Command injection in simple-git, the Node.js library for running git commands and published on npm, affects all releases before 4.0.0 and allows unauthenticated remote attackers to execute arbitrary commands whenever a consuming application forwards attacker-influenced values into a git push argument list. The library's default blockUnsafeOperationsPlugin matches dangerous options by literal spelling only, so unambiguous Git long-option abbreviations such as --receive-p, --receive-pa and --exe bypass detection, are expanded by Git itself, and reach --receive-pack on a local or file remote where the injected command runs. Publicly available exploit code exists (a published gist plus the detailed upstream advisory proof of concept), but there is no CISA KEV confirmation of active exploitation; EPSS is 0.36% (28th percentile) and SSVC marks the issue Exploitation: none, Automatable: no, because three consumer-specific preconditions must coincide.
OS command injection in Netcore NAP930 firmware 0.1.241010.141410 allows unauthenticated remote attackers to execute arbitrary commands on the device via the 'sid' parameter of the /www/cgi-bin/network_tools CGI. The vulnerability, tracked as CVE-2026-102240 (CVSS 4.0: 9.3; independent assessment CVSS 3.1: 9.8), has publicly available exploit code. The vendor was contacted but did not respond, and no fixed firmware is available.
Unauthenticated password reset in mall4j through 4.0 allows remote attackers to take over any storefront account by supplying a target username to the PUT /user/updatePwd endpoint, which lacks authentication checks (CWE-306). Publicly available exploit code exists, and the issue is rated critical (CVSS 4.0 score 9.3; independent assessment CVSS 3.1 9.1 with PR:N). No confirmed active exploitation (CISA KEV) as of analysis, but the low attack complexity and lack of prerequisites make this a high-priority risk for any deployment where the storefront API is reachable.
Unauthenticated arbitrary file write in the mypresta Google Merchant Center Feed (gmfeed) module for PrestaShop lets remote attackers control the output filename, path, extension, and content written by the feed.php endpoint, enabling them to drop a PHP file and execute it for remote code execution. The flaw carries a CVSS 4.0 base score of 9.3 (independent assessment: CVSS 3.1 9.3, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflecting no authentication, no user interaction, and full confidentiality, integrity, and availability impact. It affects only PrestaShop stores running this third-party module below version 2.3.9, which is the vendor-fixed release; no public exploit code has been identified at time of analysis and there is no CISA KEV entry, though the trivial unauthenticated exploitation path makes rapid patching advisable.
Command injection in the simple-git Node.js library (versions 3.15.0 through 4.0.0) allows remote, unauthenticated attackers to execute arbitrary shell commands under the identity of the Node.js process when a host application forwards attacker-controlled values into SimpleGitOptions.config or inline -c arguments and later runs git interpret-trailers, because the default blockUnsafeOperationsPlugin does not flag trailer.<token>.cmd (or trailer.<token>.command) as unsafe configuration. This is CWE-78 (OS command injection), rated 9.2 under CVSS v4.0 by the reporter and independently assessed as CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H; exploitation is contingent on the application actually passing untrusted config into simple-git, so apps using only hard-coded/trusted configuration are not exposed and no privilege escalation beyond the Node process is possible. A vendor-released patch is available in simple-git 4.0.1, which introduces the allowUnsafeCommandBinaries category; there is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Command injection in the Ziroom ZHOME A0101 smart-home hub (firmware 1.0.1.0) allows an attacker with high-privilege authenticated access to the management API to execute arbitrary OS commands via the conloglevel and log_size arguments of the set_syslog function exposed at /api/ZRnetwork/set_syslog. The flaw is network-reachable and needs no user interaction, and publicly available exploit code exists (a GitHub write-up), so the practical risk is elevated wherever the device API is exposed or admin credentials are weak or default - the PR:H requirement is the main limiting factor, and the vendor was contacted early but did not respond. No CISA KEV entry confirms active exploitation, and EPSS data was not provided.
Authenticated command injection in Ziroom ZHOME A0101 firmware 1.0.1.0 lets a privileged user execute arbitrary operating-system commands on the device by supplying shell metacharacters in the hostname or zonename argument of the /api/ZRFirmware/set_time_zone API endpoint. The endpoint is network-reachable and needs no user interaction (CVSS 4.0 base 8.5), but the vector carries PR:H, so an attacker must already hold a high-privileged authenticated session before the injection can be triggered - this is a post-authentication command execution issue, not an unauthenticated one. Publicly available exploit code exists (a PoC write-up on GitHub referenced by VulDB), the vendor was contacted early and did not respond, and no vendor-released patch has been identified at time of analysis.
Stored cross-site scripting in GitLab CE/EE lets an authenticated user who can create or modify a merge request embed crafted content in a path component that the merge request diff viewer fails to sanitize, so arbitrary JavaScript executes in the browser session of any other user who views that diff. All versions from 13.11 up to the fixed releases 19.2.7, 19.3.3 and 19.4.1 are affected; the CVSS 3.1 base score is 8.7 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N), reflecting network reachability, low privileges required, mandatory victim interaction, and a scope change because the attacker compromises a different user's session rather than their own. Publicly available exploit code exists - the issue was disclosed through GitLab's HackerOne program - but there is no evidence of confirmed active exploitation (CISA KEV) at time of analysis.
A stack-based buffer overflow in the FAST FAC1203R router firmware (version 20200116_2.0.4) is reachable through the MmtAtePrase parser inside the _tWlanTask function, letting an attacker on the same LAN or WiFi segment send crafted input that corrupts the stack and can lead to full compromise of the device (assessed CVSS:3.1 base 8.8, AV:A/AC:L/PR:N/UI:N/C:H/I:H/A:H). No authentication or user interaction is required once the attacker has local network adjacency, so the realistic exposure is confined to attackers who can join or reach the local network rather than the general internet. Publicly available exploit code exists and a proof-of-concept repository has been published, but there is no indication of confirmed active exploitation (CISA KEV) at time of analysis, and the vendor did not respond to disclosure, so no vendor patch is currently identified.
Cross-origin requests from attacker-controlled web pages can invoke the mcp-chrome-bridge native-server HTTP API (all versions through 1.0.31) running on the victim's host, allowing script execution, page-content reading, and screenshot capture through the browser automation tools the bridge exposes. The root cause is an origin validation error (CWE-346) that lets cross-origin browser traffic reach endpoints that should be restricted, yielding a CVSS 4.0 score of 8.6 and an independent 3.1 assessment of AV:N/AC:L/PR:N/UI:R/C:H/I:H/A:N. Exploitation requires no authentication but is interaction-gated: the bridge must be installed and running on the victim's machine and the victim must visit or be redirected to a malicious page in a local browser. No public exploit code was identified at time of analysis and the issue is not listed in CISA KEV.
Untrusted git configuration includes reachable through simple-git before 4.0.0 let an attacker execute arbitrary commands with the privileges of the Node.js process. The default blockUnsafeOperationsPlugin failed to classify include.path inside customArgs passed to git.clone(), and the initial remediation also missed includeIf.<condition>.path, so a loaded config file could set an executable option such as core.sshCommand that Git runs during the clone. Exploitation is unauthenticated (CVSS:3.1/AV:N/AC:H/PR:N/UI:N, base 8.1) but requires both attacker-influenced customArgs reaching git.clone() and an attacker-controlled file already readable by the Node.js process; no public exploit was identified at time of analysis and the issue is fixed in simple-git 4.0.0.
Toptech Systems TMS7 and TopHat expose a file export endpoint that lets any network-reachable, unauthenticated attacker submit a single crafted POST request and pull arbitrary database tables out of the system - an information disclosure of the highest severity as scored by CISA ICS (CVSS 10.0), and assessed by our analysis as AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, i.e. confidentiality-only impact with no integrity or availability effect. Affected are deployments of Toptech TMS7 (all versions captured in CPE with a wildcard version) and TopHat, which are OT/ICS fuel-terminal and terminal-automation products typically expected to sit on segmented operational networks; the decisive factor for real-world exploitability is whether the export endpoint is reachable from outside that trusted OT segment, since no authentication, user interaction, or non-default toggle is required. There is no public exploit code identified at time of analysis and the flaw is not listed on CISA KEV, so exposure should be treated as a configuration-and-segmentation problem rather than a confirmed ongoing campaign. Authentication requirements are not in question here: the CVSS vector contains PR:N, so exploitation is unauthenticated.
Authentication bypass in self-hosted Bitwarden Server versions 2025.6.0 through 2026.5.0 backed by Microsoft SQL Server allows a user with a provisionable SSO identity to obtain a victim-scoped access token. The stored procedure User_ReadBySsoUserOrganizationIdExternalId declares its @ExternalId parameter as NVARCHAR(50) while the column it queries stores NVARCHAR(300), so an identity-provider ExternalId whose value begins with a victim organization member's full 50-character identifier is silently truncated and matches that member's record during SSO login. Exploitation requires organization SSO login enabled on a SQL Server deployment plus knowledge or control of an IdP identifier sharing the victim's 50-character prefix (CVSS vector shows PR:L), making the attack targeted rather than broadly opportunistic; publicly available exploit code exists but there is no CISA KEV confirmation of active exploitation. The flaw is fixed in Bitwarden Server 2026.5.0, and despite the supplied 'Information Disclosure' tag its actual outcome is account takeover (CWE-303).
virtualenv versions prior to 21.7.12 cache and seed pip/setuptools wheels without verifying their bytes, so an attacker who controls the wheel delivery path can substitute a different wheel under the requested distribution, version, and filename and have it injected into every environment virtualenv subsequently creates. The flaw is exploitable unauthenticated but requires an active man-in-the-middle position, a compromised index, or a stale/poisoned mirror, and requires a user to actually create or seed a virtual environment. No public exploit code was identified at time of analysis, and the digest check is intentionally skipped whenever PIP_INDEX_URL, PIP_EXTRA_INDEX_URL, or PIP_INDEX points at a custom index - meaning custom-index users remain unverified even after upgrading.
Improper privilege management in RaspAP WebGUI through 3.5.5 lets an authenticated low-privilege web-UI user escalate to root by manipulating how the plugin installer writes sudo configuration entries through PluginInstaller::addSudoers (src/RaspAP/Plugins/PluginInstaller.php). Exploitation is remote and unauthenticated attempts are not possible - the attacker must already hold a valid RaspAP panel session (CVSS 4.0 PR:L, independently assessed as CVSS 3.1 AV:N/AC:L/PR:L/UI:N, C:H/I:H/A:H) - but no user interaction or unusual complexity is required beyond that. Publicly available exploit code exists (a GitHub gist demonstration was published alongside the VulDB entry), and the vendor was contacted but did not respond, so no vendor-released patch has been identified at time of analysis; this is a genuine high-impact issue but not an emergency, with exposure concentrated on panels reachable from untrusted networks or protected only by default credentials.
Arbitrary PHP file upload and execution is possible in Toptech Systems TMS7 and TopHat version 7.6.3, because the TMS file upload endpoint performs no server-side file type validation, letting a PHP payload be written to the web server and then executed. The flaw is network-reachable and requires no user interaction, but the CVSS vector (PR:H) and the independent assessment confirm it is only exploitable by a remote attacker who already holds high-privilege authenticated access to the TMS7/TopHat web application - a default configuration without valid credentials is not vulnerable. Successful exploitation yields full compromise of confidentiality, integrity, and availability of the terminal management system; no public exploit code and no CISA KEV entry were identified at time of analysis, and the deployment base is a niche petroleum/OT terminal management environment.
Privilege escalation in FastAdmin (versions 1.6.1.20250430 and 1.6.5.20260602) lets an attacker who already holds an authenticated administrator session manipulate the Database Management component via application/database.php so that code runs with privileges beyond those intended, resulting in full compromise of confidentiality, integrity, and availability of the affected instance. Exploitation is network-reachable but heavily gated: the assessed vector (CVSS:3.1/AV:N/AC:L/PR:H/UI:R, score 7.1) requires high privileges and user interaction, so an unauthenticated attacker against a default install cannot trigger it directly. Publicly available exploit code exists and is referenced in a public GitHub issue, though there is no KEV confirmation of active exploitation; the EPSS-style exploit maturity flag in the CVSS 4.0 vector (E:P) reinforces that a working proof of concept is circulating.
Missing authorization checks in mall4j through 4.0 let any authenticated low-privilege account read the entire customer address book via the admin-side GET endpoints /user/addr/page and /user/addr/info in UserAddrController, exposing names, phone numbers and postal addresses. Exploitation requires only a valid, low-privileged login (PR:L) reachable over the network with no user interaction and no special configuration, and publicly available exploit code exists in a GitHub proof-of-concept repository. The flaw is a data-exposure issue (confidentiality only, no write or availability impact), and no vendor-released patch was identified at time of analysis.
Time-based blind SQL injection in ClipBucket v5 (through 5.5.3-#197) allows an authenticated administrator who holds the video_moderation permission to inject arbitrary SQL through the videoid parameter of the admin video edit function, enabling extraction and partial modification of database contents. Exploitation requires a valid high-privilege admin session with that specific permission, so anonymous or low-privilege users cannot trigger it; once such an account is authenticated, no user interaction or non-default configuration is needed. Publicly available exploit code exists (a published two-blind-SQLi write-up), and an upstream fix is available as a commit that casts videoid to an integer; the issue is a real but modest-priority finding given the authentication prerequisite.
Time-based blind SQL injection in ClipBucket v5 (all builds through 5.5.3-#197) allows an authenticated administrator holding the basic_settings permission to inject arbitrary SQL through the language_id parameter of the language update function, enabling extraction or modification of database contents. The flaw is reachable over the network with no user interaction, but the high-privilege prerequisite is the primary limiting factor: neither unauthenticated nor low-privilege users can trigger it, and builds patched after upstream commit ecbdf2d5 are not affected. Publicly available exploit code exists (a published HackMD write-up demonstrating the blind SQLi), though there is no confirmed active exploitation (no CISA KEV listing); EPSS-style urgency is moderate given the admin-level access required.
Unauthenticated attackers can delete arbitrary product reviews in mall4j through 4.0 by sending DELETE requests to the /prodComm endpoint in ProdCommController, which applies no authentication or authorization checks to the prodCommId parameter (CWE-306). Publicly available exploit code exists, and no credentials or user interaction are required; the only prerequisite is knowing or enumerating a valid review ID. The impact is limited to integrity tampering with review records, with no confidentiality or availability loss assessed in our independent review, making this a low-severity data-tampering issue rather than a high-impact compromise.
Denial of service in Sliver C2 framework 1.7.7 and earlier allows an attacker who controls a compromised implant session to crash the entire teamserver by returning a malformed or zero-length Download response, disrupting all connected operators. Publicly available exploit code exists, but the provided data does not indicate confirmed active exploitation (CISA KEV). The CVSS 4.0 score is 6.8 and the independently assessed CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H, so this is a bounded availability impact requiring an established implant session and an operator-initiated download.
Time-based blind SQL injection in Toptech Systems TMS7 and TopHat lets an authenticated, high-privilege operator inject SQL through the 'reportType' parameter of the product summary report in the balancing reports section, with data recovered indirectly by measuring database response delays rather than returned in the response. The issue is remotely reachable with no user interaction but is gated behind a privileged session (vendor CVSS:4.0 base 8.5; independent assessment CVSS:3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L), so confidentiality is the primary exposure while integrity and availability impacts remain limited. Exploitation status: no public exploit identified at time of analysis, and the vendor addresses it by upgrading to TMS7 v7.8; taken together this is a genuine but access-gated data-confidentiality issue in a niche OT deployment rather than an internet-wide emergency.
Time-based blind SQL injection in Toptech Systems TMS7 and TopHat terminal management software lets an authenticated high-privilege user inject SQL through the 'screenID' parameter of the electronic transaction queue viewer in the manual transactions section, using response-time delays to infer database contents. Exploitation requires an existing high-privilege (PR:H) session on the affected web interface, so anonymous and low-privilege users are excluded, and the blind, inference-based technique makes data extraction slow rather than directly returned. No public exploit code has been identified at time of analysis and the issue is remediated in TMS7 version 7.8, so despite the vendor's CVSS 4.0 score of 8.5 the practical operational priority for most terminal operators is moderate.
Time-based blind SQL injection in the home-page search function of Toptech Systems' TMS7 terminal management application lets an attacker who already holds a high-privileged session inject SQL through the 'pattern' query parameter and infer database contents from response timing. The vendor addressed the flaw in TMS7 version 7.8, so unpatched pre-7.8 deployments are the exposed population; TOPHAT is also listed in the affected CPE set. The issue requires authenticated high-privileged access (CVSS PR:H) and the product has a limited OT footprint, so this is a real but access-gated concern rather than an internet-scale emergency, and no public exploit identified at time of analysis.
Time-based blind SQL injection in the 'search' parameter of the view-audit-logs feature (utilities section) of Toptech Systems' TMS7 and TopHat terminal-automation platforms, confirmed affecting version 7.6.3, lets an attacker with an authenticated high-privilege session force the backend database to leak data through conditional response delays. Exploitation is access-gated rather than open: the independent assessment (CVSS 3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L) aligns with the vendor's v4.0 vector (PR:H) in requiring a privileged, authenticated foothold, and the flaws sit in OT/terminal-management deployments that are normally segmented rather than internet-facing. No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has shipped a fix in TMS7 v7.8.
Time-based blind SQL injection in the business allocation search feature of Toptech Systems TMS7 and TopHat 7.6.3 and earlier lets a high-privilege authenticated attacker inject SQL through the supplier_no parameter and infer database contents by measuring conditional query delays. The vendor fixed the issue in TMS7 v7.8, documented in CISA ICS advisory ICSA-26-272-02 and tracked as EUVD-2026-89428, and no public exploit code or confirmed active exploitation was identified at time of analysis. Because exploitation requires a privileged authenticated session against the business allocation search endpoint, the issue is access-gated rather than broadly reachable, although the assessed confidentiality and availability impacts on the database are high.
Unauthenticated shipment-tracking disclosure in mall4j through version 4.0 lets remote attackers retrieve carrier names, waybill numbers, and full logistics trails for any order by calling the yami-shop-api DeliveryController checkDelivery endpoint with an order number and no credentials. Because the handler performs neither authentication nor ownership verification, any caller who can supply a valid order number - and sequential or guessable numbering would permit enumeration - can harvest tracking data in bulk. Publicly available exploit code exists (a proof-of-concept Python script), but the issue is not confirmed as actively exploited; per the independent assessment this is a real but low-to-moderate priority information-disclosure problem, since impact is limited to confidentiality of shipment metadata with no integrity or availability effects.
Unauthenticated extraction of permanent, plaintext cloud storage credentials from the Viidure Android dashcam companion application (CVE-2026-96587) gives any party who obtains the publicly distributed APK full read, write, and delete access to backend object storage holding operational files such as firmware and application binaries. Because the credentials are hardcoded in the shipped artifact and the assessed vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, exploitation requires only network reachability to the storage endpoint plus routine decompilation of the app package - no victim interaction, authentication, or non-default configuration is needed. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the practical limiter is the niche install base of this consumer dashcam app rather than any technical barrier; the independent assessment nevertheless flags this as a genuine high-priority finding because the exposure is architectural (server-side credential revocation is the only real containment) and write/delete scope against firmware could enable tampering with the update channel if the recovered keys retain that privilege.
Authenticated code injection in Dassault Systèmes GEOVIA Geospatial Data Manager allows a low-privilege user with a valid session to execute arbitrary code on the server, and the changed-scope metric means the compromised component can be leveraged to affect other parts of the hosting 3DEXPERIENCE environment. The flaw carries a 9.9 CVSS score (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) and affects GEOVIA Geospatial Data Manager deployed on 3DEXPERIENCE R2024x through R2026x up to the listed FP.CFA build levels; no user interaction is required beyond the attacker's own authenticated access. There is no indication of confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, so the practical exposure is gated by the requirement for a valid low-privilege account and by the product's narrow mining and geospatial deployment footprint.
Privilege escalation in the Electron framework lets a <webview> guest grant itself Node.js integration inside its Web Workers even when the embedding (embedder) application has Node integration turned off, so untrusted guest content can obtain a more privileged JavaScript execution context than the host application intended to allow. Affected releases are npm/electron before 41.10.6, 42.x before 42.9.2, 43.x before 43.4.1, and 44.0.0-alpha.x before 44.0.0-beta.5 (CPE cpe:2.3:a:electron:electron). Exploitation is not automatic: the independent assessment requires a non-default deployment where the app enables the <webview> tag, runs the embedder unsandboxed with nodeIntegration disabled, and loads attacker-controllable content into the guest - applications that never enable <webview>, keep the embedder sandboxed, or only load trusted first-party content are unaffected. There is no public exploit identified at time of analysis (CISA SSVC: Exploitation none, Automatable no, Technical Impact total) and EPSS is low at 0.45% (37th percentile), although the underlying privilege boundary is a total-compromise class issue where it applies; the NVD-style vector scores 9.8, while our independent assessment reflects the higher attack complexity and changed scope (AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) imposed by those preconditions.
A heap buffer overflow exists in libsoup's WebSocket permessage-deflate compression path: when a very large outbound message is compressed, truncated size calculations used to grow a GByteArray wrap, allowing zlib to write beyond the allocated buffer. The affected code is the outbound compression routine reached through the permessage-deflate extension (RFC 7692), so exploitation requires that the extension be negotiated on the WebSocket connection and that the endpoint emit a message large enough to cross the integer-truncation boundary - a precondition that materially narrows exploitation below the raw 9.8 base score. The CVSS vector indicates no privileges (PR:N) or user interaction (UI:N) are required, but no public exploit code has been identified and there is no confirmation of active exploitation (SSVC exploitation: none, no CISA KEV entry); EPSS is low at 0.30% (20th percentile), and Red Hat has published errata (RHSA-2026:83384, RHSA-2026:83618) addressing the flaw.
Blind XPath injection in the MediaWiki EasyTimeline (Timeline) extension lets an attacker who can submit <timeline> markup alter the extension's server-side XML/XPath query structure, potentially exposing data the wiki would not otherwise return. The flaw affects EasyTimeline before 1.46.1, 1.45.5, and 1.43.10; published scoring is severe (9.8, AV:N/AC:L/PR:N/UI:N) while independent assessment rates it as requiring edit privileges (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) because exploitation depends on being able to edit a page containing a <timeline> block - trivial on wikis that allow anonymous/open editing, but account- or role-gated where editing is restricted. Vendor-released patches exist (1.46.1 / 1.45.5 / 1.43.10), EPSS is low at 0.17% (6th percentile), and no public exploit identified at time of analysis.
Memory corruption in Mozilla Firefox's JavaScript and WebAssembly engine (CWE-824, access of uninitialized pointer) allows a crafted or compromised web page to trigger an invalid-pointer dereference in the browser's content process, potentially resulting in information disclosure or code execution within that process. Exploitation requires the victim to navigate to attacker-controlled content in a pre-patch build - Firefox before 157, Firefox ESR before 153.4, or Firefox ESR before 140.17 - and is unauthenticated per the assessed CVSS vector (AV:N/PR:N), although the vendor's 9.8 score assumes no user interaction while our independent assessment requires UI:R, so the effective risk should be reconciled before treating this as an emergency. No public exploit code has been identified at time of analysis (no KEV listing, no POC) and EPSS is 0.16% (4th percentile), indicating low predicted exploitation activity.
Information disclosure in Mozilla Firefox DevTools versions prior to 157 allows an unauthenticated remote attacker to potentially expose sensitive data when a victim interacts with the browser's developer tools while viewing attacker-influenced content. Exploitation requires user interaction (UI:R) and is client-side only; no public exploit code has been identified at time of analysis (EPSS 0.15%, percentile 4%). The vulnerability is fixed in Firefox 157.
Configuration injection in PyPA virtualenv before 21.7.11 lets a line boundary embedded in a prompt value inject extra keys into the generated pyvenv.cfg, potentially overriding the 'home' key so a subsequent environment resolves to an attacker-chosen base interpreter. The flaw is conditional rather than remotely exploitable: it is assessed as local (AV:L) with user interaction (UI:R per the independent assessment, UI:P in the CVSS 4.0 vector) and only has security consequence when the prompt value originates outside the operator's trust boundary - for example an automated venv-creation pipeline or CI job that derives --prompt or VIRTUALENV_PROMPT from an untrusted project name or shared configuration; a prompt typed directly by the operator merely corrupts the operator's own environment. No public exploit code and no confirmed active exploitation were identified at time of analysis, and EPSS/KEV signals were not provided; version 21.7.11 fixes the issue, and the referenced upstream PR adds fuzz and property tests asserting the invariant that a written value can never be read back as extra configuration keys.
Unauthenticated remote code execution affects AltumCode 66Uptime deployments running a version before v54.0.0, and separately the bundled 66Uptime ping-servers plugin before v2.0.0, with the attack surface being the application's index.php entry point. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H, 9.8 critical) describes a network-reachable flaw requiring no credentials, no user interaction, and no special privileges, and the CISA SSVC assessment rates the technical impact as total while classifying exploitation as proof-of-concept. Publicly available exploit code exists per the SSVC POC rating, though the flaw is not confirmed actively exploited (CISA KEV), and the practical exposure is tempered by the relatively small deployment base of this commercial uptime-monitoring script. A significant caveat applies: the only listed reference (a Glimmernet security advisory) frames the ping-servers plugin issue as server-side request forgery, which if accurate would narrow the impact to SSRF rather than full code execution for that component.
Unauthenticated remote command execution is possible on HPE Networking Instant On access points running firmware version 3.4.1.0 and earlier, due to uncontrolled format string handling in an exposed interface of the device. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8), an attacker who can reach that interface over the network needs no credentials and no user interaction, and successful exploitation can run arbitrary commands on the underlying host, causing denial of service or full compromise. No public exploit code has been identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV), but the low attack complexity and default-configuration reachability make it a genuine high-priority exposure for any Instant On AP whose vulnerable interface is accessible from an untrusted segment.
Unauthenticated remote code execution in HPE Networking Instant On firmware through 3.4.1.0 allows an attacker who can reach the device's affected network interface to exploit a buffer overflow and execute arbitrary code as a privileged user on the underlying host (CVSS 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, but exploitation requires only network reachability to the exposed interface, so internet-facing or unsegmented Instant On access points and switches carry the greatest exposure. HPE has addressed the flaw in firmware versions above 3.4.1.0.
Unauthenticated remote code execution in Open GenAI Stack (ogx-ai, 2026-06-11 build) lets any attacker who can submit a prompt to an affected endpoint execute arbitrary server-side code, because prompt content is rendered as an unsanitized Jinja2 template (CWE-94, classic server-side template injection). The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8), with no authentication, user-interaction, or non-default-configuration prerequisite, so exploitation reduces to reaching the vulnerable template-rendering path. No public exploit code has been identified at time of analysis, and the widely repeated claim that this stack underpins the Meta AI backend for WhatsApp is unconfirmed by any vendor advisory. Real-world risk is bounded by deployment scope: only systems actually running the vulnerable ogx-ai prompt-to-template path are exposed.
Stack-based buffer overflow in the TOTOLINK N150RT (NTR150) web management interface, firmware V3.4.0-B20201030, allows a remote attacker to corrupt memory and potentially gain code execution by sending oversized ip_subnet and fw_ip parameters to the /boafrm/formPortFw port-forwarding handler during the rule-addition flow. The supplied CVSS 3.1 vector scores 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), modeling an unauthenticated, low-complexity attack with full confidentiality, integrity and availability impact, although port-forwarding configuration is normally an admin-authenticated function and the PR:N assertion should be confirmed against the published proof-of-concept material before relying on it. No CISA KEV entry or confirmed public exploit was identified at time of analysis, and realistic exposure is primarily LAN-side unless the management interface has been deliberately exposed to the WAN or internet.
Unauthenticated remote code execution affects metatool-ai MetaMCP through version 2.4.22 via the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio, where request-controlled input reaches process spawning in the STDIO branch of createTransport (routers/mcp-proxy/server.ts). The CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates a network-reachable, unauthenticated attacker can achieve total confidentiality, integrity, and availability impact with no user interaction, and CISA's SSVC assessment rates the flaw automatable with total technical impact. No confirmed active exploitation (CISA KEV) and no public exploit code were identified at time of analysis; the practical risk depends primarily on whether the inspector proxy endpoint is exposed beyond localhost in a given deployment.
Lantronix G520 Series firmware (2.6.0.4R6 stable, covering G526, G526RP, G527 and G528) can be induced to treat forged software packages as authentic, because the boot-time 'stock done' routine disables OPKG signature verification before restoring optional packages from a writable, unsigned feed, and because the production private key whose public counterpart is trusted by both stable and beta builds ships inside the publicly distributed Lantronix SDK. An attacker who can deliver a malicious package onto the device's update/feed path and get it processed can execute arbitrary code with root privileges at install time, although the assessed vector (CVSS:3.1/AV:N/AC:H/PR:N/UI:R) shows this is gated by attack requirements and passive user interaction rather than a one-shot unauthenticated remote compromise. No public exploit code, PoC, or confirmed in-the-wild exploitation was identified at the time of analysis, but the combination of an exposed trust anchor and a signature-verification bypass makes this a genuine high-impact integrity flaw rather than an inflated score.
Update metadata fetched over plain HTTP by Lantronix G520 series devices (reported against firmware 2.6.0.4R6 stable, covering G526, G526RP, G527 and G528 models) can be tampered with so that a stored value is later served by the management interface as JSON and rendered as raw HTML by the update-information web page, allowing attacker-controlled script to run in an authenticated administrator's browser. Because the same authenticated origin also exposes an interface that executes system-level commands with root privileges, an attacker who can inject metadata can escalate from script execution to arbitrary code execution in the device's administrative context. The vendor-assigned CVSS 4.0 base score is 7.7, but the attack is not opportunistic: it requires an on-path/adversary-in-the-middle position against the unencrypted update channel (AT:P) and an administrator who opens the affected page (UI:P), and no public exploit code or confirmed active exploitation was identified at time of analysis - the issue was reported through CISA's ICS coordination process (ICSA-26-272-01).
Remote code execution is possible in Google Chrome on Android builds prior to 154.0.8037.92, where a heap-based buffer overflow in the ANGLE graphics layer can be triggered when a user renders a crafted HTML page. Successful exploitation corrupts memory out of bounds and, per Google's Critical severity rating and the scope-changed CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, 9.6), can potentially execute arbitrary code outside the browser sandbox. The issue is remotely deliverable without authentication but hinges on user interaction, and no public exploit code or active exploitation has been identified at time of analysis; CISA's SSVC assessment likewise records no observed exploitation and rates the flaw non-automatable, while a vendor patch (154.0.8037.92) is available.
Remote code execution outside the browser sandbox can potentially be achieved by an unauthenticated attacker in Google Chrome versions prior to 154.0.8037.92 by exploiting a use-after-free in the Bluetooth subsystem. The victim must navigate to a crafted HTML page that exercises the Web Bluetooth code path (UI:R), and successful exploitation can lead to arbitrary code execution with a scope change (S:C), meaning a sandbox escape. No public exploit code or active exploitation has been identified at time of analysis, and a vendor patch is available in Chrome 154.0.8037.92.
Use-after-free memory corruption in Mozilla Firefox's Graphics component can be exploited by a remote, unauthenticated attacker to escape the browser's content sandbox and run code at the privilege of the parent/broker process, provided the victim renders attacker-controlled content. The only prerequisite is user interaction - visiting or rendering a crafted page in any unpatched build (Firefox before 157, ESR before 153.4, ESR 140.17, ESR 115.42) - since graphics rendering is enabled by default and no credentials are needed (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, 9.6). No public exploit code or in-the-wild exploitation has been identified at time of analysis, and the independent assessment notes that reliable heap grooming of the use-after-free is non-trivial, making this a high-priority RCE-class flaw rather than a demonstrated weaponized one.
Use-after-free in Mozilla Firefox's DOM Core & HTML engine allows attacker-controlled web content to corrupt memory and escape the browser's content sandbox, potentially yielding code execution at higher privilege on the host. Affected are Firefox builds prior to 157 and ESR branches prior to 153.4, 140.17, and 115.42; the flaw is rated CVSS 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), so no authentication or non-default configuration is required, but a victim must load or render a malicious page (UI:R). No public exploit code has been identified at time of analysis, and the vulnerability has not been confirmed as actively exploited, though the scope-changed rating reflects that a successful trigger crosses a security boundary rather than merely crashing a content process.
Mozilla Firefox can be driven to escape its content sandbox through a use-after-free in the DOM Content Processes component, letting a remote, unauthenticated attacker who convinces a victim to load a crafted page (UI:R, PR:N) corrupt memory in the sandboxed content process and cross into the more privileged parent process - the pivot reflected in the CVSS 9.6 scope-change rating and the C:H/I:H/A:H metrics. The flaw affects Firefox before 157 and the ESR trains before 153.4, 140.17 and 115.42, and it is fixed in those exact builds. No confirmed active exploitation (CISA KEV) and no public exploit code were identified at time of analysis.
A use-after-free in Firefox's DOM Content Processes component lets unauthenticated remote attackers escape the content-process sandbox by getting a victim to render attacker-controlled web content, resulting in high confidentiality, integrity and availability impact across a changed security scope (CVSS 9.6, AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). The mandatory user interaction (loading or rendering the malicious page) is the primary limiting factor, and no authentication or elevated privileges are required. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the issue is fixed in Firefox 157, Firefox ESR 153.4, Firefox ESR 140.17 and Firefox ESR 115.42, so patched or auto-updated installations are unaffected.