Remote code execution in GetSimple CMS CE prior to 1.5 allows an attacker to plant and execute PHP code as the web-server user by getting the UpdateCE.php handler to process a malicious ZIP archive. The handler extracts archive contents into the web-accessible root without validating file types or paths, so PHP webshells and ../ traversal writes are possible; publicly available exploit code exists, and SSVC rates it not automatable. Exploitation is high impact (CVSS 9.1) but constrained by the need to trigger the update through an administrator session or high existing privileges, so it is not mass-exploitable; version 1.5 contains the fix.
Command injection in Fortra BoKS Manager's crlserver component allows an authenticated principal holding the delegated CRL-URL-add capability to run arbitrary shell commands as root on the BoKS Master, yielding full compromise of the host that anchors the BoKS trust domain. Three delivery paths exist: the BCC administration console and the WSI REST/SOAP API are network-reachable and require no local sudo or suexec rule, while the cacrl command-line path needs a sudo/suexec rule for non-root use. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, score 9.1) confirms a network-reachable, scope-changing, high-integrity/high-availability impact; exploitation is gated by the attacker already possessing CRL-URL-add authorization plus an active crlserver on a BoKS Master, and no public exploit code was identified at time of analysis.
Unauthenticated arbitrary shortcode execution in LatePoint (Appointment Booking Plugin - Calendar & Scheduling for WordPress) affects all versions up to and including 5.7.0, allowing an attacker to plant a shortcode payload via the public booking flow that is stored as the customer name and later executed when the Customer Cabinet block rendered by render_customer_dashboard() outputs the stored name into the content stream, where WordPress core's do_shortcode filter at priority 11 re-parses and runs it (CVSS 3.1 9.1, AV:N/AC:L/PR:N/UI:N). No authentication, user interaction, or special privilege is required to plant the payload, though practical impact is deployment-dependent: the site must expose LatePoint's public booking flow, the Customer Cabinet rendering path must be reachable, and exploitable shortcodes must be registered for the injected payload to have effect. At time of analysis no public exploit code has been identified.
Command injection in the Red Hat Satellite job invocation API (/api/v2/job_invocations), shipped via the rubygem-foreman_remote_execution plugin, lets an authenticated Satellite user who holds job-template execution permissions run arbitrary shell commands on managed hosts. The injection only applies to job templates whose effective_user property is configured as overridable: true, in which case the user-supplied value is not sanitized before the Satellite server instantiates the job execution environment, so the payload executes during instantiation rather than through the template or playbook content itself. Rated CVSS 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, CWE-78), this requires an authenticated account (PR:L) and the non-default overridable setting, and no public exploit identified at time of analysis; Red Hat has published an erratum, RHSA-2026:74503.
StartTLS handling in 389-ds-base does not discard plaintext bytes buffered before the TLS upgrade, allowing an on-path attacker to inject a crafted LDAP message whose messageID collides with a client's pending bind and causes the client to treat a failed authentication as successful. Red Hat Directory Server 11, 12, and 13 and Red Hat Enterprise Linux 6, 7, 8, 9, and 10 deployments using 389-ds-base with StartTLS are affected. Exploitation requires an on-path network position and timing control during StartTLS negotiation, so the real-world bar is higher than the reported 9.0 base score; no public exploit identified at time of analysis.
JavaScript injection into the WebView of the Joyland AI app (all versions, tracked as CPE cpe:2.3:a:joyland:joyland.ai:*) lets an attacker who shares a network position with the victim and can intercept or tamper with content loaded into the app run arbitrary script inside the app's privileged context; no authentication is required and no user interaction is needed. In the default, unpermissioned install state the attacker can read the device clipboard, make arbitrary HTTP requests through the Weex 'stream' module, and reach app-internal storage, while on devices that previously granted camera, microphone, location, or storage permissions the same flaw escalates to full filesystem, camera, microphone, and GPS access. No public exploit code and no confirmed active exploitation were identified at time of analysis, and no vendor-released patch has been identified; the CVSS 4.0 base score is 9.0 (Critical) and EPSS data was not provided for this record.
Remote code execution in Foreman's safemode-protected templating engine, shipped in Red Hat Satellite 6.19 for RHEL 9, lets an authenticated user with only low-level template privileges escape the sandbox and execute arbitrary commands on the Satellite server. The flaw stems from improper handling of delegated methods, which allows an attacker to append unauthorized functions to the sandbox's allowed-execution list; no user interaction is required beyond rendering or creating a template, and the Satellite web UI is network-reachable by default. Vendor patches are available via Red Hat errata, EPSS is modest (0.66%, ~50th percentile), and no public exploit code or confirmed active exploitation was identified at time of analysis (SSVC exploitation: none, not automatable).
Privilege escalation in Wind River VxWorks 7 (all versions up to 26.09) allows an authenticated low-privilege shell user to bypass the per-user command privilege check and execute commands they are not authorized to run, impacting confidentiality, integrity, and availability (CVSS 3.1: 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation is not universal: it requires the command shell to be configured in the vulnerable per-user command-privilege-enforcement mode and requires the attacker to already hold a valid low-privilege shell account, so devices that do not use that mode or expose no low-privilege shell are not affected. No public exploit identified at time of analysis, and the vendor has released a patch in version 26.09.
Unauthenticated access to Mooncake's HTTP metadata server (all versions through 0.3.13.post1) lets any network-reachable party read, overwrite, or delete transfer-engine metadata keys, allowing segment descriptors such as tcp_data_port to be poisoned or rpc_meta entries to be recreated so that KV cache transfers are redirected to attacker-controlled listeners, or server memory is exhausted. The flaw is a missing-authentication defect (CWE-306) on the /metadata handler and carries a CVSS 4.0 base score of 8.8 (assessed equivalently as CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H), meaning no credentials are required once the server is reachable on the network. Exploitation is therefore limited by network exposure rather than by attacker prerequisites, and no public exploit was identified at time of analysis and the issue is not listed in CISA KEV.
Authenticated privilege escalation in WPC Shop as a Customer for WooCommerce (versions up to and including 2.0.0) enables any logged-in user to take over an Administrator account by supplying the Administrator's user ID to the wpcsa_login endpoint, receiving a full Administrator session cookie without the Administrator's password. The flaw stems from missing role validation (CWE-269) before issuing a session, and WordPress user IDs are trivially enumerable. No public exploit code is identified at time of analysis, but the vendor-released patch 2.0.1 is available and this is assessed as a genuine high-priority vulnerability.
Out-of-bounds write in pgvector before 0.8.7 lets an authenticated database user corrupt memory while building or populating a vector index, which can escalate to arbitrary code execution on the PostgreSQL server host. Only users who can create/rebuild a vector index or insert rows into an indexed vector column can trigger it, and the trigger is supplying a vector whose dimensionality does not match the index definition, since affected versions perform no dimension validation. Patch status is a vendor-released fix (0.8.7) and no public exploit code was identified at time of analysis; SSVC scores exploitation as 'none' and automatable as 'no', and EPSS/KEV signals are absent, so this is a high-priority hardening item rather than an emergency - but SSVC rates technical impact as 'total', so multi-tenant databases where untrusted roles hold index or insert privileges are the realistic risk surface.
Authenticated attackers holding Subscriber-level (or higher) WordPress accounts can escalate themselves to Administrator on any site running the ByteCoreStack - MCP Connector for AI Tools plugin through version 1.2.3, because the plugin's `wp_update_user_meta` MCP tool protects only `user_pass`, `user_activation_key`, and `session_tokens` while leaving `wp_capabilities` and `wp_user_level` writable. A single JSON-RPC call to the plugin's OAuth-gated MCP endpoint, targeting the attacker's own user ID with `key=wp_capabilities` and a role array such as `{"administrator": true}`, changes the account's role on the next request; no user interaction is required and the CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (8.8). No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, but the low privilege prerequisite makes this high-priority wherever self-registration is open.
Unauthenticated information disclosure in PictShare before 3.7.1 lets any remote party who knows a file's publicly visible hash retrieve the file's full raw metadata - including the secret delete_code, uploader IP address, User Agent, remote port, SHA-1 hash, original filename and view statistics - by calling the API::info() endpoint, which returned the entire meta.json object with no field whitelist. Because the same response hands over the delete code, the attacker can then call the delete API and permanently remove arbitrary files, causing loss of content integrity and availability alongside uploader privacy exposure; the flaw is network-reachable, low complexity and requires no authentication (CVSS 4.0 8.8, assessed CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H). No public exploit code was identified at time of analysis and there is no confirmed active exploitation (CISA KEV), though the necessary request is trivial to craft and the only barrier - knowing a hash - is weakened by hashes appearing in share URLs. The vendor has released version 3.7.1, which whitelists the returned fields and hardens delete-code validation.
An integer overflow in the mod_dav_fs module of Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database by sending PROPPATCH requests that declare a large number of XML namespaces. The flaw is a CWE-190 integer overflow; the assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) confirms the attacker must be authenticated with write permissions, and impact is limited to denial of service and property database integrity, with no code execution, privilege escalation, or data disclosure. No CVSS score, EPSS probability, KEV listing, or public exploit code is present in the provided data, so there is no confirmed active exploitation and no public exploit identified at time of analysis.
Arbitrary file write through directory traversal in Devika v1.0's Coder.save_code_to_project function lets an attacker who can steer the agent's generated filename or project path - using sequences such as '../' - save files outside the intended project workspace. The assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.8) requires low-privilege access per PR:L, but Devika v1.0 ships without authentication by default, so any instance reachable over the network is effectively exposed; the real limiting factor is deployment posture, since Devika is commonly bound to localhost for a single developer, which eliminates remote reachability. Exploitation is not confirmed active: there is no CISA KEV entry, no public exploit code identified at time of analysis, and EPSS is only 0.26% (16th percentile), so the composite signal set sits noticeably below the 8.8 headline score.
Stored cross-site scripting in GetSimple CMS CE 3.3.22 and earlier lets an authenticated user with page-editing rights plant JavaScript in a page's Keywords, Description, Menu text or Content, which then executes in the browser of any administrator who later opens that page's backup in the admin control panel (admin/backup-edit.php). Exploitation requires two combined conditions - a valid page-editing account and an administrator voluntarily viewing the affected backup - so it is not attacker-triggered, and the impact is confined to the admin control-panel browser context; no public exploit code has been identified at time of analysis and no vendor patch is currently available. The supplied CVSS 4.0 score of 8.8 appears inflated and inconsistent with the described prerequisites (our assessment is CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, roughly 5.4), and there is no evidence of active exploitation.
Any authenticated low-privilege user on a Comelit Multi-User Gateway for the VIP System (model 1456B) running firmware 2.9.1 or 2.10.0 can overwrite the installer (administrator) account password, because the administrative password-change function performs no server-side authorization check on the caller's role. The flaw is network-reachable with low complexity and no user interaction, but it is not fully unauthenticated: exploitation requires an existing 'user level' session, as reflected in the CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.8 High). Successfully resetting the installer credential hands the attacker full administrative control of the gateway and its managed access-control configuration; no public exploit code was identified at time of analysis, and no vendor-released patch was identified in the available intelligence at time of analysis.
Denial of service in the Tornado web framework's CurlAsyncHTTPClient (all releases before 6.5.9) lets an unauthenticated remote server OOM-kill the application process by answering a fetch with a gzip decompression bomb: libcurl decompresses the body before invoking the client's write callback, and Tornado appends the decoded bytes to an unbounded BytesIO with no post-decompression size check, so a few megabytes on the wire expand to gigabytes of resident memory. Exposure is genuinely conditional - the application must be explicitly configured to use CurlAsyncHTTPClient (via AsyncHTTPClient.configure), must leave decompress_response at its default True, and must fetch a URL the attacker controls or has compromised; the default SimpleAsyncHTTPClient is not affected because the size gates added for CVE-2026-49855 live in code the curl client never executes. The upstream GHSA advisory documents a verified end-to-end reproduction on master (6.6.dev1) and v6.5.8 where a ~2.8 MB gzip payload grew client RSS from roughly 31 MB to about 1,032 MB in 3.18 seconds (exit 137, cgroup OOMKilled=true); the only incidental ceiling before the patch was the default 20-second request_timeout. No public exploit code or active exploitation has been identified at time of analysis, and no CISA KEV listing applies.
Authenticated subscriber-level attackers can escalate privileges on WordPress sites running ByteCoreStack - MCP Connector for AI Tools versions up to 1.2.2 due to an incorrect privilege assignment (CWE-266). The vulnerability is network-exploitable with low complexity and requires only a subscriber account (CVSS PR:L), with no user interaction, resulting in high confidentiality, integrity, and availability impact (CVSS 8.8). No public exploit code or confirmed active exploitation has been identified at time of analysis.
PHP object injection in the Icegram WordPress plugin through version 3.1.31 allows an authenticated attacker holding only low-level (Contributor-equivalent) privileges to pass crafted serialized data into an unsafe PHP deserialization path, with the potential to trigger a gadget chain that yields high confidentiality, integrity, and availability impact. The flaw is network-reachable, low complexity, and requires no victim interaction (CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 8.8), and because the vulnerable component is a widely deployable WordPress plugin, any site allowing self-service or delegated content roles expands its exposure surface. No public exploit code has been identified at time of analysis, and there is no CISA KEV listing for this CVE; exploitation depends on an attacker first obtaining a low-privileged account on the target site.
Broken access control in HCL iControl (CVSS 3.1 score 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) allows a low-privileged authenticated user to bypass authorization checks or manipulate object identifiers directly, resulting in privilege escalation and unauthorized modification or deletion of sensitive application data. Because the exploit requires a valid low-privilege account (PR:L), an unauthenticated external attacker cannot exploit this despite the 'Authentication Bypass' tag on the report, but any user with even minimal credentials can escalate to full confidentiality, integrity, and availability impact without user interaction. No confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis; prioritization should focus on environments where low-privilege accounts are broadly provisioned or externally reachable.
Cross-site request forgery in the Featured Image from URL (FIFU) WordPress plugin before 6.0.8 and the FIFU Premium plugin before 8.2.8 allows an unauthenticated attacker to make a logged-in administrator's browser execute arbitrary WordPress REST API actions, including creating a brand-new administrator account. The defect is in the plugin's REST API nonce enforcement: supplying a specially crafted URL causes the nonce check to be bypassed for the whole request, so with the victim's admin session active the REST call is accepted without a valid nonce. Per the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, 8.8) the attacker needs no account on the target, but the administrator must be induced to visit an attacker-controlled page, making the attack social-engineering dependent; no public exploit code has been identified at time of analysis, and vendor patches are available.
Denial of service in Amazon Ion Python before 0.15.0 allows remote, unauthenticated attackers to crash applications that parse attacker-supplied Ion data by submitting a deeply nested Ion value that exhausts the interpreter's recursion stack. The flaw is availability-only (CWE-674 uncontrolled recursion) and requires the target service to route untrusted Ion input into the Ion reader; applications that only parse trusted, internally generated Ion are not realistically exposed, and no authentication, user interaction, or non-default configuration is needed otherwise (PR:N/UI:N). No public exploit code was identified at time of analysis and there is no indication of confirmed active exploitation (not listed in CISA KEV); the vendor fix in 0.15.0 caps container nesting past the recursion limit and surfaces the condition as an IonException instead of an uncontrolled crash.
Unauthenticated visitors can pull the full body of gated, members-only and paid-tier posts from Ghost 4.0.0 through 6.62.x by querying the platform's Content API directly, bypassing the membership restrictions that are supposed to withhold that content. The flaw is an authorization-checking failure (CWE-863) in post visibility filtering, scored 8.7 under CVSS 4.0 and assessed as CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - fully remote and unauthenticated, with high confidentiality impact and no integrity or availability effect. Impact is confined to sites that actually host gated content, and no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis; a vendor patch is available.
Unauthenticated memory exhaustion in the Mooncake transfer engine (all versions through 0.3.13.post1) allows any network client that can reach the handshake RPC port to grow process memory without limit and force the out-of-memory killer to terminate the engine. Attackers simply replay notify frames of up to 1 MB each into TransferMetadata::receivePeerNotify, which appends every notification to an uncapped 'notifys' vector with no size, count, or peer-identity check; the CVSS 4.0 base score of 8.7 reflects uniformly high availability impact (VA:H) with no confidentiality or integrity loss. No authentication, user interaction, or special configuration is required (PR:N, UI:N), so any default deployment that exposes the handshake RPC port to an untrusted network is reachable; no public exploit code was identified at time of analysis and the flaw is not listed in CISA KEV, so this remains a bounded denial-of-service risk whose practical exposure depends almost entirely on whether that RPC port is firewalled or bound to localhost.
Unauthenticated denial-of-service in Podgrab's WebSocket handler allows remote attackers to crash the process by exploiting a race condition in the activePlayers and allConnections maps, requiring manual operator restart to restore service. Affecting all versions per the CPE wildcard, the flaw is exploitable by anyone who can reach the /ws endpoint, with no authentication or user interaction needed. No public exploit code has been identified, but the low-complexity network vector and availability-only impact make it a plausible risk for internet-exposed instances, though Podgrab's limited footprint tempers its overall priority.
Authenticated WordPress administrators using the Prime Mover migration plugin before version 2.2.1 can abuse a Zip Slip path traversal (CWE-22) to write attacker-controlled files to arbitrary filesystem locations outside the intended extraction directory, which may escalate to remote code execution when the written path is PHP-executable by the web server. The flaw is reached through the plugin's migration ZIP import workflow, where malicious ZIP entry names are processed by computeExtractionParameters() and resumableZipExtractor() in utilities/PrimeMoverSystemCheckUtilities.php. Exploitation requires a high-privileged admin account (CVSS PR:H, AV:N, UI:N) and crafted archive contents; no public exploit code was identified at time of analysis, and the vendor has released a patch. The risk is genuine but access-gated, since the admin prerequisite is the primary limiting factor and full RCE additionally depends on the hosting configuration.
Stored cross-site scripting in GetSimple CMS CE 3.3.22 and earlier allows an authenticated attacker to inject persistent JavaScript that executes in an administrator's browser session when the affected admin page renders. The flaw resides in the 'Theme to Components' feature (admin/components.php), where a component title is HTML-entity-decoded and then printed inside a double-quoted HTML attribute without re-encoding, enabling attribute breakout. Publicly available exploit code exists (SSVC exploitation: poc), and no vendor-released patch was identified at time of analysis; the independent assessment rates the issue as requiring low privileges (PR:L) and user interaction (UI:R), with scope change and low confidentiality/integrity impact.
Stored cross-site scripting in Vvveb CMS versions prior to 1.0.8.6 lets an authenticated low-privilege content author or contributor embed an on* event-handler attribute that the HTML sanitizer fails to strip, so the payload persists in post or product content and executes JavaScript in the browser of every visitor and of any administrator who views or previews it. The assessor rates this CVSS 3.1 8.7 (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) because the sanitizer bypass escalates into a path toward administrator account takeover, although exploitation requires a legitimate authoring account and a victim actually rendering the stored content. No public exploit code has been identified at time of analysis and the flaw is not in CISA KEV; version 1.0.8.6 contains the fix.
Command execution and administrative-session bypass in TP-Link Tapo C120 v1 and C200 V5 cameras let an unauthenticated attacker on the same local network replay login challenge data, enable a privileged service that becomes reachable after reboot, and inject commands via the MacTool handler. The vendor reports a patch is available, and no public exploit code or CISA KEV active-exploitation entry was identified at time of analysis. Our independent assessment rates this as a credible, above-average-priority issue but not a drop-everything emergency because the attack requires same-LAN access, successful challenge replay, service activation, and a reboot.
Unauthenticated staff enumeration in Ghost CMS affects every release from 2.10.0 up to (but not including) 6.63.0, allowing remote attackers to infer which staff accounts exist by comparing differences in the metadata returned by the public content API. The flaw is rated High (vendor CVSS 4.0 score 8.7; independent CVSS 3.1 assessment 8.1, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) because it requires no authentication, no user interaction, and only a network-reachable instance with its default content API exposed. No public exploit code has been identified at time of analysis, and the issue is not confirmed as actively exploited (no CISA KEV listing); the vendor has released a fix in Ghost 6.63.0.
Suspended staff accounts in Ghost CMS can be reactivated through the self-service password reset flow, allowing a suspended user to restore their account and its original privileges in all versions before 6.62.0. The issue is an authenticated, post-login authorization gap rather than an anonymous takeover: the attacker must already hold valid credentials for a staff account that an administrator has suspended, which makes this primarily an insider, offboarding, or stolen-credential threat. No public exploit code has been identified at time of analysis and the flaw is not confirmed as actively exploited (CISA KEV), but the vendor-assigned CVSS 4.0 score of 8.7 and the independently assessed CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.8) reflect high confidentiality, integrity, and availability impact wherever account suspension is the sole remaining control.
Unauthenticated arbitrary file and directory deletion in the Cache Enabler WordPress plugin (all versions before 1.8.17) is possible on sites where some other installed plugin, theme, or integration passes a request-derived URL into Cache Enabler's public cache-clearing hook - a non-default bridging precondition that explains the vendor's AC:H rating despite a CVSS 3.1 base score of 8.7. The purge routine never validates that URL before constructing a filesystem path and never confines the resulting delete operation to the cache directory, producing a scope change (S:C) with high integrity and availability impact while requiring no authentication or user interaction. Patch status: vendor-released patch: 1.8.17; exploitation status: no public exploit identified at time of analysis, and the CVE is not listed in CISA KEV.
Cleartext transmission of authentication credentials and sensitive data in Hitachi Coding Software Suite through 3.3.0 allows a network-adjacent, unauthenticated attacker to eavesdrop on traffic and recover secrets from the wire. The flaw is a passive information-disclosure issue (CWE-319): an attacker must obtain an on-path position on the same LAN segment, compromise a switch or router, or operate a rogue access point, making exploitation high complexity per the independent assessment (CVSS 3.1 AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). No public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis, and the vendor advisory assigns a CVSS 4.0 score of 8.7.
Incorrect authorization enforcement in Hitachi Coding Software Suite through 3.3.0 allows an authenticated, low-privileged user to perform administrator-level operations remotely, with no user interaction required. The issue is a vertical privilege-escalation flaw (CWE-863) in a network-reachable industrial coding/marking product; the only real barrier to exploitation is that the attacker must already hold a valid non-administrator account, meaning credential theft or a malicious insider with low-privilege access is the likely path. The vendor rates it 8.7 under CVSS 4.0, and our independent CVSS 3.1 assessment (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) agrees on high confidentiality, integrity, and availability impact confined to the vulnerable component; no public exploit identified at time of analysis, and no patch data was supplied in the available references.
Ghost 6.20.0 before 6.57.1 contains an improper session management flaw that allows an authenticated staff user who knows another staff member's password to log in as that staff user and bypass two-factor authentication. Successful exploitation can give the attacker the victim's administrative permissions, enabling unauthorized access to staff and admin functions. The issue requires valid staff credentials plus the target's password, so it is primarily an insider, credential-reuse, or post-phishing risk; no public exploit code was identified at time of analysis, and a vendor patch is available in 6.57.1.
Unauthenticated remote attackers can delete arbitrary files on any WordPress site running the AcyMailing SMTP Newsletter plugin 11.0.5 or earlier, because the plugin does not properly constrain caller-supplied file paths before deleting them (CWE-22 path traversal). The CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N shows no authentication, no user interaction and no special configuration is required - only that the vulnerable plugin version is installed and the vulnerable HTTP endpoint is reachable and not firewalled or WAF-blocked. Deletion is bounded by the web server process's filesystem permissions, but that still covers wp-config.php, .htaccess, plugin/theme files and uploads, so successful exploitation leads to site outages, data loss or a path to full site takeover; no public exploit code or active exploitation has been identified at time of analysis.
Improper restriction of XML external entity resolution in the XSLT support extension of Apache Camel Quarkus (camel-quarkus-support-xalan) allows an attacker who supplies the XML document being transformed to read local files and to issue requests to internal network locations, because the bundled Xalan-J 2.7.x TransformerFactory predates JAXP 1.5 and cannot honour javax.xml.XMLConstants.ACCESS_EXTERNAL_DTD or ACCESS_EXTERNAL_STYLESHEET. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N, base 8.6) rates this as network-reachable and unauthenticated with scope change and high confidentiality impact, though exploitation is conditional: the application must pull camel-quarkus-xslt, camel-quarkus-xslt-saxon, camel-quarkus-tika or camel-quarkus-xmlsecurity onto the classpath, and on the xslt component path the attacker-controlled body must reach the transformer already as a javax.xml.transform.Source rather than a String, byte[], InputStream, DOMSource or StAXSource. Affected releases are 3.2.0 before 3.33.3 and 3.34.0 before 3.40.0; patches exist in 3.33.3 and 3.40.0, and no public exploit has been identified at time of analysis.
An authorization bypass in Obot 0.21.1 through 0.24.1 lets any authenticated account holding the low-privileged 'Basic-role' reach MCP servers that Access Control Rules are meant to protect, because the checkUI deny list omits the /mcp-connect-composite/ route and mcpGateway.Proxy will forward the request once the caller supplies a composite MCP ID. Rated 8.6 (CVSS 4.0; independently assessed as CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), exploitation yields high confidentiality and integrity impact on the reachable MCP tools but requires a valid authenticated session, knowledge of a composite MCP ID, and the existence of ACL-restricted MCP servers, so anonymous abuse is not possible; no public exploit code and no confirmed active exploitation (not in CISA KEV) were identified at time of analysis.
Stored cross-site scripting in Ghost CMS versions 0.5.3 through versions prior to 6.50.0 allows an authenticated user with limited privileges to inject unescaped content into the JSON-LD structured-data HTML tag produced by the {{ghost_head}} helper, which then executes as script in the session of a higher-privileged staff user who views the published page. The issue is tracked as CWE-79 and has a reported CVSS 4.0 base score of 8.6 (High); no public exploit was identified at time of analysis. Exploitation requires a valid low-privilege account and a staff victim visiting the affected page.
Untrusted script execution in the Ghost publishing platform's oEmbed preview feature affects versions from 2.5.0 through releases before 6.34.0, allowing an attacker to host malicious oEmbed content that runs scripts inside a staff user's authenticated admin session. Exploitation is unauthenticated from the attacker's side (CVSS 4.0 PR:N), but it requires a privileged user to actually preview or insert the crafted embed, so success depends on admin interaction and carries a changed scope because the payload executes in the victim's high-privilege browser context. No public exploit code has been identified at time of analysis and the flaw is not in CISA KEV, so the 8.6 base score should be read against this interaction-driven, no-observed-exploitation picture; a vendor patch is available in 6.34.0.
Authenticated, high-privilege users of Pandora FMS 777 and later can upload arbitrary .phar files through the console's File Manager module and have them executed as PHP on the server, because the module's extension blacklist does not block PHP archive files. Successful exploitation yields full loss of confidentiality, integrity and availability of the Pandora FMS application (CVSS 4.0 base 8.6, High; core vector AV:N/AC:L/AT:N/PR:H/UI:N with VC:H/VI:H/VA:H and no scope change, where the headline score is inflated by the vendor's AU/R/RE/U threat and environmental modifiers). Exploitation requires an authenticated console session with access to the File Manager (PR:H) and no user interaction; no public exploit code or confirmed active exploitation was identified at time of analysis, and the main exposure limiter is the privileged authentication prerequisite.
Unauthenticated SQL injection in the Pro Like Button WordPress plugin (all versions before 2.0) allows any remote attacker to inject arbitrary SQL through an unsanitized request parameter, giving high-confidentiality read access to data the WordPress database user can reach - typically user credential hashes, private post content, and any other plugin or application tables on the same database. Exploitation needs no authentication, no user interaction, and no special configuration (AV:N/PR:N/UI:N/AC:L), so any site running the vulnerable plugin that is reachable from the internet is exposed; the main limiting factor is the plugin's niche install base rather than any technical obstacle. No public exploit code was identified at time of analysis, and the vendor has released version 2.0 as the fix, per the WPScan advisory, VulDB entry, and ENISA EUVD record.
Unauthenticated attackers on the same adjacent network or RF segment can intercept, hijack, or modify cleartext UDP control traffic to Teledyne FLIR PackBot and FirstLook robots running Aware2 (through 6.9.0.2 and 1.7.9 respectively) because the operator-control-unit-to-robot link lacks encryption and any cryptographic integrity check. The issue is rated CVSS 8.5 (AV:A/AC:L/PR:N/UI:N, with high integrity and availability impact) and requires network/radio adjacency plus timing to affect live operations; no public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis. This is not an internet-reachable flaw and depends on the attacker being positioned to observe or inject the live UDP control stream.
Authenticated OS command injection in the TP-Link TL-WR841N v14 web management interface lets an administrator-level actor on the adjacent network execute arbitrary commands on the router by submitting a crafted IPv6 Gateway value through the IPv6 WAN configuration feature. Successful exploitation yields high confidentiality, integrity, and availability impact on the device itself - exposing stored configuration and credentials, permitting persistent changes to routing and services, and enabling disruption of device operation - but the flaw is post-authentication and reachable only from the LAN or Wi-Fi segment, not from the internet. No public exploit code and no confirmed active exploitation were identified at time of analysis; TP-Link has published updated firmware through its support and FAQ pages.
Blind SQL injection in the VillaTheme BuildKit - Product Builder for WooCommerce - Custom PC Builder WordPress plugin (all versions through 1.0.28) lets an authenticated, low-privilege user on a WooCommerce site inject SQL into plugin-supplied queries and infer database contents one bit at a time. Because the injection is blind, extraction is slow but still permits disclosure of high-impact data such as WordPress user hashes, customer records, and WooCommerce order details. The flaw rates CVSS 3.1 8.5 (HIGH) with remote reachability, low attack complexity, and no user interaction, and the primary barrier is the requirement for a valid low-privileged account (PR:L). No public exploit code and no confirmed active exploitation were identified at time of analysis.
Blind SQL injection in the WordPress plugin Unlimited Elements for Elementor (Free Widgets, Addons, Templates) through version 2.0.20 allows an authenticated low-privilege user to read arbitrary data from the site's database by injecting SQL through an unsanitized plugin parameter. Exploitation is network-remote and requires no user interaction, though it does require an account with at least contributor/subscriber-tier privileges (PR:L); because the injection is blind, data extraction is iterative and slower than a direct UNION-based attack but remains reliably automatable. No public exploit code and no confirmed active exploitation were identified at time of analysis, so the practical risk is concentrated on membership, e-commerce, and multi-author WordPress sites that hand out low-privilege accounts to untrusted users.
Privilege escalation in Ghost CMS (versions 2.21.0 before 6.56.0) allows an authenticated low-privilege staff user to elevate their role to a higher-privilege staff position by exploiting missing authorization checks in the notifications system. Exploitation requires an existing staff account and passive interaction from a higher-privileged user (CVSS 4.0 PR:L/UI:P), so multi-author or multi-staff deployments are primarily at risk; single-author sites have negligible exposure. A vendor patch is available in Ghost 6.56.0, and no public exploit code has been identified at time of analysis.
Staff account takeover in Ghost versions 5.8.0 through 6.34.0 allows an attacker with content-publishing privileges to craft malicious pages that, when viewed by an authenticated staff user in the admin interface, exploit improper input validation in the admin iframe to hijack the victim's account. The vulnerability requires a low-privileged authenticated attacker (PR:L) and user interaction (UI:R), making multi-author or open-contribution Ghost deployments the primary attack surface; single-author blogs without untrusted publishers are not exposed. No public exploit code was identified at time of analysis, and a vendor-released patch is available in version 6.34.0.
Session token leakage in n8n's Dynamic Credentials authorize and revoke endpoints lets an attacker who already holds resolver-registration privileges point a fallback resolver at an attacker-controlled endpoint and capture a collaborating user's session token once that user completes the account-connection flow, yielding unauthorized credential access. Impact is access-gated rather than open: exploitation requires an authenticated, high-privileged actor plus an independent user interaction, and is realistic mainly on shared or multi-tenant n8n instances where semi-trusted users hold resolver-registration rights, not against a default single-tenant deployment reachable by an unprivileged remote attacker. Affected versions are n8n before 2.39.6 and 2.40.0 before 2.40.1; vendor-released patches exist, and neither a public proof-of-concept exploit nor confirmed active exploitation (CISA KEV) was identified at time of analysis.