Unauthenticated path traversal in Fortinet FortiMail (7.2.0-7.2.9, 7.4.0-7.4.8, 7.6.0-7.6.6 and 8.0.0-8.0.1) lets a remote attacker write arbitrary files on the underlying system via crafted HTTP or HTTPS requests, yielding CVSS 9.8 with full confidentiality, integrity and availability impact. CISA has added the CVE to its Known Exploited Vulnerabilities catalog, so it is confirmed actively exploited (CISA KEV), and publicly available exploit code exists, making unpatched internet-reachable gateways an urgent remediation priority. Exploitation requires only that the FortiMail HTTP/HTTPS interface be network-reachable - no authentication (PR:N) and no user interaction (UI:N) - so environments that confine management/web access to trusted networks or a VPN substantially reduce exposure.
Authenticated administrators of ASUS routers can execute arbitrary commands on the device by uploading a crafted file through the web-based management interface that is subsequently processed with an attacker-influenced format string by a vulnerable router module (CWE-134). The vendor's CVSS 4.0 score of 9.4 (Critical) reflects complete loss of confidentiality, integrity, and availability on the vulnerable component plus a scope change, but exploitation is gated by a pre-existing high-privilege administrator session per the PR:H vector metric, so exposure depends on whether the management interface is reachable by the attacker (WAN-exposed remote administration versus LAN-only) and on the strength of admin credentials. No public exploit code and no confirmed active exploitation have been identified at time of analysis, no EPSS score was supplied, and the wildcard CPE (cpe:2.3:a:asus:router:*:*:*:*:*:*:*:*) means specific affected models and firmware builds are not enumerated in the available data.
Authenticated administrators of certain ASUS router models can abuse leftover debug code in the device's web management interface to enable the normally-disabled Telnet service via a crafted HTTP request, then execute arbitrary commands with root privileges on the router and potentially pivot to other devices on the same network. The flaw requires valid administrative credentials and a non-trivial request (vendor CVSS 4.0 8.9, AV:N/AC:H/PR:H), but once triggered it yields full root-level control with a scope change because the compromised router can be used to attack connected devices. No public exploit code has been identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV); ASUS has published a firmware remediation section in its security advisory.
SQL injection in ClipBucket v5 (all versions through 5.5.3-#197) allows an authenticated user who holds the ad_manager_access permission to inject arbitrary SQL through the delete parameter in admin_area/ads_manager.php, which is concatenated unsanitized into the AdsManager::DeleteAd DELETE statement against the ads_data table. A successful attacker can run time-based blind payloads to extract user credentials and email addresses, or directly modify and delete arbitrary records, giving high confidentiality and integrity impact on the application database. Publicly available exploit code exists (a published HackMD write-up), and while the flaw is remotely reachable it is gated behind a privileged admin-area role, so real-world exposure is limited to deployments that hand ad-manager rights to additional or semi-trusted users; no confirmed active exploitation (CISA KEV) has been reported, and an upstream fix is available as a pull request.
Unvalidated pathnames in the Teledyne FLIR Aware2 web interface let remote unauthenticated attackers read configuration and security parameters from PackBot robots running Aware2 through 6.9.0.2 and FirstLook robots running Aware2 through 1.7.9 via path traversal. The CVSS 4.0 vector rates this 10.0, but the independent assessment scores it CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), reflecting information disclosure only with no write or command-execution capability described. No authentication, credentials, or user interaction are required (PR:N/UI:N); there is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV, so real-world risk is governed mainly by whether the robot's management web interface is reachable from an untrusted network.
Unauthenticated remote attackers can take over WordPress sites running the BackupSheep WordPress Backup Plugin through version 1.8 by supplying a blank or unset integration key that the plugin incorrectly treats as valid, allowing them to generate and download full-site backups containing the database with WordPress user password hashes and to delete arbitrary files on the server. The plugin was closed on WordPress.org in July 2024 and no fixed version exists, so exposure is limited to sites that still have this abandoned plugin installed and active; the defect is rated CVSS 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), and no public exploit code has been identified at time of analysis.
Predictable Active Directory service-account password generation in Fortra BoKS Manager's boks_keytabmd daemon allows an attacker who knows the target service principal and can approximate the password-change timestamp to regenerate the seed, reconstruct the limited candidate set, and verify guesses offline against a captured Kerberos ticket or authentication endpoint. Only deployments that use BoKS keytab management to automate AD service-account credentials on boks-server versions before 9.0.0.6 are exposed, which makes exploitation targeted rather than opportunistic. No public exploit code or confirmed in-the-wild exploitation is identified at time of analysis (no CISA KEV listing, SSVC exploitation value 'none'), but the assessed impact is total for affected credential material, making mandatory post-patch rotation of every generated service-account password essential.
Unauthenticated network attackers can reach the get_dataset entry point in RAGFlow 0.24.0's evaluation_app API and, depending on which entry is exposed, trigger attacker-controlled code or command execution as a result of a missing authorization check (CWE-284). The flaw scores CVSS 3.1 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting a worst-case path where no credentials and no user interaction are required, though exploitability is conditional on the evaluation_app interface being reachable by the attacker and on the specific exposed entry that enables execution. There is no public exploit identified at time of analysis and the EPSS score is low (0.32%, 22nd percentile); CISA KEV status is not indicated.
Authenticated code injection in langflow-ai Langflow up to and including v1.9.3 lets any user holding a valid account execute arbitrary Python on the server by POSTing raw source to the /api/v1/validate/code endpoint, which feeds the input straight into a server-side compile/exec validation path without sandboxing or an entitlement check (CWE-94). The supplied CVSS score is 9.8 under a PR:N vector, but the authoritative assessment applies PR:L because exploitation requires a valid Langflow session, making authentication the primary limiting factor; impact on confidentiality, integrity, and availability is rated High across the board. EPSS is only 0.17% (6th percentile), Langflow is not in CISA KEV, and no public exploit code has been identified at time of analysis, so mass opportunistic exploitation is not currently indicated - the realistic risk concentrates on internet-exposed, multi-tenant, or weakly authenticated Langflow deployments.
Remote unauthenticated code execution in DeepTutor 1.4.0 lets any network caller who can reach the live tutorbot WebSocket interface drive the agent tool layer into running reviewer-chosen shell commands inside the service environment, yielding full confidentiality, integrity and availability impact (CVSS 3.1 base 9.8, AV:N/AC:L/PR:N/UI:N). The underlying defect is a CWE-94 code-injection weakness in ExecTool.execute, and successful exploitation depends entirely on the deployment: the tutorbot WebSocket endpoint must be network-reachable rather than localhost-only or firewalled, and the tool-execution path must be enabled so caller-supplied input reaches ExecTool.execute. This is not in CISA KEV and no public exploit code was identified at time of analysis, while EPSS is very low at 0.16% (4th percentile), meaning mass opportunistic scanning is unlikely even though the consequence for an exposed, default-configured instance is maximum-severity remote code execution.
Unauthenticated path traversal in Langchain-Chatchat 0.3.1 lets a remote attacker write files to arbitrary filesystem locations by submitting crafted filenames to the /knowledge_base/upload_temp_docs temporary document upload endpoint, escaping the intended temporary directory. The assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) confirms the endpoint is reachable over the network with no authentication and no user interaction required, and that a successful write can corrupt or replace application or system files, with potential escalation to code execution if an overwritten file is later imported or executed by the service. Independent risk signals are mixed: EPSS is low at 0.15% (4th percentile) and there is no CISA KEV listing, so no public exploit identified at time of analysis, but the associated GitHub issue and gist references document the endpoint's traversal behavior and raise the likelihood of straightforward replication by anyone with network access to a default deployment.
Unauthenticated remote clients can escape the intended bot workspace and write or overwrite arbitrary absolute filesystem paths through DeepTutor 1.4.0's live 'tutorbot' WebSocket interface, because the EditFileTool.execute path-traversal flaw (CWE-22) fails to contain caller-supplied paths to the workspace root; with CVSS 3.1 AV:N/AC:L/PR:N/UI:N and total confidentiality/integrity/availability impact, this rates 9.8 and can corrupt configuration, application code, or authentication material. Publicly available exploit code exists (SSVC Exploitation: poc, Automatable: yes) and the issue is tracked upstream as HKUDS/DeepTutor issue 517 with a public proof-of-concept gist, but there is no KEV-confirmed active exploitation and EPSS is low at 0.14% (3rd percentile), so the practical risk is concentrated on instances whose tutorbot WebSocket is internet-reachable rather than restricted to localhost or a trusted network.
Incorrect access control in infiniflow RAGFlow 0.24.0 lets remote attackers reach the trace_mindmap path, supply a caller-chosen object or tenant identifier, and have that identifier flow into a data-access operation that enforces no owner, tenant, workspace, or membership binding - effectively an IDOR that exposes another tenant's RAG data. The vendor-agnostic description and the NVD-listed CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) conflict with our independent assessment, which carries the same network reachability and low complexity but scores it PR:L with confidentiality-only impact (C:H/I:N/A:N), and that discrepancy should be resolved before treating the flaw as unauthenticated pre-auth data compromise. CISA KEV does not list this CVE and EPSS is only 0.14% (3rd percentile), so confirmed active exploitation is absent; no public exploit code is identified at time of analysis, although the referenced GitHub gist is publicly accessible technical material that should be reviewed as a likely proof-of-concept.
Poisoned OAuth/OIDC discovery metadata in Authlib 1.7.2 and earlier allows an attacker who controls or intercepts the metadata fetch to replace every cached endpoint - authorization, token, JWKS and userinfo URLs - with attacker-controlled values, enabling token theft, credential interception and authentication bypass in applications built on the library. Publicly available exploit code exists (SSVC exploitation: poc) and the flaw is rated fully automatable with total technical impact, although it is not listed in CISA KEV; EPSS is low at 0.10% (1st percentile). The supplied CVSS of 9.8 overstates realistic reachability versus our assessed 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N), because exploitation requires a privileged network position on the discovery fetch or a compromised/malicious issuer endpoint, and TLS-validated metadata from a trusted issuer is not exploitable without first defeating that channel.
Unauthenticated remote attackers who can reach the boks_autoregisterd autoregistration service in Fortra's Core Privileged Access Manager (BoKS) can trigger a stack-based buffer overflow while the daemon processes a client response, potentially corrupting memory and achieving code execution under the daemon's privileges, as reflected by the maximum-severity CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Affected deployments are those running the BoKS autoregistration/enrollment daemon on a network segment reachable by the attacker, which in most environments is the internal management or agent network rather than the public internet. No public exploit identified at time of analysis; the issue was reported to the vendor by Fortra, and the only reference provided is Fortra's product security advisory FI-2026-017, with no CISA KEV listing and no EPSS data supplied.
Unauthenticated privilege escalation in the Authorizer WordPress plugin (versions up to and including 3.15.3) allows remote attackers to gain elevated privileges, potentially administrator-level, on affected WordPress sites. The vulnerability carries a CVSS 3.1 base score of 9.8 (critical) and per the vector requires no authentication or user interaction. No public exploit code has been identified at the time of analysis, but the low deployment footprint of the plugin may limit widespread exploitation.
Unauthenticated attackers can create WordPress administrator accounts on any site running the Super Forms - Drag & Drop Form Builder plugin up to and including version 6.3.316 whenever the Register & Login add-on is active and a registration form using register_login_action='register' is published, because the add-on accepts a client-supplied 'role' parameter and passes it straight into wp_insert_user(). With a CVSS of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) the flaw yields full site takeover, but exposure is conditional: the required public registration form must exist, and sites using Super Forms only for contact or other non-registration forms are not affected. No public exploit code has been identified at time of analysis, and an upstream fix is available via GitHub pull request #205, though a released patched version is not independently confirmed in the available data.
Unauthenticated attackers can obtain full WordPress session cookies - including for a Network Super Admin - on any Multisite installation running the Ultimate Multisite (WaaS/SaaS) plugin through version 2.15.0. The flaw lies in the publicly reachable wu_ajax_nopriv_wu_validate_form AJAX handler: supplying checkout_form=wu-finish-checkout discards all validation rules and forces is_last_step() to true, routing the request straight into order processing, where the attacker-supplied email_address is resolved to an existing WordPress user ID without ownership verification and login_customer_after_checkout() issues a passwordless wp_set_auth_cookie() for that user. Exploitation requires only a freely obtainable checkout nonce and the victim's email address (remote, unauthenticated, no user interaction per the CVSS vector PR:N/UI:N), but it succeeds only against accounts that have no pre-existing Ultimate Multisite customer record - such as a Network Super Admin on a fresh Multisite install or any administrator/editor created before the plugin was configured. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, though the 9.8 score and authentication-bypass-to-admin impact make this a high-priority patch.
Remote code execution in GetSimple CMS CE (Community Edition) prior to 1.5 stems from a cross-site request forgery flaw in the UpdateCE update form, which ships without an anti-CSRF token and whose POST handler performs no token or request-origin verification. A remote attacker, unauthenticated per the CVSS vector (PR:N), can host a page that auto-submits a forged POST to the update endpoint; when a logged-in administrator visits that page, the server performs an attacker-directed download-and-deploy of a malicious update package inside the administrator's session, and because the deployed content is executed (see the related ZIP-extraction advisory), the outcome is remote code execution. Exploitation is gated by the UI:R social-engineering precondition - an authenticated admin with an active session must be lured to the attacker's page - and no public exploit has been identified at time of analysis; the vendor fix is included in version 1.5.
Sanitizer bypass in rhukster dom-sanitizer up to and including 1.0.15 lets attackers smuggle external references through SVG presentation attributes that the library is supposed to neutralize, because the raw regex check can be defeated by CSS comments or hex escapes while a browser's CSS tokenizer still decodes the value into a live URL. The flaw is remote and requires no authentication or user privileges (CVSS 4.0 base 6.9; assessed CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L), and it only produces impact in deployments that sanitize attacker-supplied SVG (DOMSanitizer::SVG mode, or HTML mode containing inline SVG) and then render that output in a browser. Publicly available exploit code exists and the vendor has released 1.0.16 as the fix; there is no indication of confirmed active exploitation (CISA KEV) at time of analysis, and EPSS-style risk is driven mainly by the low attack complexity and the availability of a public proof of concept.
Unauthenticated remote attackers can delete arbitrary order records in ZongXR SuperMarket 1.0.0.0 because the OrderController.deleteOrder endpoint lacks authentication checks (CWE-306). Publicly available exploit code exists (GitHub issue #31), and the project maintainer has not responded to the report. With a CVSS 4.0 score of 6.9 (medium) and an independent assessment confirming only low integrity and availability impact, the vulnerability poses a low-to-moderate risk, primarily limited by the product's rare deployment in production environments.
Missing authentication in the ZongXR SuperMarket 1.0.0.0 order-save endpoint (OrderController.addOrder) allows unauthenticated remote attackers to submit order actions while passing an arbitrary userId argument, letting them act on behalf of other accounts without any credentials. The root cause is CWE-306: the handler performs no authentication check at all, so the caller-supplied userId is implicitly trusted. Publicly available exploit code exists (documented in the project's own GitHub issue #32), but real-world priority is low because SuperMarket is a niche, non-production Java project with no large-scale enterprise deployment footprint - the practical limit is whether an instance is network-reachable, and no privileges or user interaction are required (CVSS:4.0 PR:N/UI:N; our assessment scores it AV:N/AC:L/PR:N/UI:N with limited integrity impact, C:N/I:L/A:N).
Arbitrary file write as the grading teacher in Classroom 50 (the `gh teacher` CLI) before 1.11.0 lets an enrolled student escalate from a writable assignment repository to code execution in the teacher's session: because `gh teacher download` writes autograde artifacts (`result.json` and `results.json`) into the just-cloned student working tree without guarding pre-existing entries, a student who commits either name as a symlink, hardlink, FIFO or directory redirects that write to any path the teacher can reach - `~/.ssh/authorized_keys`, `~/.zshrc`, a cron file, or an in-clone `.git/hooks/*` script that git then executes. The written bytes are attacker-controlled (the student's uploaded release asset for `result.json`, or student-chosen submit-tag names for `results.json`), and the compromised `gh` token carries `admin:org`, `repo` and `workflow` across the whole classroom organization. Rated 9.4 under CVSS 4.0 and high priority by our independent review, exploitation is not anonymous and not zero-click: it requires classroom enrollment, a planted malicious entry, and the teacher running the vulnerable command against that untrusted repository (UI:P); no public exploit code was identified at time of analysis, no CISA KEV listing is present, and no EPSS score was supplied. Version 1.11.0 contains the patch.
Unauthenticated remote code execution affects endpoints where the Thales SConnect native host component is installed, with an attacker reaching the host through an unrestricted browser native-messaging interface from a malicious or compromised web page. Exploitation requires no credentials (CVSS vector PR:N) and only passive user interaction - the victim must visit or be redirected to an attacker-controlled page - after which crafted input bypasses the component's security checks and, per the reported analysis, chains an improper cryptographic signature verification flaw (CWE-347) with memory-management issues to achieve code execution in the native host's context. Only systems that actually deploy SConnect (a smart-card authentication component, not present by default on general endpoints) are exposed, and there is no public exploit identified at time of analysis, though the severity is rated 9.4 under CVSS 4.0 and the reported vendor is Thales.
Hardcoded credentials in Teledyne FLIR Aware2 let unauthenticated attackers within radio or network adjacency (CVSS AV:A) bypass the software's access control and read or reconfigure affected PackBot (Aware2 through 6.9.0.2) and FirstLook (Aware2 through 1.7.9) robots. Because the passwords are embedded in firmware images and reproduced in product documentation, anyone holding a unit image or manual can obtain them without bespoke exploit tooling; no authentication (PR:N) and no user interaction (UI:N) are required, and the assessed scope change (S:C) reflects full compromise of the robot platform. No public exploit code has been identified at time of analysis, but the design-level flaw (CWE-798) means the credentials themselves are the attack vector, and Mandiant's disclosure (MNDT-2026-0031) frames this as a genuine high-priority issue rather than an inflated CVSS score.
Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 (all versions through 6.9.0.2) allows an unauthenticated attacker positioned on the same network segment to passively intercept and actively hijack or modify the command-and-control session traffic used to operate Teledyne FLIR PackBot robots. The CVSS 4.0 vector (AV:A/PR:N/UI:N, with high confidentiality, integrity and availability impact on both the vulnerable and subsequent systems) yields a 9.4 severity, while our independent CVSS 3.1 assessment scores it 8.8 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); the practical limiting factor is that the flaw is adjacent-network only and not internet-routable, so exploitation requires on-path positioning via a compromised control station, a tapped operational LAN, or a rogue wireless link. No public exploit code and no confirmed active exploitation have been identified at time of analysis - CISA SSVC records Exploitation: none and Automatable: no - and no vendor-released patch was identified in the available data, so the realistic threat is an operational-environment insider or a physically/wirelessly proximate attacker rather than a remote internet adversary.
Unauthenticated attackers with network reachability to the Mooncake transfer engine's TCP transport data port on releases before 0.3.13 can achieve arbitrary process memory read and write by sending a crafted SessionHeader whose addr and size fields are attacker-controlled under a READ or WRITE opcode. Successful exploitation discloses in-memory KV cache contents, prompts and other secrets, and corrupts memory in the transfer engine process, giving a credible route toward further compromise of the served model; the 9.3 score reflects a network-reachable, no-credentials, no-interaction attack with high confidentiality, integrity and availability impact confined to the vulnerable component. No public exploit code has been identified at time of analysis, and the practical limiting factor is exposure of the data port, which is normally bound inside a trusted LLM-serving cluster network - flat, misconfigured or internet-facing deployments carry the highest risk. Vendor-released patches are available in v0.3.13.
Unauthenticated remote attackers can read or overwrite arbitrary files on affected WAGO controllers by creating a BACnet File Object whose object name is used as a file path without adequate validation, allowing directory traversal out of the intended storage location and potentially leading to full device compromise. The affected lines are the WAGO 0751-9x01, 0750-811x/0750-821x, 0762-420x/430x/520x/530x/620x/630x-8000 and 0752-8303-8000-0002 controllers; exploitation requires network reachability to the device's BACnet/IP service, but no authentication (PR:N) and no user interaction (UI:N) are needed, and dynamically creating a BACnet File Object is a standard protocol operation rather than a hidden feature. There is no public exploit identified at time of analysis and the issue is not confirmed actively exploited (no CISA KEV listing); the practical limiting factor is exposure, since these controllers normally sit on building-automation or industrial networks, so an attacker would need direct access, a flat network, or a compromised adjacent host to reach the BACnet endpoint. This is a genuine high-priority issue, not a CVSS-inflation artifact, as reflected in the CERTVDE advisory VDE-2025-102.
Unauthenticated attackers can bypass authentication in Fleet (versions before 4.87.0) by using non-secret device identifiers like hostnames or hardware serials as tokens, allowing them to impersonate iOS/iPadOS hosts, read device data, and trigger device-scoped actions such as software installation and MDM migration. Exploitation requires knowledge of a valid identifier but no privileges or user interaction; no public exploit code has been identified at time of analysis. This is a high-priority vulnerability (CVSS 9.3) with a vendor patch available in version 4.87.0.
Hard-coded cryptographic key in Johnson Controls EasyIO FS32 building automation controllers before firmware 3.0b63 permits unauthenticated remote retrieval of embedded sensitive data, as the identical key is embedded in firmware and recoverable from any device or firmware image. Network reachability to the controller is required, and because these OT devices are often segmented, practical exploitation may depend on prior access to the building-management network. No public exploit identified at time of analysis, and the vendor has released firmware 3.0b63 to remove the hard-coded key; our independent assessment rates the confidentiality-only impact at CVSS 3.1 7.5 despite the record's CVSS 4.0 score of 9.3.
Untrusted-link activation inside an Ionic Capacitor app on Android or iOS can render attacker-controlled HTML at the application's own origin via the internal /_capacitor_http_interceptor_ proxy path, giving that script full same-origin access to storage, cookies and registered Capacitor plugin capabilities. Affected releases are 6.0.0 up to (but not including) 6.2.2, 7.6.9, 8.3.5, 8.4.3 and 8.5.1; exploitation requires the victim to activate an attacker-supplied link in the WebView (UI:R) but no authentication (PR:N) and no non-default feature flag, so apps are exposed even when the CapacitorHttp plugin is disabled because vulnerable builds serve the proxy path regardless of that setting. No public exploit code or confirmed active exploitation was identified at time of analysis, though the high CVSS score of 9.3 (S:C/C:H/I:H) and the broad mobile install base make patch urgency high.
The Kernel Memory Access Driver (PSKMAD) shipped with WatchGuard endpoint security products fails to enforce its access-control handshake, so a local authenticated user who can open a handle to the driver can issue arbitrary privileged commands and read kernel and process memory (CWE-306). The issue is strictly local (AV:L, PR:L, UI:N) and requires the attacker to already hold a working account on a managed endpoint where the driver is loaded, making it a privilege-escalation and memory-disclosure primitive rather than a remote entry path. No public exploit code has been identified at time of analysis and the flaw is not listed in CISA KEV; scope is assessed as changed (S:C) because driver-level compromise extends beyond the caller's security context.
Cleartext transmission of sensitive information in Johnson Controls EasyIO NEO (all versions before 3.3b25) lets an attacker who has already achieved a man-in-the-middle position on the network path read data the controller exchanges without encryption. It is rated 7.3 under CVSS 4.0 and mapped to CWE-319, but exploitation is gated rather than trivial: the assessed vector (AV:N/AC:H/PR:L/UI:R, consistent with the CVSS 4.0 AC:H, AT:P, PR:L, UI:P values) requires channel control or interception, low privileges on the attacker side, and a victim-side transmission to occur. There is no CISA KEV listing and no public exploit identified at time of analysis, making this a moderate, context-dependent risk rather than an emergency, and impact is primarily confidentiality loss with limited integrity/availability effects.
Unauthenticated SQL injection in the WordPress File Upload plugin (nickboss) up to and including version 5.1.10 lets any remote attacker who can reach the site inject arbitrary SQL into the plugin's database queries, producing high confidentiality impact on data stored in the WordPress database with only limited integrity impact and no availability impact in our assessment. The assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) confirms no authentication or user interaction is required and assumes a default installation, so any network-reachable site running the plugin at 5.1.10 or earlier with the injectable endpoint exposed is at risk. Exploitation status: no public exploit identified at time of analysis and the flaw is not listed in CISA KEV; Patchstack, which reported the issue, rates it 9.3, higher than our independent assessment, chiefly because the supplied vector claims a scope change and an availability impact we did not substantiate.
Unauthenticated attackers with network access to a ground-station instance running a version before 0.8.0 can achieve complete application takeover by invoking the setup.restore Socket.IO command while the server is in first-run setup mode. That command was whitelisted as an unauthenticated operation and passed attacker-supplied SQL straight to the application database, letting an attacker plant administrator accounts and forged session tokens and then authenticate as an administrator with no credentials. The flaw is critical severity (CVSS 9.3, CVSS 4.0 vector AV:N/AC:L/AT:N/PR:N/UI:N) and is exploitable with no privileges and no user interaction; the practical prerequisite is that the instance must still be in its uninitialized first-run setup state, which makes freshly deployed, re-provisioned, or not-yet-configured servers the realistic targets. This is a pre-authentication total-compromise issue rather than an inflated score; a vendor patch is available in 0.8.0 and no public exploit code has been identified at time of analysis.
MISP (Malware Information Sharing Platform) versions before v2.5.48 accept the same TOTP one-time code more than once, allowing a captured second-factor code to be replayed to open an additional authenticated session. The flaw is a CWE-294 capture-replay weakness: the login flow never recorded that a given TOTP time-step had already been consumed, so a code remained usable for its entire ~30-second validity window. Exploitation is conditional rather than drive-by - the targeted user must have TOTP enabled, the attacker must be able to observe or intercept the live code (network interception, shoulder surfing, or a compromised client) and in practice also hold the first-factor credentials, and the replay must land inside the same TOTP period; the vendor has released a fix in v2.5.48, and no public exploit code has been identified at time of analysis.
Unauthenticated path traversal in Hitachi Coding Software Suite through 3.3.0 lets remote attackers read, create, modify, or delete arbitrary files on the affected host, a near worst-case profile with high confidentiality, integrity, and availability impact (CVSS 4.0 base 9.3; assessed CVSS 3.1 9.8-class vector AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H). The flaw requires only network reachability to the suite's file-handling interface - no authentication, user interaction, or special configuration is needed - so an attacker who can reach the service can fully control file content on the coding/marking system. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, and the real-world risk hinges on exposure: this industrial coding/marking software is typically deployed on isolated OT or plant networks, so hosts reachable from an attacker-controlled segment carry the greatest risk.
Missing authentication for a critical function in Hitachi Coding Software Suite (all versions through 3.3.0) allows a remote, unauthenticated attacker who can reach the exposed API to read or modify sensitive data and manipulate the affected system, with full loss of confidentiality, integrity, and availability. The flaw is a straight CWE-306 authentication gap on a critical API endpoint, scored 9.3 under CVSS 4.0 (AV:N/AC:L/AT:N/PR:N/UI:N with all three impact metrics rated High) and assessed independently at CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. No public exploit code has been identified and the issue is not listed in CISA KEV, so the practical risk is driven by network exposure rather than observed exploitation - the product is specialized industrial coding/marking software typically deployed on operational technology networks, which limits realistic internet-facing reach.
Authentication bypass in Hitachi Coding Software Suite through 3.3.0 lets remote, unauthenticated attackers forge JSON Web Tokens (JWTs) using a hard-coded signing secret and invoke administrative functions. The affected software exposes a JWT/Bearer-token-authenticated API; the only prerequisite beyond network reachability is extraction of the shared hard-coded secret from the distributed product, so no victim credentials, user interaction, or non-default configuration are required. No public exploit code has been identified at time of analysis, but the issue carries a CVSS 4.0 base score of 9.3 and can result in high confidentiality, integrity, and availability impact where the management/API endpoint is reachable; in typical OT deployments, network segmentation may be the main practical barrier.
Hard-coded credentials and undocumented hidden accounts in Hitachi Coding Software Suite (versions through 3.3.0) allow a remote attacker who possesses those credentials to bypass authentication entirely and obtain full read/write/execute-level control of the affected installation, matching the vendor's CVSS 4.0 rating of 9.3 (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H). The only prerequisites are network reachability to the host plus knowledge of the embedded credentials, which is consistent with the independent CVSS 3.1 assessment of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. No public exploit code and no public disclosure of the specific credentials have been identified at time of analysis, and the issue is not confirmed actively exploited (CISA KEV); because these systems are industrial coding/marking control platforms often deployed on segmented OT networks, actual exposure depends on whether an attacker has a viable network path to the installation.
Unauthenticated invocation of internal functions on the Genian NAC/ZTNA policy server's internal-only IPC SOAP endpoint allows a network-reachable attacker to manipulate protected data and degrade or shut down the service, scoring 9.3 (CVSS 4.0) and assessed as CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H. Affected builds are Genian NAC 5.0.75 LTS, 5.0.85 Stable and 5.0.86, and Genian ZTNA 6.0.35 LTS, 6.0.45 Stable and 6.0.46. Exploitation is gated almost entirely by network exposure: the endpoint is not reachable in properly segmented management planes, while flat networks or an internet-exposed policy server are directly exploitable - no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV) signal.
Misconfigured Laravel debug mode in the hosted Cadmos LTI application at cadmos.eummena.io exposes the entire server environment - the full plaintext .env file with database credentials, application keys, and third-party service secrets - to any remote attacker who can trigger an unhandled exception with a single GET request. No authentication or user interaction is required (CVSS 4.0 base 9.2; independent assessment CVSS 3.1 9.2, AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N), but the issue is configuration-dependent rather than a default-everywhere flaw: only deployments left with APP_DEBUG=true and APP_ENV=local in a publicly reachable environment are exploitable. The operator remediated the affected hosted instance on or before 2026-09-02, and no public exploit code has been identified at time of analysis.
Remote code execution in DHIS2 Core versions 2.42.0 through before 2.42.5.1 and 2.43.0 through before 2.43.0.1 allows an authenticated attacker with high privileges to execute arbitrary code via unsafe Java deserialization. The vulnerability is remotely reachable but requires PR:H credentials, limiting exploitation to insiders or attackers who have already compromised an administrative account; no public exploit has been identified at time of analysis. Vendor fixes are available in versions 2.42.5.1, 2.43.0.1, and 2.44.
Administrator account takeover in GetSimple CMS CE 3.3.22 is achievable because the password reset endpoint is reachable without authentication and, on a reset request for an existing user, immediately writes a hash of a newly generated temporary password that was produced by PHP rand() seeded with microtime(). The time-bounded seed leaves a limited effective candidate space, and because the admin login endpoint enforces neither rate limiting nor account lockout (independent assessment: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N), an unauthenticated remote attacker who knows or enumerates a valid username can generate candidate passwords and test them online until the correct one is found. Exploitation hinges on predicting or narrowing the PRNG value for the reset moment and sustaining enough login attempts, and it is self-defeating in stealth terms because submitting the reset silently overwrites the legitimate administrator's password; no public exploit code was identified at time of analysis and no vendor-released patch exists, though this is a genuine high-priority issue despite the absence of exploitation telemetry.
Authenticated users with low-level Viewer permissions in Red Hat Satellite 6.19 (and upstream Foreman) can exploit template preview endpoints to disclose sensitive data, including host root passwords. In non-default configurations where Safemode protections are disabled, the flaw can escalate to arbitrary command execution as the Foreman system account. No public exploit code or active exploitation has been identified at time of analysis; the CVSS score of 9.1 reflects high confidentiality impact, though the RCE component requires an insecure configuration.
Authorization bypass in DeepTutor 1.4.0 allows an unauthenticated remote caller to enumerate bot identifiers and overwrite another user's whitelisted control files through the HTTP tutorbot file route, because TutorBotManager.write_bot_file trusts a user-supplied object identifier instead of verifying ownership. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates no authentication, no user interaction and no special conditions are needed beyond network reachability of the tutorbot endpoint; our independent assessment keeps integrity impact at High but reduces confidentiality impact to Low (C:L/I:H), whereas the published 9.1 score assumes full confidentiality loss. Publicly available exploit code exists (SSVC Exploitation: poc, with a public gist linked in the references), and SSVC rates the issue Automatable: yes with Technical Impact: total, although the EPSS score is only 0.15% (4th percentile) - consistent with a niche open-source project rather than widely deployed enterprise software.
Unauthorized overwrites of persisted book metadata and spine content are possible in DeepTutor 1.4.0 because the book confirmation flow does not verify that the caller is authorized to act on the referenced book. An attacker who knows a valid, publicly exposed book_id can submit a confirm-proposal request remotely over the network to modify an existing book's stored metadata and spine, with no authentication, privileges, or user interaction required per the assessed vector (AV:N/AC:L/PR:N/UI:N). Impact is integrity-only per the assessed analysis (C:N/I:H/A:N), meaning data modification rather than data disclosure or system compromise; EPSS is low at 0.15% (4th percentile), no CISA KEV listing is present, and no public exploit code has been identified at time of analysis.
Path traversal in Langchain-Chatchat 0.3.0 and 0.3.1 allows unauthenticated remote attackers to write knowledge base content to arbitrary filesystem locations outside the configured knowledge base root by injecting traversal sequences such as `..\` into the `knowledge_base_name` parameter of the knowledge base creation and document upload interfaces. The independent assessment scores this CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H (9.1), i.e. no confidentiality loss but high integrity and availability impact, since arbitrary file writes can overwrite or clobber existing files and, depending on which paths the service process can reach, may be escalated toward code execution. Not listed in CISA KEV and no public exploit identified at time of analysis; EPSS is 0.14% (roughly the 3rd percentile), so automated mass exploitation is unlikely, but the advisory references an upstream GitHub issue and a public gist that may carry additional technical detail.
Path traversal in the Devika v1.0 Feature Agent's save_code_to_project routine lets a remote caller who can submit a task or feature request to a Devika instance cause the agent to write files outside the intended project workspace, using the privileges of the local Devika process. The flaw is unauthenticated per the scored CVSS vector (AV:N/AC:L/PR:N/UI:N), and publicly available exploit code exists; CISA's SSVC rates it automatable with total technical impact, although EPSS is low at 0.14% (3rd percentile) and there is no KEV confirmation of active exploitation. Our independent assessment rates confidentiality impact as limited while integrity and availability impacts are high, and the decisive real-world factor is exposure: Devika is normally a single-developer tool bound to localhost, so remote exploitation depends on an operator having published the web UI/API to a network.
Unauthenticated path traversal in the OpenAI-compatible /v1/files upload endpoint of Langchain-Chatchat 0.3.0 allows remote attackers to write files to arbitrary locations outside the intended openai_files directory by supplying crafted filenames. The published CVSS is 9.1, but an independent assessment re-scores the issue at 8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L - because the primitive is a file write rather than a read or direct code execution, so confidentiality is unaffected and availability impact is limited. There is no confirmed active exploitation (CVE-2026-51882 is not in CISA KEV) and no public exploit identified at time of analysis, and with an EPSS score of 0.14% (3rd percentile) real-world urgency is driven mainly by whether the API server is network-reachable and how much filesystem write access the service account has.