Unauthenticated remote peers can read adjacent process memory from any service that feeds attacker-supplied bytes into the lib0 binary decoder, because readUint8Array never validated the wire-supplied length against the decoder's remaining view before the fix. Affected deployments are those running lib0 0.2.1 through 0.2.117, or 1.0.0-rc.32 and earlier - most notably Yjs-based collaboration and sync services where a peer can supply bytes to the decoder, including before authentication. The leak only completes when the consuming application echoes, stores, or re-serves the decoded value back to the attacker, but under that condition multi-tenant or shared-process hosts can expose other tenants' document content and live bearer session tokens; no public exploit code was identified at time of analysis and there is no CISA KEV entry, though the root cause is trivially reachable by anyone able to open a socket.
Static, predefined Telnet credentials in the Shenzhen Dbit T-CPE301K 4G WiFi mini-router allow any attacker already present on the same local network to log into the device's Telnet service on port 23 and obtain full root access. Because the credentials are fixed in firmware and shared across units, no brute-forcing or account setup is required - mere knowledge of the default password is enough to achieve complete confidentiality, integrity, and availability impact (VC:H/VI:H/VA:H) on the router, which sits at a trust boundary for everything behind it. Exposure is constrained to adjacent-network attackers rather than the open internet, so realistic risk comes from other WiFi clients, guest users, or an attacker who has gained a foothold on the local segment; no public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV. A vendor patch is available per the INCIBE advisory.
Remote attackers without authentication can access the HTTPPublishAdapterTestServlet on Hitachi Energy Asset Suite deployments where the test servlet is exposed, allowing configuration file uploads that can disclose sensitive information and compromise configuration integrity. The flaw is CWE-306 missing authentication, rated CVSS 4.0 8.5 (High), with high confidentiality and integrity impact but no availability impact, and exploitation requires user interaction per the CVSS vector (UI:A). Hitachi Energy states the servlet is intended only for non-production testing, so risk is concentrated in production instances that inadvertently retain it; no public exploit identified at time of analysis.
Argument injection in Weblate's Mercurial backend lets an authenticated user with project-scoped component.edit permission plant a dash-prefixed repository filename that Mercurial later interprets as a command-line option instead of a literal path, resulting in arbitrary command execution with the privileges of the Weblate service account when the repository is next updated. The issue affects Weblate 4.11.1 through 2026.7.1 and is a residual, incomplete fix for CVE-2022-23915; although it carries a CVSS of 8.5, exploitation requires a Mercurial-backed RESX component using the 'Update RESX files' add-on plus a subsequent repository update, so the realistic attack surface is narrow. A vendor patch is available in Weblate 2026.8, and no public exploit identified at time of analysis.
Privilege escalation in Eclipse ThreadX allows an unprivileged, memory-protected ThreadX module to break out of its MPU isolation boundary and obtain privileged (kernel-mode) read and write access to arbitrary memory, including the ability to clear the MPU enable bit and remove its own protection. The attack is local and low-complexity and requires the attacker to already be able to execute code as a loaded, unprivileged module (PR:L), for example by supplying or subverting a loadable module in a deployment that uses the ThreadX Module feature with MPU-based memory protection; systems that do not use isolated modules are not affected. No public exploit code has been identified at time of analysis, and the flaw is not listed in CISA KEV, but the high integrity and confidentiality impact on isolated-module deployments makes it significant.
Path traversal in VLC media player's skins2 ThemeLoader (before 3.0.24) allows attackers to write arbitrary files with VLC user privileges by crafting a malicious .vlt skin archive, enabling code execution through Lua script injection. Exploitation requires the victim to run the non-default skins2 interface and open the malicious skin, so local user interaction and social engineering are needed. No public exploit code has been identified at time of analysis, and the CVSS 4.0 score is 8.5 (assessed as CVSS 3.1 7.8 due to local attack vector and user interaction).
Improper authorization in Ollama's experimental agent-mode Bash tool allows an attacker who can influence model output - for example through prompt injection from untrusted content the agent reads - to smuggle extra shell commands past the user approval prompt. Because the approval logic (x/agent/approval.go in 0.14.0 through 0.31.1) authorizes commands by prefix match without parsing shell syntax, appending a control operator such as ';', '&&', or '||' to an already-approved command causes the trailing command to run with full host privileges, yielding high confidentiality, integrity, and availability impact (CVSS 4.0 base 8.5; independently assessed as CVSS 3.1 AV:L/AC:L/PR:N/UI:R with C:H/I:H/A:H). This is a genuine but conditionally-gated risk rather than a mass-exploitation threat: the attack vector is local, agent mode is an experimental feature that is not enabled by default, and the victim must approve at least one Bash command within the session; no public exploit identified at time of analysis.
Heap-based buffer overflow in CTranslate2 before 4.8.1 allows an attacker to cause a crash or potentially achieve arbitrary code execution by supplying a malicious binary model file (.bin) that is loaded by the victim. The flaw is in the binary model loader, which fails to validate the payload length against the allocated buffer size (CWE-787). Exploitation requires the victim to actively load an untrusted model, making it a local, user-interaction-dependent issue rather than a remotely reachable network threat. No public exploit has been identified at time of analysis. The CVSS score is 8.5.
Deserialization of untrusted data in the GluonTS model-loading component allows arbitrary OS command execution with the privileges of the loading process when a victim loads a crafted serialized model directory in versions before 0.17.0. The flaw is scored 8.4 under CVSS 4.0 (assessed as CVSS 3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), meaning no authentication is required but exploitation is local and depends on a user actively loading the malicious model artifact; the attacker must first place that artifact in the victim's load path (untrusted model hub, shared directory, or compromised pipeline), and environments that only load self-generated trusted models are not affected. AWS has released a fix in GluonTS 0.17.0 (upstream PR #3304, '[Security] Resolve security issue for torch.load'), and no public exploit code and no confirmed active exploitation were identified at time of analysis; EPSS data was not provided for this CVE.
Secure memory disclosure in Eclipse ThreadX occurs because multiple TrustZone-M non-secure callable (NSC) entry functions fail to validate caller-supplied pointers, allowing code already executing in the non-secure world to hand the secure firmware pointers into secure memory that are then dereferenced without an NS-region check. Only builds that enable Arm TrustZone-M secure/non-secure separation and expose NSC entry points taking raw pointer arguments are exposed; a single-world ThreadX build without TrustZone-M NSC surfaces is not affected. Exploitation requires a local, already-established non-secure foothold (AV:L, PR:L) with no user interaction and no network vector, making this an access-gated trust-boundary flaw rather than an internet-facing critical, and no public exploit code has been identified at time of analysis.
Unauthenticated local privilege abuse in the Kilo Code CLI (versions before v7.4.1) lets any local process or user that can reach the daemon/TUI loopback HTTP listener toggle the '/permission/allow-everything' permission mode and then drive the agent into executing arbitrary code on the host. The issue combines two weaknesses: the daemon shipped a hardcoded default Basic-auth password of 'kilo', and the permission-toggle route was exempted from authentication whenever global auth was optional, so no credentials were required at all (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 8.4, CWE-280). Exploitation is not network-remote: it requires the daemon/TUI HTTP server to be running and the attacker to already have local reach to its loopback port, so it is access-gated rather than an internet-facing crisis; no public exploit code was identified at time of analysis, CISA SSVC records Exploitation as 'none' with Automatable 'no', and no EPSS score was supplied.
Information disclosure in GitLab Enterprise Edition allows an authenticated user with guest-level permissions to read private security policy content that they are not authorized to access. The flaw affects GitLab EE from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1, and it is rated CVSS 4.3 with confidentiality-only impact. Publicly available exploit code exists, but CISA KEV does not list this issue as actively exploited at time of analysis.
Sandbox escape via a use-after-free in Google Chrome's PictureInPicture component affects all versions prior to 154.0.8037.92 and can lead to arbitrary code execution outside the browser sandbox, but only as a second-stage primitive: the attacker must already have compromised Chrome's sandboxed renderer process and must convince a victim to render a crafted HTML page. Scored CVSS 8.3 (AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H), the High AC:H value reflects that precondition, so this is realistically usable only as one link in an exploit chain rather than a standalone remote compromise. CISA's SSVC assessment records no exploitation activity and no public exploit code has been identified at time of analysis; the Chromium severity is High and a vendor patch is available.
Authenticated users on affected GitLab CE/EE releases can read the titles and descriptions of private child issues from projects they are not members of, because authorization checks are skipped when traversing work items linked from epics they are permitted to see. The flaw affects GitLab CE/EE 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1, and is rated CVSS 3.1 4.3 (low-moderate, AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). Publicly available exploit code exists (referenced HackerOne report), but there is no CISA KEV listing indicating confirmed active exploitation; the impact is confined to read-only disclosure of issue text, with no write access, credential exposure, or code execution.
An out-of-bounds write in the GPU process of Google Chrome prior to 154.0.8037.92 allows an attacker to break out of the browser sandbox and potentially execute arbitrary code at the browser's privilege level via a crafted HTML page. The attack is not standalone: the CVSS vector (AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) and the assessed exploitation conditions indicate the attacker must have already compromised Chrome's renderer process, and the victim must load attacker-controlled content, making this a sandbox-escape link in a multi-stage exploit chain rather than a directly reachable remote bug. Only Chrome builds below 154.0.8037.92 are affected, and effective exploitation requires overcoming non-trivial memory-corruption and chaining conditions (AC:H); no public exploit has been identified at time of analysis and CISA's SSVC assessment records exploitation as 'none'. Google has released a vendor patch in Chrome 154.0.8037.92.
Malformed uplink signaling during connection setup can break the signaling association between a Baicells Nova 430H eNodeB (model pBS3101SH) and its core network, producing a temporary, cell-wide service outage until connectivity is re-established. An unauthenticated attacker within radio range - using equipment capable of emulating UE uplink traffic - can inject an invalid NAS payload that the eNodeB fails to validate before forwarding it to the core, which then tears down the signaling association; no credentials or user interaction are required. The condition affects BaiBLQ_3.0.12 and earlier, but the requirement for RF/radio-frequency proximity keeps this a bounded, localized availability threat rather than an internet-scale one, and no public exploit code has been identified at time of analysis.
Memory corruption in the Eclipse ThreadX NetX Duo NetX Secure TLS stack can overrun the packet pool and crash a device, because each outbound TLS record is zeroed after the TCP layer has already taken ownership of - and may have freed and recycled - the underlying packet chain. The defect is a CWE-416 use-after-free write with a length underflow on reused packets, reachable from the network without authentication (CVSSv3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H, with the published CVSS 4.0 score of 8.3 reflecting the availability impact). It is not present in default builds: exploitation requires the non-default NX_SECURE_KEY_CLEAR compile-time option plus packet-pool free/reuse timing an attacker cannot deterministically force, so practical risk is lower than the headline score; no public exploit identified at time of analysis and no confirmed active exploitation.
Out-of-bounds read in OpenSSL's DTLS handshake retransmission path allows a remote, unauthenticated attacker to trigger a memory read past a stale buffer offset, crashing the DTLS endpoint (availability impact rated High) and potentially exposing a limited amount of adjacent process memory (confidentiality impact rated Low). Affected deployments are those built against OpenSSL 1.0.2 before 1.0.2zs, 1.1.1 before 1.1.1zj, 3.0.0 before 3.0.23, 3.4.0 before 3.4.8, 3.5.0 before 3.5.9, 3.6.0 before 3.6.5, or 4.0.0 before 4.0.3 that actually terminate DTLS-over-UDP sessions such as VPN concentrators, WebRTC/SRTP endpoints, and CoAP/IoT stacks; pure TLS-over-TCP deployments, the dominant use of OpenSSL, are not exposed. No public exploit code has been identified at time of analysis and the issue is not confirmed as actively exploited (not in CISA KEV); the CVSS 8.2 score reflects the unauthenticated network reachability of the DTLS handshake rather than broad applicability, so real-world priority is elevated but capped by the narrow DTLS-only attack surface.
Remote, unauthenticated denial of service in WatchGuard Fireware OS: an integer underflow (CWE-191) in the IKEv2 daemon (iked) is triggered when a remote attacker sends a specially crafted encrypted IKEv2 message within a session negotiated with an AES-GCM cipher suite, causing the daemon process to crash. Affected are Fireware OS deployments that terminate IPsec/IKEv2 VPNs on an interface reachable by the attacker - most commonly the WAN interface - and that offer or negotiate AES-GCM for IKEv2; deployments that do not use AES-GCM for IKEv2 are not on the vulnerable path. The attack requires no authentication and no user interaction, but impact is confined to availability (CVSS 4.0 VA:H with VC:N/VI:N and no subsequent-system impact), with no code execution or data disclosure; no public exploit code has been identified at time of analysis and the change is not reported as confirmed actively exploited (CISA KEV) in the available intelligence.
Denial of service in WatchGuard Fireware OS lets remote, unauthenticated attackers crash the appliance by delivering a specially crafted IPv6 packet into its NetFlow packet-processing path, triggering a NULL pointer dereference (CWE-476). The flaw is availability-only (vendor CVSS 4.0 base 8.2, with VA:H and no confidentiality or integrity impact) and requires that NetFlow processing is actually configured and reachable over IPv6, so exposure is limited to deployments that enable that feature rather than to every Firebox. No public exploit code and no confirmed active exploitation were identified at time of analysis, and no EPSS signal was supplied; the practical risk is a repeatable remote crash of a perimeter device, which is still serious because a reboot or failover is required to restore service.
Heap memory corruption in 32-bit builds of libexpat 2.7.2 through 2.8.5 lets remote attackers supply malicious XML that drives expat_realloc() past SIZE_MAX while computing an allocation size, yielding an undersized buffer and a subsequent heap overflow. The assessed impact is denial of service (crash or process instability) rather than confirmed code execution, consistent with the vendor vector (CVSS 4.0 8.2, AV:N/AC:H/AT:P/PR:N/UI:N/VA:H, with no confidentiality or integrity impact) and the assessed CVSS 3.1 vector AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H. Exploitation is conditional: only 32-bit builds are exposed (64-bit builds do not overflow SIZE_MAX in this computation), the attacker must feed crafted XML to an application that parses it with the vulnerable library, and the input must push allocation sizes toward the maximum; no public exploit code or active exploitation has been identified at time of analysis.
MFA bypass in Joomla! CMS 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3 allows an attacker who can drive the login flow to the point a 'rememberme' cookie is issued to present that cookie and skip the second authentication factor entirely, defeating the site's multi-factor policy without possessing valid second-factor credentials. The weakness is only meaningful on installations that both enforce MFA and use persistent-login (remember-me) functionality; sites without MFA enabled are not exposed to this specific bypass, and fully anonymous exploitation is constrained because the attacker must interact with the first-factor login flow or otherwise obtain the issued cookie. No public exploit code or active exploitation has been identified at time of analysis, and the vendor has published advisory 20260914 with fix guidance.
An integer underflow in the IKE daemon (iked) of WatchGuard Fireware OS can be triggered by a remote, unauthenticated attacker who has already completed the initial IKEv2 handshake, causing the iked process to crash and interrupting IPsec VPN service. Only Firebox appliances running Fireware OS with IKEv2 IPsec VPN enabled and reachable are exposed; the flaw is confined to availability (no confidentiality or integrity impact), and the practical blast radius is narrower than the 8.2 base score suggests because a valid IKEv2 session state must exist before the crafted encrypted message can be delivered. There is no public exploit identified at time of analysis, and no confirmed report of active exploitation. The vendor advisory is available at https://psirt.watchguard.com/CVE-2026-86133.
Path traversal in the WatchGuard Fireware OS WebUI management agent lets an authenticated administrator read or list arbitrary files on the local filesystem by submitting a specially crafted management request. Exploitation requires valid WebUI administrator credentials (the highest management privilege on the Firebox), per the assessed vector CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N, so the flaw is remote and low-complexity once the attacker already holds admin access, and the impact is limited to confidentiality (file read/list) with no write, code execution, or availability effect. No public exploit code and no confirmed active exploitation have been identified at time of analysis; the vendor advisory is published at https://psirt.watchguard.com/CVE-2026-13224 and no EPSS score was provided in the available data.
Out-of-bounds read and application crash in libsoup's soup_uri_decode_data_uri() affect applications that pass attacker-controlled base64 data: URIs to the GLib-based HTTP library, with Red Hat shipping vulnerable packages across Red Hat Enterprise Linux 6, 7, 8, 9 and 10. A crafted data URI whose percent-decoded payload contains embedded NUL bytes causes the decoded length to remain uninitialized and be used as the size of the returned GBytes, yielding a minor confidentiality leak (C:L) alongside a serious availability impact (A:H) rated 8.2 under CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H. The issue is remotely triggerable without authentication (PR:N) and no public exploit code has been identified at time of analysis, though real-world exposure is limited to software that actually processes untrusted data: URIs (WebKit/GTK browsers, feed and mail readers, and other GNOME applications rendering remote content).
Cross-site scripting (CWE-79) in the HPE OneView web management interface allows an unauthenticated remote attacker to have attacker-controlled script execute inside a logged-in HPE OneView administrator's browser session, which HPE describes as enabling remote session hijacking or other unauthorized actions. Successful exploitation requires the victim - an authenticated OneView administrator - to load the crafted content (CVSS UI:R), so the flaw cannot be triggered unattended against a default deployment; the attacker needs no credentials (PR:N) and can deliver the payload over the network (AV:N). With a vendor-assigned CVSS 3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N), the scope-change and high-confidentiality metrics reflect that a hijacked administrator session can expose data well beyond the vulnerable page itself; no public exploit or proof-of-concept was identified at time of analysis and there is no CISA KEV listing.
Malformed MQTT PUBLISH frames leak packet buffers in the Eclipse ThreadX NetX Duo MQTT client, letting a peer that can deliver a few dozen such messages exhaust the network driver's receive pool and halt all inbound traffic on the device until it is rebooted. Only builds including the NetX Duo MQTT client are exposed, and delivery requires broker control, a man-in-the-middle position on the MQTT session, or publish rights on a topic the client subscribes to, which is why the impact is availability-only (CVSS 4.0 base 8.2; assessed CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) despite a network attack vector. No public exploit code and no confirmed active exploitation have been identified at time of analysis.
Cross-site scripting (CWE-79) in HPE OneView (CVSS 3.1 base 8.2) lets remote attackers with no authentication of their own plant script that executes inside the browser session of a logged-in OneView user, which the assessed vector (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N) indicates can escalate into session hijacking, theft of data visible to that user, or other unauthorized actions performed with the victim's privileges. Because the vector requires user interaction (UI:R), successful exploitation depends on a legitimate - typically administrative - user viewing or interacting with attacker-controlled content, making it opportunistic or targeted rather than fully automatable; the scope-changed, high-confidentiality impact means the consequences are bounded by the victim's session privilege. No public exploit code has been identified at time of analysis, and there is no indication of confirmed active exploitation; the CPE entry uses a wildcard version, so all OneView versions should be treated as potentially affected until HPE confirms fixed builds.
Malformed SCTP traffic can crash the Wireshark/tshark dissector in versions 4.6.0 through 4.6.8 and 4.4.0 through 4.4.18, turning a heap-based buffer overflow (CWE-122) in the SCTP dissector into a denial of service against the analyst's own capture session rather than against any remote service. Exploitation requires the tool to process an attacker-supplied packet - either live-captured on a monitored interface carrying crafted SCTP traffic or opened from a malicious capture file - and the packet must be specifically malformed, which is why the high attack-complexity rating applies. Access requirements are unauthenticated per the CVSS vector (PR:N), and the realistic outcome is a crash of the Wireshark/tshark process, not code execution or host compromise; no public exploit code and no confirmed active exploitation were identified at time of analysis. Note that the originally supplied CVSS vector claimed high confidentiality and integrity impact, which the independent assessment corrected to availability-only (C:N/I:N/A:H).
Path traversal in IBM Guardium Data Protection 12.2's Datasource REST component allows authenticated remote attackers with low privileges to delete arbitrary files, causing denial of service and integrity impact. The flaw requires network access to the REST API and valid credentials (CVSS PR:L), with no user interaction. No public exploit code or active exploitation has been identified at time of analysis, but a vendor patch is available.
Memory-corruption flaws in Firefox's Audio/Video Playback component (CWE-119) can be triggered when a user loads attacker-controlled audio or video content, potentially leading to high-integrity and high-confidentiality compromise of the browser process. The issue affects Firefox builds prior to 157 and the ESR branches prior to 153.4, 140.17, and 115.42, is rated CVSS 3.1 8.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N), and requires user interaction - the victim must visit a malicious page or open crafted media that reaches the playback stack. No public exploit code or confirmed active exploitation was identified at time of analysis, and vendor patches are available in Firefox 157, Firefox ESR 153.4, Firefox ESR 140.17, and Firefox ESR 115.42.
Pasting a crafted code cell from the system clipboard into JupyterLab 4.5.0 through 4.5.10 allows attacker-controlled script to run in the authenticated JupyterLab origin without the victim ever executing the cell, because the paste path fails to clear metadata.trusted and therefore bypasses HTML output sanitization (CWE-79 XSS, CVSS 8.1). The flaw is network-reachable and unauthenticated per the CVSS vector (PR:N), but it requires user interaction - the victim must paste attacker-supplied clipboard content - and it only triggers under the non-default combination of useSystemClipboardForCells enabled with pasteCodeCellsWithoutOutput disabled; Markdown and raw cells are sanitized and unaffected. An equivalent issue affects Notebook 7.5.0 through 7.6.2 and JupyterLite Core 0.7.0 through 0.8.3; no public exploit code or confirmed active exploitation was identified at time of analysis, and vendor fixes ship in JupyterLab 4.5.11 / 4.6.4, Notebook 7.6.3, and JupyterLite Core 0.8.4.
Apache Polaris releases before 1.8.0 allow an authenticated principal that holds permission to create or update Iceberg table properties to plant FileIO client settings - notably s3.endpoint - in table metadata that Polaris subsequently honors when it constructs its own server-side storage client during commits and purges, redirecting server-side storage traffic and exposing request authentication material to an attacker-chosen host. The flaw is classified as missing authorization (CWE-862) and rated CVSS 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), so exploitation requires a valid account with the table-property privilege plus a deployment whose catalog storage configuration does not override the endpoint; environments where all table-property writers are trusted operators, or where the catalog pins or overrides the endpoint, are not meaningfully exposed. There is no public exploit identified at time of analysis, EPSS is 0.19% (8th percentile), and the issue is not in CISA KEV; Apache has fixed it in Polaris 1.8.0.
Same-origin policy bypass in Mozilla Firefox's WebExtensions component lets attacker-controlled web content defeat origin isolation and access cross-origin data, producing high confidentiality and integrity impact without availability loss. Exploitation requires a victim running an affected build (prior to Firefox 157, Firefox ESR 153.4, Firefox ESR 140.17, or Firefox ESR 115.42) to visit or interact with attacker-controlled content - the CVSS UI:R prerequisite - while no authentication or prior privileges are needed on the attacker side (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N, score 8.1); default configurations are affected because the flaw sits in a core browser component. No public exploit code has been identified at time of analysis, EPSS is low at 0.17% (5th percentile), and CISA's SSVC assessment records Exploitation: none and Automatable: no, so this is currently a patch-now hardening issue rather than an actively exploited one.
Undefined behavior in the DOM Streams component of Mozilla Firefox allows remote, unauthenticated attackers to trigger memory-safety-class corruption in the browser process when a victim loads attacker-controlled web content, yielding high confidentiality and integrity impact (CVSS 3.1 base 8.1, AV:N/AC:L/PR:N/UI:R). The flaw affects builds prior to Firefox 157, Firefox ESR 153.4, Firefox ESR 140.17, and Firefox ESR 115.42, and requires user interaction - the victim must open a crafted page that exercises the vulnerable Streams API path - but no authentication or non-default browser configuration is needed. No public exploit code has been identified at time of analysis and CISA KEV does not list this issue; EPSS is very low at 0.16% (4th percentile), though the underlying CWE-758 memory-safety class means reliable weaponization would require substantial exploit-development effort rather than being trivially scriptable.
Uninitialized memory handling in Mozilla Firefox's Storage Quota Manager can leak contents of the browser's process memory to a remote attacker who persuades a victim to load attacker-controlled web content, affecting Firefox releases before 157 as well as ESR builds before 153.4, 140.17, and 115.42. The required user interaction (UI:R) is the main limiting factor, and no privileges are needed (PR:N); the independently assessed impact is confidentiality disclosure only, with no code execution or availability effect established, and triage should not treat the published I:H/A:N components of the 8.1 CVSS score as realized. No public exploit code has been identified at time of analysis and EPSS is low at 0.16% (4th percentile), with vendor-supplied fixes already available in Firefox 157 and the three ESR branches.
A same-origin policy bypass in Firefox's DevTools component allows attacker-controlled content to read and modify data belonging to other origins the victim is already authenticated to, rated CVSS 8.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N). The flaw affects Firefox builds before 157 and Firefox ESR builds before 153.4; exploitation is remote and requires no attacker-side credentials, but is gated by user interaction because the victim must load attacker-controlled content and reach the vulnerable DevTools same-origin-policy code path. No public exploit code has been identified at time of analysis and EPSS is low at 0.16% (4th percentile), while Mozilla has shipped vendor fixes in Firefox 157 and Firefox ESR 153.4.
Cross-origin data exposure and integrity compromise in Mozilla Firefox stem from a site-isolation failure in the DOM:Networking component, where origin boundaries are not correctly enforced, allowing attacker-controlled web content to reach resources and operations that should belong to a different origin. Affected are Firefox builds before 157 and Firefox ESR builds before 153.4; the issue is rated 8.1 HIGH (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N), meaning remote, unauthenticated, low-complexity exploitation that nonetheless requires the victim to load a malicious or compromised page. There is no public exploit identified at time of analysis and EPSS is very low at 0.15% (4th percentile), so real-world activity is not indicated, but the confidentiality and integrity impact is high once a user is lured to attacker-controlled content.
Storage data exposure in Mozilla Firefox stems from cryptography misuse in the Storage: Quota Manager component, allowing remote, unauthenticated attackers to trigger information disclosure if a victim loads attacker-controlled web content (UI:R, PR:N). The independent assessment rates confidentiality impact High and integrity impact Low (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N), with affected versions being Firefox before 157 and Firefox ESR before 153.4. No public exploit was identified at time of analysis, and EPSS is low at 0.15% (4th percentile), so this is a moderate-priority patching item rather than an urgent, actively exploited issue.
Origin-separation mitigation bypass in Mozilla Firefox before 157 and Firefox ESR before 153.4 permits unauthenticated remote attackers to defeat DOM Navigation protections by luring a victim to load attacker-controlled web content, potentially compromising confidentiality and integrity of cross-origin data or actions if the victim is simultaneously authenticated to a targeted site. Although the CVSS base score is 8.1, the vector requires user interaction (UI:R), EPSS is only 0.15% (4th percentile), and no public exploit has been identified at time of analysis, making this a genuine but non-emergency browser vulnerability. CISA SSVC records no exploitation and no automatable exploitation, while noting total technical impact.
Cross-site request forgery in Dell Secure Connect Gateway (SCG) Policy Manager prior to the vendor-fixed build allows a remote, unauthenticated attacker to ride an already-authenticated administrator's browser session and issue state-changing requests, resulting in information disclosure, information tampering, protection-mechanism bypass, and potential use of the product as a launch point for phishing. Per the CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N), the attacker needs no credentials of their own but must trick a logged-in Policy Manager user - typically an administrator - into visiting attacker-controlled content or clicking a crafted link, so that user interaction (UI:R) is the sole barrier and cannot be skipped; the targeted appliance must also be reachable from the victim's browser and a valid session must be active. No public exploit code has been identified at time of analysis, EPSS is only 0.12% (1st percentile), and CISA's SSVC framework rates exploitation as none with automatable:yes and partial technical impact, so this is a genuine but not urgent issue for which a vendor patch is available.
An authentication bypass in the API endpoint of HPE Networking Instant ON (affected versions 0.0.0.0 through 3.4.1.0) allows an unauthenticated, network-positioned attacker to circumvent network access controls and reach restricted networks without credentials or user interaction. The vendor-published CVSS 3.1 base score is 8.1 (High), but our independent assessment retains AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N because exploitation is gated by preconditions outside the attacker's control - the vulnerable state is transient and cannot be forced, so success depends on catching a device in that window rather than on attacker skill. There is no indication of active exploitation (no CISA KEV listing in the supplied intelligence) and no public exploit identified at time of analysis, so the practical risk is a genuine but conditionally-gated one rather than an immediately weaponizable remote compromise.
A partial authentication bypass in Apache MINA SSHD lets a remote attacker satisfy a repeated-public-key multi-authentication policy by presenting the same public key twice, so a server configured to demand two distinct keys can be entered with only one of them. Affected are versions before 2.20.0 and 3.0.0-M1 through 3.0.0-M5 of the sshd-core component; the vendor assigns CVSS 3.1 8.1 (High, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), where PR:L reflects that the attacker must already legitimately possess at least one accepted key pair. Exploitation is confined to the non-default hardened configuration that requires repeated/multiple public keys (the equivalent of OpenSSH's AuthenticationMethods "publickey,publickey"); single-key or password-based deployments are not affected, and no public exploit code or confirmed active exploitation was identified at time of analysis.
Path traversal in Wireshark's configuration-profile import handler (CWE-22) allows a maliciously crafted profile to write files outside the intended profile directory, crashing the application and potentially achieving code execution in the user's context. Affected releases are Wireshark 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8; the flaw is rated CVSS 7.8 (AV:L/AC:L/PR:N/UI:R) and requires the victim to manually import the attacker-supplied profile, so exploitation depends on social engineering rather than a network-facing or automatic trigger. Publicly available exploit code exists and the issue is tracked as wnpa-sec-2026-106, but it is not confirmed as actively exploited (CISA KEV) and EPSS is low at 0.19% (7th percentile), making this a moderate-priority issue rather than an emergency; patched releases 4.4.19 and 4.6.9 are available from the vendor.
Command injection in the bash, zsh, and fish activation scripts generated by virtualenv releases prior to 21.7.13 lets a crafted virtual environment path or interpreter Tcl/Tk library path execute arbitrary commands with the privileges of any user who sources the activate script. The root cause is double quoting: values already escaped by shlex.quote are embedded inside an additional quoted context, so the surplus quotes terminate the data-only quoted run and leave shell metacharacters parsed as commands - reaching __VIRTUAL_ENV__ in bash/zsh when a relocated environment's recorded directory is absent, and __TCL_LIBRARY__/__TK_LIBRARY__ in fish. Exploitation requires attacker control of the affected path string plus the victim sourcing the script (CVSS 3.1 score 7.8, AV:L/AC:L/PR:N/UI:R, CWE-78 OS command injection); no public exploit identified at time of analysis, and the flaw is fixed in virtualenv 21.7.13 per PyPA advisory GHSA-p58f-9548-mpm2.
Local privilege escalation on IBM i 7.3, 7.4, 7.5, and 7.6 allows an attacker who already holds a valid low-privilege user profile to reassign ownership of arbitrary files by supplying an improperly validated file path. The flaw carries a CVSS 3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), meaning exploitation requires local access and low-privilege authentication but no user interaction, and yields high confidentiality, integrity, and availability impact. No public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV); IBM has released a patch, so patched systems are not exploitable.
Local privilege escalation in Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 lets a low-privileged local user raise their privileges by abusing incorrectly assigned permissions on a critical resource. The flaw is not remotely or unauthenticated-exploitable: an attacker must already hold local, low-privileged access to the host (PR:L, AV:L), and exploitation additionally depends on a high-complexity precondition such as a race condition or a specific system state (AC:H) plus the mis-permissioned resource being present in the deployed configuration. No user interaction is required, and no public exploit identified at time of analysis; Dell has released a fix in 5.34.00.16 via advisory DSA-2026-385.
Heap-based buffer overflow in TeamViewer Full Client and Host for Linux and macOS before version 15.82 allows arbitrary code execution at the victim user's privilege level when a crafted .tvs session recording is opened through the 'Play or convert recorded session…' feature. Exploitation is gated by heavy prerequisites: the attacker must land the malicious file on the target host and socially engineer the user into opening it (CVSS 3.1 7.8, AV:L/AC:L/PR:N/UI:R), and the resulting code runs only as the current user with no privilege escalation and no network-reachable path. No public exploit code or confirmed active exploitation is identified at time of analysis, so real-world risk is materially below the raw score.
Local privilege escalation in TeamViewer Full Client and Host on Windows, Linux, and macOS (all versions prior to 15.82) allows an authenticated low-privileged local user to write arbitrary files with SYSTEM/root privileges by sending crafted IPC commands to the locally running privileged TeamViewer service daemon. Successful exploitation yields full compromise of confidentiality, integrity, and availability on the host (CVSS 3.1 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), and because the flaw is deterministic rather than a race condition it is reliably triggerable once local access exists. No public exploit code has been identified at time of analysis, and the issue is not listed as confirmed actively exploited (CISA KEV); however, the requirement of only low-privileged local access makes it a valuable post-compromise escalation primitive.
Integer overflow in NVIDIA DeepStream is reachable when crafted tensor dimensions are supplied in a YAML configuration file loaded by the inference pipeline, enabling an authenticated local attacker to cause denial of service, information disclosure, and data tampering. Exploitation requires local access and the ability to modify or supply the DeepStream pipeline YAML, consistent with the CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N, so deployments that only load trusted operator-authored configurations are not exposed. No public exploit code or confirmed active exploitation (CISA KEV) was identified in the provided intelligence at time of analysis.