server makes delivers the victim's token to that host. Version 2.1.27 contains a patch.
Cross-organization user administration takeover in Casdoor through 4.4.0 allows any holder of a single application's clientId and clientSecret to act on user accounts across all organizations. The flaw is an authorization bypass in the /api/mcp endpoint that exposes password salts, email addresses, and account creation/modification/deletion capabilities. Public exploit documentation exists, but no active exploitation status or EPSS data was provided.
Unauthenticated OS command injection in the ping.php endpoint of Trexom's TrxTimeATTENDANCE (versions 1.0.5 through 1.9.5, fixed in 1.9.6) allows any remote attacker who can reach the endpoint to execute arbitrary operating-system commands and obtain remote code execution with the privileges of the web server process. The flaw, classified CWE-78 and scored 9.3 under CVSS 4.0, is remotely exploitable with no authentication or user interaction (PR:N/UI:N/AC:L), and publicly available exploit code exists, elevating the risk for any instance exposed beyond a trusted LAN. CISA's SSVC assessment records exploitation as 'none' at time of analysis (no KEV listing), but the total technical impact and full automatability make this a high-priority patch item for the niche organizations running this time-and-attendance application.
Unauthenticated credential takeover in pig-mesh Pig before 4.1.0 allows any remote attacker who can reach the /register/password endpoint to overwrite the password of an arbitrary account, including the built-in 'admin' account, and thereby obtain full administrative control of the platform. The flaw is an authentication bypass: the endpoint's password-reset logic calls checkPassword() but discards the boolean result, so the submitted 'current password' is never actually validated. Publicly available exploit code exists (a proof-of-concept write-up and the upstream issue are linked), and the vendor has released version 4.1.0 as the fix; there is no indication of confirmed exploitation in CISA KEV at the time of analysis, but the combination of unauthenticated remote exploitation, high impact (CVSS 4.0 base 9.3; independently assessed CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and public exploit code makes rapid patching warranted.
PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript with new Function() inside with(sandbox) and relies on a small source-code blocklist plus shadowed process and require properties. Code can use ({}).constructor.constructor to recover the real Function constructor, obtain process and process.mainModule.require, and reach host filesystem and subprocess APIs despite the advertised sandbox. Attackers who control codeMode input can read secrets, modify files, execute commands, or exhaust the host process. This issue is fixed in version 1.7.2.
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).
Unauthenticated remote takeover of Oracle Forms is possible in the Forms Services (C/S, Charmode) component of Oracle Fusion Middleware running versions 12.2.1.19.0 and 14.1.2.0.0. An attacker who can reach the Forms HTTP interface with no credentials, no user interaction, and no special privileges can bypass authentication and gain full control of the affected deployment, and the CVSS scope-change flag (S:C) indicates the compromise can significantly impact additional products tied to the same environment. The vendor-rated CVSS 3.1 base score is 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), and the flaw is described as easily exploitable, though no public exploit identified at time of analysis.
Takeover of Oracle Internet Directory via its LDAP server component allows unauthenticated remote attackers to fully compromise the directory service. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is rated CVSS 10.0 with scope change; no public exploit or CISA KEV listing was identified in the provided data.
Unauthenticated remote attackers can achieve full takeover of Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 by exploiting an authentication bypass in the Web Container component reachable over HTTP. The vulnerability carries a CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), meaning no credentials, user interaction, or special preconditions are required beyond network reachability to the WebLogic HTTP listener; the Scope:Changed rating indicates successful exploitation can also compromise additional products beyond WebLogic itself. There is no public exploit identified at time of analysis and no confirmed active exploitation (no CISA KEV listing), but the trivial attack preconditions and maximum severity rating make this a top-priority patch target for any internet-exposed deployment.
Unauthenticated remote attackers can achieve full takeover of Oracle Platform Security for Java (OPSS) versions 12.2.1.4.0 and 14.1.2.0.0, an authentication-bypass flaw (CWE-287) in the Centralized Thirdparty Jars component of Oracle Fusion Middleware that carries a maximum CVSS 3.1 base score of 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). Because the scope is marked as changed (S:C), Oracle warns that a successful compromise of OPSS - the shared security services layer that other Fusion Middleware components depend on - may significantly propagate impact to additional products, which is what elevates this above the otherwise near-identical 9.8-rated issue. No public exploit code has been identified and there is no CISA KEV listing at time of analysis, but Oracle characterises the flaw as 'easily exploitable' with no privileges or user interaction required, so the practical limiting factor is whether the affected middleware's HTTP surface is network-reachable - internet-exposed deployments are at the highest risk.
Authentication bypass in Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 lets an unauthenticated remote attacker with HTTP network access compromise the product's Authentication Engine and take over the affected instance. Rated CVSS 3.1 base 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), the scope-change flag means a successful compromise propagates to downstream applications that trust OAM for authentication, widening impact well beyond the OAM host itself. No public exploit has been identified at time of analysis, but the pre-auth, network-reachable attack path makes this a top-tier priority for any organization running the two named versions.
Sandbox escape in the python_sandbox_server subproject of IBM MCP Context Forge (versions up to and including 1.0.1) allows a remote, unauthenticated attacker to execute arbitrary OS commands with the privileges of the server process. The vulnerable execute_code MCP tool can be exposed over the HTTP/SSE transport without any authentication layer, so any client that can reach the endpoint can submit a payload via tools/call; publicly available exploit code exists (the vendor advisory includes a working local PoC with artifact hashes). Exploitation is conditional on the optional python_sandbox_server being deployed and network-reachable - the core Context Forge gateway and proxy components are not directly affected, and stdio-only deployments are not remotely exposed - but when reachable it is a critical-severity, unauthenticated code-execution path.
Remote code execution in the PraisonAI TypeScript `codeMode` tool (npm package `praisonai` <= 1.7.1) lets an attacker who can influence the model-generated `code` argument escape the regex blocklist 'sandbox' and run arbitrary JavaScript with the host process's privileges, reading and writing files, harvesting environment credentials, and executing operating-system commands. The CVSS 3.1 vector is unauthenticated and network-facing (AV:N/AC:L/PR:N/UI:N, 9.8) with total confidentiality and integrity impact, though the real-world prerequisite is that `codeMode` is enabled for an agent and the attacker can steer the tool argument - typically through prompt injection into untrusted content the agent ingests. Publicly available proof-of-concept code exists (published in the GitHub advisory, demonstrated against Node.js v20.20.0), EPSS is a low 0.77% (54th percentile) and CISA SSVC records Exploitation: none, so there is no confirmation of active exploitation at time of analysis; the vendor fix is version 1.7.2.
Unauthenticated authentication bypass in praisonai-platform prior to 0.1.6 (and PraisonAI before 4.6.51) allows a remote attacker to forge HS256 session JWTs using the publicly known default signing key 'dev-secret-change-me' and be accepted as any identity the attacker names in the token's sub claim, including a workspace owner. The vulnerable state is the shipped default: the documented startup command sets neither PLATFORM_JWT_SECRET (so the hardcoded fallback is used) nor PLATFORM_ENV (which stays at 'dev', leaving the startup and token-issuance guards default-open). CVSS 3.1 scores this 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), consistent with an unauthenticated full-compromise primitive; EPSS is low at 0.53% (43rd percentile), no public exploit code was identified at time of analysis, and there is no CISA KEV listing, although the flaw is trivially exploitable against default deployments and the only practical constraint is that workspace-owner takeover requires knowing the target owner's user/sub identifier.
Authentication bypass in praisonai-platform before 0.1.6 lets any remote unauthenticated attacker mint a valid HS256 JSON Web Token and impersonate arbitrary users against protected API routes. The flaw is a hardcoded fallback signing secret ('dev-secret-change-me') combined with a production guard that never fires when the operator leaves both PLATFORM_JWT_SECRET and PLATFORM_ENV unset - the common mis-deploy - so the platform silently starts signing tokens with a publicly known literal drawn straight from the source code. CVSS 3.1 scores this 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and EPSS is 0.51% (42nd percentile); there is no CISA KEV listing and no public exploit identified at time of analysis, though exploitation requires nothing more than a forged token and no authentication whatsoever.
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Authenticated takeover of Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 is achievable through the Platform Security component by a low-privileged attacker with network HTTP access, producing high confidentiality, integrity and availability impact (CVSS 9.9, scope change). Exploitation is straightforward once any valid low-privilege credential or session is held - attack complexity is low and no user interaction is required - and the scope change means a successful compromise can extend beyond BI EE into other products integrated with the platform. No public exploit code has been identified at time of analysis, and Oracle classifies the flaw as easily exploitable in its Critical Security Patch Update advisory.
Takeover of Oracle Internet Directory (OID) is possible for a network-positioned attacker who holds only low-level authenticated privileges on the directory, affecting versions 12.2.1.4.0 and 14.1.2.1.0. Exploitation requires a valid low-privilege LDAP bind credential (PR:L) but no user interaction; the scope change means a successful compromise can propagate to other Oracle Fusion Middleware products that depend on OID for identity. No public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV.
Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 can be taken over by a low-privileged attacker with network access to the OID LDAP server, an easily exploitable condition that Oracle rates at CVSS 3.1 base 9.9. The vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) indicates no user interaction is needed, only a low-privileged LDAP-reachable position, and that the scope change lets the impact extend beyond OID to dependent products, with full loss of confidentiality, integrity and availability on the directory itself. This is a genuine high-priority issue for organizations exposing OID LDAP services; no public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, so the immediate driver is the large attack surface of directory services rather than confirmed active exploitation.
Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 can be fully taken over through the OID LDAP Server component by a low-privileged attacker who already holds valid directory credentials and can reach the LDAP service over the network. The flaw is trivial to trigger once access is obtained (AC:L, UI:N) and carries a scope change, meaning downstream Fusion Middleware products that depend on OID for identity and authentication services can also be impacted; CVSS 3.1 rates it 9.9 with high confidentiality, integrity and availability impact. There is no indication of confirmed active exploitation (no CISA KEV listing) and no public exploit code identified at time of analysis, but the authentication prerequisite is the main barrier - a low-privilege LDAP account, not an anonymous connection. Patch availability via the Oracle September 2026 Critical Patch Update makes this a high-priority, patching-window issue rather than an emergency zero-day response.
Low-privileged authenticated LDAP access to Oracle Internet Directory 12.2.1.4.0 or 14.1.2.1.0 can be escalated into full takeover of the directory service, with a scope change that lets a compromise propagate into other Oracle Fusion Middleware components and identity-dependent applications. Oracle rated this 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), meaning a remote attacker only needs a valid low-privilege directory credential or authenticated LDAP session - no user interaction - to fully compromise confidentiality, integrity, and availability of OID. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, but because OID is typically a central identity store, the blast radius justifies treating this as an urgent patch item; the corresponding Oracle Critical Security Patch Update advisory is the authoritative source for affected fix versions.
A low-privileged authenticated attacker with HTTP network access can fully compromise Oracle WebCenter Portal through its Composer component, achieving complete loss of confidentiality, integrity and availability plus a scope change that can extend impact to connected downstream products. Only versions 12.2.1.4.0 and 14.1.2.0.0 are affected, and the attack requires no user interaction and has low complexity - the sole meaningful barrier is that an attacker must already hold valid credentials (PR:L), so this is not a pre-authentication flaw. No public exploit code has been identified at time of analysis and there is no confirmed active exploitation (no CISA KEV listing), but the 9.9 CVSS score and the ease of exploitation once credentials are obtained make this a high-priority patch item.
An authenticated, low-privileged attacker with network access over HTTP can achieve full takeover of Oracle WebLogic Server through its TopLink Integration component in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, with a CVSS 3.1 base score of 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Because attack complexity is low, no user interaction is required, and the scope is changed, a successful exploit can compromise the confidentiality, integrity and availability of the server and may significantly impact additional, dependent or co-located products. The reachability of the flaw is limited only by the requirement for a low-privileged authenticated foothold; no public exploit identified at time of analysis and the issue does not appear in CISA KEV, so risk is driven by the severity and broad enterprise exposure of WebLogic rather than by observed exploitation.
A low-privileged authenticated attacker with network access over HTTP can achieve complete takeover of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0, with a CVSS 3.1 base score of 9.9 - the scope-change flag (S:C) indicates that a successful compromise can also significantly impact other co-located Fusion Middleware and WebLogic components, not just Sites itself. No user interaction is required, though valid low-privilege credentials (or a low-privilege session that can be obtained) are a prerequisite, so this is not pre-authentication. There is no public exploit identified at time of analysis and no confirmed active exploitation, but the low attack complexity and full confidentiality, integrity, and availability impact make this a high-priority item for any organization running the affected versions.
Authenticated, low-privileged attackers with network HTTP access to the Messaging Enabler component of Oracle Service Delivery Platform (Fusion Middleware) can achieve full takeover of the platform, and because the CVSS profile carries a scope change (S:C) the compromise can extend to additional connected products beyond SDP itself. Oracle rates the issue CVSS 3.1 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), affecting SDP 12.2.1.4.0 and 14.1.2.0.0; exploitation needs valid low-privilege credentials but no user interaction, at low attack complexity, and no public exploit code has been identified at time of analysis. The realistic limiting factors are the credential prerequisite, the narrow deployment base of this specialized telecom service-delivery platform rather than general-purpose middleware, and the fact that the vector is well-calibrated rather than inflated.
Takeover of Oracle Fusion Middleware's Service Delivery Platform (Messaging Enabler component) is achievable by a low-privileged, network-positioned attacker, carrying a CVSS 3.1 base score of 9.9 with a scope change (S:C) that lets a successful compromise spill over into other products. The affected releases are 12.2.1.4.0 and 14.1.2.0.0, and the attack path is the T3 and IIOP listeners; per the assessed vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) the attacker must already hold a valid low-privileged account on the platform, but no user interaction is required and confidentiality, integrity and availability impacts are all High. There is no public exploit code identified at time of analysis and the vulnerability is not listed in CISA KEV, so urgency rests on the near-maximum score and the exposure of internal T3/IIOP ports rather than on observed exploitation; the residual risk drops sharply where those proprietary protocols are firewalled or the platform is segmented away from untrusted users.
Authenticated remote attackers who can reach the WebLogic T3 or IIOP remoting interfaces of Oracle Fusion Middleware's Service Delivery Platform (Messaging Enabler) can take over the product entirely, with the compromise extending to connected Oracle components because of the scope change. The flaw affects Service Delivery Platform 12.2.1.4.0 and 14.1.2.0.0 and carries a CVSS 3.1 base score of 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) - no user interaction is required, but a valid low-privileged account is a prerequisite, so it is exploitable (not unauthenticated). No public exploit code and no confirmed active exploitation were identified at time of analysis; practical exposure is further narrowed because T3/IIOP ports are commonly firewalled or not internet-facing in hardened WebLogic deployments.
Information disclosure in the HPE Aruba EdgeConnect SD-WAN Orchestrator allows a remote attacker holding only a valid read-only account to retrieve sensitive configuration data, including third-party API tokens and credentials, by sending a specially crafted request to the cache synchronization endpoint. The vendor-supplied score of 9.9 reflects a scope-changed vector with high confidentiality and integrity impact, whereas independent reassessment places the realistic impact at confidentiality-only (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), because the flaw leaks data rather than altering system state. No CISA KEV entry and no public exploit code were identified at time of analysis, so the practical risk scales with how broadly low-privilege accounts are provisioned and whether the Orchestrator management interface is reachable from untrusted networks.
Privilege escalation in HPE Networking EdgeConnect SD-WAN Orchestrator (builds 9.4.0 through 9.4.10, 9.5.0 through 9.5.8, 9.6.0 through 9.6.3, and 9.7.0) allows an authenticated, low-privileged user of the Orchestrator API to elevate themselves to an administrative role and take full control of the SD-WAN management plane. The issue is network-reachable, low complexity, and needs no user interaction (CVSS 3.1 AV:N/AC:L/PR:L/UI:N with high confidentiality, integrity and availability impact), but it is not exploitable before authentication, so the realistic attack surface is limited to deployments that hand out Orchestrator accounts - multi-tenant, self-service, or otherwise heavily populated role models, and far less so to single-admin environments. No public exploit code has been identified at time of analysis and the issue is not listed as actively exploited (no CISA KEV entry); the vendor rates it 9.9 with a scope change, while our independent assessment agrees on the impact metrics but scores it without a scope change.
Privilege escalation in the HPE Networking EdgeConnect SD-WAN Orchestrator API allows a remote, low-privileged but authenticated user to raise their permissions to administrative level, resulting in complete compromise of the management plane. Only holders of a valid low-privilege API account with network reachability to the API can trigger it (CVSS:3.1/AV:N/AC:L/PR:L/UI:N), so the practical risk depends on how API accounts are provisioned and whether the management interface is segmented away from untrusted networks. Our assessment scores the issue as scope-unchanged (S:U) rather than the 9.9 / S:C vendor figure, which makes this a genuine high-priority issue rather than a CVSS-inflated one; no public exploit code has been identified at time of analysis, and the CVE is not in CISA KEV. Note that the affected version data names EdgeConnect SD-WAN Gateways while the description names the Orchestrator, so the exact affected component should be confirmed against the HPE advisory.
Low-privileged, authenticated attackers with network access over HTTP to the Composer component of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 can fully take over the affected deployment, with the scope change (S:C) meaning impact can extend into other connected Oracle Fusion Middleware products. Oracle rates the flaw as 'easily exploitable' with low attack complexity, no user interaction, and complete loss of confidentiality, integrity, and availability (CVSS 3.1 base score 9.9, vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). The practical bar is a valid low-privilege account, which makes this a genuine high-priority issue for internet- or broadly reachable WebCenter Portal instances rather than a theoretical high-score artifact; no public proof-of-concept and no CISA KEV entry were identified at time of analysis, so there is no public exploit identified at time of analysis.
Full takeover of Oracle Access Manager (OAM) is achievable by a low-privileged, authenticated attacker who can reach the Authentication Engine component over HTTP, with no user interaction and low attack complexity, yielding a CVSS 3.1 base score of 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Only OAM 12.2.1.4.0 and 14.1.2.1.0 within Oracle Fusion Middleware are listed as affected, but the scope-change rating (S:C) means a successful compromise of the Authentication Engine is not contained to OAM and can significantly impact other products that trust OAM for authentication and federation. No CISA KEV listing and no public exploit code were identified at time of analysis; the practical gate is the requirement for a valid low-privileged account rather than exploit sophistication, which makes this a genuine high-priority issue for any internet-reachable or partner-federated OAM deployment.
Authentication weaknesses in the Oracle Access Manager Authentication Engine expose deployments running 12.2.1.4.0 and 14.1.2.1.0 within Oracle Fusion Middleware: an attacker with network access over HTTP and only a low-privileged foothold can bypass or subvert authentication to create, delete, or modify critical data and read data across the OAM-accessible estate, while also degrading service availability. Because the CVSS vector carries a scope change (S:C), a compromise of OAM can propagate to other products that rely on it as their single sign-on and identity provider, which is what pushes the base score to 9.9 rather than the more typical 8.x for an authenticated-only flaw. No user interaction is required and attack complexity is low, though the PR:L rating means the attacker must already hold at least minimal valid access or be able to reach an authenticated interface - this is not a fully unauthenticated pre-auth bypass. There is no CISA KEV listing and no public exploit code identified in the available intelligence, so exploitation is not confirmed actively exploited (CISA KEV) and no public exploit identified at time of analysis.
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes all MCP tools without any authentication. The `upload_markdown` tool reads arbitrary files from the server's local filesystem via an unsanitized `file_path` parameter and uploads them to a GitLab project. Combined, any unauthenticated network-reachable attacker can read `/proc/self/environ` to steal the server's `GITLAB_PERSONAL_ACCESS_TOKEN` and achieve full GitLab account takeover. This is the default configuration for Docker deployments. Version 2.1.27 contains a patch.
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue.
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobile Application Server. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Application Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attacks of this vulnerability can result in takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: Metrics). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager for Fusion Middleware. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager for Fusion Middleware. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Unauthenticated HTTP exploitation of Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 can lead to full takeover of the application. The vulnerability resides in the Client Bundle component and is easily exploitable over the network without credentials. No public exploit or CISA KEV listing was identified in the provided data.
Improper authentication in the Personalization component of Oracle Applications Framework (Oracle E-Business Suite 12.2.3 through 12.2.15) lets an unauthenticated remote attacker reach the SOAP interface and take over the framework, with full confidentiality, integrity and availability impact (CVSS 3.1 base 9.8, AV:N/AC:L/PR:N/UI:N). CISA's SSVC assessment rates the technical impact as total and the vulnerability as automatable, meaning exploitation could be scripted and scaled once a target is reachable. No public exploit code or confirmed active exploitation was identified at time of analysis, so the practical risk is driven mainly by whether an organisation exposes EBS SOAP endpoints to untrusted networks.
Authentication bypass in Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 (Platform Security component) lets an unauthenticated remote attacker with HTTP access take over the BI platform, yielding full confidentiality, integrity, and availability impact (CVSS 3.1 9.8, vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No public exploit code and no confirmed active exploitation have been identified at time of analysis, so exposure drives urgency: internet-facing BI EE instances are the highest priority, while internal-only deployments carry materially lower reach. The blast radius is bounded by the fact that only the single supported release 12.2.1.4.0 is affected and the sole prerequisite is network reachability of the BI EE HTTP interface.
Authentication bypass in Oracle BI Publisher (BI Platform Security component of Oracle Analytics) lets unauthenticated remote attackers with HTTP access take over the affected system, with full confidentiality, integrity, and availability impact. Affected versions are 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and score of 9.8 confirm an easily exploitable, automatable condition; no public exploit or evidence of active exploitation was identified at time of analysis, but CISA SSVC classifies technical impact as total and the vulnerability is automatable, making exposed instances a high priority to patch or isolate.
Unauthenticated, network-reachable attackers can achieve full takeover of Oracle Product Lifecycle Analytics 3.6.1 through a weakness in the Core component of Oracle Supply Chain, scoring CVSS 3.1 base 9.8 (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H, CWE-287 improper authentication). Exploitation requires no credentials, no user interaction, and no non-default configuration - only that the PLA HTTP interface be reachable from the attacker's network. No public exploit code has been identified at time of analysis and CISA's SSVC assessment records Exploitation: none, though the vulnerability is rated Automatable: yes with Total technical impact, making it a high-priority target for internal enterprise deployments.
Unauthenticated remote attackers who can reach the Oracle Data Integrator Console / Repository Explorer over HTTP can bypass authentication entirely (CWE-287) and take full control of the affected deployment, affecting versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Fusion Middleware's ODI product. The flaw is rated CVSS 3.1 base 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning no credentials, no user interaction, and no special preconditions beyond network reachability of the console interface - the primary exposure limiter is whether the ODI Console is internet-facing versus segmented behind VPN or internal-only access. As of analysis, there is no CISA KEV entry and no public exploit identified at time of analysis, though CISA's SSVC assessment rates the issue as automatable with total technical impact, so patching should be treated as urgent rather than deferred.
Unauthenticated attackers with network access to the SOAP interface of Oracle Service Delivery Platform (SDP) versions 12.2.1.4.0 and 14.1.2.0.0 can bypass authentication and achieve full takeover of the product, per CWE-287 and a CVSS 3.1 base score of 9.8. The flaw is remotely exploitable without privileges or user interaction (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), and no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis. Real-world risk is concentrated in telecom environments where the Messaging Enabler component is deployed and network-reachable.
Unrestricted network access to Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 allows unauthenticated attackers to bypass authentication in the Forms Services C/S/Charmode component and take over the application, with CVSS 9.8 and no user interaction. No public exploit or CISA KEV listing is present in the supplied intelligence, but the Oracle advisory confirms the affected versions. Organizations running these releases should treat the flaw as critical and patch immediately.