Path traversal in the n8n Supabase node allows unauthenticated remote attackers to pivot to Supabase Auth and Storage APIs when a workflow binds the tableId parameter to untrusted input, bypassing Row Level Security and enabling unauthorized data access and modification. Affects n8n before 1.123.80, 2.0.0 through 2.39.5, and 2.40.0; fixed in 1.123.80, 2.39.6, and 2.40.1. No public exploit identified at time of analysis. Exploitation requires the Supabase credential to use the administrative serviceRole key and a workflow with a dynamic tableId - a victim-side configuration dependency that is the primary limiting factor, consistent with the assessed attack requirement (AT:P) and high attack complexity (AC:H).
Authorization bypass in the n8n workflow automation platform lets an authenticated, low-privileged user exfiltrate project-scoped variables by supplying an arbitrary project ID to the credential test endpoint, which resolves those variables without validating that the caller may access the referenced project. The interpolated secrets are then embedded into the outbound credential test request, which the attacker directs at a host they control, turning a legitimate diagnostics feature into a data-exfiltration channel. All deployments on versions before 1.123.80, 2.0.0 through 2.39.5, and 2.40.0 are affected, with cross-project isolation loss being most consequential in multi-project or multi-tenant instances; no public exploit code has been identified at time of analysis and the flaw is not listed in CISA KEV.
Unauthenticated filter injection in the n8n Supabase node's 'Filters (String)' mode allows attackers to manipulate PostgREST queries and read, update, or delete all records in connected Supabase tables in a single request. The flaw affects n8n versions before 1.123.80, 2.0.0 through 2.39.5, and 2.40.0, but only when a workflow passes untrusted input to the vulnerable node. No public exploit code has been identified at time of analysis, though a vendor patch is available.
Pandora FMS installations running version 777 or later expose monitoring module history to cross-group reads: an authenticated low-privilege user can retrieve the history of modules belonging to groups they are not authorized to access, bypassing the platform's group-based access control boundary. The underlying flaw is a broken-object-level-authorization issue (CWE-639) with confidentiality-only impact - attackers can read data, but cannot modify, delete, or disrupt it - and exploitation requires a valid account with low privileges (PR:L per the CVSS vector), so unauthenticated attackers are not affected. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV; practical risk is highest in multi-tenant or segregated-team deployments where group separation is a real security boundary, and is negligible in single-group installations where there is no boundary to cross.
Authorization bypass in MISP's event flattening feature lets an authenticated user who can view a community-distributed event retrieve attributes that belong to organisation-only objects (distribution level 0) or objects restricted to a specific sharing group they are not a member of. MISP versions below 2.5.48 drop the Object containment from the query when the flatten option is used and return those object attributes as top-level event attributes without re-applying the object's own distribution or sharing-group access check, resulting in unauthorized disclosure of sensitive threat intelligence. This is a genuine but access-gated information-disclosure flaw, not a high-urgency internet-wide threat: exploitation requires a valid authenticated account, an event the user's organisation can already see via community distribution, and that event containing at least one object whose distribution is more restrictive than the event itself; no public exploit identified at time of analysis.
Reflected cross-site scripting in the Five Star Restaurant Reviews WordPress plugin (all versions before 2.3.14) lets unauthenticated attackers inject arbitrary JavaScript into an HTML tag via a crafted request that a victim must be socially engineered into submitting, with the script then running in that victim's browser - including a logged-in administrator, where it executes with administrative privileges. The vendor has shipped version 2.3.14 to correct the missing output escaping (CWE-79); no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis. The vendor CVSS 3.1 vector (7.1: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) reflects network reachability, low attack complexity, no required privileges, mandatory user interaction, and a scope change caused by script execution in the victim's browser rather than the plugin's own context; our assessment keeps the same vector but sets the availability impact to none (A:N).
Authenticated Octopus Server users who hold a limited, environment-scoped permission set can execute arbitrary scripts against environments that their scoped authorization does not cover, yielding high integrity impact (VI:H) on deployment targets they should not control. Exploitation requires a valid account with at least some scoped permission plus access to the Octopus management interface (CVSS 4.0 7.1, PR:L, no user interaction), which makes this an authorization-enforcement failure rather than a true authentication bypass despite the 'Authentication Bypass' tag. No public exploit code and no confirmed active exploitation were identified at time of analysis.
Authenticated WordPress administrators can abuse the Prime Mover plugin before 2.2.1 to delete arbitrary directories outside the intended extraction path by importing a crafted WPRIME/TAR package whose wprime-config.json contains manipulated tar_root_folder values, ultimately tricking primeMoverDoDelete() into removing critical directories such as wp-admin, which can render the site inoperable. Exploitation requires a high-privileged WordPress administrator account (CVSS PR:H) that performs the package import, so this is not reachable by unauthenticated or low-privileged users; no user interaction beyond the admin's own import action is required. This is a moderate, not top-tier, priority issue: no public exploit code has been identified and there is no CISA KEV listing, though the confidentiality impact is nil while integrity and availability impacts are high, and the vendor has released a fix in version 2.2.1.
Cross-project approval forgery in n8n's Send-and-Wait approval feature allows an authenticated attacker with workflow-creation permissions to mint valid signed resume URLs for approval gates in projects they cannot access by supplying caller-controlled node IDs that contain unresolved path-traversal sequences. Affected releases are n8n before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1; the issue is meaningful primarily in multi-project or multi-tenant deployments where project isolation is relied upon as a security boundary. The independent assessment rates this as a genuine but moderate-severity issue with low likelihood of mass exploitation; no public exploit identified at time of analysis, and vendor patches are available.
Unauthenticated remote attackers can exploit NoSQL injection in the n8n MongoDB Chat Memory node to bypass sessionId validation and read or manipulate stored conversation histories belonging to other users, rated CVSS 4.0 base 7.0 (network-reachable, low complexity, PR:N) and assessed by us as CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N. The exposure is conditional rather than default: exploitation requires a target instance to run a workflow that uses the MongoDB Chat Memory node and to have its sessionId-handling path reachable (the CVSS 4.0 AT:P attack requirement), so installations that never use that node are unaffected, and the real-world impact depends on the sensitivity of the conversation content stored. Patch is available from the vendor in n8n 1.123.80, 2.39.6 and 2.40.1, and no public exploit code has been identified at time of analysis.
Physical access to a range of ASUS Z390-era motherboards - Prime Z390-A, Prime Z390-A/H10, the ROG Maximus XI family (Hero, Hero Wi-Fi, Formula, Code, Extreme, Apex, Gene), ROG Strix Z390-E/F Gaming, Pro WS C246 ACE and WS Z390 Pro - allows an attacker to read and write arbitrary host memory by inserting a specially crafted device, because the platform fails to correctly initialize the protections governing device memory access. The CVSS v4.0 vector (AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H, scope unchanged) confirms high confidentiality, integrity and availability impact with no authentication or user interaction required once hands-on access is obtained, but the decisive limiting factor is AV:P: the flaw is unreachable remotely or over a network and is realistically confined to evil-maid, supply-chain, repair-shop or shared-physical-access scenarios. ASUS is credited as the reporter and the vendor security advisory at https://www.asus.com/security-advisory is the authoritative reference; no public exploit identified at time of analysis.
Cross-site request forgery in the Lektor admin API lets unauthenticated remote attackers perform state-changing actions - writing arbitrary files via newattachment, deleting pages via deleterecord, wiping build output via clean/build, and triggering deployment via publish - when an operator visits a malicious web page while the admin server is running. The flaw affects Lektor 3.3.14 and 3.4.0b15 and stems from the complete absence of CSRF tokens, Origin/Referer validation, CORS configuration, or Host allowlisting; read endpoints can additionally be reached via DNS rebinding to disclose data. No public exploit code or confirmed active exploitation was identified at time of analysis.
SQL injection in the n8n Oracle Database node's Delete Table Drop operation lets an attacker break out of the table or schema identifier with a single quote and append arbitrary SQL, which then runs against the connected Oracle database with the privileges of the stored credential. Affected releases are n8n before 1.123.80, 2.0.0 through 2.39.5, and 2.40.0 (fixed in 2.39.6 and 2.40.1 respectively); the CVSS vector records PR:N, i.e. unauthenticated, but exploitation is conditional on a workflow that actually uses the Oracle Database node's Delete Table Drop operation with table or schema values sourced from attacker-influenceable input, which is why attack complexity is rated high (AC:H/AT:P) and the issue does not affect a default install with no such workflow. Vendor patches are available and no public exploit code or confirmed active exploitation was identified at time of analysis.
Use-after-free in Apache HTTP Server's mod_http2 module (versions 2.4.0 through 2.4.68) allows unauthenticated remote attackers to corrupt memory and crash server worker processes by driving re-entrant access to a shared per-session buffer. The flaw only manifests when mod_http2 is loaded and HTTP/2 is actually enabled (h2 and/or h2c in the Protocols directive), and the trigger requires specific concurrent/streamed HTTP/2 request patterns, so the assessed vector is network-reachable but high complexity (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) with impact limited to availability. No public exploit code or active exploitation has been identified at time of analysis, and no EPSS score was supplied.
Argument injection in the AWS EFS CSI Driver v3.1.0 through v3.4.2 allows an authenticated Kubernetes user or service account that already holds PersistentVolume creation permissions to smuggle extra mount options into an EFS mount by embedding comma-separated tokens in a PersistentVolume's mounttargetipmap volumeAttribute. Because the driver fails to neutralize the argument delimiter, injected tokens are parsed as additional mount flags, giving high confidentiality and integrity impact along the container storage path, while availability is not affected under the assessed vector CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N (6.5). No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has shipped v3.5.0 to remove the condition.
Filter bypass in the SendGrid, Freshservice, and ServiceNow nodes of n8n (versions before 2.39.6 and 2.40.0 before 2.40.1) lets unescaped parameter interpolation break out of query literals and widen single-record lookups into match-all queries, exposing bulk data such as contact lists, tickets, and directory entries on the connected third-party service. Exploitation is unauthenticated (CVSS:3.1/AV:N/AC:L/PR:N/UI:N) but conditional: the workflow must actually use one of the three affected nodes and bind a vulnerable lookup/filter parameter to untrusted external input, which is reflected in the AT:P attack-requirement rating. No public exploit code was identified at time of analysis and the issue is not in CISA KEV; impact is bounded to bulk read exposure of third-party data, not compromise of the n8n host itself, and a vendor-released patch is available.
Wormhole.app deployments built before 2026-08-22 ship with a misconfigured coturn TURN server that fails to restrict TCP relay peers, allowing an unauthenticated remote attacker to pivot through the relay to reach internal resources such as cloud instance metadata or to source TCP connections from the relay's own IP address. Because the TURN endpoint is reachable over the network with no credentials or user interaction required (CVSS:4.0 base 6.9; independently assessed as CVSS:3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N), impact is bounded by what the relay host's network position can reach - meaningful information disclosure and limited integrity impact rather than full compromise. This is a moderate-priority issue: it is not in CISA KEV and no public exploit code was identified at time of analysis, and the vendor has made a fixed build available.
The Joyland.ai application fails to validate the hostname in TLS certificates presented by the server, allowing an attacker who already occupies a man-in-the-middle position on the network path to impersonate the Joyland.ai backend and read or manipulate chat traffic. All versions of the app appear affected (CPE cpe:2.3:a:joyland:joyland.ai:* and EUVD-2026-91028 both list the wildcard version range). Exploitation is gated by the attacker's need to interpose on the connection (rogue AP, shared Wi-Fi, ARP/DNS spoofing, or compromised segment), which is why the independent assessment rates it CVSS 3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N rather than the higher CVSS 4.0 6.9 reported by CISA; no public exploit has been identified at time of analysis and the issue is not in CISA KEV.
Hard-coded GeTui push-service credentials embedded in the Joyland AI client app let anyone who extracts them from a copy of the binary call the GeTui REST API without authenticating to Joyland and push arbitrary notification content to individual users, chosen groups, or the app's entire user base. The flaw applies to all observed versions of Joyland.ai (CPE cpe:2.3:a:joyland:joyland.ai:*:*:*:*:*:*:*:*), and exploitation is unauthenticated from the network perspective (CVSS vector PR:N/AC:L/UI:N) - the only practical prerequisite is obtaining the app package and the credentials remaining valid. Impact is bounded to the push-notification channel: the attacker cannot read Joyland backend data or execute code, and no public exploit code or confirmed active exploitation was identified at time of analysis, so the primary risk is mass notification abuse, phishing lures, and brand/reputational damage rather than data compromise.
Arbitrary file creation, overwrite, and truncation outside the intended workspace is possible on hosts running AWS security-agent-mcp-server before version 0.2.0, because the diff scan operation injects an attacker-controlled 'reference' value as extra command arguments. The flaw is local (AV:L) and requires the operator or AI agent to run the diff scan against attacker-influenced input (UI:R), but no authentication is needed once that operation is invoked (PR:N) and the impact crosses a security boundary (S:C), yielding high integrity and availability impact with no confidentiality loss (CVSS 8.2, High). No public exploit code or confirmed active exploitation was identified at time of analysis; the vendor-released fix is version 0.2.0.
Improper TLS certificate validation in the Joyland AI app causes its invisible advertisement WebView to accept invalid or forged SSL certificates by default, letting an attacker who already sits on the victim's network path silently intercept and alter the content flowing through that ad channel. All versions of the app appear affected (CPE cpe:2.3:a:joyland:joyland.ai:* and EUVD lists the version range as '*'), and the CVSS 4.0 vector provided is AV:N/AC:L/AT:N/PR:N/UI:N, meaning no authentication or user interaction is required once a man-in-the-middle position is established. Exploitation is not confirmed in the wild (not listed in CISA KEV) and no public exploit code has been identified at time of analysis, but the real-world barrier is the requirement for an interception position such as a hostile Wi-Fi hotspot, ARP spoofing, or an upstream network foothold; our independent assessment rates this as CVSS 3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N, i.e. lower practical ease than the 6.9 base score suggested by the input vector, with impact bounded to the advertisement WebView rather than the full application.
Man-in-the-middle interception of traffic between the Joyland AI application and its backend is possible because the app accepts any TLS certificate from any server without validating it (CWE-295), exposing transported data to an on-path attacker who can silently decrypt or alter it. Every user of an affected Joyland.ai release is vulnerable by default - no special victim-side configuration is required - but the attacker must first obtain an on-path position (shared or rogue Wi-Fi, a compromised gateway, or ARP/DNS spoofing) and present a forged certificate; the flaw cannot be triggered purely over the internet. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV; the vendor-reported CVSS 4.0 base score is 6.9, while our independent CVSS 3.1 reassessment treats the lost confidentiality and integrity of intercepted traffic as high impact with the on-path requirement as the primary limiting factor (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
The setup endpoint in Ghost CMS returns the site owner's email address to any remote, unauthenticated visitor, exposing every release from 0.8.0 up to but not including 6.23.0. Exploitation requires no account, no user interaction, and no non-default configuration, but the yield is limited to a single email address - no credentials, content, or system access - so realistic impact is reconnaissance and phishing enablement rather than direct compromise. No public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis, and vendor patching is available in 6.23.0.
Unauthenticated attackers can read theme template and metadata files from internet-facing Ghost blogs running any version before 6.20.0 by supplying URL-encoded file paths that slip past the platform's file-extension validation, exposing theme source and configuration but not member data, user records, or site secrets. The flaw requires no special configuration and works against a default installation (CVSS 4.0 base 6.9; independent assessment scores it CVSS 3.1 AV:N/AC:L/PR:N/UI:N with only low confidentiality impact, no integrity or availability impact). No public exploit code has been identified at time of analysis, and the vendor-released fix is Ghost 6.20.0.
Unauthenticated visitors to Ghost instances running versions 5.3.0 through 6.57.x in private mode with comments enabled can read comments that private mode should restrict, bypassing the site's privacy settings. This is a low-impact confidentiality flaw limited to comment text disclosure-no write access, account takeover, or integrity impact-and it requires the configuration of private mode plus comments being enabled. Vendor-released patch: 6.58.0; no public exploit identified at time of analysis.
Authenticated Ghost site members on versions 5.3.0 through 6.61.x can retrieve the post excerpts (preview snippets) of gated, members-only or premium posts they are not entitled to read, because the excerpts endpoint fails to enforce the same access checks applied to full post content. The exposure is limited to excerpt text rather than complete article bodies, so the practical impact is partial content disclosure, and sites that publish no gated or paywalled content are unaffected. Any registered member account - including a free-tier member with no subscription - is sufficient to trigger the issue; no public exploit code has been identified at time of analysis, and no confirmed active exploitation (CISA KEV) has been reported.
Unbounded query-string parsing in Tornado before 6.5.9 lets unauthenticated remote attackers stall the event loop of affected servers by sending GET requests whose query strings carry thousands of short parameters. Because HTTPServerRequest.__init__ parses the query string synchronously inside Tornado's single-threaded IOLoop with no field-count cap, a burst of such requests degrades response times for every client sharing that loop rather than triggering a clean crash - impact is availability degradation rated Low (assessed CVSS:3.1 AV:N/AC:L/PR:N/UI:N/C:N/I:N/A:L; vendor CVSS 4.0 base 6.9 with VA:L), and sustained concurrent high-field requests are needed to meaningfully starve other connections. A vendor-released patch exists in Tornado 6.5.9 (upstream PR 3719 / commit 03945136ea9746eccf61caf88edae39642e59c93), and no public exploit code has been identified at time of analysis.
Stored DOM cross-site scripting in the n8n workflow automation platform affects all releases before 1.123.80 on the 1.x line, 2.0.0 up to but not including 2.39.6, and 2.40.0 up to but not including 2.40.1. An authenticated user with workflow-authoring privileges can store a malicious script URL inside a node's Resource Locator parameter dropdown; when another user opens that node's dropdown and clicks the external-link icon, the injected JavaScript executes in the n8n editor origin. Because the payload is embedded in the workflow definition, it survives workflow imports and shares, allowing one poisoned workflow to reach multiple victims over time - though the assessed CVSS:3.1 vector (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N) makes clear that a second, distinct user must actively click the link, so passive viewing is insufficient and single-user instances face minimal exposure. No public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS score was supplied; the vendor has released patches, so this is a conditional mid-tier priority rather than an emergency.
Unauthenticated attackers can forge webhook requests to n8n instances that run the Webflow Trigger node, because the handler fails to validate the x-webflow-signature HMAC (CWE-347), letting workflows be triggered with attacker-controlled payloads. Affected releases are all versions before 1.123.80, the 2.x line from 2.0.0 up to but not including 2.39.6, and 2.40.0 up to but not including 2.40.1, with fixes released as 1.123.80, 2.39.6, and 2.40.1. Impact is integrity-only and bounded by whatever the triggered workflow does downstream; no public exploit code has been identified at time of analysis, the flaw is not confirmed actively exploited (not in CISA KEV), and exploitation requires an internet-reachable Webflow Trigger webhook endpoint.
Improper authorization in Immich's Shared Link Preview Handler (server/src/utils/access.ts, function checkSharedLinkAccess) affects Immich releases up to and including 2.7.5 and allows a remote, unauthenticated attacker who knows or obtains a shared link's URL/token to bypass that link's password protection and view media that should require a password. The assessed impact is confined to confidentiality (CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N; CWE-285), with no integrity or availability effect, and instances that do not use password-protected shared links are unaffected. No public exploit code or confirmed active exploitation was identified at time of analysis (the CVE is not listed in CISA KEV), and the originating GitHub report (immich-app/immich issue 29599) was closed as a duplicate, so a vendor-confirmed fix version should be verified directly with the project.
Server-side request forgery in decolua 9Router (versions up to and including 0.5.55) lets a remote attacker steer the server's outbound HTTP requests by controlling the provider_options.baseUrl argument handled by the Search Endpoint and its fetch path in src/shared/utils/ssrfGuard.js, potentially reaching loopback services, internal networks, or cloud metadata endpoints such as 169.254.169.254. The vulnerable code is a pre-patch guard that can be defeated through several documented bypass classes (trailing-dot FQDNs like 'localhost.', IPv4-mapped IPv6 addresses in hex form such as '::ffff:7f00:1', wildcard-DNS hostnames that resolve to private addresses, and public URLs that 30x-redirect to internal targets). Per the vendor vector the flaw is unauthenticated (PR:N) and exploitable in default configurations; no public exploit code was identified at time of analysis and CISA KEV does not list this issue, while the upstream project has published a fixing pull request (PR #3723) referencing the reporter's bypass analysis in issue #3714.
Command injection in Red Hat Satellite's Hammer CLI (rubygem-hammer_cli) allows a local authenticated user to run arbitrary shell commands by controlling the $EDITOR environment variable, which the application interpolates into a single-string Ruby system() call that is then interpreted by /bin/sh. The flaw affects Red Hat Satellite 6 and Satellite 6.19 for RHEL 9, and exploitation requires an attacker to already hold a valid local account, be able to set $EDITOR, and trigger a CLI operation that launches an external editor (such as editing a resource), meaning remote or unauthenticated exploitation is not possible. Public exploit code and confirmed active exploitation are not indicated in the available intelligence, and Red Hat has published an erratum (RHSA-2026:74503) to address the issue.
Authenticated path traversal in the web management interface of Fujifilm Apeos multifunction devices and printers (including Apeos C4571 firmware 1.1.3 and earlier and Apeos C3567 1.1.3, plus other listed models) lets an attacker who already holds high privileges on the device's admin interface read arbitrary files from the appliance by submitting a crafted request with traversal sequences in an externally supplied parameter. The exposure is access-gated rather than internet-facing: the assessed vector (CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) requires adjacent-network reachability to the management UI and administrative credentials, and the impact is confined to confidentiality (file/data disclosure) with no integrity or availability effect. There is no confirmed active exploitation (the CVE is not in CISA KEV) and no public exploit code identified at time of analysis, so the practical risk is moderate and concentrated on organizations whose printer web consoles are reachable from untrusted or flat internal networks.
Privilege escalation in JetBrains YouTrack before 2026.2.19422 allows an authenticated attacker with pre-existing elevated privileges (CVSS PR:H) to abuse user-group membership changes and gain higher privileges, though success requires a specific group-configuration state (AC:H). The flaw is network-reachable (AV:N) and needs no user interaction (UI:N), but the high privilege and configuration prerequisites sharply narrow realistic risk to insiders or holders of a compromised privileged account; no public exploit identified at time of analysis. Vendor CVSS 6.6 Medium and CWE-266 (Incorrect Privilege Assignment) match the assessed vector and the need to manipulate group membership under constrained conditions.
The Aruba Migration Tool plugin for WordPress, versions up to and including 1.0.4, is affected by a broken access control vulnerability (CWE-862) that enables an authenticated attacker with subscriber-level permissions to access sensitive data, resulting in a high confidentiality impact. With a CVSS score of 6.5, exploitation requires a valid low-privilege account and no user interaction; no public exploit has been identified at time of analysis. The risk is moderate but constrained by the authentication prerequisite and the plugin's niche deployment.
Authenticated WordPress users at subscriber level or above can exploit an insecure direct object reference in the Simply Schedule Appointments plugin (all versions up to and including 1.6.12.31) through the 'complete_group' parameter to harvest every co-booker's private per-appointment id_token (surfaced as public_token) along with their name and email address, then reuse each leaked token to read, overwrite arbitrary appointment metadata, or cancel the victim's booking via the same REST controller. Exploitation is access-gated rather than open to anonymous scans: the attacker must already hold a valid id_token for at least one appointment inside the targeted group booking, and the exposure is confined to co-bookers of that shared booking, so real-world risk scales with how heavily a site relies on group bookings. No public exploit code and no CISA KEV listing were identified at time of analysis, though an independent assessment rates integrity and availability impact higher than the vendor vector (CVSS 3.1 C:H/I:H/A:L versus the published C:H/I:N/A:N), reflecting the token-reuse tampering path.
Extracting a specially crafted Transport Neutral Encapsulation Format (TNEF, "winmail.dat") file that contains multiple message bodies can crash the tnef utility through a use-after-free and double-free in its memory handling. The flaw is remotely reachable without credentials (PR:N), but exploitation depends on the malicious file actually reaching a tnef parsing step, which requires user interaction such as opening an email attachment or an automated mail gateway decoding it (UI:R). Impact is confined to availability - our independent assessment rates this as a modest-severity denial of service (A:L) rather than the vendor's higher 6.5 score, and no public exploit code and no confirmed active exploitation were identified at time of analysis.
Heap-based buffer overflow in the tnef command-line TNEF (winmail.dat) extractor allows a crafted TNEF file with a large number of colliding attachment filenames to overflow the numeric-suffix counter used by find_free_number(), producing a crash and denial of service; arbitrary code execution is theoretically possible but unproven. The bug only triggers under a non-default configuration in which numbered backups are enabled while file overwriting is disabled, and it requires the victim to actually run tnef against the malicious file (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L, base 3.1), so no public exploit code has been identified at time of analysis and real-world risk is low despite the RCE and memory-corruption tags attached to this report. Impact is limited to availability; there is no confidentiality or integrity impact in the assessed vector.
An authenticated low-privileged user can inject SQL through the Katello Registry Proxy in Red Hat Satellite 6 by placing a crafted label in the request path, allowing them to read arbitrary data from the Satellite database. The vulnerable code paths (check_blob_push_org_label and get_matching_products_from_org) interpolate request-supplied labels straight into raw SQL, and the only prerequisite is an account holding the create_personal_access_tokens permission - even a heavily restricted account with no Organization or Location assigned, which makes the effective privilege bar unusually low. Impact is limited to confidentiality (CVSS 6.5, C:H/I:N/A:N); no public exploit code has been identified at time of analysis, and Red Hat has published erratum RHSA-2026:74503 to address the flaw. This is a genuine but moderate-priority issue, not a critical drop-everything vulnerability.
Improper access control in InfiniFlow RAGFlow 0.24.0 lets any authenticated user read documents they do not own by calling the /v1/document/get/<doc_id> REST endpoint, because the handler fails to verify that the requested document belongs to the caller. Exploitation requires a valid account on the target instance (CVSS PR:L - this is not an unauthenticated flaw) and network reachability to the API, so real-world impact concentrates on multi-tenant or shared deployments where documents belonging to other users are stored; single-user or isolated installs expose little. No public exploit identified at time of analysis, EPSS is low at 0.15% (4th percentile), and the issue is not listed in CISA KEV.
Authenticated low-privilege users can alter metadata settings of knowledge bases they do not own in RAGFlow 0.24.0 and earlier due to missing authorization in the update_metadata_setting function (api/apps/kb_app.py). This remote integrity-only flaw requires network access and valid credentials (CVSS 6.5), with no confidentiality or availability impact, and publicly available exploit code exists per SSVC (Exploitation: poc) though it is not automatable. EPSS is 0.14% (3rd percentile), and no active exploitation (CISA KEV) is reported.
Improper access control in RAGFlow 0.25.3's resume functionality (api/apps/connector_app.py) allows an authenticated low-privilege user to perform unauthorized cross-session or privilege-crossing operations, compromising data integrity. The issue is network-reachable and low-complexity but requires a valid RAGFlow account (CVSS PR:L), and the realized impact depends on which connector entry is exposed and reachable. No public exploit identified at time of analysis, EPSS is 0.14% (3rd percentile), and the limiting authentication prerequisite makes this a moderate-severity, low-priority issue in practical terms.
Incorrect access control in infiniflow RAGFlow 0.24.0 allows a caller reaching the run_mindmap code path to supply an object or tenant identifier they do not own and have the resulting data-access operation proceed, because that operation is not bound to any owner, tenant, workspace, or membership check. The result is cross-tenant information disclosure and limited data manipulation in multi-tenant or shared RAGFlow deployments where isolation between tenants is expected; NVD rates it 6.5 with an unauthenticated vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N), while our assessment treats it as requiring at least a valid session/tenant context (PR:L), which materially lowers exposure for single-tenant or network-isolated instances. EPSS is 0.14% (3rd percentile) and no public exploit code or confirmed active exploitation has been identified at time of analysis, so this is a moderate-priority access-control defect rather than an emergency.
Untrusted code execution in the NetBox devicetype-library CI pipeline lets any contributor who can open a pull request run arbitrary commands on the repository's GitHub Actions runner before a maintainer ever reviews the change. Because validation.yml triggers on the pull_request event and consumes three PR-editable files (requirements.txt for pip install, the pre-commit hook configs, and .gitmodules for submodule checkout), an unauthenticated remote attacker with no repository write access can inject code that executes automatically with no user interaction; impact is capped at low confidentiality and integrity loss because fork PRs run with a read-only token and no secrets. Only versions prior to commit f41fc1e are affected, and no public exploit code identified at time of analysis.
Information disclosure and denial of service in Keycloak's X.509 client certificate authenticator occur when CRL Distribution Point checking is enabled and an unauthenticated remote attacker submits a crafted client certificate. The server fails to properly validate file paths from the certificate, allowing limited local file reads and extreme memory consumption that can crash the system; exploitation requires the non-default combination of certificate-based client authentication and CRL checking, and no public exploit was identified at time of analysis.
Missing authorization checks in the WordPress plugin Review Schema 3.1.0 let unauthenticated, remote attackers invoke plugin functionality that should require elevated privileges, tampering with or disrupting the site's review and structured-data (schema) content. The issue is network-reachable, low-complexity, and requires no victim interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L, score 6.5), but impact is bounded: no confidential data exposure (C:N) and only low-level integrity and availability effects (I:L/A:L), so a full site takeover is not possible. There is no public exploit identified at time of analysis and the CVE is not in CISA KEV; independent assessment rates this as a moderate, not emergency, issue with the primary uncertainty being which specific endpoint or action lacks the check, since the Patchstack advisory does not name it.
Unauthenticated attackers can exploit an insecure direct object reference (IDOR) in WPFunnels 3.13.1 and earlier to read or alter funnel-related objects they do not own. The flaw has a CVSS base score of 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N), reflecting remote, unauthenticated exploitation with low confidentiality and integrity impact but no availability impact. No public exploit code has been identified at time of analysis, and CISA KEV does not list this CVE; the risk is assessed as moderate, pragmatic risk, with impact limited to the exposed funnel objects.
Unauthenticated remote attackers can tamper with or disrupt booking and reservation records on WordPress sites running the Bus Ticket Booking with Seat Reservation plugin in versions up to and including 5.9.3, by manipulating object identifiers passed to plugin endpoints (CWE-639 IDOR). The assessed CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L, base 6.5) confirms network-reachable, unauthenticated exploitation with no confidentiality loss - only partial integrity and availability impact on booking data - so this is a real-but-moderate issue rather than a site-takeover or data-exfiltration risk. No public exploit identified at time of analysis, and no CISA KEV listing; exploitation is limited in practice by the plugin's niche deployment footprint and the need to enumerate or guess valid object identifiers, and no vendor-released patch was identified in the available data.
Heap-based out-of-bounds write in the boks_ksllogsd logging daemon of Fortra BoKS Manager / BoKS Server allows an authenticated KSL client to corrupt memory by placing an oversized but OpenSSL-recognized digest name in the MD field of a KSL start message. The daemon validates that OpenSSL recognizes the supplied digest name but does not confirm that the name fits the fixed 16-byte checksum context field before copying, so an over-long value is written past the end of the heap allocation (CWE-787; CVSS 3.1 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Because the attacker must already hold KSL client credentials and the written content is constrained to valid digest-name strings, the practical result is a crash or memory corruption of the logging service rather than reliable remote code execution; no public exploit code and no confirmed active exploitation were identified at time of analysis, so this is a moderate-priority availability risk pending a vendor fix.
Stored cross-site scripting in the Essential Addons for Elementor WordPress plugin (all versions through 6.8.4) allows an authenticated user holding at least contributor- or editor-level privileges to persist malicious JavaScript through plugin widget content, which then executes in the browser of any visitor or administrator who views the affected page (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, base 6.5, per Patchstack). Because the injected script runs in the context of the victim's session and the vulnerability scope changes (S:C), an attacker can potentially act with the victim's privileges against the site, though exploitation requires both a valid low-privilege account and a victim who subsequently loads the poisoned content. No public exploit code was identified at time of analysis and the flaw is not listed in CISA KEV, so this is a moderate-priority issue rather than an actively exploited one, and the plugin's very large install base makes it worth prioritizing despite the gating prerequisites.