Loom for AWS deployments running a version before 1.6.1 with no identity provider configured expose an unauthenticated super-admin takeover of the agent control plane, allowing any remote party to register tool servers, read stored integration credentials, and rewrite the IAM role policies attached to managed agent roles simply by sending requests to the application API; no credentials, user interaction, or crafted payload are required. The flaw is a missing-authentication-for-critical-function (CWE-306) defect in the authentication dependency, where the local-development bypass intended for environments without Cognito/OIDC activated automatically for every request instead of failing closed. Exploitation is conditional on that IdP-less configuration, so environments with a properly configured identity provider are not reachable through this path; a vendor patch ships in 1.6.1, and no public exploit code or confirmed active exploitation was identified at time of analysis.
Stack-based buffer overflow in the Boa Web Server component of Tenda HG7, HG9 and HG10 XPON gateways running firmware 300001138_en_xpon allows remote, unauthenticated attackers to corrupt memory by sending a crafted request to the /boaform/formLoopBack endpoint with an oversized Ethtype argument. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8) confirms no authentication or user interaction is required, and publicly available exploit code exists, so the practical risk hinges on whether the device's management web interface is reachable from the WAN or another untrusted network. Impact is bounded to these specific XPON gateway firmware builds.
Unauthenticated remote code execution in MikroTik RouterOS allows a network attacker who can reach the built-in web management service (WebFig / HTTP admin interface) to run arbitrary code as root, or to crash the device, with a single crafted request against the service's HTTP request-body handling. The defect is an integer underflow in that parsing path that is reachable before authentication, so no credentials, user interaction, or special privileges are needed on unpatched releases (RouterOS before 7.24). A vendor patch is available in 7.24, no public exploit identified at time of analysis, and the decisive real-world factor is whether the web management service is exposed to untrusted networks, since this is a genuine high-priority vulnerability rather than a high-CVSS-but-low-real-risk case.
Unauthenticated WebSocket endpoints in the Monta EV charging platform (monta.app, all versions) allow any network-reachable attacker to impersonate a charging station and thereby read sensitive backend data or perform unauthorized actions on the platform. The weakness is a missing-authentication flaw (CWE-306) rated 9.3 under CVSS 4.0 and mapped by the independent assessment to CVSS 3.1 AV:N/AC:L/PR:N/UI:N with high confidentiality and integrity impact and low availability impact, meaning unauthenticated remote attackers need no credentials, user interaction, or non-default configuration - network reachability to the charging-station WebSocket service is the only practical prerequisite. There is no public exploit identified at time of analysis and no KEV listing, but ICS-CERT has published an advisory covering all versions, and the absence of a version-based mitigation makes exposure reduction the primary interim control.
OS command injection in cPanel and WP Squared allows an authenticated, low-privileged hosting account holder to execute arbitrary commands at server/root privilege by supplying insufficiently validated input to the Multilang adminbin. Tracked as CVE-2026-93698 (CVSS 9.9, scope-changed), the flaw affects cPanel builds before 11.138.0.11, 11.136.0.45, 11.134.0.61, and 11.110.0.148, as well as WP Squared before 11.138.1.13; vendor patches are available. No public exploit code has been identified and the issue is not confirmed as actively exploited (not in CISA KEV), but the scope-change to root privileges makes multi-tenant shared-hosting deployments the primary concern.
Authentication bypass in the WordPress plugin JSON API Auth (all versions up to and including 3.1.2) lets unauthenticated remote attackers harvest a live Administrator logged_in cookie from a cached JSON response and use it to take over the site. The underlying defect sits in the required PI-Media/json-api parent plugin, whose controller-dispatch transient cache is keyed only by URI and query string with HTTP method and POST body ignored, so the authenticated /api/auth/generate_auth_cookie/ response - which embeds a wp_generate_auth_cookie() session cookie directly in its JSON body - is replayed to any subsequent unauthenticated GET, with the plugin's nominal HTTPS enforcement trivially defeated by passing insecure=cool. Our independent assessment keeps the full confidentiality and integrity impact of the vendor vector but treats the access complexity as High (base 8.1 rather than 9.8) because exploitation is opportunistic and conditional: both plugins must be installed and active with the Auth controller enabled, and a legitimate Administrator must have POSTed to the cookie-generation endpoint within the preceding 24-hour transient TTL; no public exploit identified at time of analysis.
Remote command execution on the GitLab AI Gateway is achievable by an authenticated user who has been granted Duo Agent Platform access, by supplying a specially crafted flow configuration whose prompt template escapes the intended sandbox (CVE-2026-90970). The flaw is a server-side template injection (CWE-1336) rated CVSS 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), meaning a single low-privileged authenticated account yields high confidentiality, integrity, and availability impact that extends beyond the vulnerable component's own security scope. Affected deployments are AI Gateway versions 18.1.6 up to but not including 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1; GitLab has remediated the issue and no public exploit identified at time of analysis, though the requirement for Duo Agent Platform to be enabled and for the attacker to hold a legitimate authenticated account with access to it materially narrows the exposed population.
Unauthenticated attackers can hijack arbitrary WordPress accounts, including administrators, on sites running the WPMobile.App - Android and iOS App Builder plugin (wpappninja) in all versions up to and including 11.82, because a missing authorization check exposes password-reset URLs that the plugin's push queue has mirrored from outbound emails. The issue carries a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), and the assessed vector matches the vendor listing; exploitation is contingent on the non-default mail-to-push setting (wpmobile_auto_mail=1) being enabled and on a password-reset email existing in the queue, which an attacker can induce through WordPress's standard lost-password flow. No CISA KEV entry and no public exploit code were identified at time of analysis, so the flaw is not confirmed as actively exploited, but the combination of unauthenticated reach, low complexity, and full account-takeover impact makes it high priority wherever the prerequisite configuration is in place.
Unauthenticated attackers can obtain a full administrator session on any WordPress site running the DevKit Pro plugin at version 2.3.0 or earlier by setting an attacker-controlled `original_user_id` cookie to a known administrator's user ID, harvesting the switch-back nonce the plugin renders publicly in the site footer for any visitor carrying that cookie, and POSTing it to the plugin's `revert_switch` handler. The root cause is a privilege-check logic error rather than a memory-safety bug: the handler's `verify_nonce_and_capability()` routine checks the `manage_options` capability against the user named in the attacker-supplied cookie instead of against the actual requester, so the subsequent `wp_set_auth_cookie()` call mints an authenticated session for the impersonated administrator, resulting in complete site takeover. Our independent assessment confirms the 9.8 CVSS (AV:N/AC:L/PR:N/UI:N) is genuine and not inflated: exploitation needs only a default install of the affected plugin (version 2.3.0 or lower) with the front-end revert path reachable and a valid administrator user ID such as the default ID 1, with no authentication, user interaction, or non-default configuration barrier; no public exploit code has been identified at time of analysis, and the issue is not confirmed as actively exploited (CISA KEV).
Any WordPress site running the Divi Membership plugin at version 2.3.0 or earlier can be fully taken over by an unauthenticated remote attacker who simply requests a crafted URL, because the plugin unconditionally trusts an attacker-supplied user ID and issues a valid WordPress authentication cookie for it. Rated CVSS 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and classified as CWE-287 improper authentication, exploitation requires no authentication, no user interaction, and no non-default configuration, making it a top-priority issue for affected sites. Notably, the vulnerable code path is registered on every front-end request even if PayPal is disabled or never configured, so the common assumption that an unconfigured payment gateway is harmless does not hold here; no public exploit code has been identified at time of analysis, but the attack is a single GET parameter and requires no tooling.
Deserialization of untrusted schema data in Apache Directory LDAP API 2.1.0 through 2.1.8 lets a rogue, compromised, or pre-TLS man-in-the-middle LDAP server return a crafted schema object when a Java client calls loadSchema(), potentially executing arbitrary code inside the client process. The flaw is remotely reachable without credentials (CVSS vector PR:N) and vendor patches are available in 2.1.9, but exploitation requires the victim application to initiate a schema-loading connection to an endpoint the attacker controls or can impersonate, which is why the assessed vector raises attack complexity to High (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) even though the published base score is 9.8 under AC:L. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, and EPSS remains low at 0.39% (30th percentile), with SSVC recording Exploitation: none, Automatable: yes, Technical Impact: total.
Code injection in Vanna 2.0.2's VannaBase.get_plotly_figure presents conflicting signals that must be weighed carefully: the CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8), yet EPSS is only 0.36% (27th percentile) and there is no CISA KEV entry, so no public exploit identified at time of analysis. In CVSS terms this is an unauthenticated remote issue, but the governing exploitation condition is that a deploying application exposes vanna's figure/plot-generation entry to attacker-influenced input; where the plotting path is exposed via bundled Flask/Streamlit/API front ends, an attacker who can shape the question or prompt can achieve attacker-controlled code or command execution, while embedded deployments that gate, authenticate, or do not expose that path are substantially less exposed than the 9.8 score implies.
Deserialization of attacker-controlled JSON in plugin-capable Seroval releases 0.12.0 through 1.6.1 lets a remote unauthenticated attacker cause a plugin-produced callable to be invoked unexpectedly through native Promise settlement, resulting in arbitrary code execution in applications that pass untrusted input to the library's fromJSON path. The root cause is a thenable type-confusion defect (CWE-843) that bypasses the Promise resolver remediation shipped in 1.5.3 for CVE-2026-59940 because the dangerous invocation happens inside the native Promise resolution procedure after deserialization rather than in the resolver itself. CVSS is rated 9.8, and no public exploit code was identified at time of analysis; vendor-released patch: Seroval 1.6.2.
Unauthenticated privilege escalation in the Divi Membership plugin for WordPress (versions up to and including 2.2.0) lets any site visitor create a brand-new account with the administrator role and, by also submitting auto_login=on, be logged in as that administrator within the same request - resulting in complete site takeover. The flaw (CVSS 3.1 base 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) sits in dmem_form_submit_handler(), which derives the new user's role by iterating every WordPress role and calling password_verify() against an attacker-supplied bcrypt hash in the form_id POST parameter, with no whitelist of permitted roles. The only prerequisite is a WordPress nonce, which is publicly emitted on any page that renders the Divi Membership registration form and is therefore readable by any unauthenticated visitor; no public exploit code has been identified at time of analysis.
Code injection in AgentScope v1.0.20 allows unauthenticated remote attackers to execute arbitrary commands if a host application exposes the execute_shell_command tool to attacker-influenced input. The assessed vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, so exploitation depends on that exposure/deployment condition; the NVD-style vector of AV:N/AC:L is more optimistic and conflicts with the assessed high attack complexity. No public exploit identified at time of analysis, and EPSS is low at 0.27% (17th percentile).
Cross-organization tool metadata read and modification in SuperAGI v0.0.14 allows an authenticated attacker in one tenant to access or alter another tenant’s tool records through /tools/get/{tool_id} and /tools/update/{tool_id} because the tool controller fails to verify organization ownership via the associated toolkit. The issue only creates cross-tenant impact in multi-organization deployments; single-organization installations have no other tenant to target, and authentication is mandatory in the independent assessment even though the supplied CVE vector lists PR:N. EPSS is low (0.23%, 13th percentile), no public exploit was identified at time of analysis, and the independently assessed CVSS (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) indicates materially lower priority than the headline 9.8.
Code injection in FinRobot 1.0.0's CodingUtils.create_file_with_code() allows unauthenticated remote attackers to execute arbitrary code when the agent pipeline is exposed to untrusted input, per the CVSS 3.1 vector (9.8 Critical, CWE-94). Exploitation requires that attacker-controlled text-such as a malicious prompt, document, or tool input-reaches the vulnerable function without neutralization; typical local or orchestrated deployments that only process trusted input materially reduce real risk. No public exploit identified at time of analysis, and EPSS is 0.21% (10th percentile), indicating low predicted exploitation activity.
Cross-tenant agent execution manipulation in SuperAGI up to v0.0.14 lets a remote authenticated user in one organization create or start execution records for agents owned by another organization through the /agentexecutions/add and /agentexecutions/add_run endpoints. Exploitation requires a multi-tenant deployment hosting more than one organization plus valid credentials in any one tenant, and the attacker must supply a caller-controlled agent_id-likely an enumerable sequential identifier-belonging to the victim organization. The independent assessment lowers the effective vector to authenticated (PR:L) with high integrity and low availability impact rather than unauthenticated 9.8; no public exploit has been identified, EPSS is low at 0.19% (8th percentile), and the main risk is cross-tenant integrity loss in agent execution records.
Arbitrary Python code execution in sinaptik-ai pandas-ai 3.0.0 allows remote, unauthenticated attackers to run attacker-controlled code through the CodeExecutor.execute path, giving full compromise of the host or container running the agent. The flaw is rated CVSS 3.1 9.8 CRITICAL (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and classified as CWE-94 code injection, meaning no privileges, credentials or user interaction are required per the assessed vector. EPSS is low at 0.16% (4th percentile) and there is no CISA KEV entry, so no public exploit identified at time of analysis, although a GitHub issue and a public gist referencing the bug are linked from the CVE record and should be reviewed as possible reproduction detail.
Out-of-bounds write in the WebGL implementation of Google Chrome prior to 154.0.8037.97 allows remote attackers to corrupt memory and potentially execute arbitrary code outside the browser sandbox when a victim loads a crafted HTML page. Exploitation requires user interaction - the target must visit or be redirected to an attacker-controlled page that exercises the WebGL path (enabled by default) - but no authentication or prior privileges are needed (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, 9.6, Chromium security severity Critical). No public exploit code or confirmed active exploitation was identified at time of analysis; Google credits its own Chrome team for the report, and a vendor patch is available, so the primary risk window is unpatched Chrome installations that continue to browse untrusted content.
Use-after-free in the FedCM (Federated Credential Management) component of Google Chrome can allow a remote attacker to execute arbitrary code outside the browser sandbox when a victim loads a crafted HTML page, with the only stated precondition being user interaction (CVSS UI:R); no authentication is required per the assessed vector (PR:N). The 9.6 score reflects a scope change (S:C) - successful exploitation escapes the renderer sandbox onto the underlying host - but signals diverge sharply: EPSS is only ~0.21% (11th percentile) and CISA's SSVC records Exploitation: none, so no public exploit has been identified at time of analysis. Google has released a fix in Chrome 154.0.8037.97, and Chromium rates the underlying issue High severity.
Sandbox escape and arbitrary code execution in Google Chrome on Windows (versions prior to 154.0.8037.97) arise from incorrect authorization in the browser's FileSystem component, letting a remote, unauthenticated attacker break out of the renderer sandbox and run code at the browser's privilege level after convincing a victim to open a crafted HTML page. Exploitation requires the user to visit an attacker-controlled page (CVSS PR:N/UI:R, scope changed) and is neither automatic nor zero-click; no public exploit identified at time of analysis, and CISA's SSVC rates exploitation as none with automatable flagged no. That said, the signal is mixed: 9.6 CVSS with total technical impact contrasts with a low EPSS of 0.21% (10th percentile) and a platform-restricted, interaction-dependent attack path.
OS command injection in the Studio Space startup validation script of Amazon SageMaker Distribution (2.x, 3.x, and 4.x lines, as used by Amazon SageMaker Unified Studio) allows an authenticated remote user with project contributor permissions to execute arbitrary commands inside another project member's Studio Space and steal that member's temporary execution-role credentials via a crafted connection resource property. Exploitation is a shared/multi-tenant insider or compromised-collaborator scenario rather than unauthenticated external access, and it is additionally gated by user interaction because the victim's Studio Space must start and run the vulnerable startup script for the injected command to reach that member. No public exploit identified at time of analysis; vendor-released patches exist for supported lines, and end-of-support minor lines will not receive a fix.
Code injection in Tinypool versions prior to 2.1.2 allows an attacker who first pollutes Object.prototype to load attacker-controlled JavaScript modules via the worker pool, potentially reading or modifying task data with host process privileges. The flaw is exploitable only when an application calls pool.run(task, options) with its own options object; calls that omit the options argument use a trusted default and are unaffected. No public exploit code or active exploitation has been identified, and the attack requires a pre-existing prototype-pollution vulnerability in the host application, making real-world exploitation condition-gated.
Unauthenticated command injection in the web administration interface of multiple Digi International product families (including IX, EX, TX, Connect IT, AnywhereUSB Plus, Connect EZ, XBee Hive, Digi 54xx/63xx, and Digi LR54) allows an attacker on an adjacent network segment to execute arbitrary operating system commands with root privileges via a crafted HTTP POST. The flaw is rated CVSS 9.4 (CVSS 4.0) and requires no authentication or user interaction; the independent assessment confirms AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H on CVSS 3.1. No public exploit code or CISA KEV active exploitation is identified in the supplied data, and the main limiting factors are that the admin web server must be enabled and reachable, and the attacker must be adjacent to the device rather than exploiting across the open internet.
Prototype pollution in the Tinypool npm package prior to 2.1.1 escalates to code execution: an unauthenticated remote attacker who can first pollute Object.prototype.execArgv or Object.prototype.env.NODE_OPTIONS (via a separate prototype-pollution flaw in the host application) has those inherited values copied into ThreadPool.options and forwarded to worker_threads.Worker, so every newly spawned worker loads attacker-supplied JavaScript through --import/--require preload arguments or NODE_OPTIONS. The payload executes with the host process's privileges, potentially exposing CI secrets, signing material, or build artifacts. The vendor assigns a CVSS 4.0 base score of 9.5 (AT:P - the attack requires an existing pollution primitive), exploitation is not confirmed as actively exploited (no CISA KEV listing) and no public exploit identified at time of analysis, although the upstream fix commit includes a regression test that demonstrates the execArgv/NODE_OPTIONS technique.
Discord libdave before 1.2.0 can accept an unauthorized participant into an end-to-end encrypted media session because it does not reject an MLS Welcome message whose group roster contains an unrecognized user ID. An attacker who controls the DAVE signaling path, such as a malicious or compromised Discord voice gateway or an equivalent position able to add, alter, or withhold MLS signaling, can exploit this to compromise the confidentiality and integrity of voice and video content; no client authentication or user interaction is required, but the signaling-path requirement raises the practical bar. A vendor patch is available in libdave 1.2.0, and no public exploit code was identified at time of analysis.
UTMStack deployments running versions before 11.2.16 can be fully taken over through an authentication bypass in the InternalApiKeyFilter, which accepts the shared Utm-Internal-Key header as proof of identity on every API endpoint rather than only on internal machine-to-machine routes. Tracked as CVE-2026-82042 (CWE-306, missing authentication for a critical function) and rated 9.3 under CVSS 4.0 with an equivalent CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, a single request that presents the correct key value grants full administrative API access without a user account, JWT, or user interaction, allowing the attacker to create accounts, manage users, exfiltrate data, and modify security rules. The decisive limiting factor is obtaining the secret itself: the key is a shared machine-to-machine credential held by sibling components such as agent-manager, the event-processor plugins, and the installer/updater, so realistic attack paths involve a leaked, default, or weak INTERNAL_KEY value, read access to the deployment environment, or compromise of a container that legitimately holds it. No public exploit code was identified at time of analysis and the flaw is not listed in CISA KEV, but the vendor-released fix in 11.2.16 hardens the filter with a fixed route allowlist, constant-time comparison, audit logging, and an optional INTERNAL_KEY_ALLOWED_CIDRS source-IP restriction.
Stack-based buffer overflow in the web management interface of Moxa MGate MB3170 and MB3270 series protocol gateways lets an attacker who already holds a valid, low-privilege read-only account corrupt program execution by submitting an over-length account_name value in an account-management request. Because the overwritten stack data can be leveraged to read device memory (including stored credentials), modify arbitrary memory, and crash or hang the device, the impact spans confidentiality, integrity, and availability of both the gateway and the downstream systems it bridges. No public exploit code or active exploitation has been observed (no CISA KEV listing; no public exploit identified at time of analysis), and the realistic barrier is the requirement for valid credentials rather than anonymity - though read-only accounts are often weakly protected or shared, which is why the issue still warrants urgent attention.
Heap-based buffer overflow in the C++ THeaderTransport of Apache Thrift before 0.25.0 lets a remote, unauthenticated attacker corrupt heap memory when an application enables the non-default ZLIB transform for outgoing frames and poorly compressible, peer-influenced data expands during compression. The copy into the write buffer happens without a bounds check, so oversized input overflows the heap allocation and, for large frames, also reads past the end of the transform buffer; impact scales with frame size and reliable code execution versus a crash depends on heap layout. No public exploit code has been identified at time of analysis, and because exploitation requires the ZLIB write transform precondition (without it the vulnerable copy path is never reached), this is a credible high-priority issue rather than an automatic emergency.
Unauthenticated path traversal in the Super Forms - Drag & Drop Form Builder plugin for WordPress (all versions up to and including 6.3.316) allows remote attackers to read the contents of arbitrary files on the hosting server through the plugin's parse_request handling of form file uploads. In the default configuration the optional 'file_upload_auth' setting is empty, so no credentials are needed, although the vulnerable code path is only reachable when a form with the file upload feature is enabled on the site. No public exploit code has been identified at time of analysis and the vulnerability is not confirmed actively exploited (no CISA KEV entry); the practical impact is information disclosure of sensitive files such as configuration and credential material rather than modification or denial of service, and the supplied severity signals are internally inconsistent (the vendor score of 9.1 asserts integrity and availability impact while our assessment finds confidentiality-only impact).
Heap-based memory corruption in Apache Thrift versions before 0.25.0 lets unauthenticated remote attackers who can send Thrift protocol messages to a parsing service trigger an integer-overflow-driven undersized heap allocation followed by an out-of-bounds write, resulting in a crash (denial of service) or potentially attacker-controlled memory corruption with high confidentiality, integrity, and availability impact. The affected surface is any service that deserializes untrusted Thrift traffic; the CVSS v4.0 score of 9.2 reflects network reachability and no required privileges or user interaction, while the AC:H and AT:P metrics (mirrored by the assessed CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) indicate that a successful exploit depends on crafting malformed messages that reliably hit the overflow condition and on runtime factors such as heap layout, memory limits, and the specific protocol/transport in use. No public exploit code or confirmed active exploitation was identified at time of analysis, but the framework's broad embedding in RPC and serialization pipelines makes prompt upgrade to 0.25.0 the clear priority. Services that never parse Thrift input from untrusted or remote peers are not reachable through this vector.
Authorization bypass in YesWiki before 4.6.7 lets unauthenticated remote attackers call admin-only API routes when the instance has public API mode enabled, enabling configuration overwrites via api/ci/update_config and listing, downloading, or deleting backup archives via api/archives. The vulnerability is a missing-authorization flaw in ApiService::isAuthorized(), rated 9.2 under CVSS 4.0 but with a significant prerequisite: public API mode is a non-default administrative setting, so default installations are not exploitable through this path. No public exploit code or confirmed active exploitation is identified in the available intelligence, but the impact is high for exposed instances and patching to 4.6.7 is the primary fix.
Path traversal (CWE-22) in image-downloader 4.3.0 allows an attacker who controls the download URL to write response data outside the configured destination directory, resulting in arbitrary file overwrite or corruption (CVSS 9.1, I:H/A:H, C:N). Per the CVSS vector, the flaw is network-reachable, low-complexity, unauthenticated, and requires no user interaction against the library, but exploitation is limited to applications that forward untrusted URLs to it. No public exploit code or active exploitation (CISA KEV) has been identified, and an upstream fix commit (fb44543) is available.
Crafted small-order or out-of-range Diffie-Hellman values passed to DHAgreement.CalculateAgreement in Bouncy Castle C# (bc-csharp) before 2.7.0 let an on-path attacker or malicious peer defeat the key authentication MTI/A0 is designed to provide and, when the local party reuses a static DH private key, learn that key modulo the small factors of p-1 - with full recovery possible in groups where p-1 has many small prime factors. The issue is unauthenticated (CVSS:3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N), and exploitation is not opportunistic: it works only where an application calls DHAgreement directly in an MTI/A0 two-pass flow, and it requires a protocol peer or on-path attacker able to inject a crafted 'message' or public-key value; higher-level Bouncy Castle protocol wrappers are unaffected. No public exploit code or confirmed active exploitation was identified at time of analysis, and the independent assessment rates real-world blast radius as narrower than the 9.1 CVSS 4.0 base score suggests because of the narrow direct-caller API surface, the static-key reuse prerequisite, and the dependence on weak group parameters for complete key recovery.
Path traversal in TaskingAI v0.3.0's DALL-E 3 image-generation tool lets an attacker who can invoke that tool write downloaded images to arbitrary locations on the server filesystem by injecting traversal sequences into the project_id parameter passed to save_url_image (CWE-22). The independent assessment scores this as an integrity-only file-write issue (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N), which is materially more conservative than the CNA's 9.1 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:N) that asserts no privileges required and full confidentiality plus integrity impact - the vector conflict matters because it changes who is realistically in scope. Exploitation is not unconditional: the DALL-E 3 tool must be enabled and configured with valid image-generation API credentials and the attacker must be able to drive that pipeline with a controlled project_id; EPSS is 0.14% (3rd percentile), there is no public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Stored cross-site scripting in the WHM Manage SSL Hosts interface of cPanel and WP Squared allows an authenticated attacker who can create or modify an SSL host entry to inject arbitrary script that executes in the browser of a higher-privileged operator - typically a server administrator - when that administrator later views the interface, giving the attacker arbitrary code execution in the victim's session context. The assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) confirms the prerequisites: a prior authenticated foothold and administrator user interaction, which is a low barrier in multi-tenant or reseller hosting environments where low-privileged accounts are routine. No public exploit code has been identified at time of analysis, and the issue is not confirmed actively exploited (CISA KEV); vendor-released patches are available in cPanel builds 11.110.0.148, 11.134.0.61, 11.136.0.45, 11.138.0.11 and WP Squared 11.138.1.13.
Stored cross-site scripting (XSS) in the WHM Mass Modify Accounts interface of cPanel and WP Squared allows an authenticated low-privilege WHM user (such as a reseller) to inject malicious script that executes when a higher-privileged operator views the affected interface, potentially leading to arbitrary code execution in the context of the victim's browser session. Affected versions include cPanel before 11.110.0.148, 11.134.0.61, 11.136.0.45, and 11.138.0.11, and WP Squared before 11.138.1.13. No public exploit identified at time of analysis, but vendor patches are available; the high CVSS score (9.0) is tempered by the requirement for an authenticated foothold and victim interaction.