Command injection in the web-based management interface of Cisco ThousandEyes Virtual Appliance allows an authenticated remote attacker with valid administrative credentials to save configuration details containing malicious values, leading to arbitrary OS command execution as root. Affected Cisco ThousandEyes Enterprise Agent versions per EUVD include 4.0, 4.1, 4.2, 4.4.2, 4.4.3, 4.4.4, 5.0, 5.1, 5.1.2, 5.1.3, and 5.2.0, and the primary limitation is the PR:H requirement for admin access. No public exploit identified at time of analysis, and the independent assessment characterizes this as a real but low-urgency issue.
Insufficient origin validation in the Mattermost Desktop App (versions up to and including 6.2.2.0) lets server-rendered content from an untrusted or compromised Mattermost server reach local or private network resources, giving the attacker a limited information-disclosure window. Exploitation is not remote-only: the victim must be running the desktop client and actively connect to and view content from an attacker-controlled server (CVSS 4.7, AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N), and only confidentiality is affected - there is no integrity or availability impact. Mattermost credits game0v3r under its responsible disclosure policy (MMSA-2026-00698); there is no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis, so overall risk is moderate and low priority.
Blind server-side request forgery in the oras-go library lets a malicious or compromised OCI registry steer pagination requests to arbitrary internal endpoints chosen by the attacker. Affected are all oras-go versions prior to 2.6.2; the parseLink routine in registry/remote/utils.go accepted an absolute URL from the registry-supplied Link 'rel=next' header without checking scheme, host, or port, so Tags, Referrers, or Repositories listing calls could be pointed at internal services such as the cloud metadata endpoint 169.254.169.254. Per the assessed vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N), no attacker credentials are needed and the request originates from the victim's network, but exploitation requires the victim to initiate a pagination-based listing against the attacker's registry, response bodies are not returned to the attacker, and only timing/error differences reveal reachability - except when the victim's credential store already holds an entry for the attacker-chosen host, in which case those credentials may be attached. No public exploit code or confirmed in-the-wild activity was identified at time of analysis; the issue is remediated in 2.6.2, and the maintainer treats this report as a duplicate consolidated under an earlier advisory.
Heap use-after-free in the HDF5 library (The HDF Group, all versions before 2.3.0) is triggered when an application such as h5dump reads a dataset whose compound datatype contains floating-point members, allowing a crafted .h5 file to crash the parsing process and, depending on heap layout and allocator behaviour, potentially corrupt memory further. Exploitation requires the victim to open a malicious file locally (local vector, mandatory user interaction, no authentication needed), so it is not remotely reachable on its own. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV; the vendor's own CVSS 4.0 base of 4.6 aligns with the independent assessment that the reliably demonstrated impact is a crash rather than proven code execution.
An out-of-bounds read in the HTTP Cache-Control response header parser of the QtNetwork module lets a hostile or compromised HTTP server crash 64-bit client applications built on Qt 6.0.0-6.8.8 or 6.9.0-6.11.1 that use QNetworkAccessManager. The trigger is an excessively large Cache-Control header value returned to the requesting client; because the over-read is read-only, the outcome is limited to a denial of service (application crash) with no information disclosure and no code execution, and only the client side of the connection is affected - 32-bit builds are not affected. No public exploit code has been identified at time of analysis, and exploitation is not on-demand against an arbitrary target: the victim application must be induced to connect to an untrusted, attacker-controlled, or compromised server (reflected as AT:P in the CVSS 4.0 vector), which keeps real-world risk at a low-to-moderate level despite the presence of RCE and Information Disclosure tags in some feeds.
Protected environment deployment approval bypass in GitLab Enterprise Edition allows authenticated users holding Owner or Maintainer role to silently disable deployment approval requirements under certain conditions, enabling unapproved changes to reach production environments. Affected versions span 17.1 through 19.3.1. No public exploit has been identified and the issue is not listed in CISA KEV, but the integrity impact is business-significant for organizations relying on these gates for change-control or compliance purposes.
Unbound 1.13.2 through 1.26.1 can serve tampered contents of a ZONEMD-checked zone that sits below - but not at - a DNSSEC trust anchor, because the DS/DNSKEY chain resolution needed to validate the zone must complete asynchronously and the zone data is released (and, with the zonefile: option, written to disk) before the ZONEMD digest check concludes. In memory the exposure is self-correcting: once verification fails the data stops being served, but a tampered copy written to disk persists and is reloaded at the next startup until verification again concludes. Per the independent assessment this is a low-to-moderate integrity/authenticity issue (CVSS 3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N; vendor score 4.4) requiring a non-default zone/trust-anchor topology and precise timing, with no confidentiality or availability impact and no public exploit identified at time of analysis.
Path traversal in the Redocly CLI `split` command (@redocly/cli prior to 2.33.2, and the 1.x line prior to 1.34.17) lets a crafted OpenAPI or AsyncAPI document place or overwrite YAML/JSON files outside the directory supplied to `--outDir`. The command derives output filenames from untrusted component names, path keys, and `x-codeSamples` lang values without confirming the resolved target stays inside the chosen directory, so literal `../` segments in those fields escape the output tree. Impact is deliberately bounded - content is limited to YAML/JSON and code-sample filenames stay based on the HTTP method - yielding an integrity-only file write rated CVSS 4.4 (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L), with unauthenticated (PR:N) exploitation that nonetheless requires a victim to run `split` on the malicious spec; no public exploit identified at time of analysis.
Information exposure affecting Dell ECS 3.8.1.0 through 3.8.1.7 and Dell ObjectScale prior to 4.4.0.0 arises from the platform's use of a broken or risky cryptographic algorithm (CWE-327). Exploitation is not remotely reachable: it requires an attacker who already holds local access to a storage node together with a high-privileged account (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N per our assessment; NVD scored the confidentiality impact as C:H under the same vector structure), so the dominant limiting factor is the privileged-local-access precondition rather than any technical barrier. There is no public exploit code identified at time of analysis and CISA SSVC rates Exploitation 'none' and Automatable 'no'; the practical risk is low, bounded by credential/algorithm hygiene on the appliance, and remediation is available via ObjectScale 4.4.0.0 and the fixed Dell ECS release cited in Dell advisory DSA-2026-393.
Authenticated users holding administrator-tier accounts on Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) can bypass server-side authorization checks in the web-based management interface to alter file descriptions on a specific configuration page. The issue is rated CVSS 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N): it requires valid Administrator credentials and yields only a low-integrity change on a single page, with no confidentiality or availability impact and no privilege escalation. No CISA KEV listing and no public exploit code have been identified at time of analysis, so this is a low-severity, high-friction issue that does not warrant priority patching in isolation.
Missing server-side validation of administrator permissions in the web-based management interface of Cisco Identity Services Engine (ISE) lets an authenticated, remote administrative user modify configuration content that should be gated behind a higher privilege level, specifically the descriptions of files on one particular page. Only ISE deployments exposing the management interface to a reachable network are affected, and exploitation requires a valid administrative credential (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N, base score 4.3), so confidentiality and availability are untouched and only a narrow integrity element is at risk. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the EPSS signal was not provided; despite the 'Authentication Bypass' tag attached to this record by some feeds, the flaw is an authorization-enforcement gap rather than a way to authenticate without credentials.
Open redirect in the Jenkins Keycloak Authentication Plugin 2.4.1 and earlier lets an unauthenticated attacker craft a login URL whose post-authentication redirect target is not validated, sending a victim who completes Keycloak login to an arbitrary external site (CWE-601, vendor CVSS 4.3). Only Jenkins instances where this plugin is installed and configured as the active authentication realm are affected, and exploitation requires the victim to click the supplied link and finish authentication (UI:R), so impact is confined to phishing and credential-harvesting rather than direct access to Jenkins. No public exploit code identified at time of analysis and no CISA KEV listing; the primary limiting factors are the mandatory user interaction and the low-integrity impact assessed in the vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.
OAuth flow hijacking in the Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier allows an attacker to substitute the callback URL used in the plugin's OAuth authorization step and capture the Bitbucket access token issued to a victim. Exploitation is not against a static endpoint: the plugin must be installed with its OAuth authorization flow in active use, the attacker must have an OAuth handshake in progress, and a victim who is already authenticated must complete the authorization step (UI:R) within a timing window the attacker must hit (AC:H). Rated only CVSS 4.2 with no confidentiality or integrity impact beyond the scope of the hijacked victim's token, this is a genuine authentication-flow flaw but a low-priority one; no public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis.
Path traversal in the Jenkins Pipeline: Groovy Libraries Plugin (805.va_fc79344957d and earlier) lets an authenticated user who can configure Pipelines point the `library` step at a path outside the SCM checkout and follow symbolic links, giving read access to files in a resources directory and the ability to delete files in a test directory on the Jenkins controller file system. Exploitation requires the Pipeline-configuration privilege, a symlink placed inside the checkout, and successful traversal during library retrieval, which is reflected in the high attack complexity of the assessed CVSS:3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N, base score 4.2). No public exploit code was identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV), so the practical risk is low-to-moderate and confined to file read and limited file deletion rather than arbitrary write or code execution.
The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or removing members and enabling public access to a private board.
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by another user, including administrators.
The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers.
The WPBot WordPress plugin before 8.7.6 does not perform a capability check on the AJAX action that saves its Claude AI provider settings, allowing users with subscriber-level access to overwrite those settings, including the API key used for the WPBot WordPress plugin before 8.7.6's outgoing AI requests.
The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoints that return booking service and category records, allowing unauthenticated attackers to read the private internal notes stored on each service and category.
The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoint that returns booking agent (staff) records, allowing unauthenticated attackers to read staff email addresses, phone numbers, private internal notes and the linked WordPress account name for every agent.
The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making.
The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not correctly validate the shared secret protecting one of its REST endpoints, allowing unauthenticated users to retrieve the store's full list of subscriptions, including customer usernames, product names, recurring amounts and payment dates.
The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire admin area inaccessible to all administrators (denial of service).
The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after a public subscription action, allowing unauthenticated attackers to redirect users to arbitrary external sites and to disclose a subscriber token that grants access to that subscriber record's front-end actions.
The Visualizer WordPress plugin before 4.0.8 does not sanitise and escape a chart's JSON data source configuration before outputting it back in the chart editor, allowing users with the Contributor role and above to store JavaScript that executes in the browser of any higher-privileged user, such as an administrator, who reviews the affected chart.
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied post status filter in one of its REST routes, allowing unauthenticated attackers to list courses that are not published, including draft, pending, private, scheduled and trashed ones.
The LearnPress WordPress plugin before 4.4.7 does not perform any authentication, capability or nonce check before serving a previously generated order export file, allowing unauthenticated attackers who can determine its identifier to download customer names, purchases, amounts and guest email addresses.
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative course tools, allowing unauthenticated attackers to list every enrolled student's display name and user identifier against the course they are enrolled on, and to recover their email addresses through the same handler's search filter.
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative template handlers, allowing unauthenticated attackers to retrieve the text, identifier and type of every published quiz question on the site, along with a keyword search over them, which is content the LearnPress WordPress plugin before 4.4.7 otherwise keeps non-public.
The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, including a logged in administrator. Only sites running a classic, non-block are affected.
The Formidable Forms WordPress plugin before 6.35 does not restrict who can set the identifier recording which user last edited a form entry, and relies on that identifier when deciding whether to strip HTML from stored entry values, allowing unauthenticated visitors to have markup rendered in the admin entry view that would otherwise be removed, and to attribute their submission to an administrator who never made it.
The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its lesson discussion content, allowing any authenticated user, such as a subscriber, to read comments from courses they are not enrolled in, including comments awaiting moderation.
The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether an incoming request is addressed to its own REST API, and does not enforce the permission recorded against an API credential, allowing the holder of a read-only key to act as the administrator account that issued it.
The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor's e-mail address between the value it stores and the value it later uses to look that donor up, allowing unauthenticated users to be resolved as an arbitrary donor and to set the WordPress password of any user account linked to one, including an administrator's.
The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing their user ID.
The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens, and does not restrict the targeted items to its own records, allowing attackers to make a logged in admin permanently delete arbitrary posts and pages via a crafted request.
The Eventin WordPress plugin before 4.1.24 does not properly authorise order finalisation when its offline (local) payment method is enabled, relying on a nonce that is exposed to unauthenticated visitors and never checking that the caller owns the order, allowing unauthenticated attackers to reset any existing order and its attendees to a pending state and thereby invalidate paid tickets.
The Eventin WordPress plugin before 4.1.24 does not verify a user's capability to create accounts when adding a speaker, allowing users with contributor-level access and above to create new WordPress user accounts that carry capabilities beyond their own, including publishing content and uploading files, and, by supplying an email address they control, to obtain a working login to the created account.
The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build an image tag attribute, allowing unauthenticated users to inject arbitrary attributes into pages served to every visitor, which leads to Stored Cross-Site Scripting.
The Xpro Addons - 140+ Widgets for Elementor WordPress plugin before 1.7.9 does not validate or sanitize a widget link setting before storing and using it in a JavaScript navigation call, allowing users with the contributor role and above to inject and store JavaScript that executes in the browser of anyone who interacts with the affected widget.
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password protected posts.
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam.
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the structured data it generates, allowing unauthenticated users to obtain the content of password protected posts via more than one public output route.
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and to search the store's orders by customer name or email address.
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.
The Eventin WordPress plugin before 4.1.24 does not prevent the token issued to a guest at checkout from being used to change that order's tickets afterwards, allowing unauthenticated users to replace a paid ticket with a free one and complete the order at no charge.
The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process, allowing users with the import capability, which administrators hold by default, to make the site issue requests to internal hosts and services and read their responses. This is an incomplete fix for CVE-2026-11397.
The WP Import Export Lite WordPress plugin before 3.9.33 does not escape custom field names retrieved from the database before inserting them into the DOM of one of its administration screens, allowing users with a role as low as contributor to perform Stored XSS attacks which will trigger in the browser of a high privileged user, such as an administrator, viewing that screen.
The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some import configuration values before using them in SQL statements, allowing users whose role an administrator has granted the WP Import Export Lite WordPress plugin before 3.9.33's import permission to perform SQL injection attacks.
The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some export filter values before using them in SQL statements, allowing users holding its export permission, which administrators have by default and may also grant to lower roles, to perform SQL injection attacks.