Unauthenticated attackers positioned on an adjacent network segment can crash HPE Networking EdgeConnect SD-WAN Gateway appliances by sending crafted traffic, causing a denial of service that the device cannot recover from without manual intervention. All four maintained firmware branches are affected: 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and 9.7.0.0. The vendor rates this 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) and the only publicly indexed advisory is HPE's own security bulletin (hpesbnw05135en_us); no CISA KEV listing, EPSS score, or public proof-of-concept code was present in the supplied intelligence, so active exploitation is unconfirmed.
Unauthenticated attackers with network access to Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 can compromise the Authentication Engine component over HTTP, obtaining unauthorized read access to critical data or all data accessible through the product. Oracle rates this CVSS 3.1 8.6 with a scope change (S:C), meaning affected deployments can be leveraged to significantly impact downstream/connected applications that trust OAM identities. At time of analysis there is no public exploit code identified and no CISA KEV listing, but the attack is trivially automatable (AV:N/AC:L/PR:N/UI:N), so internet-exposed OAM consoles and SSO endpoints should be treated as high priority.
Unauthenticated remote code execution affects Dell Wyse Management Suite deployments running any version prior to 2605.0.3.683, caused by an unrestricted file upload (CWE-434) that lets an attacker place a file of a dangerous type on the server. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, no credentials or user interaction are required, and the high integrity impact (I:H) reflects the ability to modify or replace server-side content with attacker-controlled code. No public exploit code and no CISA KEV listing were identified at time of analysis, but the low attack complexity and network reachability of the WMS administrative web interface make rapid patching the correct posture.
Unauthenticated remote code execution in Dell Wyse Management Suite (WMS) lets any remote attacker who can reach the management/web interface upload a file of a dangerous type and have it executed on the WMS server, affecting all releases prior to 2605.0.3.683. Per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no credentials and no user interaction are required, so the only meaningful barrier is network reachability of the WMS console; this presents as a high-priority exposure for any organization with the console exposed beyond a trusted management network. There is no indication of confirmed active exploitation (the issue is not in CISA KEV) and no public exploit code has been identified at time of analysis, though Dell rates it 8.6 and independent assessment places the impact higher (C:H/I:H/A:H) than the vendor vector's C:L/I:H/A:L, reflecting full confidentiality, integrity and availability loss on the WMS host.
Unauthenticated remote attackers can upload files of dangerous type to Dell Wyse Management Suite deployments running versions prior to 2605.0.3.683, because the console fails to restrict uploaded file types (CWE-434), which allows a crafted payload such as a web shell to be placed and executed on the server. The flaw carries a CVSS 3.1 base score of 8.6 (AV:N/AC:L/PR:N/UI:N), meaning no credentials or user interaction are required — only network reachability to the WMS web interface. Neither CISA KEV listing nor public exploit code has been identified in the supplied intelligence, so at time of analysis this is a severe but not yet confirmed-exploited issue.
Agent-coderag versions up to and including 1.3.0 execute a repository-supplied Gradle wrapper during the default `agent-coderag sync` dependency-discovery flow, letting an attacker who plants a malicious `gradlew` in a Gradle project run arbitrary code with the victim's operating-system privileges. The flaw is a command-injection design error (CWE-78) in `code_rag/core/manager.py`, where a repository-local `gradlew` is unconditionally preferred over the system `gradle` binary and passed to `asyncio.create_subprocess_exec`; CVSS 3.1 base 8.6 with user interaction required (UI:R) because the victim must index the hostile repository. Upstream fixed the issue in 1.3.1 by using only the PATH-resolved system `gradle`; no public exploit code has been identified and the CVE is not in CISA KEV at time of analysis.
Authentication bypass in the Security component of Oracle Hyperion Financial Management 11.2.26.0.000 lets a low-privileged user with network access over HTTP read critical financial data and make limited unauthorized modifications, with a scope change that can expose other connected Oracle products. Oracle rates it CVSS 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N), meaning exploitation requires only a low-privileged authenticated session — not administrative rights — and no user interaction. No public exploit code has been identified and the issue is not listed as confirmed actively exploited (CISA KEV); no EPSS score was supplied with the available data, so real-world exploitation likelihood is unquantified at this time.
Improper access control in the Oracle HRMS (India) module of Oracle E-Business Suite lets a low-privileged, network-connected attacker read, and to a lesser extent modify, data they should not reach by sending crafted HTTP requests to the Internal Operations component. Supported releases 12.2.3 through 12.2.15 are affected; due to a scope change the compromise can propagate beyond the HRMS (India) module into other reachable EBS data. No public proof-of-concept, EPSS score, or CISA KEV listing was present in the supplied intelligence, so there is no confirmed evidence of active exploitation at time of analysis.
Oracle iRecruitment, a module of Oracle E-Business Suite, contains an easily exploitable flaw in its Internal Operations component affecting versions 12.2.3 through 12.2.15. An attacker holding a low-privileged account can exploit it over HTTP without user interaction to read critical recruitment data and modify some of it, with the impact able to extend into other EBS modules because the CVSS vector carries a scope change (S:C). No public exploit code or CISA KEV listing was identified at time of analysis, so prioritization should rest on the CVSS 8.5 base score and the breadth of the affected version range rather than observed exploitation.
Authenticated takeover of Oracle Product Workbench in Oracle E-Business Suite 12.2.3 through 12.2.15 is achievable by a low-privileged attacker reaching the application over HTTP, with the vendor scoring it 8.5 for high confidentiality, integrity and availability impact plus a scope change that extends damage onto other EBS products. Exploitation is rated difficult (AC:H) because the attacker must satisfy specific conditions inside the Internal Operations component, and no public exploit code or CISA KEV entry has been identified at time of analysis. No EPSS score was supplied, so real-world exploitation likelihood is not independently quantified and the flaw should be treated as a patch-cycle priority rather than a confirmed emergency.
A low-privileged authenticated attacker with HTTP access to the Oracle Bills of Material module in Oracle E-Business Suite 12.2.3 through 12.2.15 can read critical Bills of Material data beyond their authorization and partially degrade availability of the module, with the impact extending into other, additional Oracle products (scope change). Oracle rates this 8.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) in its 2026 Critical Security Patch Update advisory, and the flaw is considered easily exploitable because it needs no user interaction or complex timing. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; no EPSS score or POC reference was supplied with the intelligence for this analysis.
Low-privileged authenticated users of Oracle Complex Maintenance, Repair and Overhaul (CMRO) 12.2.12–12.2.15 can send crafted HTTP requests to the Internal Operations component to gain unauthorized access to critical data and partially degrade availability, with the CVSS scope-change flag indicating impact can extend to other Oracle E-Business Suite modules. Oracle's Critical Security Patch Update is the only remediation reference supplied; there is no EPSS score, no CISA KEV listing and no public exploit evidence in the provided intelligence, so the issue is currently a patch-now hygiene item rather than a confirmed actively exploited threat.
Oracle Business Intelligence Enterprise Edition (BI EE) versions 8.2.0.0.0 and 26.01.0.0.0 contain an easily exploitable flaw in the Analytics Actions component that lets a low-privileged, HTTP-reachable user read critical data and tamper with a subset of stored data, with the impact extending beyond the BI EE instance itself (CVSS scope change). Oracle rates it 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N), and the vulnerability is addressed in the April 2026 Critical Security Patch Update. No public exploit code has been identified and the issue is not listed in CISA KEV, so risk is driven by exposure of BI EE endpoints to authenticated internal or external users.
Oracle BI Publisher (a component of Oracle Analytics) is affected by an easily exploitable, network-reachable flaw in the BI Platform Security component across versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker who can reach the SOAP interface can compromise the reporting platform, obtaining high-confidence read access to critical data and limited ability to modify it, with the impact spilling over into other Oracle products because the CVSS vector carries a scope change (S:C). No public exploit code or CISA KEV entry was present at time of analysis, and the vendor's own score of 8.5 reflects high confidentiality impact rather than a wormable, unauthenticated issue.
Oracle BI Publisher (an Oracle Analytics reporting component) versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0 contain a flaw in the Web Server component that lets a low-privileged, network-positioned attacker read critical data and alter or delete a subset of records through HTTP, with impact potentially extending beyond the vulnerable component to other Oracle Analytics products. Oracle rates it CVSS 3.1 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) in its October-lineage Security Alert. No public exploit code, EPSS score, or CISA KEV entry was present in the supplied intelligence, so active exploitation is unconfirmed.
Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0 contain a flaw in the BI Platform Security component that lets a low-privileged attacker with network access to the SOAP interface alter or delete critical report and platform data, and read a limited portion of it. The CVSS 3.1 base score is 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N), driven by a scope change that means compromise of BI Publisher can cascade into other Oracle Analytics components. No public exploit code or active exploitation has been identified at time of analysis, and no CWE or EPSS data was supplied.
Oracle BI Publisher 12.2.1.4.0, the enterprise reporting tier of Oracle Analytics, lets a low-privileged network attacker reach data well beyond their granted entitlements and partially degrade the service through crafted HTTP requests to the BI Publisher Security component. Oracle scores it 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L), and the scope-change metric indicates that a compromised deployment can expose additional, integrated Oracle products that trust BI Publisher. No public exploit code, CISA KEV listing, or EPSS estimate was supplied with the source data, so exploitation status at time of analysis is 'no public exploit identified' and remediation depends on the referenced Oracle security alert.
Oracle Text, the full-text indexing subsystem bundled with Oracle Database Server, contains a scope-escalating flaw that lets a low-privileged database account holding the Create Index privilege take over Oracle Text when reached over Oracle Net. Affected builds are 19.3 through 19.32, 21.3 through 21.23, and 23.4.0 through 23.26.3; successful exploitation yields high confidentiality, integrity, and availability impact and, per Oracle's own scope-change rating, can spill over to other database components. Exploitation is rated difficult (AC:H) and no public exploit code has been identified at time of analysis, and the flaw is not listed in CISA KEV.
Oracle BI Publisher (versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0) contains a flaw in its BI Publisher Security component that lets a low-privileged, network-reachable attacker read critical data and modify some data they should not be able to access. Because the vulnerable component is embedded in wider Oracle deployments, successful exploitation can cross a trust boundary and impact additional products (scope change). No public exploit code or active exploitation has been reported at time of analysis, and no EPSS or CISA KEV data was supplied.
Oracle Sales Online, a component of Oracle E-Business Suite, is affected by an easily exploitable flaw in versions 12.2.3 through 12.2.15 that lets a low-privileged attacker with HTTP network access compromise the application and reach data outside its intended boundary (scope change). Successful exploitation can expose critical data or all Oracle Sales Online-accessible data, plus allow unauthorized insert, update, or delete of some records. No public exploit code or CISA KEV entry was identified at time of analysis, but Oracle's Critical Security Patch Update advisory (cspusep2026.html) is the authoritative fix reference and the CVSS 3.1 base score of 8.5 reflects high confidentiality and low integrity impact.
Oracle Marketing, a module of Oracle E-Business Suite (Audience component), versions 12.2.3 through 12.2.15, exposes an easily exploitable flaw that lets a low-privileged, network-connected attacker read critical data and modify some records through the HTTP interface — with a scope change that can extend impact to other EBS products. Oracle rates it CVSS 3.1 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) and released a fix in its Critical Security Patch Update (cspusep2026.html). No public exploit code or CISA KEV listing was present in the supplied intelligence, so exploitation is currently assessed as opportunistic rather than confirmed active.
Low-privileged attackers with HTTP network access can exploit the Security Framework component of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 to gain unauthorized read access to critical data and limited write/delete access, with the impact extending to additional connected products (CVSS scope change). At CVSS 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) the flaw is trivially automatable once any valid low-privileged account exists, but exploitation requires authentication, so it is not an unauthenticated internet-wide attack. Exploitation status: no public exploit identified at time of analysis; the CVE is not listed in CISA KEV and no EPSS score was supplied in the source data, so real-world activity is unconfirmed.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain an easily exploited authorization flaw in the Runtime Tools component that lets a low-privileged, network-connected user reach and manipulate data well outside their intended scope, including data belonging to connected products (CVSS 8.5, scope change, high confidentiality and low integrity impact). Exploitation requires only a valid low-privilege portal account and standard HTTP access — no user interaction — making it attractive for lateral movement inside enterprise portal deployments. There is no public exploit identified at time of analysis, and no CISA KEV listing or EPSS score was supplied in the available intelligence.
Low-privileged authenticated users with network access can exploit a flaw in the Client Bundle component of Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 to read critical data and modify records, with the impact extending beyond the vulnerable product itself (scope change). Oracle rates the issue CVSS 3.1 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N), driven by high confidentiality impact and cross-component scope change rather than by availability or integrity loss. No public exploit code and no evidence of active exploitation were identified at time of analysis, and no EPSS or CISA KEV data was supplied with the source material.
Improper authorization on the SOAP-facing Client Bundle interface of Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 lets a low-privileged, network-positioned attacker read all data the application can reach and modify a subset of it. Oracle scores it 8.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N), and the Changed scope metric indicates the blast radius can extend beyond Capture into other Fusion Middleware components. No public exploit code or CISA KEV entry was identified at time of analysis; the Oracle Critical Security Patch Update advisory (cspusep2026) is the authoritative source.
Full takeover of Oracle Access Manager is achievable by a low-privileged, network-positioned attacker who can reach the product's HTTP Authentication Engine, affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Fusion Middleware. The flaw requires valid low-privilege credentials (PR:L) and is rated hard to exploit (AC:H), but its scope-change rating means a successful attack against OAM can cascade into the downstream applications that rely on it for single sign-on. As of analysis, no public exploit code and no CISA KEV listing were identified, and the input contained no EPSS score, so real-world exploitation pressure is unquantified despite the 8.5 base score.
Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 contain a flaw in the Business Interlink component that lets a low-privileged, network-reachable user read or fully compromise PeopleTools-accessible data and modify or delete some of it, with impact extending to other connected products (scope change). Oracle rates it CVSS 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) and notes it is 'easily exploitable' by a low-privileged attacker over HTTP. No EPSS score, CISA KEV listing, or public proof-of-concept was present in the supplied intelligence, so active exploitation is not confirmed at time of analysis.
Incorrect authorization in the EdgeConnect SD-WAN Orchestrator API lets an authenticated remote user with low privileges retrieve sensitive information beyond what their role permits, and that data can potentially be leveraged to reach the SD-WAN network services the orchestrator manages. The vendor HPE/Aruba rates this 8.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N), and ENISA EUVD lists affected EdgeConnect SD-WAN Gateway releases in the 9.4.x, 9.5.x, 9.6.x and 9.7.0 lines. No public exploit code exists and the issue is not in CISA KEV at time of analysis; exploitation requires valid low-privilege credentials, which materially narrows the attacker population.
Server-side request forgery in the EdgeConnect SD-WAN Orchestrator API lets any remote user who already holds valid low-privilege credentials redirect server-side fetches to attacker-chosen internal destinations, mapping the internal structure of the Orchestrator host and disclosing sensitive information beyond that user's authorized privilege level. The issue is network-reachable at low attack complexity with no user interaction (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N, base 8.5), and the scope change reflects the pivot out of the API context into the host/network fabric. No public exploit code was identified at time of analysis and no CISA KEV entry is associated with this CVE; note that the description names the Orchestrator while the ENISA EUVD record lists EdgeConnect SD-WAN Gateway builds 9.4.0 through 9.7.0, so the exact affected component should be confirmed against the HPE advisory before scoping exposure.
Unsafe Java object deserialization in IBM MQ (9.1.0.0-9.1.0.37 LTS, 9.2.0.0-9.2.0.43 LTS, 9.3.0.0-9.3.0.41 LTS / 9.3.0.0-9.3.5.1 CD, 9.4.0.0-9.4.0.25 LTS / 9.4.0.0-9.4.5.1 CD, and 10.0.0.0) lets an authenticated attacker who can deliver a crafted message trigger JNDI injection and achieve arbitrary code execution inside the consuming client application rather than the queue manager itself. The assessed CVSS 3.1 vector (AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, base 8.5) characterizes a network-reachable but authentication-gated (PR:L) and high-complexity (AC:H) path whose scope change (S:C) derives from the code execution landing in a downstream client. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV; a vendor patch is available.
Stored cross-site scripting in Concrete CMS lets any user holding page-editing permissions — for example Add Block combined with Edit Contents on a single page — plant a crafted external link value in Feature, Feature Link, Hero Image, or Image blocks that breaks out of the link markup and injects JavaScript. Because the payload is persisted and rendered without output escaping, the script executes in the browser session of every user who later views, previews, or edits that page, enabling session hijacking and privilege escalation up to full administrative takeover. The vendor scored this 8.5 (CVSS v4.0, PR:H/UI:P); no public exploit code or CISA KEV entry was provided at time of analysis, so exploitation is currently a realistic internal-threat and low-privileged-editor risk rather than a confirmed internet-wide campaign.
Stored SQL injection in Concrete CMS 9.5.2 and earlier lets an authenticated user who is permitted to add or edit a Document Library block persist arbitrary SQL syntax into the block's stored configuration (btDocumentLibrary.setIds), which is then executed every time the published page containing that block is rendered. The flaw arises because the fsID[] file-set identifiers submitted by the block editor are stored without integer validation and are concatenated directly into the file-set filter query when setMode is 'any' instead of being cast or parameter-bound. There is no evidence of active exploitation or public exploit code at time of analysis, and the high privileges required (PR:H) and render-triggered execution (UI:P) temper the 8.5 CVSS v4.0 score assigned by the vendor.
Stored DOM-based cross-site scripting in Concrete CMS 9.5.2 and earlier allows a page editor to plant JavaScript inside a Gallery block image caption, which then executes in the browser of any visitor who opens that image's lightbox. The flaw sits in the bundled Magnific Popup lightbox code (concrete/js/features/imagery/frontend.js), which decodes the caption attribute and re-parses it as HTML via jQuery's .append() inside titleSrc rather than inserting it as text. The vendor rates it CVSS v4.0 8.5 (AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H), requiring an authenticated editor (PR:H) but only passive victim interaction (UI:P); no public exploit code or CISA KEV entry is indicated in the supplied intelligence, and no EPSS score was provided.
Oracle Agile Engineering Data Management 6.2.1, specifically its Engineering Communication Interface component, can be abused by a low-privileged user who already holds a logon to the host where the application executes, allowing unauthorized reading, creation, deletion or modification of critical engineering data and potentially affecting connected downstream products (CVSS 3.1 scope change, base score 8.4). The flaw is rated High with a local attack vector (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N), so it is not remotely exploitable without first obtaining a local session or low-privileged account. No public exploit code or CISA KEV entry was identified in the supplied intelligence, and no EPSS score was provided, so real-world exploitation pressure is currently unquantified.
A security-component flaw in Oracle Hyperion Financial Management 11.2.26.0.000 lets an attacker who already holds a valid low-privileged account and can log on to the infrastructure hosting the application bypass or subvert its security controls. Successful exploitation yields high confidentiality and integrity impact on Hyperion Financial Management data and, because the CVSS vector carries a scope change (S:C), can also significantly affect interconnected Oracle EPM products. Oracle rates this 8.4 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N); no CISA KEV entry, EPSS score, or public exploit code was present in the supplied intelligence, so the flaw is not confirmed as actively exploited at time of analysis.
Low-privileged local attackers who can log on to a host running Oracle Product Lifecycle Analytics 3.6.1 can exploit an installation-related weakness to cross a security boundary and gain unauthorized read and write access to critical data, including all data accessible through the application. The flaw carries a CVSS 3.1 base score of 8.4 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) because exploitation is easy once logon is achieved, but it requires a local, authenticated foothold rather than remote network access. There is no public exploit identified at time of analysis and no EPSS or CISA KEV signal in the provided intelligence, so the immediate threat is primarily from insider, lateral-movement, or post-compromise abuse rather than opportunistic internet scanning.
MCPVault, a lightweight Model Context Protocol server that exposes Obsidian vault files to AI agents, fails to block access to restricted directories such as .git, .obsidian, and node_modules in versions prior to 0.11.4. PathFilter compiles its deny-list patterns case-sensitively and matches raw path segments, so on case-insensitive macOS and Windows filesystems variants like .Git/config or .GIT/config (and on Windows, trailing-dot/space forms such as .git./config) pass both isAllowed() and isAllowedForListing() while the operating system still opens the real restricted directory. An attacker who can influence a path selected by an AI agent can then read, write, move, search, or list sensitive repository and Obsidian metadata; no public exploit code or CISA KEV entry was identified at time of analysis.
Stored cross-site scripting in Concrete CMS versions before 9.5.3 lets an authenticated user with form-editing privileges plant HTML or script inside a Form block question label, which is then rendered unencoded as a column header in the Dashboard Form Submissions report. The payload fires in the browser of any administrator who opens that report for the affected form, allowing the attacker to act with the administrator's session privileges. No public exploit code or active exploitation has been identified at time of analysis; the vendor scored the issue 8.4 under CVSS 4.0 (PR:H, UI:P).
Missing authorization on pgweb's POST /api/connect endpoint through version 0.17.0 lets attackers bypass the connect-backend resource-to-database mapping by submitting a custom session identifier and arbitrary connection URL, granting access to databases and internal services the operator never intended to expose. The flaw is CWE-862 (missing authorization) and carries a CVSS 4.0 base score of 8.4 (AV:N/AC:L/PR:L/UI:N, high confidentiality impact on both the vulnerable system and subsequent systems), reflecting that a successful attacker can read arbitrary backend data while the pgweb host is used as a pivot. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, so exploitation is currently assessed as opportunistic rather than confirmed active.
Unauthenticated MCP tool invocation in PraisonAI (praisonaiagents 0.6.0–1.6.58 and praisonai 3.10.0–4.6.58) lets a malicious website use DNS rebinding to reach a local or internal ToolsMCPServer SSE endpoint on /sse and /messages/, enumerate registered tools, and invoke them with the server user's privileges. The legacy SSE wrapper performs no Host, Origin, or authentication enforcement, while the newer Streamable HTTP transport rejects the same hostile Origin with HTTP 403, isolating the flaw to the legacy SSE path. An initial remediation ships in praisonaiagents
A time-of-check-to-time-of-use race condition in the Extensions component of Google Chrome on macOS allows an attacker to break out of the renderer sandbox and execute arbitrary code in the browser process context. The barrier to entry is meaningful: the attacker must already have compromised the renderer process through a separate bug and then use social engineering to persuade the victim into a specific UI interaction that widens the race window. Affected builds are Chrome for macOS prior to 153.0.8010.47, and Google rates the issue High severity; no public exploit code or CISA KEV entry was identified at time of analysis.
Sandbox escape in Google Chrome prior to 153.0.8010.47 allows a remote attacker who has already compromised the browser's renderer process to execute arbitrary code outside the sandbox via a race condition (TOCTOU) triggered by a crafted HTML page; the user must visit that page for the flaw to be reachable. Google rates the issue Chromium security severity High and a vendor patch is available from the 153.0.8010.47 stable channel release. There is no public exploit code and no CISA KEV listing at time of analysis, and the high attack complexity combined with a required renderer-compromise precondition keeps realistic risk below the raw 8.3 CVSS score.
Google Chrome versions earlier than 153.0.8010.47 contain an incorrect authorization flaw (CWE-863) in the WebUI subsystem that lets an attacker who already controls a compromised renderer process break out of the browser sandbox and run arbitrary code on the host via a crafted HTML page. Exploitation is a two-stage proposition: the attacker must first obtain renderer code execution, then chain this flaw to escape the sandbox, and the victim must load the malicious page. Google rates the Chromium security severity as High and has shipped a fix in Chrome 153.0.8010.47; no public exploit code or CISA KEV entry was identified in the available intelligence at time of analysis.
Improper state validation in the Skia graphics library, as shipped in Google Chrome prior to 153.0.8010.47, lets an attacker who already controls a compromised renderer process read memory outside the browser sandbox by serving a crafted HTML page. Exploitation requires the victim to load the malicious page (UI:R) and depends on chaining with a separate renderer compromise, which is why the vector carries AC:H despite the network attack path. Vendor status is "Patch available"; no public exploit code and no CISA KEV listing were present in the supplied intelligence, so the flaw should be treated as a sandbox-escape primitive rather than an observed, widely exploited issue.
Google Chrome builds prior to 153.0.8010.47 carry a use-after-free in the browser's Input component that allows an attacker who already controls a compromised renderer process to escape the Chrome sandbox and run arbitrary code with the browser's privileges. Exploitation is not remote-standalone: it requires a chained renderer compromise plus a victim who opens a crafted HTML page, which is why the flaw is scored High (8.3) rather than Critical despite total technical impact. Google has shipped a fixed stable-channel build; no public exploit code has been identified and the issue is not listed in CISA KEV at time of analysis.
Google Chrome on macOS versions prior to 153.0.8010.47 contain a race condition (TOCTOU) in the Extensions subsystem that lets an attacker who has already compromised the browser's renderer process break out of the sandbox and execute arbitrary code on the host, triggered when a victim loads a crafted HTML page. Google rated the issue High severity and Chromium's own severity assessment drove the 8.3 CVSS base score with a Scope change (S:C), reflecting that code execution crosses the renderer/sandbox boundary rather than staying contained. No public exploit code has been identified at time of analysis and the flaw is not listed in CISA KEV, but a vendor patch is available and should be applied promptly because sandbox escapes are the high-value second stage of any Chrome exploit chain.
Unauthenticated attackers positioned on the same network segment as an Oracle Hyperion Financial Management 11.2.26.0.000 deployment can defeat security controls in the product's Security component, obtaining full read and write access to financial consolidation data while also partially degrading service availability. The flaw rates CVSS 8.3 (AV:A/AC:L/PR:N/UI:N, C:H/I:H/A:L), meaning no credentials or user interaction are needed, but the attack surface is limited to the adjacent network path rather than the public internet. No public exploit code or confirmed active exploitation was identified at time of analysis.
Improper access control in the Financials for Asia/Pacific module of Oracle E-Business Suite (Internal Operations component) lets any authenticated low-privileged user with HTTP network access read, create, delete, or modify critical financial data and partially disrupt service availability across releases 12.2.8 through 12.2.15. Oracle rates the issue 8.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L), meaning the only meaningful hurdle is a valid low-privilege account — no user interaction or elevated rights are required. There is no public exploit code identified at time of analysis and the issue is not listed in CISA KEV, so prioritization should be driven by exposure of internet- or partner-reachable EBS Financials instances rather than by observed exploitation.
Low-privileged attackers with HTTP access to Oracle BI Publisher can exploit a flaw in the BI Platform Security component to read and modify critical report data and partially disrupt the service. The issue affects BI Publisher 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0 and carries a CVSS 3.1 base score of 8.3 (AV:N/AC:L/PR:L/UI:N, high confidentiality and integrity impact, low availability impact). No public exploit code or EPSS/KEV data was supplied with this record, so exploitation status at time of analysis is no public exploit identified at time of analysis, though the low complexity and authenticated-but-network-reachable attack path make it attractive for post-compromise lateral movement inside Oracle Fusion Middleware estates.
Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 contains a flaw in the BI Search component that lets a low-privileged, network-positioned user read, create, modify and delete critical BI data and partially disrupt the service. The CVSS 3.1 base score is 8.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L), reflecting a remotely reachable, easily automated attack that yields high confidentiality and integrity impact with a limited availability impact. No public exploit code or CISA KEV listing is present in the supplied intelligence, and the affected build is a single supported release, so exposure is limited to organisations running that version until the Oracle patch from the referenced security alert is applied.