XML Signature Wrapping protections in Apache WSS4J's streaming (StAX) code path can be bypassed, allowing a remote unauthenticated attacker to deliver a SOAP message whose Body is unsigned yet still satisfies a WS-SecurityPolicy requiring the Body to be signed. The root cause is that a signature reference using the WS-Security STR-Transform permanently sets an internal 'inside signed content' flag, which causes the WS-SecurityPolicy enforcer to stop evaluating SignedParts and SignedElements for the remainder of the message; signature verification itself is not broken, and the DOM-based code is unaffected. Only deployments on the streaming path that enforce such a policy are exposed: affected versions are below 2.4.4, 3.0.0 through 3.0.5, and 4.0.0 through 4.0.1, and no public exploit code or confirmed active exploitation was identified at time of analysis. Vendor-released patches are available as 4.0.2, 3.0.6, and 2.4.4.
Improper authentication in Kiteworks Email Protection Gateway allows a remote, unauthenticated sender to make the gateway act against the Kiteworks platform as an identity it never verified, and to provision a new platform account for an identity the gateway does not already know - ultimately yielding control of a single platform account. Exploitation requires only network reachability to the gateway's message-processing path plus an inbound message asserting an identity; no credentials, privileges, or user interaction are involved (CVSS:3.1/AV:N/AC:L/PR:N/UI:N). No public exploit identified at time of analysis, and there is no evidence of active exploitation or public tooling; the vendor's CVSS 3.1 score is 7.5 with integrity-only impact, while independent assessment raises the confidentiality component to High (C:H/I:H/A:N) because account takeover implies read access to that account's data, though the realistic blast radius remains a single platform account rather than the underlying appliance.
Directory traversal in Agent Zero 1.7 through 1.10 lets the AI agent's file-browser component read files anywhere on the host, because FileBrowser is initialized with the host root as its workspace rather than a confined sandbox. The CVSS 3.1 vector is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), which models unauthenticated network access, but the practical risk is gated by whether the Agent Zero UI is exposed to untrusted networks; Agent Zero is often a local single-operator tool, so the AV:N/PR:N rating only applies when that interface is deliberately reachable without an authentication layer. At time of analysis there is no confirmed active exploitation (no CISA KEV entry) and no public exploit identified at time of analysis, and EPSS is 0.33% (24th percentile), indicating low predicted exploitation activity; reference material consists of a GitHub issue and a gist.
Directory traversal in Bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 allows unauthenticated remote attackers to read arbitrary files from the server filesystem through the Linsight task-execution endpoint implemented in src/backend/bisheng/linsight/domain/task_exec.py. The assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates no authentication or user interaction is required against default configurations, with impact bounded to confidentiality - disclosure only, no code execution or file modification. Publicly available exploit code exists (SSVC exploitation status 'poc'; a public gist accompanies the report), but the vulnerability is not confirmed actively exploited (no CISA KEV entry), and EPSS is low at 0.33% (24th percentile), so priority should be driven by whether an organization actually exposes a Bisheng instance to untrusted networks.
Directory traversal in agent-zero 1.7 through 1.10 allows remote attackers to write files to arbitrary locations outside the intended file-browser directory via the save_file_b64 method, with the evaluated CVSS vector indicating PR:N/UI:N and high integrity impact according to the authoritative assessment. No CISA KEV listing was provided, and no public exploit identified at time of analysis; EPSS is 0.33% (24th percentile), and the supplied CVSS 3.1 score is 7.5, though the independent assessment shifts the impact from confidentiality to integrity (C:N/I:H/A:N) because exploitation concerns unauthorized file writes rather than reads.
Remote, unauthenticated denial of service in Pexip Infinity (all releases before 38.2, plus 39.0, 39.1, and 40.0) lets an attacker who can reach a node's media service send crafted input that triggers a software abort and crashes the affected process. The vulnerability carries a CVSS 3.1 base score of 7.5 (High), driven entirely by availability impact (A:H) with no confidentiality or integrity loss, and requires only network reachability to the media-plane service - no credentials, no user interaction, and no non-default configuration. There is no CISA KEV listing and no public exploit code identified at time of analysis, so the practical risk is concentrated in internet-facing or broadly reachable Conferencing Nodes, while nodes segmented behind firewalls or restricted to trusted media peers face reduced exposure.
Unauthenticated remote attackers can abort the media process in Pexip Infinity, causing a denial of service on conferencing nodes that are reachable from an untrusted network. The root cause is improper input validation in the media implementation (CWE-617, a reachable assertion/software abort): crafted media input drives the software into an unrecoverable abort rather than failing gracefully. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, base 7.5) confirms this is availability-only - no confidentiality or integrity impact and no code execution - and affected releases are Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0. No public exploit code and no confirmed active exploitation were identified at time of analysis; the practical exposure driver is whether media-processing interfaces are directly reachable, since deployments that restrict media to trusted networks or front it with session border controls materially reduce reachability.
Malformed media-plane input to Pexip Infinity before 41.1 can trigger an assertion failure and abort the media process, causing a denial of service. The flaw is remotely reachable without authentication or user interaction (CVSS 3.1 AV:N/AC:L/PR:N/UI:N, availability-only impact), though practical exposure depends on whether the media services are reachable from untrusted networks. No public exploit code or confirmed active exploitation was identified at the time of analysis.
Unauthenticated denial of service in Apache WSS4J lets remote attackers exhaust server memory by sending SOAP messages that carry a specially crafted X.509 certificate: the certificate's SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF, and an integer overflow in WSS4J's DER bounds check allows the oversized allocation to pass validation, so an eleven-byte extension can trigger an approximately 2 GB allocation. Because the certificate is decoded while resolving the signature's key reference - before the message is authenticated - no credentials are required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), and repeated requests can drive an exposed WS-Security endpoint to OutOfMemory conditions. Affected releases are WSS4J 4.0.0 through 4.0.1, 3.0.0 through 3.0.5, and all versions before 2.4.4; impact is limited to availability, with no code execution or data disclosure path identified. No public exploit code, EPSS score, or CISA KEV entry is present in the provided data, so risk is driven by Apache's "important" severity rating and the pre-authentication nature of the flaw rather than confirmed active exploitation.
Incorrect authorization in JetBrains YouTrack before version 2026.2.19197 allows guest users to strip a workflow action's visibility restriction and then execute that action, altering workflow behavior on the instance. The flaw is network-reachable and rated CVSS 7.5 with a PR:N vector, though practical exposure depends on guest access being enabled on the target instance - a configuration in which the guest context supplies the effective precondition; disabling guest access removes the attack surface entirely. Impact is limited to integrity of workflow actions (no confidentiality or availability effect), there is no public exploit identified at time of analysis, EPSS is low (0.29%, roughly 19th percentile), CISA SSVC records exploitation status as none, and the vendor has released a patch in 2026.2.19197.
Denial of service in Pexip Infinity 30.0 through 40.x allows unauthenticated remote attackers to render a node inaccessible by sending input that the web server fails to validate properly (CWE-770). The flaw is network-reachable and low-complexity with no authentication (PR:N) or user interaction (UI:N) required, and its sole impact is availability - there is no confidentiality or integrity loss - with CVSS 3.1 scored 8.6. No public exploit code and no confirmed active exploitation were identified at time of analysis; risk is concentrated in deployments whose management or conferencing web interface is exposed to untrusted networks.
Unauthenticated remote attackers can cause a denial of service against Pexip Infinity conferencing deployments by sending malformed signaling messages that trigger a software abort. The vulnerability, tracked as CVE-2026-103100, affects all versions before 40.1 and stems from improper input validation (CWE-617). No public exploit identified at time of analysis, but the flaw is remotely reachable with low complexity and high availability impact, making prompt patching critical for internet-exposed signaling interfaces.
Command injection in Kiteworks Core lets an authenticated administrator with elevated privileges run arbitrary operating-system commands as root on the affected appliance node, so an admin-only function can be turned into full host compromise. The flaw is remotely reachable and needs no user interaction (CVSS:3.1/AV:N/AC:L/PR:H/UI:N, base score 7.2), but PR:H is the dominant limiting factor: no unauthenticated or low-privilege path is indicated, so practical exploitation presupposes an insider or stolen high-privilege administrative credentials. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, keeping real-world urgency moderate and dependent on the value of the credentials required.
OS command injection in Kiteworks Core appliances running versions before 9.5.0 allows an authenticated administrator to upload a configuration package whose contents are not sufficiently validated, resulting in arbitrary operating-system command execution that may run with elevated privileges on the underlying appliance. The attack requires a valid administrator account with access to the configuration-package upload functionality in the administrative interface (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, 7.2 High), so the high-privilege prerequisite is the dominant constraint and the realistic scenario is a malicious, compromised, or coerced administrator rather than opportunistic unauthenticated remote exploitation; the assessed vector is internally consistent and concurred with. No public exploit code and no confirmed active exploitation were identified at time of analysis, and successful exploitation yields full compromise of confidentiality, integrity, and availability on the affected appliance.
An out-of-bounds read in Eclipse ThreadX NetX Duo's MQTT-over-WebSocket transport (the setter path) lets a malicious or compromised broker - or a man-in-the-middle on the WebSocket connection - crash the embedded network stack and potentially disclose a limited amount of adjacent memory. Affected builds are NetX Duo 6.4.4 through 6.5.1.202602, and only firmware that actually compiles in and uses the MQTT client over WebSocket is exposed; devices running plain MQTT/TCP or no MQTT are unaffected. Exploitation is not confirmed as active (not in CISA KEV) and no public exploit code has been identified at time of analysis, but CISA SSVC rates the issue Automatable with partial technical impact, so the practical risk is a conditional availability problem rather than an emergency, with a confidentiality impact the vendor's original CVSS score omits but which the independent assessment reflects as C:L/A:H.
Authenticated path traversal in the WordPress Creator LMS plugin (WPFunnels) affects all versions up to and including 1.2.19 and allows a user holding only Contributor-level privileges to manipulate file paths and reach files outside the intended directory, primarily exposing sensitive data with limited integrity and availability effects. Exploitation requires a valid low-privilege account - self-registration must be enabled or an account otherwise obtained - and is rated high complexity (AC:H), meaning success depends on specific, not-guaranteed conditions; the issue is remote, needs no user interaction, and no public exploit has been identified at time of analysis. It is not confirmed actively exploited (no CISA KEV listing), and while the vendor-supplied CVSS of 7.5 and the scorer's high confidentiality/integrity/availability ratings read alarming, the practical risk is moderate because the attack is gated behind an authenticated Contributor role and elevated complexity.
Unauthenticated sensitive data exposure in the WordPress plugin BackupEase through version 2.2.2 lets any remote, network-reachable visitor retrieve information the plugin was never intended to expose, with confidentiality impact rated High and no integrity or availability effect (CVSS 3.1 base 7.5, AV:N/AC:L/PR:N/UI:N). Because the vector carries PR:N and UI:N, no account, credential, or victim interaction is required - the only prerequisite is that the plugin be installed at an affected version and its vulnerable endpoint reachable over HTTP(S). There is no public exploit identified at time of analysis, the issue is not confirmed actively exploited (no CISA KEV listing), and no EPSS score was provided in the available intelligence; Patchstack is credited as the reporting source.
Unauthenticated sensitive data exposure in the WordPress plugin StifLi Backup Tools affects all versions up to and including 2.2.7, allowing any remote attacker who can reach an affected site to retrieve information the plugin was never intended to expose without logging in first (CVSS 3.1 base 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Impact is confidentiality-only - no data modification or denial of service - so the practical damage is the leak of backup-related information that could feed follow-on attacks such as credential theft or targeted exploitation. At the time of analysis there is no public exploit code identified and no confirmation of active exploitation (the CVE is not in CISA KEV), though the low attack complexity and zero authentication requirement make the flaw trivially reachable for anyone who knows or discovers the exposed endpoint; no EPSS score was supplied, and the risk is moderated mainly by the plugin's niche deployment footprint rather than by any technical barrier.
Unauthenticated access control failure in the WebToffee WordPress Backup & Migration plugin (slug wp-migration-duplicator) through version 1.6.0 allows remote attackers to read protected resources without credentials or user interaction; the CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (base 7.5) reflects a high confidentiality impact with no integrity or availability effect. Any WordPress site with this plugin installed and active at or below 1.6.0 is exposed, while sites that have upgraded past 1.6.0 or that do not run the plugin are unaffected. No public exploit code has been identified at time of analysis, and this CVE is not listed in CISA KEV.
Remote unauthenticated attackers can delete arbitrary content, including customer reviews, on WordPress/WooCommerce sites that have the Customer Reviews for WooCommerce plugin installed and active at version 5.120.0 or earlier. The flaw is a missing authorization check (CWE-862) on a network-accessible endpoint, requiring no authentication or user interaction (CVSS 3.1 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). No public exploit code or confirmed active exploitation has been identified at time of analysis, and the risk is a genuine but bounded priority because impact is confined to availability/data loss rather than site compromise.
Unauthenticated attackers can modify arbitrary data or trigger protected operations in WordPress sites using the WP Express Checkout (Accept PayPal Payments) plugin versions up to and including 2.4.9, because the plugin fails to enforce authorization controls (CWE-862). The flaw is remotely exploitable without user interaction or credentials, with a CVSS 3.1 base score of 7.5 reflecting high integrity impact but no confidentiality or availability loss. No public exploit code or active exploitation has been identified at time of analysis, but a Patchstack advisory exists and administrators should treat the issue as high priority given the unauthenticated attack vector.
Unauthenticated remote attackers can modify or create data in WordPress sites running the Bookly appointment booking plugin versions up to and including 28.2 due to missing authorization checks (CWE-862). The vulnerability has a CVSS score of 7.5 with a vector indicating network exploitable, low complexity, no privileges required, and no user interaction, resulting in high integrity impact but no confidentiality or availability impact. No public exploit code has been identified at the time of analysis, and the issue is assessed as priority-worthy on exploitability but with a bounded impact profile.
Unauthenticated Broken Access Control in the Hostinger Migrator WordPress plugin (version 1.0 and earlier) lets any remote attacker reach a plugin endpoint that performs no authorization check, exposing migration and backup artifacts such as database dumps, file archives and site configuration data. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, score 7.5) the impact is a high-confidentiality breach with no integrity or availability effect, exploitable against default installations with no credentials, user interaction or special configuration. No public exploit identified at time of analysis, and no EPSS score or CISA KEV entry was supplied; the practical risk is bounded by the plugin's niche adoption and the fact that migration plugins are often left active only briefly during a site move, so sites that have deactivated or removed the plugin since migrating are not exposed.
Privilege escalation in the WordPress plugin Import and Export Users and Customers (Javier Carazo) at versions up to and including 2.5.2 lets an authenticated low-privileged account - specifically a Subscriber - reach higher-privileged roles, giving full compromise of the site's confidentiality, integrity, and availability (CVSS 3.1 base 7.5, High). The advisory-supplied vector CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H means the attack is network-reachable and needs no victim interaction, but the High Attack Complexity rating reflects a non-trivial precondition (a specific plugin state, ordering, or crafted import payload) that limits how reliably it can be pulled off; it does require the attacker to already hold a Subscriber account, which is trivial on sites with open registration enabled. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, so exploitation is currently assessed as a targeted-risk rather than a mass-scanning risk; no EPSS probability was supplied with this record.
Unauthenticated arbitrary file download in the NextGEN Gallery WordPress plugin affects every site running version 4.5.0 or earlier, allowing a remote attacker with no credentials required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N, base score 7.5) to retrieve files that are readable by the web server process. Rooted in a path-traversal weakness (CWE-22) in the plugin's file download handling, the impact is confined to confidentiality - typical targets are wp-config.php, database credentials, environment files, and backup archives - with no file write or code execution. No public exploit code and no CISA KEV entry are associated with this CVE at time of analysis, though the reachable default-configuration attack path makes it a genuine priority rather than a paper-tiger high-CVSS issue.
GravityExport Lite for Gravity Forms versions up to and including 2.7.2 contains a broken access control vulnerability (CWE-862) that allows unauthenticated remote attackers to bypass authorization and access sensitive export data, resulting in high confidentiality impact. The CVSS 3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating a low-complexity, network-exploitable flaw with no integrity or availability impact. Exploitation requires the plugin to be installed on a site with Gravity Forms, but no authentication or user interaction is needed; no public exploit code is currently identified.
Unauthenticated arbitrary file read in the Product Designer App plugin for WordPress (all versions up to and including 1.1.3) lets any remote visitor retrieve the contents of files on the web server through the plugin's 'svg' parameter. The only access control on the vulnerable AJAX endpoint is a nonce and token that the plugin prints as JavaScript globals on any page rendering the [pdapp-studio-page] shortcode, so an anonymous attacker who loads such a page can lift those values and pass them along with a crafted traversal path. Per the supplied assessment the CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (7.5 High) reflects a fully remote, unauthenticated, low-complexity, no-interaction confidentiality-only flaw; no CISA KEV entry and no public exploit code were identified in the provided data, and no EPSS score was supplied, so exploitation status is assessed as unproven but technically trivial once a shortcode-bearing page exists.
Unauthenticated time-based blind SQL injection in the Motors - Car Dealership & Classified Listings plugin for WordPress (all versions up to and including 1.4.109) lets remote attackers inject SQL through the 'stm_lat' and 'stm_lng' parameters and infer sensitive database contents one timed request at a time. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, no account, privileges, or user interaction are needed - only that the plugin is installed and the geo-location endpoint that consumes these latitude/longitude parameters is reachable, which is the case in default configurations. No public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV); exploitation is viable but inherently slow and noisy, since each extracted bit requires a distinct delayed response, so the practical risk is slow, stealthy exfiltration of database contents (hashes, user data, listing records) rather than rapid mass compromise.
Local file inclusion in the Simply Schedule Appointments WordPress plugin (all versions up to and including 1.6.12.27) allows remote attackers to include and execute arbitrary .php files present on the server via the 'ssa_locale' GET parameter, enabling access-control bypass, disclosure of sensitive data, and PHP code execution whenever attacker-controlled .php content can be placed on the host. The published CVSS 3.1 base score is 7.5 (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H), but our independent assessment rates the vector as PR:N (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), because the locale filter in class-translation.php is registered unconditionally during plugins_loaded and its callback returns the raw 'ssa_locale' parameter without any nonce or capability check, so the subscriber-level authentication requirement in the published vector is not a genuine barrier in practice. High attack complexity reflects the fact that including an already-present .php file yields information disclosure or access-control bypass, while executing attacker-supplied PHP additionally requires an upload feature or writable path that can host a .php file; no public exploit code has been identified at time of analysis, and there is no CISA KEV entry indicating confirmed active exploitation.
Stored cross-site scripting in the Robin Image Optimizer WordPress plugin (versions 2.0.0 up to but not including 2.0.8) lets unauthenticated users submit content that is persisted and later rendered as script in the browser of anyone viewing the affected page, including administrators. The flaw is conditional: the bundled HTML parser only re-emits unescaped values into element attributes when the plugin's non-default image delivery mode is enabled, so installations running the default mode are not exposed. Vendor-released patch: 2.0.8; no public exploit identified at time of analysis, and CISA's SSVC assessment records exploitation as none and the issue as not automatable, making this a real but situational stored-XSS risk rather than an emergency.
Directory traversal in Handlebars.java before 4.5.5 lets unauthenticated remote attackers read arbitrary files outside the configured template base directory in Spring MVC applications that use the handlebars-springmvc integration. The flaw specifically affects handlebars-springmvc 4.5.3 and 4.5.4, where the path-containment check added for CVE-2026-63490 validates template locations as raw percent-encoded strings while the template file is ultimately opened through a URL handler that percent-decodes the path, so a request-derived view name containing %2e%2e/ slips past both the view-resolver and loader-side checks. Exploitation is not confirmed in the wild and no public exploit code has been identified at time of analysis, but it requires two non-default conditions to hold simultaneously: a file: template location prefix and a Handlebars view name derived from untrusted request input, which keeps real-world priority moderate despite the 7.5 CVSS score. Impact is limited to confidentiality (arbitrary file read); integrity and availability are unaffected.
Unauthenticated path traversal in the Kiteworks Core appliance setup interface allows an attacker who can reach that interface to write a file to any location writable by the appliance service account, enabling integrity compromise of the appliance or a denial-of-service condition that persists until an operator intervenes. The exposure is narrow: the setup interface is not reachable on a fully configured appliance in its default configuration, so exploitation is realistically limited to the transient provisioning window of a new appliance or a non-default configuration that leaves setup exposed, which is why AC:H applies despite PR:N and UI:N (CVSS 7.4). No public exploit code and no confirmed active exploitation were identified at time of analysis, and the flaw does not by itself provide code execution.
Authorization bypass in the MediaWiki WikiLambda (Wikifunctions) extension version 1.46 lets an authenticated wiki user reference and operate on objects belonging to another user or scope, because the extension resolves a client-supplied object key without re-authorizing it against the requesting account. Exploitation is gated: the independently assessed vector (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) requires a valid account, high attack complexity, an attack precondition that must be present, and some victim-side interaction, and only wikis that explicitly install WikiLambda rather than plain MediaWiki are exposed. No confirmed active exploitation is reported (not listed in CISA KEV); the advisory's CVSS 4.0 vector carries an E:P exploit-maturity metric and a Gerrit change is linked, indicating an upstream fix and proof-of-concept-level maturity rather than confirmed in-the-wild attacks, with no EPSS data supplied.
An authenticated administrator of Kiteworks Email Protection Gateway can exploit a path-traversal weakness to write a file outside its intended location and have the application execute it, resulting in remote code execution as the gateway's underlying service account. The issue is rated CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H): it is network reachable and low complexity, but gated behind high-privilege administrator credentials, which substantially constrains real-world exposure and makes this a moderate, not urgent, priority. No public exploit code has been identified at time of analysis, and the flaw is not listed in CISA KEV.
Arbitrary command execution on Kiteworks Email Protection Gateway is possible in all versions before 9.5.0: an authenticated administrator can import a crafted configuration file whose contents are insufficiently validated, allowing commands to run on the appliance with the privileges of the gateway service (CVSS 3.1 base 7.2, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Because the vector requires PR:H, this is not a remote unauthenticated attack - it is realistically an insider, malicious-admin, or post-credential-compromise escalation from administrative access to full code execution on the gateway. No public exploit code and no confirmed active exploitation were identified at time of analysis; the vendor fix is version 9.5.0.
Privilege escalation in the WP User Frontend WordPress plugin before 4.3.12 lets unauthenticated visitors tamper with the role value submitted by the plugin's front-end registration form and create an account with elevated privileges such as Editor (the administrator role cannot be obtained this way). The CVSS vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) confirms unauthenticated remote exploitation with no user interaction, but the AC:H reflects a narrow environmental precondition: the site must run on a PHP build where the sodium (libsodium) extension is unavailable, and a public registration page must be configured through the plugin. No public exploit code has been identified at time of analysis, and the SSVC assessment records Exploitation: none; impact is scored High for confidentiality and integrity with no availability effect.
Arbitrary file write in Kiteworks Core before 9.5.0 lets a holder of an existing administrative account steer the platform's administrative export feature to write files to any path on the underlying host, which can be chained into command execution on the appliance. The root cause is an improper restriction of a user-supplied file path (CWE-22), scored CVSS v3.1 7.2 with vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, so the flaw is not reachable by unauthenticated or standard users and command execution is a downstream consequence of the write rather than a guaranteed outcome. No public exploit code and no confirmed active exploitation (no CISA KEV listing) were identified at time of analysis; the primary constraint on real-world risk is the high-privilege prerequisite.
OS command execution in Kiteworks Core is possible when the remote-support capability is licensed and enabled and an authenticated System Administrator also possesses the key protecting submitted data, allowing that administrator to redirect the outbound support connection to an attacker-chosen destination that can then execute OS commands with local service account privileges. The CVSS 3.1 vector is AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, so exploitation requires high application privileges plus the additional key-possession condition, and deployments without remote support enabled are not exposed; there is no public exploit identified at time of analysis and no CISA KEV indication. The independent assessment rates real-world priority low-to-medium despite the 7.2 High base score.
Path traversal (CWE-22) in Kiteworks Email Protection Gateway allows an authenticated administrator to move files to locations outside the designated directory of an optional, non-default administrative file-move feature, which can potentially be leveraged to execute arbitrary code on the underlying host. The vulnerability is network-reachable with no user interaction (CVSS 7.2, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), but exploitation requires high-privileged administrator credentials and that the optional feature be enabled - environments running default configurations without this feature are not exposed. Only the CVE.org advisory and a CISA CSAF record are available at time of analysis, and no public exploit code has been identified; the admin-privilege prerequisite and non-default feature gate are the primary factors limiting real-world exploitation.
Path traversal in the administrative import function of Kiteworks Email Protection Gateway allows an authenticated administrator to write files to arbitrary filesystem locations, which can potentially be escalated to arbitrary code execution on the underlying server. All versions prior to 9.5.0 are affected; exploitation requires a high-privileged admin account (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, 7.2) and the impact on confidentiality, integrity, and availability is rated High. No public exploit code has been identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV); the EPSS score was not provided in the available intelligence.
Authenticated administrators holding a specific queue-management privilege on Kiteworks Email Protection Gateway (versions before 9.5.0) can submit a crafted serialized object to the cluster management interface that is deserialized without sufficient validation, resulting in arbitrary code execution in the context of the gateway service account. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, 7.2) makes clear this is not reachable by unauthenticated users, standard users, or admins lacking the queue-management entitlement, and no user interaction is required once a suitably privileged account exists. No public exploit code has been identified at time of analysis, no confirmed active exploitation (CISA KEV) has been reported, and vendor-patched versions are available.
Remote code execution in Kiteworks Email Protection Gateway allows an authenticated administrator to upload a crafted backup file that the product fails to sufficiently validate, then influence how the application loads it so that attacker-supplied code executes under the gateway's underlying service account. The flaw is rated CVSS 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) and classified as CWE-94 code injection; exploitation is gated by high-privilege authentication, making it a realistic post-compromise, insider, or credential-chaining vector rather than an unauthenticated internet-wide threat. No public exploit code and no confirmed active exploitation (CISA KEV) were identified for this CVE at time of analysis, and no EPSS score was supplied in the available intelligence.
Remote code execution on the Kiteworks Email Protection Gateway is achievable by an authenticated administrator who supplies a configuration setting in a form the gateway's input validation does not recognize, allowing an otherwise-rejected value to be written to the appliance as a file and executed under the gateway service account. The vendor rates this 7.2 (High) with the vector CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, and our independent assessment concurs: the flaw is network-reachable, low-complexity, and requires no user interaction, but it is gated behind high administrative privileges (PR:H), so it is not exploitable by unauthenticated or low-privileged users. There is no public exploit identified at time of analysis and the CVE is not in CISA KEV; realistic risk therefore hinges on admin-credential compromise, insider misuse, or chaining from a separate privilege-escalation flaw rather than opportunistic mass exploitation.
Unsafe reflection in Kiteworks Email Protection Gateway (all versions before 9.5.0) allows an authenticated administrator holding mail-rule configuration privileges to import a crafted rule configuration that causes the mail-processing pipeline to load and execute code outside the approved set of mail-processing components, resulting in code execution in the context of the mail-gateway service account (CVSS 3.1 base 7.2, High; vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Exploitation is gated behind a high-privilege account (PR:H) with mail-rule import rights and requires no victim interaction, so the practical exposure is insider abuse or lateral movement after an attacker has already compromised such an administrative account; there is no unauthenticated or anonymous path. No public exploit code has been identified and the issue is not listed in CISA KEV; the vendor-supplied fix is version 9.5.0.
Server-side template injection in the Kiteworks Core appliance allows an authenticated System Administrator to store a crafted system-notification template whose embedded template-engine expressions are evaluated when the notification is next rendered, resulting in operating-system command execution on the appliance. Exploitation requires a high-privileged admin account (CVSS vector PR:H, UI:N) and has a timing dependency because the payload only fires when the affected notification is triggered, making this a malicious-insider or compromised-admin scenario rather than a perimeter-reachable RCE. No public exploit code and no confirmed active exploitation were identified at time of analysis; the vendor-assigned CVSS 3.1 score of 7.2 (C:H/I:H/A:H) reflects full compromise of confidentiality, integrity, and availability once the template is rendered.
Out-of-bounds write in the NVIDIA Virtual GPU Manager (vGPU plugin) lets an unprivileged user inside an assigned guest VM corrupt host-side memory by sending a specially crafted RPC call across the virtualization channel, resulting in privilege escalation, data tampering, and denial of service on the host. Rated CVSS 7.3 (AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H), the bug is only reachable in vGPU/VDI/cloud-GPU deployments where the host runs the vGPU plugin and has at least one guest assigned; it is not a network-facing flaw and does not affect standard bare-metal Linux GPU driver installs, and no public exploit code has been identified at time of analysis. Real-world risk is therefore defined by the attack surface rather than by mass exploitability, since a successful attack requires an attacker to already hold an unprivileged local account inside a hosted guest VM.
Information disclosure and data tampering can be achieved by a local low-privileged attacker exploiting a missing authorization check in the NVIDIA GPU Display Driver for Windows kernel module. Affected products include the GeForce, RTX/Quadro/NVS, and Tesla driver branches on Windows; exploitation requires local authenticated access (PR:L) and no user interaction (UI:N). No public exploit code or active exploitation has been identified at time of analysis; the CVSS score is 7.3 with scope change (S:C) that amplifies risk in multi-user or cloud-GPU environments.
Arbitrary file write in oc-mirror allows an attacker who controls or tampers with an operator catalog image to write files outside the intended extraction directory when a user mirrors that catalog using the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature). The issue is a path traversal (CWE-22) in tar entry extraction, assessed as local (AV:L), no privileges required (PR:N), but requiring user interaction (UI:R) because an administrator must run the mirror command; impact is high integrity and low availability, with no confidentiality impact per the independent assessment. No public exploit or active exploitation is identified at time of analysis, and the independent assessment characterizes this as a moderate, defender-actionable issue rather than an urgent internet-facing emergency.
Privilege escalation in Kiteworks Core allows a delegated administrator whose scope includes role changes to promote an account to full system-administrator through the user-provisioning interface, which fails to verify that the requester is entitled to grant the role being assigned (CWE-266). The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, 7.2 High) confirms the flaw is network-reachable but requires high-privileged, delegated-admin credentials and no user interaction, so anonymous or ordinary-user accounts cannot exploit it and environments without scoped admin roles have no trust boundary to cross. No public exploit identified at time of analysis and no KEV listing; independent assessment rates this a genuine but low-to-medium operational priority rather than a high-urgency issue.
Privilege escalation in Kiteworks Core versions before 9.5.1 allows an authenticated delegated administrator holding only a single narrowly scoped administrative permission to obtain full system administrator privileges by abusing the administrative import function for integration credentials, which fails to verify that the requesting administrator is entitled to create the privileged credential being imported (CVE-2026-102132, CVSS 7.2 High). The attacker must already possess a valid delegated-admin account (PR:H), so this is an insider or lateral privilege-escalation issue rather than an unauthenticated internet-facing takeover, and no action by an existing system administrator is required for the escalation to succeed (UI:N). A vendor patch is available in Kiteworks Core 9.5.1; no public exploit code or confirmed active exploitation has been identified at time of analysis.