Loom for AWS deployments running a version before 1.6.1 with no identity provider configured expose an unauthenticated super-admin takeover of the agent control plane, allowing any remote party to register tool servers, read stored integration credentials, and rewrite the IAM role policies attached to managed agent roles simply by sending requests to the application API; no credentials, user interaction, or crafted payload are required. The flaw is a missing-authentication-for-critical-function (CWE-306) defect in the authentication dependency, where the local-development bypass intended for environments without Cognito/OIDC activated automatically for every request instead of failing closed. Exploitation is conditional on that IdP-less configuration, so environments with a properly configured identity provider are not reachable through this path; a vendor patch ships in 1.6.1, and no public exploit code or confirmed active exploitation was identified at time of analysis.
Stack-based buffer overflow in the Boa Web Server component of Tenda HG7, HG9 and HG10 XPON gateways running firmware 300001138_en_xpon allows remote, unauthenticated attackers to corrupt memory by sending a crafted request to the /boaform/formLoopBack endpoint with an oversized Ethtype argument. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8) confirms no authentication or user interaction is required, and publicly available exploit code exists, so the practical risk hinges on whether the device's management web interface is reachable from the WAN or another untrusted network. Impact is bounded to these specific XPON gateway firmware builds.
Stack-based buffer overflow in the Tenda AC9 wireless router (firmware 15.03.02.13) allows an attacker to corrupt memory and potentially execute code remotely by sending a crafted POST request containing an oversized netWanType parameter to the /goform/fast_setting_internet_set endpoint. Exploitation requires a privileged session on the device's web management interface (CVSS 4.0 PR:H / assessed CVSS 3.1 PR:H), and in default deployments the management UI is LAN-facing, so remote reach generally depends on remote management being enabled or unchanged default credentials. Publicly available exploit code exists, but no CISA KEV entry confirms active exploitation at time of analysis.
Unauthenticated remote code execution in MikroTik RouterOS allows a network attacker who can reach the built-in web management service (WebFig / HTTP admin interface) to run arbitrary code as root, or to crash the device, with a single crafted request against the service's HTTP request-body handling. The defect is an integer underflow in that parsing path that is reachable before authentication, so no credentials, user interaction, or special privileges are needed on unpatched releases (RouterOS before 7.24). A vendor patch is available in 7.24, no public exploit identified at time of analysis, and the decisive real-world factor is whether the web management service is exposed to untrusted networks, since this is a genuine high-priority vulnerability rather than a high-CVSS-but-low-real-risk case.
Unauthenticated WebSocket endpoints in the Monta EV charging platform (monta.app, all versions) allow any network-reachable attacker to impersonate a charging station and thereby read sensitive backend data or perform unauthorized actions on the platform. The weakness is a missing-authentication flaw (CWE-306) rated 9.3 under CVSS 4.0 and mapped by the independent assessment to CVSS 3.1 AV:N/AC:L/PR:N/UI:N with high confidentiality and integrity impact and low availability impact, meaning unauthenticated remote attackers need no credentials, user interaction, or non-default configuration - network reachability to the charging-station WebSocket service is the only practical prerequisite. There is no public exploit identified at time of analysis and no KEV listing, but ICS-CERT has published an advisory covering all versions, and the absence of a version-based mitigation makes exposure reduction the primary interim control.
Missing rate limiting on the Monta EV-charging platform's WebSocket API authentication endpoint allows unauthenticated remote attackers to send unlimited login requests, enabling either resource-exhaustion denial of service or sustained credential brute-forcing against Monta accounts. The issue affects monta.app (all versions tracked by EUVD) and carries a CVSS 4.0 base score of 8.7 (High), with the assessed impact concentrated on availability (VA:H) and no direct confidentiality or integrity effect in the base vector; credential compromise via brute force is a downstream outcome that additionally requires weak, guessable, or non-MFA-protected credentials. No public exploit code has been identified at time of analysis, and the flaw has not been confirmed as actively exploited (CISA KEV); reporting originates from CISA ICS-CERT advisory ICSA-26-274-02.
Armatura One ships with a fixed, vendor-defined password assigned to its database superuser account during database initialization, so it is identical across installations unless an administrator has changed it. Anyone who already has access to the underlying host operating system and knows this value can authenticate to the database as the superuser on any deployment where the default has not been rotated. The flaw is rated 8.6 under CVSS 4.0 (assessed as CVSS 3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), requires local OS-level access rather than a network path, requires no user interaction or application-level authentication, and there is no public exploit identified at time of analysis; exploitation is fully prevented on systems where the superuser password has been reset.
Armatura One and Armatura One (USA) installations that enable the optional AES-128-CBC credential protection store database and message-broker credentials under a hard-coded key and IV embedded in the software, so an attacker who has the installation package and separately obtains a target's encrypted install configuration file can decrypt those credentials. The independent assessment scores this as 8.6 but emphasizes a local attack vector: it is not remotely triggerable and requires prior access to the victim's configuration file, with no privileges required (PR:N) but a local prerequisite (AV:L). No public exploit identified at time of analysis.
Prototype injection in oRPC's @orpc/zod smart-coercion plugin (versions prior to 1.14.10) allows a remote, unauthenticated client that can reach any procedure accepting object or record input to supply a crafted __proto__ key, causing attacker-controlled inherited properties to surface in subsequent application lookups, or to trigger an unhandled TypeError when keys such as constructor or toString are treated as inherited Zod schemas before validation. The impact is bounded: only the attacker's own crafted request object is affected - the global Object.prototype, other requests, other users, and persistent process state are untouched - which keeps this a moderate-severity information-disclosure and integrity issue (CVSS 3.1 base 6.5, AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) rather than a cross-tenant compromise. No public exploit code or confirmed active exploitation was identified at time of analysis; the fix is a public upstream change shipped in oRPC 1.14.10.
Unauthenticated shortcode injection in The Events Calendar WordPress plugin before 6.17.5.1 allows remote attackers to trigger any shortcode registered on a target site by submitting crafted data to an AJAX action that is merged into the rendering context without validation or sanitisation. No authentication, user interaction, or special configuration is required on default installs, but practical impact is limited to the set of shortcodes actually registered by WordPress core, the active theme, or installed plugins, and the assessed CVSS vector shows no availability impact and only low confidentiality and integrity impact. Public exploit code exists, but there is no CISA KEV confirmation of active exploitation; this is a moderate-priority issue rather than a critical one.
Unauthenticated shortcode injection in the All in One SEO (AIOSEO) WordPress plugin before 5.0.2.1 lets remote attackers smuggle registered shortcodes past the plugin's shortcode-stripping routine and have them executed in content derived from user input; on sites upgraded from older plugin versions the stripping protection is disabled entirely, so no crafted payload is required. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N, 6.5) reflects unauthenticated, no-interaction reachability with limited confidentiality and integrity impact rather than full compromise, and the practical severity depends on which shortcodes are registered on the target (from the plugin, theme, or other plugins). Publicly available exploit code exists and a vendor patch is available in 5.0.2.1; there is no evidence of confirmed active exploitation (no CISA KEV listing), so this is best treated as a moderate-priority, patched issue with a public PoC.
Armatura One's backup and restore routine writes the complete database connection command - including the database superuser password in plaintext - into a log file stored on the host, so anyone able to read that log recovers credentials sufficient to take full control of the backend database. Exploitation is access-gated: it requires local access to the server operating system (CVSS vector AV:L/PR:L), the privilege to read the affected log, and a prior backup or restore operation to have actually populated the file with the credential, which makes the realistic risk post-compromise privilege escalation or insider abuse rather than remote attack. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the issue has been published through CISA's ICS advisory program (ICSA-26-274-01), indicating deployments in operational-technology and physical-security environments.
OS command injection in cPanel and WP Squared allows an authenticated, low-privileged hosting account holder to execute arbitrary commands at server/root privilege by supplying insufficiently validated input to the Multilang adminbin. Tracked as CVE-2026-93698 (CVSS 9.9, scope-changed), the flaw affects cPanel builds before 11.138.0.11, 11.136.0.45, 11.134.0.61, and 11.110.0.148, as well as WP Squared before 11.138.1.13; vendor patches are available. No public exploit code has been identified and the issue is not confirmed as actively exploited (not in CISA KEV), but the scope-change to root privileges makes multi-tenant shared-hosting deployments the primary concern.
Authentication bypass in the WordPress plugin JSON API Auth (all versions up to and including 3.1.2) lets unauthenticated remote attackers harvest a live Administrator logged_in cookie from a cached JSON response and use it to take over the site. The underlying defect sits in the required PI-Media/json-api parent plugin, whose controller-dispatch transient cache is keyed only by URI and query string with HTTP method and POST body ignored, so the authenticated /api/auth/generate_auth_cookie/ response - which embeds a wp_generate_auth_cookie() session cookie directly in its JSON body - is replayed to any subsequent unauthenticated GET, with the plugin's nominal HTTPS enforcement trivially defeated by passing insecure=cool. Our independent assessment keeps the full confidentiality and integrity impact of the vendor vector but treats the access complexity as High (base 8.1 rather than 9.8) because exploitation is opportunistic and conditional: both plugins must be installed and active with the Auth controller enabled, and a legitimate Administrator must have POSTed to the cookie-generation endpoint within the preceding 24-hour transient TTL; no public exploit identified at time of analysis.
Remote command execution on the GitLab AI Gateway is achievable by an authenticated user who has been granted Duo Agent Platform access, by supplying a specially crafted flow configuration whose prompt template escapes the intended sandbox (CVE-2026-90970). The flaw is a server-side template injection (CWE-1336) rated CVSS 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), meaning a single low-privileged authenticated account yields high confidentiality, integrity, and availability impact that extends beyond the vulnerable component's own security scope. Affected deployments are AI Gateway versions 18.1.6 up to but not including 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1; GitLab has remediated the issue and no public exploit identified at time of analysis, though the requirement for Duo Agent Platform to be enabled and for the attacker to hold a legitimate authenticated account with access to it materially narrows the exposed population.
Privilege escalation in on-premises Microsoft Exchange Server allows an authenticated attacker with a standard mailbox or domain user account (PR:L) to gain high confidentiality, integrity, and availability impact over the network. The vulnerability affects Exchange Server 2016 CU23, Exchange Server 2019 CU14 and CU15, and Exchange Server Subscription Edition RTM. A vendor patch is available; no public exploit code or active exploitation has been identified at time of analysis, but the low complexity and network reachability make this a priority for organizations still running affected on-premises deployments.
Unauthenticated attackers can hijack arbitrary WordPress accounts, including administrators, on sites running the WPMobile.App - Android and iOS App Builder plugin (wpappninja) in all versions up to and including 11.82, because a missing authorization check exposes password-reset URLs that the plugin's push queue has mirrored from outbound emails. The issue carries a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), and the assessed vector matches the vendor listing; exploitation is contingent on the non-default mail-to-push setting (wpmobile_auto_mail=1) being enabled and on a password-reset email existing in the queue, which an attacker can induce through WordPress's standard lost-password flow. No CISA KEV entry and no public exploit code were identified at time of analysis, so the flaw is not confirmed as actively exploited, but the combination of unauthenticated reach, low complexity, and full account-takeover impact makes it high priority wherever the prerequisite configuration is in place.
Unauthenticated attackers can obtain a full administrator session on any WordPress site running the DevKit Pro plugin at version 2.3.0 or earlier by setting an attacker-controlled `original_user_id` cookie to a known administrator's user ID, harvesting the switch-back nonce the plugin renders publicly in the site footer for any visitor carrying that cookie, and POSTing it to the plugin's `revert_switch` handler. The root cause is a privilege-check logic error rather than a memory-safety bug: the handler's `verify_nonce_and_capability()` routine checks the `manage_options` capability against the user named in the attacker-supplied cookie instead of against the actual requester, so the subsequent `wp_set_auth_cookie()` call mints an authenticated session for the impersonated administrator, resulting in complete site takeover. Our independent assessment confirms the 9.8 CVSS (AV:N/AC:L/PR:N/UI:N) is genuine and not inflated: exploitation needs only a default install of the affected plugin (version 2.3.0 or lower) with the front-end revert path reachable and a valid administrator user ID such as the default ID 1, with no authentication, user interaction, or non-default configuration barrier; no public exploit code has been identified at time of analysis, and the issue is not confirmed as actively exploited (CISA KEV).
Any WordPress site running the Divi Membership plugin at version 2.3.0 or earlier can be fully taken over by an unauthenticated remote attacker who simply requests a crafted URL, because the plugin unconditionally trusts an attacker-supplied user ID and issues a valid WordPress authentication cookie for it. Rated CVSS 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and classified as CWE-287 improper authentication, exploitation requires no authentication, no user interaction, and no non-default configuration, making it a top-priority issue for affected sites. Notably, the vulnerable code path is registered on every front-end request even if PayPal is disabled or never configured, so the common assumption that an unconfigured payment gateway is harmless does not hold here; no public exploit code has been identified at time of analysis, but the attack is a single GET parameter and requires no tooling.
Deserialization of untrusted schema data in Apache Directory LDAP API 2.1.0 through 2.1.8 lets a rogue, compromised, or pre-TLS man-in-the-middle LDAP server return a crafted schema object when a Java client calls loadSchema(), potentially executing arbitrary code inside the client process. The flaw is remotely reachable without credentials (CVSS vector PR:N) and vendor patches are available in 2.1.9, but exploitation requires the victim application to initiate a schema-loading connection to an endpoint the attacker controls or can impersonate, which is why the assessed vector raises attack complexity to High (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) even though the published base score is 9.8 under AC:L. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, and EPSS remains low at 0.39% (30th percentile), with SSVC recording Exploitation: none, Automatable: yes, Technical Impact: total.
Code injection in Vanna 2.0.2's VannaBase.get_plotly_figure presents conflicting signals that must be weighed carefully: the CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8), yet EPSS is only 0.36% (27th percentile) and there is no CISA KEV entry, so no public exploit identified at time of analysis. In CVSS terms this is an unauthenticated remote issue, but the governing exploitation condition is that a deploying application exposes vanna's figure/plot-generation entry to attacker-influenced input; where the plotting path is exposed via bundled Flask/Streamlit/API front ends, an attacker who can shape the question or prompt can achieve attacker-controlled code or command execution, while embedded deployments that gate, authenticate, or do not expose that path are substantially less exposed than the 9.8 score implies.
Deserialization of attacker-controlled JSON in plugin-capable Seroval releases 0.12.0 through 1.6.1 lets a remote unauthenticated attacker cause a plugin-produced callable to be invoked unexpectedly through native Promise settlement, resulting in arbitrary code execution in applications that pass untrusted input to the library's fromJSON path. The root cause is a thenable type-confusion defect (CWE-843) that bypasses the Promise resolver remediation shipped in 1.5.3 for CVE-2026-59940 because the dangerous invocation happens inside the native Promise resolution procedure after deserialization rather than in the resolver itself. CVSS is rated 9.8, and no public exploit code was identified at time of analysis; vendor-released patch: Seroval 1.6.2.
Unauthenticated privilege escalation in the Divi Membership plugin for WordPress (versions up to and including 2.2.0) lets any site visitor create a brand-new account with the administrator role and, by also submitting auto_login=on, be logged in as that administrator within the same request - resulting in complete site takeover. The flaw (CVSS 3.1 base 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) sits in dmem_form_submit_handler(), which derives the new user's role by iterating every WordPress role and calling password_verify() against an attacker-supplied bcrypt hash in the form_id POST parameter, with no whitelist of permitted roles. The only prerequisite is a WordPress nonce, which is publicly emitted on any page that renders the Divi Membership registration form and is therefore readable by any unauthenticated visitor; no public exploit code has been identified at time of analysis.
Code injection in AgentScope v1.0.20 allows unauthenticated remote attackers to execute arbitrary commands if a host application exposes the execute_shell_command tool to attacker-influenced input. The assessed vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, so exploitation depends on that exposure/deployment condition; the NVD-style vector of AV:N/AC:L is more optimistic and conflicts with the assessed high attack complexity. No public exploit identified at time of analysis, and EPSS is low at 0.27% (17th percentile).
Cross-organization tool metadata read and modification in SuperAGI v0.0.14 allows an authenticated attacker in one tenant to access or alter another tenant’s tool records through /tools/get/{tool_id} and /tools/update/{tool_id} because the tool controller fails to verify organization ownership via the associated toolkit. The issue only creates cross-tenant impact in multi-organization deployments; single-organization installations have no other tenant to target, and authentication is mandatory in the independent assessment even though the supplied CVE vector lists PR:N. EPSS is low (0.23%, 13th percentile), no public exploit was identified at time of analysis, and the independently assessed CVSS (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) indicates materially lower priority than the headline 9.8.
Code injection in FinRobot 1.0.0's CodingUtils.create_file_with_code() allows unauthenticated remote attackers to execute arbitrary code when the agent pipeline is exposed to untrusted input, per the CVSS 3.1 vector (9.8 Critical, CWE-94). Exploitation requires that attacker-controlled text-such as a malicious prompt, document, or tool input-reaches the vulnerable function without neutralization; typical local or orchestrated deployments that only process trusted input materially reduce real risk. No public exploit identified at time of analysis, and EPSS is 0.21% (10th percentile), indicating low predicted exploitation activity.
Cross-tenant agent execution manipulation in SuperAGI up to v0.0.14 lets a remote authenticated user in one organization create or start execution records for agents owned by another organization through the /agentexecutions/add and /agentexecutions/add_run endpoints. Exploitation requires a multi-tenant deployment hosting more than one organization plus valid credentials in any one tenant, and the attacker must supply a caller-controlled agent_id-likely an enumerable sequential identifier-belonging to the victim organization. The independent assessment lowers the effective vector to authenticated (PR:L) with high integrity and low availability impact rather than unauthenticated 9.8; no public exploit has been identified, EPSS is low at 0.19% (8th percentile), and the main risk is cross-tenant integrity loss in agent execution records.
Arbitrary Python code execution in sinaptik-ai pandas-ai 3.0.0 allows remote, unauthenticated attackers to run attacker-controlled code through the CodeExecutor.execute path, giving full compromise of the host or container running the agent. The flaw is rated CVSS 3.1 9.8 CRITICAL (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and classified as CWE-94 code injection, meaning no privileges, credentials or user interaction are required per the assessed vector. EPSS is low at 0.16% (4th percentile) and there is no CISA KEV entry, so no public exploit identified at time of analysis, although a GitHub issue and a public gist referencing the bug are linked from the CVE record and should be reviewed as possible reproduction detail.
Out-of-bounds write in the WebGL implementation of Google Chrome prior to 154.0.8037.97 allows remote attackers to corrupt memory and potentially execute arbitrary code outside the browser sandbox when a victim loads a crafted HTML page. Exploitation requires user interaction - the target must visit or be redirected to an attacker-controlled page that exercises the WebGL path (enabled by default) - but no authentication or prior privileges are needed (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, 9.6, Chromium security severity Critical). No public exploit code or confirmed active exploitation was identified at time of analysis; Google credits its own Chrome team for the report, and a vendor patch is available, so the primary risk window is unpatched Chrome installations that continue to browse untrusted content.
Use-after-free in the FedCM (Federated Credential Management) component of Google Chrome can allow a remote attacker to execute arbitrary code outside the browser sandbox when a victim loads a crafted HTML page, with the only stated precondition being user interaction (CVSS UI:R); no authentication is required per the assessed vector (PR:N). The 9.6 score reflects a scope change (S:C) - successful exploitation escapes the renderer sandbox onto the underlying host - but signals diverge sharply: EPSS is only ~0.21% (11th percentile) and CISA's SSVC records Exploitation: none, so no public exploit has been identified at time of analysis. Google has released a fix in Chrome 154.0.8037.97, and Chromium rates the underlying issue High severity.
Sandbox escape and arbitrary code execution in Google Chrome on Windows (versions prior to 154.0.8037.97) arise from incorrect authorization in the browser's FileSystem component, letting a remote, unauthenticated attacker break out of the renderer sandbox and run code at the browser's privilege level after convincing a victim to open a crafted HTML page. Exploitation requires the user to visit an attacker-controlled page (CVSS PR:N/UI:R, scope changed) and is neither automatic nor zero-click; no public exploit identified at time of analysis, and CISA's SSVC rates exploitation as none with automatable flagged no. That said, the signal is mixed: 9.6 CVSS with total technical impact contrasts with a low EPSS of 0.21% (10th percentile) and a platform-restricted, interaction-dependent attack path.
OS command injection in the Studio Space startup validation script of Amazon SageMaker Distribution (2.x, 3.x, and 4.x lines, as used by Amazon SageMaker Unified Studio) allows an authenticated remote user with project contributor permissions to execute arbitrary commands inside another project member's Studio Space and steal that member's temporary execution-role credentials via a crafted connection resource property. Exploitation is a shared/multi-tenant insider or compromised-collaborator scenario rather than unauthenticated external access, and it is additionally gated by user interaction because the victim's Studio Space must start and run the vulnerable startup script for the injected command to reach that member. No public exploit identified at time of analysis; vendor-released patches exist for supported lines, and end-of-support minor lines will not receive a fix.
Code injection in Tinypool versions prior to 2.1.2 allows an attacker who first pollutes Object.prototype to load attacker-controlled JavaScript modules via the worker pool, potentially reading or modifying task data with host process privileges. The flaw is exploitable only when an application calls pool.run(task, options) with its own options object; calls that omit the options argument use a trusted default and are unaffected. No public exploit code or active exploitation has been identified, and the attack requires a pre-existing prototype-pollution vulnerability in the host application, making real-world exploitation condition-gated.
SQL injection in SourceCodester Online Reviewer Management System 1.0 allows a remote attacker, likely with a valid administrative session, to manipulate the Title parameter of /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity and alter backend SQL queries, exposing or modifying limited application data. Publicly available exploit code exists, but CISA KEV does not list this as actively exploited, and the assessed CVSS 3.1 vector is PR:L, so successful exploitation is gated by access to the administrative module. This is a low-priority finding despite the medium headline score because the vulnerable endpoint is inside the admin path and the assessed impact is limited to low confidentiality, integrity, and availability effects.
Server-side request forgery in the Model Context Protocol reference Fetch Tool (mcp-server-fetch, and the related mcp-server-everything) up to 2026.6.4 lets unauthenticated remote callers direct the fetch_url function at internal or otherwise restricted destinations by supplying a crafted url/path argument, with no destination validation in the default configuration. Impact is bounded but real: the assessed vector rates confidentiality and integrity impact as low with no availability impact, and the primary abuse case is reaching loopback services, private RFC1918 ranges, and cloud instance metadata endpoints (for example 169.254.169.254 and 100.100.100.100) from the server's network position rather than executing code. Publicly available exploit code exists (a public GitHub issue plus a VulDB entry) and the CVSS 4.0 vector carries an E:P proof-of-concept maturity flag, but there is no confirmed active exploitation (no CISA KEV listing); exposure depends on whether the Fetch Tool and its URL argument are reachable by an attacker, since these are reference servers frequently run locally beside an AI assistant.
Unauthenticated SQL injection in onetwothreeneth HospitalManagementSystem lets remote attackers inject arbitrary SQL through the user_id, patient_id, physician_id, discounts_id, and services_id parameters handled by the get function in edit_accounts.php, allowing them to read from or manipulate the underlying database. The CVSS 4.0 base score is 5.5 with a PR:N/UI:N vector, so no credentials or user interaction are required against an affected build, although the assessed impact is limited to low confidentiality, integrity, and availability loss. Publicly available exploit code exists and the issue was reported to the project without any response, but there is no evidence of confirmed active exploitation (CISA KEV), and realistic exposure is constrained by the project's very small install base and the absence of any fixed release.
Unauthenticated command injection in the web administration interface of multiple Digi International product families (including IX, EX, TX, Connect IT, AnywhereUSB Plus, Connect EZ, XBee Hive, Digi 54xx/63xx, and Digi LR54) allows an attacker on an adjacent network segment to execute arbitrary operating system commands with root privileges via a crafted HTTP POST. The flaw is rated CVSS 9.4 (CVSS 4.0) and requires no authentication or user interaction; the independent assessment confirms AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H on CVSS 3.1. No public exploit code or CISA KEV active exploitation is identified in the supplied data, and the main limiting factors are that the admin web server must be enabled and reachable, and the attacker must be adjacent to the device rather than exploiting across the open internet.
Prototype pollution in the Tinypool npm package prior to 2.1.1 escalates to code execution: an unauthenticated remote attacker who can first pollute Object.prototype.execArgv or Object.prototype.env.NODE_OPTIONS (via a separate prototype-pollution flaw in the host application) has those inherited values copied into ThreadPool.options and forwarded to worker_threads.Worker, so every newly spawned worker loads attacker-supplied JavaScript through --import/--require preload arguments or NODE_OPTIONS. The payload executes with the host process's privileges, potentially exposing CI secrets, signing material, or build artifacts. The vendor assigns a CVSS 4.0 base score of 9.5 (AT:P - the attack requires an existing pollution primitive), exploitation is not confirmed as actively exploited (no CISA KEV listing) and no public exploit identified at time of analysis, although the upstream fix commit includes a regression test that demonstrates the execArgv/NODE_OPTIONS technique.
Unrestricted file upload in onetwothreeneth HospitalManagementSystem lets a remote attacker submit arbitrary files through the 'img' parameter handled by the add_patient, add_physician, add_account, update_account, update_subaccount, edit_physician, and edit_patient actions in php/controller.php, potentially leading to server-side code execution if the upload lands in a web-accessible, script-enabled directory. The project ships on a rolling-release basis, so no fixed or affected version numbers are published, and publicly available exploit code exists (no CISA KEV listing and no EPSS score was supplied). The vendor's CVSS 4.0 vector scores this 5.5 with PR:N, but the underlying actions are account and record management functions that are normally gated behind an authenticated admin or staff session, so effective exploitability depends on whether the target deployment actually enforces login on those endpoints.
Discord libdave before 1.2.0 can accept an unauthorized participant into an end-to-end encrypted media session because it does not reject an MLS Welcome message whose group roster contains an unrecognized user ID. An attacker who controls the DAVE signaling path, such as a malicious or compromised Discord voice gateway or an equivalent position able to add, alter, or withhold MLS signaling, can exploit this to compromise the confidentiality and integrity of voice and video content; no client authentication or user interaction is required, but the signaling-path requirement raises the practical bar. A vendor patch is available in libdave 1.2.0, and no public exploit code was identified at time of analysis.
Authenticated attackers holding only Subscriber-level WordPress credentials can abuse Popup Maker WP through 1.4.5 to store display-targeting values that the plugin later invokes as zero-argument PHP callables on public page loads, resulting in sensitive information disclosure and denial of service. The flaw stems from missing authorization checks on several of the plugin's actions and its management page, which the plugin exposes to any logged-in user; publicly available exploit code exists and the WPScan disclosure makes the attack path straightforward to reproduce. The main practical prerequisite is that the target site permits user self-registration or that the attacker already holds a low-privileged account, and because only zero-argument callables are invoked the impact stays below full remote code execution, consistent with the CVSS 5.4 Medium rating.
Authenticated WordPress users holding a role as low as Subscriber can cause arbitrary shortcodes to be executed on sites running Unlimited Elements for Elementor before 2.0.21, because the plugin's widget-rendering path never verifies that the requester is permitted to invoke it. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) and our independent assessment keep this at moderate severity: it is an authorization bypass gated behind a low-privileged account, not an unauthenticated code-execution emergency, even though publicly available exploit code exists (WPScan). Exposure is greatest on builds below 2.0.18, where a Subscriber account - trivially obtainable on any site with open registration - is sufficient; from 2.0.18 through 2.0.20 the minimum role rises to Contributor or above. There is no CISA KEV entry, so confirmed active exploitation in the wild has not been established.
UTMStack deployments running versions before 11.2.16 can be fully taken over through an authentication bypass in the InternalApiKeyFilter, which accepts the shared Utm-Internal-Key header as proof of identity on every API endpoint rather than only on internal machine-to-machine routes. Tracked as CVE-2026-82042 (CWE-306, missing authentication for a critical function) and rated 9.3 under CVSS 4.0 with an equivalent CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, a single request that presents the correct key value grants full administrative API access without a user account, JWT, or user interaction, allowing the attacker to create accounts, manage users, exfiltrate data, and modify security rules. The decisive limiting factor is obtaining the secret itself: the key is a shared machine-to-machine credential held by sibling components such as agent-manager, the event-processor plugins, and the installer/updater, so realistic attack paths involve a leaked, default, or weak INTERNAL_KEY value, read access to the deployment environment, or compromise of a container that legitimately holds it. No public exploit code was identified at time of analysis and the flaw is not listed in CISA KEV, but the vendor-released fix in 11.2.16 hardens the filter with a fixed route allowlist, constant-time comparison, audit logging, and an optional INTERNAL_KEY_ALLOWED_CIDRS source-IP restriction.
Stack-based buffer overflow in the web management interface of Moxa MGate MB3170 and MB3270 series protocol gateways lets an attacker who already holds a valid, low-privilege read-only account corrupt program execution by submitting an over-length account_name value in an account-management request. Because the overwritten stack data can be leveraged to read device memory (including stored credentials), modify arbitrary memory, and crash or hang the device, the impact spans confidentiality, integrity, and availability of both the gateway and the downstream systems it bridges. No public exploit code or active exploitation has been observed (no CISA KEV listing; no public exploit identified at time of analysis), and the realistic barrier is the requirement for valid credentials rather than anonymity - though read-only accounts are often weakly protected or shared, which is why the issue still warrants urgent attention.
Unauthenticated attackers can manipulate gift-card amounts in WebToffee Gift Cards for WooCommerce before 1.3.1 to bypass configured denominations and reduce or eliminate order totals, obtaining products without full payment. Publicly available exploit code exists, and the CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N confirms remote, unauthenticated, no-user-interaction exploitation with low integrity impact only. The affected component requires WordPress with the vulnerable plugin and WooCommerce gift-card purchasing enabled; no server or data compromise is involved.
Content disclosure in WordPress sites using the CMP - Coming Soon & Maintenance plugin before version 4.1.20 allows unauthenticated visitors to bypass the maintenance/coming-soon gate by shaping a request that the plugin mistakes for a login request, reaching hidden published pages and other gated content. This moderate-severity access-control flaw (CVSS 5.3, AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) requires no authentication or user interaction and only matters while the site is actively in maintenance or coming-soon mode. Publicly available exploit code exists (WPScan advisory), but there is no CISA KEV confirmation of active exploitation; impact is limited to information disclosure with no write access, code execution, or availability impact, and disappears once the site is fully public and the plugin mode is off.
Price manipulation in the Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 lets remote attackers set an arbitrarily low purchase price by editing a client-supplied amount field that the plugin never recomputes on the server, so a buyer can pay far less than the merchant intended. The flaw is remotely reachable without authentication or user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, 5.3) and affects any site running the plugin at a version below 2.0.6 with an exposed checkout. Impact is limited to transaction integrity and direct financial loss to the merchant - no data confidentiality or availability impact - and publicly available exploit code exists, though there is no confirmed active exploitation (CISA KEV).
Unauthenticated information disclosure in WP Edit Password Protected (WordPress plugin) before 2.0.7 allows remote attackers to read published posts and pages that the plugin's site-wide access mode was configured to hide, because the plugin fails to enforce that restriction on the WordPress REST API. Exploitation requires that the site uses the plugin's access-mode feature to hide content; publicly available exploit code exists. CVSS 3.1 score 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) reflects limited confidentiality impact; sites not using the access-mode feature are not meaningfully affected.
Heap-based buffer overflow in the C++ THeaderTransport of Apache Thrift before 0.25.0 lets a remote, unauthenticated attacker corrupt heap memory when an application enables the non-default ZLIB transform for outgoing frames and poorly compressible, peer-influenced data expands during compression. The copy into the write buffer happens without a bounds check, so oversized input overflows the heap allocation and, for large frames, also reads past the end of the transform buffer; impact scales with frame size and reliable code execution versus a crash depends on heap layout. No public exploit code has been identified at time of analysis, and because exploitation requires the ZLIB write transform precondition (without it the vulnerable copy path is never reached), this is a credible high-priority issue rather than an automatic emergency.
Unauthenticated path traversal in the Super Forms - Drag & Drop Form Builder plugin for WordPress (all versions up to and including 6.3.316) allows remote attackers to read the contents of arbitrary files on the hosting server through the plugin's parse_request handling of form file uploads. In the default configuration the optional 'file_upload_auth' setting is empty, so no credentials are needed, although the vulnerable code path is only reachable when a form with the file upload feature is enabled on the site. No public exploit code has been identified at time of analysis and the vulnerability is not confirmed actively exploited (no CISA KEV entry); the practical impact is information disclosure of sensitive files such as configuration and credential material rather than modification or denial of service, and the supplied severity signals are internally inconsistent (the vendor score of 9.1 asserts integrity and availability impact while our assessment finds confidentiality-only impact).