Command injection in simple-git, the Node.js library for running git commands and published on npm, affects all releases before 4.0.0 and allows unauthenticated remote attackers to execute arbitrary commands whenever a consuming application forwards attacker-influenced values into a git push argument list. The library's default blockUnsafeOperationsPlugin matches dangerous options by literal spelling only, so unambiguous Git long-option abbreviations such as --receive-p, --receive-pa and --exe bypass detection, are expanded by Git itself, and reach --receive-pack on a local or file remote where the injected command runs. Publicly available exploit code exists (a published gist plus the detailed upstream advisory proof of concept), but there is no CISA KEV confirmation of active exploitation; EPSS is 0.36% (28th percentile) and SSVC marks the issue Exploitation: none, Automatable: no, because three consumer-specific preconditions must coincide.
OS command injection in Netcore NAP930 firmware 0.1.241010.141410 allows unauthenticated remote attackers to execute arbitrary commands on the device via the 'sid' parameter of the /www/cgi-bin/network_tools CGI. The vulnerability, tracked as CVE-2026-102240 (CVSS 4.0: 9.3; independent assessment CVSS 3.1: 9.8), has publicly available exploit code. The vendor was contacted but did not respond, and no fixed firmware is available.
Unauthenticated password reset in mall4j through 4.0 allows remote attackers to take over any storefront account by supplying a target username to the PUT /user/updatePwd endpoint, which lacks authentication checks (CWE-306). Publicly available exploit code exists, and the issue is rated critical (CVSS 4.0 score 9.3; independent assessment CVSS 3.1 9.1 with PR:N). No confirmed active exploitation (CISA KEV) as of analysis, but the low attack complexity and lack of prerequisites make this a high-priority risk for any deployment where the storefront API is reachable.
Unauthenticated arbitrary file write in the mypresta Google Merchant Center Feed (gmfeed) module for PrestaShop lets remote attackers control the output filename, path, extension, and content written by the feed.php endpoint, enabling them to drop a PHP file and execute it for remote code execution. The flaw carries a CVSS 4.0 base score of 9.3 (independent assessment: CVSS 3.1 9.3, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflecting no authentication, no user interaction, and full confidentiality, integrity, and availability impact. It affects only PrestaShop stores running this third-party module below version 2.3.9, which is the vendor-fixed release; no public exploit code has been identified at time of analysis and there is no CISA KEV entry, though the trivial unauthenticated exploitation path makes rapid patching advisable.
Command injection in the simple-git Node.js library (versions 3.15.0 through 4.0.0) allows remote, unauthenticated attackers to execute arbitrary shell commands under the identity of the Node.js process when a host application forwards attacker-controlled values into SimpleGitOptions.config or inline -c arguments and later runs git interpret-trailers, because the default blockUnsafeOperationsPlugin does not flag trailer.<token>.cmd (or trailer.<token>.command) as unsafe configuration. This is CWE-78 (OS command injection), rated 9.2 under CVSS v4.0 by the reporter and independently assessed as CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H; exploitation is contingent on the application actually passing untrusted config into simple-git, so apps using only hard-coded/trusted configuration are not exposed and no privilege escalation beyond the Node process is possible. A vendor-released patch is available in simple-git 4.0.1, which introduces the allowUnsafeCommandBinaries category; there is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Toptech Systems TMS7 and TopHat expose a file export endpoint that lets any network-reachable, unauthenticated attacker submit a single crafted POST request and pull arbitrary database tables out of the system - an information disclosure of the highest severity as scored by CISA ICS (CVSS 10.0), and assessed by our analysis as AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, i.e. confidentiality-only impact with no integrity or availability effect. Affected are deployments of Toptech TMS7 (all versions captured in CPE with a wildcard version) and TopHat, which are OT/ICS fuel-terminal and terminal-automation products typically expected to sit on segmented operational networks; the decisive factor for real-world exploitability is whether the export endpoint is reachable from outside that trusted OT segment, since no authentication, user interaction, or non-default toggle is required. There is no public exploit code identified at time of analysis and the flaw is not listed on CISA KEV, so exposure should be treated as a configuration-and-segmentation problem rather than a confirmed ongoing campaign. Authentication requirements are not in question here: the CVSS vector contains PR:N, so exploitation is unauthenticated.
Arbitrary PHP file upload and execution is possible in Toptech Systems TMS7 and TopHat version 7.6.3, because the TMS file upload endpoint performs no server-side file type validation, letting a PHP payload be written to the web server and then executed. The flaw is network-reachable and requires no user interaction, but the CVSS vector (PR:H) and the independent assessment confirm it is only exploitable by a remote attacker who already holds high-privilege authenticated access to the TMS7/TopHat web application - a default configuration without valid credentials is not vulnerable. Successful exploitation yields full compromise of confidentiality, integrity, and availability of the terminal management system; no public exploit code and no CISA KEV entry were identified at time of analysis, and the deployment base is a niche petroleum/OT terminal management environment.
Unauthenticated extraction of permanent, plaintext cloud storage credentials from the Viidure Android dashcam companion application (CVE-2026-96587) gives any party who obtains the publicly distributed APK full read, write, and delete access to backend object storage holding operational files such as firmware and application binaries. Because the credentials are hardcoded in the shipped artifact and the assessed vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, exploitation requires only network reachability to the storage endpoint plus routine decompilation of the app package - no victim interaction, authentication, or non-default configuration is needed. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the practical limiter is the niche install base of this consumer dashcam app rather than any technical barrier; the independent assessment nevertheless flags this as a genuine high-priority finding because the exposure is architectural (server-side credential revocation is the only real containment) and write/delete scope against firmware could enable tampering with the update channel if the recovered keys retain that privilege.
Authenticated code injection in Dassault Systèmes GEOVIA Geospatial Data Manager allows a low-privilege user with a valid session to execute arbitrary code on the server, and the changed-scope metric means the compromised component can be leveraged to affect other parts of the hosting 3DEXPERIENCE environment. The flaw carries a 9.9 CVSS score (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) and affects GEOVIA Geospatial Data Manager deployed on 3DEXPERIENCE R2024x through R2026x up to the listed FP.CFA build levels; no user interaction is required beyond the attacker's own authenticated access. There is no indication of confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, so the practical exposure is gated by the requirement for a valid low-privilege account and by the product's narrow mining and geospatial deployment footprint.
Privilege escalation in the Electron framework lets a <webview> guest grant itself Node.js integration inside its Web Workers even when the embedding (embedder) application has Node integration turned off, so untrusted guest content can obtain a more privileged JavaScript execution context than the host application intended to allow. Affected releases are npm/electron before 41.10.6, 42.x before 42.9.2, 43.x before 43.4.1, and 44.0.0-alpha.x before 44.0.0-beta.5 (CPE cpe:2.3:a:electron:electron). Exploitation is not automatic: the independent assessment requires a non-default deployment where the app enables the <webview> tag, runs the embedder unsandboxed with nodeIntegration disabled, and loads attacker-controllable content into the guest - applications that never enable <webview>, keep the embedder sandboxed, or only load trusted first-party content are unaffected. There is no public exploit identified at time of analysis (CISA SSVC: Exploitation none, Automatable no, Technical Impact total) and EPSS is low at 0.45% (37th percentile), although the underlying privilege boundary is a total-compromise class issue where it applies; the NVD-style vector scores 9.8, while our independent assessment reflects the higher attack complexity and changed scope (AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) imposed by those preconditions.
A heap buffer overflow exists in libsoup's WebSocket permessage-deflate compression path: when a very large outbound message is compressed, truncated size calculations used to grow a GByteArray wrap, allowing zlib to write beyond the allocated buffer. The affected code is the outbound compression routine reached through the permessage-deflate extension (RFC 7692), so exploitation requires that the extension be negotiated on the WebSocket connection and that the endpoint emit a message large enough to cross the integer-truncation boundary - a precondition that materially narrows exploitation below the raw 9.8 base score. The CVSS vector indicates no privileges (PR:N) or user interaction (UI:N) are required, but no public exploit code has been identified and there is no confirmation of active exploitation (SSVC exploitation: none, no CISA KEV entry); EPSS is low at 0.30% (20th percentile), and Red Hat has published errata (RHSA-2026:83384, RHSA-2026:83618) addressing the flaw.
Blind XPath injection in the MediaWiki EasyTimeline (Timeline) extension lets an attacker who can submit <timeline> markup alter the extension's server-side XML/XPath query structure, potentially exposing data the wiki would not otherwise return. The flaw affects EasyTimeline before 1.46.1, 1.45.5, and 1.43.10; published scoring is severe (9.8, AV:N/AC:L/PR:N/UI:N) while independent assessment rates it as requiring edit privileges (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) because exploitation depends on being able to edit a page containing a <timeline> block - trivial on wikis that allow anonymous/open editing, but account- or role-gated where editing is restricted. Vendor-released patches exist (1.46.1 / 1.45.5 / 1.43.10), EPSS is low at 0.17% (6th percentile), and no public exploit identified at time of analysis.
Memory corruption in Mozilla Firefox's JavaScript and WebAssembly engine (CWE-824, access of uninitialized pointer) allows a crafted or compromised web page to trigger an invalid-pointer dereference in the browser's content process, potentially resulting in information disclosure or code execution within that process. Exploitation requires the victim to navigate to attacker-controlled content in a pre-patch build - Firefox before 157, Firefox ESR before 153.4, or Firefox ESR before 140.17 - and is unauthenticated per the assessed CVSS vector (AV:N/PR:N), although the vendor's 9.8 score assumes no user interaction while our independent assessment requires UI:R, so the effective risk should be reconciled before treating this as an emergency. No public exploit code has been identified at time of analysis (no KEV listing, no POC) and EPSS is 0.16% (4th percentile), indicating low predicted exploitation activity.
Information disclosure in Mozilla Firefox DevTools versions prior to 157 allows an unauthenticated remote attacker to potentially expose sensitive data when a victim interacts with the browser's developer tools while viewing attacker-influenced content. Exploitation requires user interaction (UI:R) and is client-side only; no public exploit code has been identified at time of analysis (EPSS 0.15%, percentile 4%). The vulnerability is fixed in Firefox 157.
Unauthenticated remote code execution affects AltumCode 66Uptime deployments running a version before v54.0.0, and separately the bundled 66Uptime ping-servers plugin before v2.0.0, with the attack surface being the application's index.php entry point. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H, 9.8 critical) describes a network-reachable flaw requiring no credentials, no user interaction, and no special privileges, and the CISA SSVC assessment rates the technical impact as total while classifying exploitation as proof-of-concept. Publicly available exploit code exists per the SSVC POC rating, though the flaw is not confirmed actively exploited (CISA KEV), and the practical exposure is tempered by the relatively small deployment base of this commercial uptime-monitoring script. A significant caveat applies: the only listed reference (a Glimmernet security advisory) frames the ping-servers plugin issue as server-side request forgery, which if accurate would narrow the impact to SSRF rather than full code execution for that component.
Unauthenticated remote command execution is possible on HPE Networking Instant On access points running firmware version 3.4.1.0 and earlier, due to uncontrolled format string handling in an exposed interface of the device. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8), an attacker who can reach that interface over the network needs no credentials and no user interaction, and successful exploitation can run arbitrary commands on the underlying host, causing denial of service or full compromise. No public exploit code has been identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV), but the low attack complexity and default-configuration reachability make it a genuine high-priority exposure for any Instant On AP whose vulnerable interface is accessible from an untrusted segment.
Unauthenticated remote code execution in HPE Networking Instant On firmware through 3.4.1.0 allows an attacker who can reach the device's affected network interface to exploit a buffer overflow and execute arbitrary code as a privileged user on the underlying host (CVSS 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, but exploitation requires only network reachability to the exposed interface, so internet-facing or unsegmented Instant On access points and switches carry the greatest exposure. HPE has addressed the flaw in firmware versions above 3.4.1.0.
Unauthenticated remote code execution in Open GenAI Stack (ogx-ai, 2026-06-11 build) lets any attacker who can submit a prompt to an affected endpoint execute arbitrary server-side code, because prompt content is rendered as an unsanitized Jinja2 template (CWE-94, classic server-side template injection). The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8), with no authentication, user-interaction, or non-default-configuration prerequisite, so exploitation reduces to reaching the vulnerable template-rendering path. No public exploit code has been identified at time of analysis, and the widely repeated claim that this stack underpins the Meta AI backend for WhatsApp is unconfirmed by any vendor advisory. Real-world risk is bounded by deployment scope: only systems actually running the vulnerable ogx-ai prompt-to-template path are exposed.
Unauthenticated remote code execution affects metatool-ai MetaMCP through version 2.4.22 via the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio, where request-controlled input reaches process spawning in the STDIO branch of createTransport (routers/mcp-proxy/server.ts). The CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates a network-reachable, unauthenticated attacker can achieve total confidentiality, integrity, and availability impact with no user interaction, and CISA's SSVC assessment rates the flaw automatable with total technical impact. No confirmed active exploitation (CISA KEV) and no public exploit code were identified at time of analysis; the practical risk depends primarily on whether the inspector proxy endpoint is exposed beyond localhost in a given deployment.
Stack-based buffer overflow in the TOTOLINK N150RT (NTR150) web management interface, firmware V3.4.0-B20201030, allows a remote attacker to corrupt memory and potentially gain code execution by sending oversized ip_subnet and fw_ip parameters to the /boafrm/formPortFw port-forwarding handler during the rule-addition flow. The supplied CVSS 3.1 vector scores 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), modeling an unauthenticated, low-complexity attack with full confidentiality, integrity and availability impact, although port-forwarding configuration is normally an admin-authenticated function and the PR:N assertion should be confirmed against the published proof-of-concept material before relying on it. No CISA KEV entry or confirmed public exploit was identified at time of analysis, and realistic exposure is primarily LAN-side unless the management interface has been deliberately exposed to the WAN or internet.
Remote code execution is possible in Google Chrome on Android builds prior to 154.0.8037.92, where a heap-based buffer overflow in the ANGLE graphics layer can be triggered when a user renders a crafted HTML page. Successful exploitation corrupts memory out of bounds and, per Google's Critical severity rating and the scope-changed CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, 9.6), can potentially execute arbitrary code outside the browser sandbox. The issue is remotely deliverable without authentication but hinges on user interaction, and no public exploit code or active exploitation has been identified at time of analysis; CISA's SSVC assessment likewise records no observed exploitation and rates the flaw non-automatable, while a vendor patch (154.0.8037.92) is available.
Remote code execution outside the browser sandbox can potentially be achieved by an unauthenticated attacker in Google Chrome versions prior to 154.0.8037.92 by exploiting a use-after-free in the Bluetooth subsystem. The victim must navigate to a crafted HTML page that exercises the Web Bluetooth code path (UI:R), and successful exploitation can lead to arbitrary code execution with a scope change (S:C), meaning a sandbox escape. No public exploit code or active exploitation has been identified at time of analysis, and a vendor patch is available in Chrome 154.0.8037.92.
Use-after-free memory corruption in Mozilla Firefox's Graphics component can be exploited by a remote, unauthenticated attacker to escape the browser's content sandbox and run code at the privilege of the parent/broker process, provided the victim renders attacker-controlled content. The only prerequisite is user interaction - visiting or rendering a crafted page in any unpatched build (Firefox before 157, ESR before 153.4, ESR 140.17, ESR 115.42) - since graphics rendering is enabled by default and no credentials are needed (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, 9.6). No public exploit code or in-the-wild exploitation has been identified at time of analysis, and the independent assessment notes that reliable heap grooming of the use-after-free is non-trivial, making this a high-priority RCE-class flaw rather than a demonstrated weaponized one.
Use-after-free in Mozilla Firefox's DOM Core & HTML engine allows attacker-controlled web content to corrupt memory and escape the browser's content sandbox, potentially yielding code execution at higher privilege on the host. Affected are Firefox builds prior to 157 and ESR branches prior to 153.4, 140.17, and 115.42; the flaw is rated CVSS 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), so no authentication or non-default configuration is required, but a victim must load or render a malicious page (UI:R). No public exploit code has been identified at time of analysis, and the vulnerability has not been confirmed as actively exploited, though the scope-changed rating reflects that a successful trigger crosses a security boundary rather than merely crashing a content process.
Mozilla Firefox can be driven to escape its content sandbox through a use-after-free in the DOM Content Processes component, letting a remote, unauthenticated attacker who convinces a victim to load a crafted page (UI:R, PR:N) corrupt memory in the sandboxed content process and cross into the more privileged parent process - the pivot reflected in the CVSS 9.6 scope-change rating and the C:H/I:H/A:H metrics. The flaw affects Firefox before 157 and the ESR trains before 153.4, 140.17 and 115.42, and it is fixed in those exact builds. No confirmed active exploitation (CISA KEV) and no public exploit code were identified at time of analysis.
A use-after-free in Firefox's DOM Content Processes component lets unauthenticated remote attackers escape the content-process sandbox by getting a victim to render attacker-controlled web content, resulting in high confidentiality, integrity and availability impact across a changed security scope (CVSS 9.6, AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). The mandatory user interaction (loading or rendering the malicious page) is the primary limiting factor, and no authentication or elevated privileges are required. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the issue is fixed in Firefox 157, Firefox ESR 153.4, Firefox ESR 140.17 and Firefox ESR 115.42, so patched or auto-updated installations are unaffected.
Sandbox escape in Mozilla Firefox's DOM Navigation component (CVE-2026-100758, CVSS 9.6) lets attacker-controlled web content escape the content-process sandbox and reach high-integrity resources on the host once a user loads a malicious or compromised page, ad, or embedded frame. The flaw requires no authentication or special privileges but does require the victim to visit the attacker's content (UI:R), and because the escape changes security scope (S:C) with high confidentiality, integrity, and availability impact, every pre-fix Firefox build - including the legacy ESR 115 branch - is exposed. No public exploit code or confirmed active exploitation was identified at time of analysis; Mozilla shipped fixes in Firefox 157, Firefox ESR 153.4, Firefox ESR 140.17, and Firefox ESR 115.42, so risk is concentrated in unpatched installs and in organizations that lag on ESR updates.
Sandbox escape in Mozilla Firefox allows remote attackers to break out of the content sandbox by exploiting a use-after-free in the browser's Disability Access (accessibility) APIs. Affected are Firefox versions before 157 and Firefox ESR versions before 153.4; the attack is network-delivered and requires no authentication, but is not zero-click - the victim must open attacker-controlled web content that exercises the accessibility APIs and win the use-after-free race (CVSS 3.1 9.6, AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). Mozilla has fixed the flaw in Firefox 157 and Firefox ESR 153.4, and no public exploit has been identified at time of analysis; the score reflects the high confidentiality, integrity, and availability impact combined with scope change once the sandbox boundary is crossed, while the UI:R component keeps it from being self-propagating.
Use-after-free in Chrome's Views UI framework allows a remote attacker who convinces a victim to open a crafted HTML page to execute arbitrary code outside the browser sandbox on any Chrome desktop build prior to 154.0.8037.92. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, 9.6) confirms remote, unauthenticated attack with no special privileges, but also confirms that user interaction - social engineering to get the victim to load the page - is mandatory, which is the main limiting factor; the scope change (S:C) reflects that impact is not confined to the renderer. No public exploit was identified at the time of analysis and CISA's SSVC assessment rates exploitation as 'none' and not automatable, but a vendor patch is available from Google and the technical impact is total, making prompt updating the priority.
Use-after-free in Google Chrome's FullScreen implementation prior to 154.0.8037.92 allows a remote, unauthenticated attacker to execute arbitrary code outside the browser's renderer sandbox by enticing a victim to load a crafted HTML page. The vulnerability carries a CVSS 3.1 base score of 9.6 with scope change (S:C) and High confidentiality, integrity, and availability impact, reflecting that successful exploitation escapes the sandbox rather than being confined to a compromised renderer. No public exploit code and no confirmed active exploitation have been identified at time of analysis (SSVC Exploitation: none), and the attack is not automatable for mass exploitation because it requires the victim to visit attacker-controlled content (UI:R); Google has released a vendor patch in Chrome 154.0.8037.92.
Remote code execution outside the browser sandbox is possible in Google Chrome builds prior to 154.0.8037.92 through a use-after-free in the Passwords component, which a remote attacker can trigger by convincing a victim to open a crafted HTML page. Because the CVSS vector is PR:N/UI:R, no authentication or special configuration is required, but the victim must actively navigate to the attacker's content and a successful chain must also defeat the sandbox, leaving full compromise achievable but non-trivial. No public exploit code has been identified at time of analysis and CISA's SSVC assessment rates exploitation as none, while Google has released a vendor patch in Chrome 154.0.8037.92; the scope-change (S:C) rating reflects that a working exploit would escape the renderer boundary rather than remain confined to a single security context.
A use-after-free in Chrome's Views UI framework allows an unauthenticated remote attacker who convinces a victim to open a crafted HTML page to execute arbitrary code outside the browser sandbox in Google Chrome desktop builds prior to 154.0.8037.92. Per the CVSS vector (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), no credentials or special browser configuration are required - default installations are affected - but exploitation depends on user interaction with attacker-controlled content and on overcoming the difficulty of turning a use-after-free into a reliable sandbox escape, so a working exploit is not trivial. No public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited; a vendor patch (154.0.8037.92) is available, which makes rapid update the decisive control.
Use-after-free in Mozilla Firefox's Preferences: Backend component before version 157 enables a sandbox escape, allowing attacker-controlled web content to break out of the browser's renderer sandbox and gain code execution with browser privileges; exploitation requires the victim to load attacker-controlled content (UI:R) with no authentication or special privileges (PR:N), and default configurations are affected. Mozilla addressed this in Firefox 157 via the mfsa2026-97 advisory, and while the CVSS 9.6/S:C scoring reflects a genuinely high-severity memory-corruption issue, no public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis.
Reflected cross-site scripting in Webmin versions prior to 2.650 lets an attacker execute arbitrary script - and through the resulting session context, attacker-chosen commands - in the browser of an administrator who clicks a crafted link to the server's own Webmin instance. The flaw lives in the filter_javascript() sanitizer used when the core 'message' parameter is rendered through ui_alert_box() in webmin/index.cgi; because the payload is reflected only into a victim's already-authenticated admin session, exploitation is targeted and social-engineering dependent rather than autonomous. Vendor-released patch: 2.650. No public exploit code has been identified and the issue is not in CISA KEV; EPSS is only 0.30% (20th percentile) and the CISA SSVC assessment records Exploitation: none, Automatable: no, Technical Impact: partial, so the practical urgency is materially lower than the 9.6 base score suggests.
A use-after-free in Mozilla Firefox's Widget:Gtk component enables a sandbox escape: an unauthenticated remote attacker who persuades a user to load attacker-controlled web content can corrupt freed heap memory in the GTK widget rendering path and cross the browser's security boundary (CVSS 9.6, AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), turning a rendering bug into code-execution-class impact outside the sandbox. GTK-based (Linux/Unix) Firefox builds are the primary target surface, and the flaw affects Firefox releases prior to 157 as well as the ESR branches prior to 153.4 and 140.17, where Mozilla has shipped the fix. No public exploit code has been identified at time of analysis, and CISA's SSVC decision framework rates exploitation as 'none' with automation rated 'no', although the assessed technical impact is total if the bug is successfully triggered; the principal hurdles are the required user interaction and the difficulty of reliably grooming a UAF into a working sandbox escape.
Sandbox escape in Mozilla Firefox stems from a use-after-free in the DOM: Core & HTML component, allowing attacker-controlled web content to corrupt memory and break out of the browser's content-process sandbox. Affected builds are those prior to Firefox 157, Firefox ESR 153.4, and Firefox ESR 140.17; the flaw carries a CVSS 9.6 rating (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) because the scope change (S:C) reflects escape from the renderer sandbox into the wider browser/OS context with high confidentiality and integrity impact. No public exploit code has been identified at time of analysis, and this CVE is not in CISA KEV; however, exploitation only requires a victim to load attacker-controlled content (UI:R) and needs no authentication or non-default configuration, so browser auto-update to a fixed build fully removes exposure.
Sandbox escape in Mozilla Firefox stems from improper boundary checks in the XPCOM component, allowing remote attackers to break out of the browser's content sandbox and compromise the host when a victim loads attacker-controlled web content. The flaw carries a CVSS 9.6 with required user interaction (UI:R) and no authentication (PR:N), affecting unpatched versions below Firefox 157, Firefox ESR 153.4, Firefox ESR 140.17, and Firefox ESR 115.42. No public exploit identified at time of analysis, and CISA SSVC records Exploitation: none, so this is a high-severity patching priority rather than a confirmed active threat.
A sandbox escape in Mozilla Firefox's Graphics: WebRender component lets attacker-controlled web content break out of the browser's content-process sandbox and reach the parent/broker process, with a 9.6 CVSS score driven by scope change plus high confidentiality, integrity and availability impact. Successfully triggering it requires an unpatched build and mandatory user interaction (PR:N, UI:R) - the victim must load or render a malicious page that exercises the WebRender path - and because the flaw sits in the rendering/sandbox boundary rather than in a directly reachable network service, realistic abuse typically depends on chaining it with a separate content-process compromise, which is consistent with SSVC rating Exploitation 'none' and Automatable 'no'. Fixed builds are Firefox 157, Firefox ESR 153.4, Firefox ESR 140.17 and Firefox ESR 115.42; there is currently no public exploit identified at time of analysis and EPSS is low at 0.16% (4th percentile), so exploitation signals are sharply split between the very high severity rating and the low likelihood evidence.
Sandbox escape in Mozilla Firefox's Graphics component allows unauthenticated remote attackers to break out of the browser's content sandbox when a victim renders attacker-controlled web content (CVSS vector AV:N/AC:L/PR:N/UI:R/S:C, score 9.6). Affected builds are Firefox before 157 and Firefox ESR before 153.4, 140.17, and 115.42, all of which now have vendor fixes available across their respective release trains. Exploitation requires chaining the escape with a separate content-process compromise to achieve code execution, which is consistent with CISA SSVC's 'Automatable: no' and 'Exploitation: none' ratings; EPSS is low at 0.16% (4th percentile) and no public exploit code has been identified at time of analysis.
Mozilla Firefox's Internationalization component contains incorrect boundary conditions that permit a sandbox escape, allowing an attacker who already has code execution inside the content process to break out of the browser sandbox. The flaw affects Firefox before 157, Firefox ESR before 153.4, and Firefox ESR before 140.17; exploitation requires a victim to load attacker-controlled web content (UI:R) and typically must be chained with a separate content-process memory-corruption vulnerability because this is not a direct remote code execution flaw. No public exploit code has been identified at the time of analysis, and EPSS is 0.16% (4th percentile), indicating low predicted exploitation activity despite the critical CVSS score of 9.6.
A sandbox escape in Firefox's XUL component allows attacker-controlled content to break out of the browser's security boundary and gain the privileges of the parent process, resulting in high confidentiality and integrity impact with changed scope (CVSS 9.6). Exploitation requires the victim to load or interact with attacker-controlled content (UI:R), but no credentials are needed (PR:N), and default Firefox configurations are affected; SSVC rates the issue non-automatable, so mass-scanning-style campaigns are unlikely. The flaw is fixed in Firefox 157 and Firefox ESR 153.4, no public exploit code or confirmed active exploitation has been identified at time of analysis, and EPSS is low (0.15%, 4th percentile).
Sandbox escape in Mozilla Firefox's Security: Process Sandboxing component allows an attacker to break out of the browser's content-process sandbox when a victim loads attacker-controlled web content, yielding full confidentiality, integrity, and availability impact on the host. The flaw is rated CVSS 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), unauthenticated (PR:N) but requiring user interaction (UI:R), and affects Firefox versions prior to ESR 153.4 and Firefox 157. EPSS is low at 0.15% (4th percentile) and no public exploit code has been identified at time of analysis, though CISA SSVC assigns total technical impact with no known exploitation.
Unauthenticated remote attackers can bypass a DOM:Security mitigation in Mozilla Firefox (versions before 157 and Firefox ESR before 153.4) by enticing a victim to load attacker-controlled web content, defeating a browser protection mechanism rather than exploiting a memory-safety bug directly. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, score 9.6) and a scope change indicate high potential confidentiality, integrity and availability impact once the defense is circumvented, but the independent assessment characterizes this as a weakening primitive: full impact generally requires chaining with a separate content-process vulnerability, so it is not a self-contained compromise. Exploitation signals conflict sharply - a critical-looking CVSS score against an EPSS of only 0.15% (4th percentile), a CISA SSVC rating of Exploitation: none / Automatable: no, and no public exploit identified at time of analysis; there is no confirmed actively exploited (CISA KEV) status.
Mitigation bypass in Mozilla Firefox's Bookmarks & History component lets attacker-controlled web content defeat a built-in browser security protection, weakening the defenses that normally contain malicious pages. The issue affects Firefox builds prior to 157 and Firefox ESR builds prior to 153.4, is reachable without authentication (PR:N) but requires the victim to load attacker-supplied content (UI:R), and is confirmed fixed by the vendor in Firefox 157 and Firefox ESR 153.4. Independent assessment rates the real-world consequence as limited (C:L/I:L/A:N) because bypassing the protection alone yields little damage and must be chained with a separate content-process vulnerability to reach the headline CVSS 9.6 impact; EPSS is 0.15% (4th percentile), there is no KEV listing, and no public exploit identified at time of analysis.
Authentication controls in the management protocol of HPE Networking Instant On access points (firmware ≤3.4.1.0) can be circumvented by an unauthenticated attacker who is adjacent to the device, resulting in a complete bypass of security restrictions and potentially remote code execution with elevated privileges. Exploitation requires only network adjacency - an associated Wi-Fi client, guest-network user, or any host on the same Layer 2 segment - with no credentials, no user interaction, and low attack complexity, which is why the CVSS 3.1 score reaches 9.6. No public exploit code and no confirmed active exploitation were identified at time of analysis, and devices already updated beyond firmware 3.4.1.0 are not affected.
Unauthenticated command injection in the CLI of HPE Networking Instant On access points allows an attacker on the same adjacent network segment - within wireless range or on the same link-layer/LAN - to send specially crafted packets and execute arbitrary commands as a privileged user on the underlying operating system. Any Instant On AP running firmware up to and including 3.4.1.0 in its default configuration is affected, and the scope change (S:C) in the CVSS vector means compromise of the AP can extend into the host OS and anything it can reach. At the time of analysis no public exploit code or active exploitation telemetry has been identified, but the CVSS base of 9.6, the zero-privilege, zero-interaction attack path, and the ease of obtaining adjacent-network access make this a genuinely high-priority, patching-urgent issue rather than a theoretical one. There is no public exploit identified at time of analysis.
Unauthenticated attackers on the same Layer-2/wireless broadcast domain as an HPE Networking Instant On access point can trigger a buffer overflow in an exposed interface and execute arbitrary commands on the device's underlying operating system. Firmware versions at or below 3.4.1.0 are affected, including default configurations, and the CVSS 3.1 base score of 9.6 reflects a scope change (S:C) from the network-facing interface to the AP operating system, with high confidentiality, integrity, and availability impact. The adjacency requirement (AV:A) is the primary limiting factor, confining realistic attackers to associated Wi-Fi clients, hosts on the local LAN, or anyone with physical proximity; no public exploit code and no CISA KEV entry were identified in the provided data, and no EPSS score was supplied, so exploitation is not confirmed as active at time of analysis.
Unauthenticated remote code execution in the Balbooa Forms extension for Joomla (versions before 2.4.3.4) lets a visitor submit a crafted public form that results in attacker-controlled PHP being evaluated server-side. The root cause is that the extension substitutes form-field shortcodes with the raw value submitted by the visitor before passing administrator-defined 'PHP after submission' code to eval(), allowing a value to break out of a double-quoted PHP string. Exploitation is conditional, not blanket: it requires an administrator to have enabled the optional PHP-after-submission action and to have interpolated an attacker-controllable field shortcode inside a double-quoted string, a non-default configuration reflected as AT:P. No public exploit code or confirmed active exploitation was identified at time of analysis, and no CPE string was supplied; the vendor scores this 9.5 (critical) whereas our independent CVSS 3.1 assessment is AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
CRLF injection in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker to append arbitrary IMAP commands to the service's already-authenticated upstream mailbox connection when bearer-token authentication is not configured. Attacker-controlled folder, UID, or search values are passed into IMAP command construction without neutralization, yielding high integrity and availability impact on the mail store; the exposed path only exists on instances deployed without bearer-token auth, and no public exploit has been identified at time of analysis. The assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects a network-reachable, low-complexity, no-interaction flaw, though real-world risk is constrained by the non-default configuration requirement and the project's very small deployment base.
Unauthenticated SQL injection in Flowring Agentflow 4.0 allows any remote attacker who can reach the web interface to execute arbitrary SQL statements through the 'words' parameter of the /WebAgenda/SMBAjaxAutoComplete.do endpoint. The vendor-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H, 9.3) and our independent CVSS 3.1 assessment (9.8-equivalent high confidentiality, integrity and availability impact) agree that exploitation requires no credentials, privileges, or user interaction - only network reachability and an instance built before the 2025/08/08 fixed release. No public exploit code or confirmed active exploitation was identified at time of analysis; the issue was reported by ZUSO ART and remains a high-priority target for rapid patching given its trivial, pre-auth exploitation profile.