Authenticated attackers with administrator privileges can exploit a stack-based buffer overflow in the spamBlocker (spamd) service of WatchGuard Fireware OS by sending a specially crafted management request, causing a service crash or potentially achieving arbitrary code execution. The vulnerability requires the spamBlocker feature to be licensed and enabled, and the management plane to be reachable; exploitation is therefore limited to insiders, stolen admin credentials, or post-compromise scenarios. No public exploit code has been identified at the time of analysis.
Stored cross-site scripting in the Balbooa Forms extension for Joomla (all versions before 2.4.3.4) allows an unauthenticated attacker to embed script code in the original multipart filename of a file uploaded through any public-facing form that offers an upload field. The filename is saved verbatim to the component's attachments table and, when a Joomla administrator later opens the attacker's submission in the backend, the component's JavaScript concatenates that stored filename into an HTML string assigned to innerHTML, executing the script in the administrator's session; there is no public exploit identified at time of analysis, and while the vendor scores this CVSS 4.0 8.6, our independent assessment rates it CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N because the payload only fires on privileged human interaction and has limited confidentiality and integrity impact.
Heap memory corruption in libsoup can be triggered when a WebSocket client using libsoup constructs a masked outgoing frame for an extremely large payload near the 32-bit guint limit, truncating the GByteArray allocation size while the masking routine processes the full length. It affects libsoup as shipped in Red Hat Enterprise Linux 6 through 10. The assessed CVSS vector is network-reachable but high-complexity (AV:N/AC:H/PR:N/UI:N), and no public exploit identified at time of analysis.
Heap out-of-bounds read in libsoup's WebSocket implementation allows a remote, unauthenticated peer to trigger a heap buffer overflow when the application has configured max-incoming-payload-size to unlimited (0), a non-default setting; with the standard payload cap the overflow cannot be reached. The CVSS 3.1 base score is 8.6 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H), but our assessed vector raises complexity to AC:H because exploitation requires both the non-default unlimited setting and a frame large enough to wrap the GByteArray length counter, implying a very large transfer. No public exploit code or active exploitation has been identified at time of analysis.
Cross-tenant data access in SurrealDB before 3.3.0 allows a user holding a valid Database- or Namespace-level account to read, create, and modify records in a different tenant's namespace or database on the same instance. The flaw lies in HTTP session construction: check_auth() validates Basic credentials against the Surreal-Auth-NS/Surreal-Auth-DB headers but then builds the session from the separately supplied Surreal-NS/Surreal-DB headers without verifying that the authenticated principal may access that context, so an attacker simply points the context headers at a foreign tenant. Exploitation requires remote access to the SurrealDB HTTP interface plus an already-valid low-privilege tenant login (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N, 8.6 on CVSS 4.0); no public exploit code has been identified at time of analysis, but the impact is high in any shared multi-tenant deployment and is fully resolved by upgrading to 3.3.0.
Heap corruption and denial of service in libsoup stem from unbounded WebSocket message reassembly: the code accumulates fragmented frames in a GByteArray without checking the total reassembled size against the buffer type's size limit, so an oversized message can truncate the tracked length while the implementation continues to use the full length, producing out-of-bounds memory access (CWE-125) and possible crashes. The flaw is reachable by unauthenticated remote peers that can establish a WebSocket connection with a libsoup-based server, or by a libsoup client that connects to an attacker-controlled or man-in-the-middle server, but the assessed vector (AC:H) reflects that the attacker must drive reassembly to the underlying ~4 GB buffer-type boundary, so ordinary small-message WebSocket traffic does not trigger it. No public exploit code or CISA KEV active-exploitation confirmation was identified at time of analysis.
A type-confusion memory-safety flaw in libsoup's WebSocket handling can crash or corrupt the heap of applications that process incoming Pong frames. When a Pong frame arrives, SoupWebsocketConnection emits its ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes object, so any application that connects a ::pong handler written to the documented GBytes API will misinterpret the payload and may suffer heap corruption or a crash. This is not exploitable against default libsoup usage: the target must both act as a WebSocket peer and explicitly register a ::pong handler, and the attacker must control or compromise the WebSocket endpoint (or otherwise inject a crafted Pong frame) into that connection. The recorded CVSS 3.1 base score is 8.6, but the independent assessment rates it AC:H with C:L/I:L/A:H because exploitation is gated on that non-default handler registration; unauthenticated remote attackers (PR:N, UI:N) can reach the code path, however no public exploit code was identified at time of analysis and the issue is not confirmed as actively exploited.
Arbitrary PHP code execution on the scanning host is possible with PHPCSUtils versions 1.0.0-alpha1 through 1.2.2, because the abstract sniff helper AbstractArrayDeclarationSniff::getActualArrayKey() resolves array-key values through eval() instead of a safe parser. Exploitation requires a host to run PHP_CodeSniffer over attacker-supplied PHP source with a sniff that extends AbstractArrayDeclarationSniff and calls getActualArrayKey() - most notably PHPCSExtra's Universal.Arrays.DuplicateArrayKey and Universal.Arrays.MixedArrayKeyTypes - which is exactly the situation in CI pipelines that lint untrusted pull requests or on developer machines reviewing third-party code; the crafted key 'system'('id') is evaluated during the scan. The CVSS 3.1 vector scores this 8.6 (AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), indicating no privileges are required but that the vector is local and needs a person or pipeline to actively invoke the scan; no public exploit code has been identified at time of analysis, and the vendor has released a fix in 1.2.3.
Sandbox escape in Google Chrome on Windows prior to 154.0.8037.92 allows a local attacker to execute arbitrary code outside the browser sandbox through improper privilege management in the Mojo IPC layer. Exploitation requires local access to a Windows host and some user interaction (UI:R) but no authentication (PR:N), and it functions as a second-stage capability: an attacker who already holds a sandboxed foothold, such as a compromised renderer, can leverage the flaw to reach the full privileges of the browser process, yielding high confidentiality, integrity, and availability impact with a scope change. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the EPSS-style risk signal is low; non-Windows Chrome builds are unaffected because the defect is Windows-specific. A vendor patch is available in Chrome 154.0.8037.92.
An out-of-bounds heap write in Eclipse ThreadX LevelX's NAND flash-translation-layer metadata parser can give a local attacker control-flow hijack when the device mounts a crafted NAND flash image through lx_nand_flash_open(), overwriting a driver function pointer with an attacker-chosen 8-byte value; two accompanying out-of-bounds reads were also demonstrated. The bug (CWE-787) is rated 8.6 under CVSS 4.0 and independently assessed as CVSS 3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, meaning no authentication or user interaction is needed but the attacker must first supply or tamper with the flash image (removable or attached NAND media, modified firmware or OTA image, or supply-chain/provisioning substitution). No public exploit code was identified at time of analysis, though the issue was reproduced verbatim under ASan at HEAD 9f1cfdc; devices that only mount internally trusted flash images are not realistically reachable, while those accepting field-swappable or externally sourced NAND are directly exposed, with the worst impact on bare-metal or non-memory-protected targets where the hijacked pointer yields code execution.
Symbolic-link path resolution flaw in Google MCP Toolbox for Databases 1.2.0 through 1.9.0 lets an authenticated remote attacker who holds tool-execution permissions read or overwrite arbitrary local files outside the directories configured in allowedLocalRoots. The affected tools, cloud-storage-upload-object and cloud-storage-download-object, validate a caller-supplied path lexically before following it, so a symlink planted inside an allowed root that points outside that root is accepted. Exploitation requires valid tool-execution authorization (CVSS PR:L) and a symlink reachable inside an allowed root, so no public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV); the vendor describes the control as a guardrail that must be layered on top of OS file permissions.
An out-of-bounds read in lib0's binary decoder before version 0.2.119 lets remote attackers who control serialized input cause the decoder to return bytes from outside the intended buffer view, exposing adjacent process memory that may contain credentials, tokens, or log data. The flaw is unauthenticated and remotely reachable (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N, 8.6) because any application that decodes attacker-supplied data with lib0 - directly or transitively through Yjs - can be driven into the over-read; the leaked bytes are opportunistic contents of the backing/pooled ArrayBuffer rather than attacker-selected addresses. There is no public exploit identified at time of analysis and no confirmed active exploitation (CISA KEV), and the impact is limited to confidentiality with no integrity or availability effect; the vendor has published a fix in lib0 0.2.119.
Unauthenticated remote peers can read adjacent process memory from any service that feeds attacker-supplied bytes into the lib0 binary decoder, because readUint8Array never validated the wire-supplied length against the decoder's remaining view before the fix. Affected deployments are those running lib0 0.2.1 through 0.2.117, or 1.0.0-rc.32 and earlier - most notably Yjs-based collaboration and sync services where a peer can supply bytes to the decoder, including before authentication. The leak only completes when the consuming application echoes, stores, or re-serves the decoded value back to the attacker, but under that condition multi-tenant or shared-process hosts can expose other tenants' document content and live bearer session tokens; no public exploit code was identified at time of analysis and there is no CISA KEV entry, though the root cause is trivially reachable by anyone able to open a socket.
Static, predefined Telnet credentials in the Shenzhen Dbit T-CPE301K 4G WiFi mini-router allow any attacker already present on the same local network to log into the device's Telnet service on port 23 and obtain full root access. Because the credentials are fixed in firmware and shared across units, no brute-forcing or account setup is required - mere knowledge of the default password is enough to achieve complete confidentiality, integrity, and availability impact (VC:H/VI:H/VA:H) on the router, which sits at a trust boundary for everything behind it. Exposure is constrained to adjacent-network attackers rather than the open internet, so realistic risk comes from other WiFi clients, guest users, or an attacker who has gained a foothold on the local segment; no public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV. A vendor patch is available per the INCIBE advisory.
Remote attackers without authentication can access the HTTPPublishAdapterTestServlet on Hitachi Energy Asset Suite deployments where the test servlet is exposed, allowing configuration file uploads that can disclose sensitive information and compromise configuration integrity. The flaw is CWE-306 missing authentication, rated CVSS 4.0 8.5 (High), with high confidentiality and integrity impact but no availability impact, and exploitation requires user interaction per the CVSS vector (UI:A). Hitachi Energy states the servlet is intended only for non-production testing, so risk is concentrated in production instances that inadvertently retain it; no public exploit identified at time of analysis.
Argument injection in Weblate's Mercurial backend lets an authenticated user with project-scoped component.edit permission plant a dash-prefixed repository filename that Mercurial later interprets as a command-line option instead of a literal path, resulting in arbitrary command execution with the privileges of the Weblate service account when the repository is next updated. The issue affects Weblate 4.11.1 through 2026.7.1 and is a residual, incomplete fix for CVE-2022-23915; although it carries a CVSS of 8.5, exploitation requires a Mercurial-backed RESX component using the 'Update RESX files' add-on plus a subsequent repository update, so the realistic attack surface is narrow. A vendor patch is available in Weblate 2026.8, and no public exploit identified at time of analysis.
Privilege escalation in Eclipse ThreadX allows an unprivileged, memory-protected ThreadX module to break out of its MPU isolation boundary and obtain privileged (kernel-mode) read and write access to arbitrary memory, including the ability to clear the MPU enable bit and remove its own protection. The attack is local and low-complexity and requires the attacker to already be able to execute code as a loaded, unprivileged module (PR:L), for example by supplying or subverting a loadable module in a deployment that uses the ThreadX Module feature with MPU-based memory protection; systems that do not use isolated modules are not affected. No public exploit code has been identified at time of analysis, and the flaw is not listed in CISA KEV, but the high integrity and confidentiality impact on isolated-module deployments makes it significant.
Path traversal in VLC media player's skins2 ThemeLoader (before 3.0.24) allows attackers to write arbitrary files with VLC user privileges by crafting a malicious .vlt skin archive, enabling code execution through Lua script injection. Exploitation requires the victim to run the non-default skins2 interface and open the malicious skin, so local user interaction and social engineering are needed. No public exploit code has been identified at time of analysis, and the CVSS 4.0 score is 8.5 (assessed as CVSS 3.1 7.8 due to local attack vector and user interaction).
Improper authorization in Ollama's experimental agent-mode Bash tool allows an attacker who can influence model output - for example through prompt injection from untrusted content the agent reads - to smuggle extra shell commands past the user approval prompt. Because the approval logic (x/agent/approval.go in 0.14.0 through 0.31.1) authorizes commands by prefix match without parsing shell syntax, appending a control operator such as ';', '&&', or '||' to an already-approved command causes the trailing command to run with full host privileges, yielding high confidentiality, integrity, and availability impact (CVSS 4.0 base 8.5; independently assessed as CVSS 3.1 AV:L/AC:L/PR:N/UI:R with C:H/I:H/A:H). This is a genuine but conditionally-gated risk rather than a mass-exploitation threat: the attack vector is local, agent mode is an experimental feature that is not enabled by default, and the victim must approve at least one Bash command within the session; no public exploit identified at time of analysis.
Heap-based buffer overflow in CTranslate2 before 4.8.1 allows an attacker to cause a crash or potentially achieve arbitrary code execution by supplying a malicious binary model file (.bin) that is loaded by the victim. The flaw is in the binary model loader, which fails to validate the payload length against the allocated buffer size (CWE-787). Exploitation requires the victim to actively load an untrusted model, making it a local, user-interaction-dependent issue rather than a remotely reachable network threat. No public exploit has been identified at time of analysis. The CVSS score is 8.5.
Deserialization of untrusted data in the GluonTS model-loading component allows arbitrary OS command execution with the privileges of the loading process when a victim loads a crafted serialized model directory in versions before 0.17.0. The flaw is scored 8.4 under CVSS 4.0 (assessed as CVSS 3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), meaning no authentication is required but exploitation is local and depends on a user actively loading the malicious model artifact; the attacker must first place that artifact in the victim's load path (untrusted model hub, shared directory, or compromised pipeline), and environments that only load self-generated trusted models are not affected. AWS has released a fix in GluonTS 0.17.0 (upstream PR #3304, '[Security] Resolve security issue for torch.load'), and no public exploit code and no confirmed active exploitation were identified at time of analysis; EPSS data was not provided for this CVE.
Secure memory disclosure in Eclipse ThreadX occurs because multiple TrustZone-M non-secure callable (NSC) entry functions fail to validate caller-supplied pointers, allowing code already executing in the non-secure world to hand the secure firmware pointers into secure memory that are then dereferenced without an NS-region check. Only builds that enable Arm TrustZone-M secure/non-secure separation and expose NSC entry points taking raw pointer arguments are exposed; a single-world ThreadX build without TrustZone-M NSC surfaces is not affected. Exploitation requires a local, already-established non-secure foothold (AV:L, PR:L) with no user interaction and no network vector, making this an access-gated trust-boundary flaw rather than an internet-facing critical, and no public exploit code has been identified at time of analysis.
Unauthenticated local privilege abuse in the Kilo Code CLI (versions before v7.4.1) lets any local process or user that can reach the daemon/TUI loopback HTTP listener toggle the '/permission/allow-everything' permission mode and then drive the agent into executing arbitrary code on the host. The issue combines two weaknesses: the daemon shipped a hardcoded default Basic-auth password of 'kilo', and the permission-toggle route was exempted from authentication whenever global auth was optional, so no credentials were required at all (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 8.4, CWE-280). Exploitation is not network-remote: it requires the daemon/TUI HTTP server to be running and the attacker to already have local reach to its loopback port, so it is access-gated rather than an internet-facing crisis; no public exploit code was identified at time of analysis, CISA SSVC records Exploitation as 'none' with Automatable 'no', and no EPSS score was supplied.
Sandbox escape via a use-after-free in Google Chrome's PictureInPicture component affects all versions prior to 154.0.8037.92 and can lead to arbitrary code execution outside the browser sandbox, but only as a second-stage primitive: the attacker must already have compromised Chrome's sandboxed renderer process and must convince a victim to render a crafted HTML page. Scored CVSS 8.3 (AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H), the High AC:H value reflects that precondition, so this is realistically usable only as one link in an exploit chain rather than a standalone remote compromise. CISA's SSVC assessment records no exploitation activity and no public exploit code has been identified at time of analysis; the Chromium severity is High and a vendor patch is available.
An out-of-bounds write in the GPU process of Google Chrome prior to 154.0.8037.92 allows an attacker to break out of the browser sandbox and potentially execute arbitrary code at the browser's privilege level via a crafted HTML page. The attack is not standalone: the CVSS vector (AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) and the assessed exploitation conditions indicate the attacker must have already compromised Chrome's renderer process, and the victim must load attacker-controlled content, making this a sandbox-escape link in a multi-stage exploit chain rather than a directly reachable remote bug. Only Chrome builds below 154.0.8037.92 are affected, and effective exploitation requires overcoming non-trivial memory-corruption and chaining conditions (AC:H); no public exploit has been identified at time of analysis and CISA's SSVC assessment records exploitation as 'none'. Google has released a vendor patch in Chrome 154.0.8037.92.
Malformed uplink signaling during connection setup can break the signaling association between a Baicells Nova 430H eNodeB (model pBS3101SH) and its core network, producing a temporary, cell-wide service outage until connectivity is re-established. An unauthenticated attacker within radio range - using equipment capable of emulating UE uplink traffic - can inject an invalid NAS payload that the eNodeB fails to validate before forwarding it to the core, which then tears down the signaling association; no credentials or user interaction are required. The condition affects BaiBLQ_3.0.12 and earlier, but the requirement for RF/radio-frequency proximity keeps this a bounded, localized availability threat rather than an internet-scale one, and no public exploit code has been identified at time of analysis.
Memory corruption in the Eclipse ThreadX NetX Duo NetX Secure TLS stack can overrun the packet pool and crash a device, because each outbound TLS record is zeroed after the TCP layer has already taken ownership of - and may have freed and recycled - the underlying packet chain. The defect is a CWE-416 use-after-free write with a length underflow on reused packets, reachable from the network without authentication (CVSSv3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H, with the published CVSS 4.0 score of 8.3 reflecting the availability impact). It is not present in default builds: exploitation requires the non-default NX_SECURE_KEY_CLEAR compile-time option plus packet-pool free/reuse timing an attacker cannot deterministically force, so practical risk is lower than the headline score; no public exploit identified at time of analysis and no confirmed active exploitation.
Out-of-bounds read in OpenSSL's DTLS handshake retransmission path allows a remote, unauthenticated attacker to trigger a memory read past a stale buffer offset, crashing the DTLS endpoint (availability impact rated High) and potentially exposing a limited amount of adjacent process memory (confidentiality impact rated Low). Affected deployments are those built against OpenSSL 1.0.2 before 1.0.2zs, 1.1.1 before 1.1.1zj, 3.0.0 before 3.0.23, 3.4.0 before 3.4.8, 3.5.0 before 3.5.9, 3.6.0 before 3.6.5, or 4.0.0 before 4.0.3 that actually terminate DTLS-over-UDP sessions such as VPN concentrators, WebRTC/SRTP endpoints, and CoAP/IoT stacks; pure TLS-over-TCP deployments, the dominant use of OpenSSL, are not exposed. No public exploit code has been identified at time of analysis and the issue is not confirmed as actively exploited (not in CISA KEV); the CVSS 8.2 score reflects the unauthenticated network reachability of the DTLS handshake rather than broad applicability, so real-world priority is elevated but capped by the narrow DTLS-only attack surface.
Remote, unauthenticated denial of service in WatchGuard Fireware OS: an integer underflow (CWE-191) in the IKEv2 daemon (iked) is triggered when a remote attacker sends a specially crafted encrypted IKEv2 message within a session negotiated with an AES-GCM cipher suite, causing the daemon process to crash. Affected are Fireware OS deployments that terminate IPsec/IKEv2 VPNs on an interface reachable by the attacker - most commonly the WAN interface - and that offer or negotiate AES-GCM for IKEv2; deployments that do not use AES-GCM for IKEv2 are not on the vulnerable path. The attack requires no authentication and no user interaction, but impact is confined to availability (CVSS 4.0 VA:H with VC:N/VI:N and no subsequent-system impact), with no code execution or data disclosure; no public exploit code has been identified at time of analysis and the change is not reported as confirmed actively exploited (CISA KEV) in the available intelligence.
Denial of service in WatchGuard Fireware OS lets remote, unauthenticated attackers crash the appliance by delivering a specially crafted IPv6 packet into its NetFlow packet-processing path, triggering a NULL pointer dereference (CWE-476). The flaw is availability-only (vendor CVSS 4.0 base 8.2, with VA:H and no confidentiality or integrity impact) and requires that NetFlow processing is actually configured and reachable over IPv6, so exposure is limited to deployments that enable that feature rather than to every Firebox. No public exploit code and no confirmed active exploitation were identified at time of analysis, and no EPSS signal was supplied; the practical risk is a repeatable remote crash of a perimeter device, which is still serious because a reboot or failover is required to restore service.
Heap memory corruption in 32-bit builds of libexpat 2.7.2 through 2.8.5 lets remote attackers supply malicious XML that drives expat_realloc() past SIZE_MAX while computing an allocation size, yielding an undersized buffer and a subsequent heap overflow. The assessed impact is denial of service (crash or process instability) rather than confirmed code execution, consistent with the vendor vector (CVSS 4.0 8.2, AV:N/AC:H/AT:P/PR:N/UI:N/VA:H, with no confidentiality or integrity impact) and the assessed CVSS 3.1 vector AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H. Exploitation is conditional: only 32-bit builds are exposed (64-bit builds do not overflow SIZE_MAX in this computation), the attacker must feed crafted XML to an application that parses it with the vulnerable library, and the input must push allocation sizes toward the maximum; no public exploit code or active exploitation has been identified at time of analysis.
MFA bypass in Joomla! CMS 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3 allows an attacker who can drive the login flow to the point a 'rememberme' cookie is issued to present that cookie and skip the second authentication factor entirely, defeating the site's multi-factor policy without possessing valid second-factor credentials. The weakness is only meaningful on installations that both enforce MFA and use persistent-login (remember-me) functionality; sites without MFA enabled are not exposed to this specific bypass, and fully anonymous exploitation is constrained because the attacker must interact with the first-factor login flow or otherwise obtain the issued cookie. No public exploit code or active exploitation has been identified at time of analysis, and the vendor has published advisory 20260914 with fix guidance.
An integer underflow in the IKE daemon (iked) of WatchGuard Fireware OS can be triggered by a remote, unauthenticated attacker who has already completed the initial IKEv2 handshake, causing the iked process to crash and interrupting IPsec VPN service. Only Firebox appliances running Fireware OS with IKEv2 IPsec VPN enabled and reachable are exposed; the flaw is confined to availability (no confidentiality or integrity impact), and the practical blast radius is narrower than the 8.2 base score suggests because a valid IKEv2 session state must exist before the crafted encrypted message can be delivered. There is no public exploit identified at time of analysis, and no confirmed report of active exploitation. The vendor advisory is available at https://psirt.watchguard.com/CVE-2026-86133.
Path traversal in the WatchGuard Fireware OS WebUI management agent lets an authenticated administrator read or list arbitrary files on the local filesystem by submitting a specially crafted management request. Exploitation requires valid WebUI administrator credentials (the highest management privilege on the Firebox), per the assessed vector CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N, so the flaw is remote and low-complexity once the attacker already holds admin access, and the impact is limited to confidentiality (file read/list) with no write, code execution, or availability effect. No public exploit code and no confirmed active exploitation have been identified at time of analysis; the vendor advisory is published at https://psirt.watchguard.com/CVE-2026-13224 and no EPSS score was provided in the available data.
Out-of-bounds read and application crash in libsoup's soup_uri_decode_data_uri() affect applications that pass attacker-controlled base64 data: URIs to the GLib-based HTTP library, with Red Hat shipping vulnerable packages across Red Hat Enterprise Linux 6, 7, 8, 9 and 10. A crafted data URI whose percent-decoded payload contains embedded NUL bytes causes the decoded length to remain uninitialized and be used as the size of the returned GBytes, yielding a minor confidentiality leak (C:L) alongside a serious availability impact (A:H) rated 8.2 under CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H. The issue is remotely triggerable without authentication (PR:N) and no public exploit code has been identified at time of analysis, though real-world exposure is limited to software that actually processes untrusted data: URIs (WebKit/GTK browsers, feed and mail readers, and other GNOME applications rendering remote content).
Cross-site scripting (CWE-79) in the HPE OneView web management interface allows an unauthenticated remote attacker to have attacker-controlled script execute inside a logged-in HPE OneView administrator's browser session, which HPE describes as enabling remote session hijacking or other unauthorized actions. Successful exploitation requires the victim - an authenticated OneView administrator - to load the crafted content (CVSS UI:R), so the flaw cannot be triggered unattended against a default deployment; the attacker needs no credentials (PR:N) and can deliver the payload over the network (AV:N). With a vendor-assigned CVSS 3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N), the scope-change and high-confidentiality metrics reflect that a hijacked administrator session can expose data well beyond the vulnerable page itself; no public exploit or proof-of-concept was identified at time of analysis and there is no CISA KEV listing.
Malformed MQTT PUBLISH frames leak packet buffers in the Eclipse ThreadX NetX Duo MQTT client, letting a peer that can deliver a few dozen such messages exhaust the network driver's receive pool and halt all inbound traffic on the device until it is rebooted. Only builds including the NetX Duo MQTT client are exposed, and delivery requires broker control, a man-in-the-middle position on the MQTT session, or publish rights on a topic the client subscribes to, which is why the impact is availability-only (CVSS 4.0 base 8.2; assessed CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) despite a network attack vector. No public exploit code and no confirmed active exploitation have been identified at time of analysis.
Cross-site scripting (CWE-79) in HPE OneView (CVSS 3.1 base 8.2) lets remote attackers with no authentication of their own plant script that executes inside the browser session of a logged-in OneView user, which the assessed vector (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N) indicates can escalate into session hijacking, theft of data visible to that user, or other unauthorized actions performed with the victim's privileges. Because the vector requires user interaction (UI:R), successful exploitation depends on a legitimate - typically administrative - user viewing or interacting with attacker-controlled content, making it opportunistic or targeted rather than fully automatable; the scope-changed, high-confidentiality impact means the consequences are bounded by the victim's session privilege. No public exploit code has been identified at time of analysis, and there is no indication of confirmed active exploitation; the CPE entry uses a wildcard version, so all OneView versions should be treated as potentially affected until HPE confirms fixed builds.
Malformed SCTP traffic can crash the Wireshark/tshark dissector in versions 4.6.0 through 4.6.8 and 4.4.0 through 4.4.18, turning a heap-based buffer overflow (CWE-122) in the SCTP dissector into a denial of service against the analyst's own capture session rather than against any remote service. Exploitation requires the tool to process an attacker-supplied packet - either live-captured on a monitored interface carrying crafted SCTP traffic or opened from a malicious capture file - and the packet must be specifically malformed, which is why the high attack-complexity rating applies. Access requirements are unauthenticated per the CVSS vector (PR:N), and the realistic outcome is a crash of the Wireshark/tshark process, not code execution or host compromise; no public exploit code and no confirmed active exploitation were identified at time of analysis. Note that the originally supplied CVSS vector claimed high confidentiality and integrity impact, which the independent assessment corrected to availability-only (C:N/I:N/A:H).
Path traversal in IBM Guardium Data Protection 12.2's Datasource REST component allows authenticated remote attackers with low privileges to delete arbitrary files, causing denial of service and integrity impact. The flaw requires network access to the REST API and valid credentials (CVSS PR:L), with no user interaction. No public exploit code or active exploitation has been identified at time of analysis, but a vendor patch is available.
Memory-corruption flaws in Firefox's Audio/Video Playback component (CWE-119) can be triggered when a user loads attacker-controlled audio or video content, potentially leading to high-integrity and high-confidentiality compromise of the browser process. The issue affects Firefox builds prior to 157 and the ESR branches prior to 153.4, 140.17, and 115.42, is rated CVSS 3.1 8.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N), and requires user interaction - the victim must visit a malicious page or open crafted media that reaches the playback stack. No public exploit code or confirmed active exploitation was identified at time of analysis, and vendor patches are available in Firefox 157, Firefox ESR 153.4, Firefox ESR 140.17, and Firefox ESR 115.42.
Pasting a crafted code cell from the system clipboard into JupyterLab 4.5.0 through 4.5.10 allows attacker-controlled script to run in the authenticated JupyterLab origin without the victim ever executing the cell, because the paste path fails to clear metadata.trusted and therefore bypasses HTML output sanitization (CWE-79 XSS, CVSS 8.1). The flaw is network-reachable and unauthenticated per the CVSS vector (PR:N), but it requires user interaction - the victim must paste attacker-supplied clipboard content - and it only triggers under the non-default combination of useSystemClipboardForCells enabled with pasteCodeCellsWithoutOutput disabled; Markdown and raw cells are sanitized and unaffected. An equivalent issue affects Notebook 7.5.0 through 7.6.2 and JupyterLite Core 0.7.0 through 0.8.3; no public exploit code or confirmed active exploitation was identified at time of analysis, and vendor fixes ship in JupyterLab 4.5.11 / 4.6.4, Notebook 7.6.3, and JupyterLite Core 0.8.4.
Apache Polaris releases before 1.8.0 allow an authenticated principal that holds permission to create or update Iceberg table properties to plant FileIO client settings - notably s3.endpoint - in table metadata that Polaris subsequently honors when it constructs its own server-side storage client during commits and purges, redirecting server-side storage traffic and exposing request authentication material to an attacker-chosen host. The flaw is classified as missing authorization (CWE-862) and rated CVSS 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), so exploitation requires a valid account with the table-property privilege plus a deployment whose catalog storage configuration does not override the endpoint; environments where all table-property writers are trusted operators, or where the catalog pins or overrides the endpoint, are not meaningfully exposed. There is no public exploit identified at time of analysis, EPSS is 0.19% (8th percentile), and the issue is not in CISA KEV; Apache has fixed it in Polaris 1.8.0.
Same-origin policy bypass in Mozilla Firefox's WebExtensions component lets attacker-controlled web content defeat origin isolation and access cross-origin data, producing high confidentiality and integrity impact without availability loss. Exploitation requires a victim running an affected build (prior to Firefox 157, Firefox ESR 153.4, Firefox ESR 140.17, or Firefox ESR 115.42) to visit or interact with attacker-controlled content - the CVSS UI:R prerequisite - while no authentication or prior privileges are needed on the attacker side (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N, score 8.1); default configurations are affected because the flaw sits in a core browser component. No public exploit code has been identified at time of analysis, EPSS is low at 0.17% (5th percentile), and CISA's SSVC assessment records Exploitation: none and Automatable: no, so this is currently a patch-now hardening issue rather than an actively exploited one.
Undefined behavior in the DOM Streams component of Mozilla Firefox allows remote, unauthenticated attackers to trigger memory-safety-class corruption in the browser process when a victim loads attacker-controlled web content, yielding high confidentiality and integrity impact (CVSS 3.1 base 8.1, AV:N/AC:L/PR:N/UI:R). The flaw affects builds prior to Firefox 157, Firefox ESR 153.4, Firefox ESR 140.17, and Firefox ESR 115.42, and requires user interaction - the victim must open a crafted page that exercises the vulnerable Streams API path - but no authentication or non-default browser configuration is needed. No public exploit code has been identified at time of analysis and CISA KEV does not list this issue; EPSS is very low at 0.16% (4th percentile), though the underlying CWE-758 memory-safety class means reliable weaponization would require substantial exploit-development effort rather than being trivially scriptable.
Uninitialized memory handling in Mozilla Firefox's Storage Quota Manager can leak contents of the browser's process memory to a remote attacker who persuades a victim to load attacker-controlled web content, affecting Firefox releases before 157 as well as ESR builds before 153.4, 140.17, and 115.42. The required user interaction (UI:R) is the main limiting factor, and no privileges are needed (PR:N); the independently assessed impact is confidentiality disclosure only, with no code execution or availability effect established, and triage should not treat the published I:H/A:N components of the 8.1 CVSS score as realized. No public exploit code has been identified at time of analysis and EPSS is low at 0.16% (4th percentile), with vendor-supplied fixes already available in Firefox 157 and the three ESR branches.
A same-origin policy bypass in Firefox's DevTools component allows attacker-controlled content to read and modify data belonging to other origins the victim is already authenticated to, rated CVSS 8.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N). The flaw affects Firefox builds before 157 and Firefox ESR builds before 153.4; exploitation is remote and requires no attacker-side credentials, but is gated by user interaction because the victim must load attacker-controlled content and reach the vulnerable DevTools same-origin-policy code path. No public exploit code has been identified at time of analysis and EPSS is low at 0.16% (4th percentile), while Mozilla has shipped vendor fixes in Firefox 157 and Firefox ESR 153.4.
Cross-origin data exposure and integrity compromise in Mozilla Firefox stem from a site-isolation failure in the DOM:Networking component, where origin boundaries are not correctly enforced, allowing attacker-controlled web content to reach resources and operations that should belong to a different origin. Affected are Firefox builds before 157 and Firefox ESR builds before 153.4; the issue is rated 8.1 HIGH (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N), meaning remote, unauthenticated, low-complexity exploitation that nonetheless requires the victim to load a malicious or compromised page. There is no public exploit identified at time of analysis and EPSS is very low at 0.15% (4th percentile), so real-world activity is not indicated, but the confidentiality and integrity impact is high once a user is lured to attacker-controlled content.
Storage data exposure in Mozilla Firefox stems from cryptography misuse in the Storage: Quota Manager component, allowing remote, unauthenticated attackers to trigger information disclosure if a victim loads attacker-controlled web content (UI:R, PR:N). The independent assessment rates confidentiality impact High and integrity impact Low (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N), with affected versions being Firefox before 157 and Firefox ESR before 153.4. No public exploit was identified at time of analysis, and EPSS is low at 0.15% (4th percentile), so this is a moderate-priority patching item rather than an urgent, actively exploited issue.
Origin-separation mitigation bypass in Mozilla Firefox before 157 and Firefox ESR before 153.4 permits unauthenticated remote attackers to defeat DOM Navigation protections by luring a victim to load attacker-controlled web content, potentially compromising confidentiality and integrity of cross-origin data or actions if the victim is simultaneously authenticated to a targeted site. Although the CVSS base score is 8.1, the vector requires user interaction (UI:R), EPSS is only 0.15% (4th percentile), and no public exploit has been identified at time of analysis, making this a genuine but non-emergency browser vulnerability. CISA SSVC records no exploitation and no automatable exploitation, while noting total technical impact.