Multimodal inference requests to vLLM deployments running versions prior to 0.28.0 can trigger a process-level assertion failure that takes down the shared serving engine, denying service to all concurrent users. The flaw is a state desynchronization in the default mirrored multimodal LRU cache: a media hash can be committed in the frontend MultiModalProcessorSenderCache during rendering before engine admission, but if the request is rejected, the engine-side MultiModalReceiverCache never stores the corresponding payload, so any later request reusing that hash reaches an assertion reading "Expected a cached item." Exploitation requires only the ability to submit requests to the service (PR:L, network-reachable, no user interaction), is confined to deployments serving multimodal models, and results in availability impact only; no public exploit code was identified at time of analysis and upgrading to 0.28.0 removes the issue.
Server-side request forgery in feelec-yishu feelcrm-os 1.0.0 allows unauthenticated remote attackers to make the application's server issue attacker-controlled HTTP requests through the getCurlData endpoint in App/Feelcrm/Index/Controller/GoogleController.class.php, by manipulating the 'url' argument. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms this is remotely reachable, low-complexity and requires no authentication or user interaction, while impact is uniformly LOW (VC:L/VI:L/VA:L) with no scope change, making it a limited-impact SSRF rather than a full internal pivot or credential-theft primitive. Publicly available exploit code exists and the issue was reported to the project, which has not yet responded with a fix; no confirmed active exploitation (CISA KEV) has been observed.
Server-side request forgery (CWE-918) in ChatGPTNextWeb NextChat up to and including 2.16.1 lets an unauthenticated, remote attacker who can reach the /api/proxy endpoint (the Proxy Fallback Handler) redirect the server's outbound HTTP requests to arbitrary hosts by supplying a crafted x-base-url header. Because the hostname is concatenated into the server-side fetch target without any validation against private, loopback, link-local, or cloud-metadata ranges, a successful attack can reach internal-only services or instance-metadata endpoints, with impact bounded by what the host's network position can actually reach. Publicly available exploit code exists (referenced GitHub issue #6813), but there is no confirmation of active exploitation; the fix is an unmerged pull request (#6884) that awaits acceptance, so no released patched version is independently confirmed and the risk should be treated as a genuine but medium-tier issue rather than an emergency.
SQL injection in the girishsaraf Online-Appointment-Booking-System (rolling release) lets unauthenticated remote attackers manipulate the countryid, townid, cid, didval, or cidval parameters in get_town.php to read or alter database contents with low confidentiality, integrity, and availability impact per the assessed vector. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation. The primary real-world limiting factor is deployment scarcity: this is an obscure single-maintainer PHP project unlikely to be exposed at scale, though any network-reachable default instance exposing the AJAX endpoint appears exploitable.
Unauthenticated SQL injection in the patient login handler of girishsaraf's Online-Appointment-Booking-System lets remote attackers manipulate the uname and psw parameters processed by mysqli_query in cover.php. Publicly available exploit code exists - the flaw was disclosed via a public GitHub issue (issue #5) - and the maintainer has not responded or shipped a fix, so every deployment of the rolling-release project is potentially affected. The assessed CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) confirms no credentials, user interaction, or special configuration are needed; the practical limiting factor is exposure, as this is a niche open-source project with few live instances, so CISA KEV does not list it and the overall risk is low-to-moderate and opportunistic rather than urgent.
Unauthenticated SQL injection in onetwothreeneth HospitalManagementSystem (PHP web app) lets a remote attacker inject arbitrary SQL through the transaction_id argument handled by the get function in print.php, allowing read and limited modification of the underlying database. The CVSS v4.0 vector (AV:N/AC:L/PR:N/UI:N, E:P) confirms remote, unauthenticated exploitation with no user interaction, and a publicly available exploit code exists (a proof-of-concept was filed as GitHub issue #11). Exploitation is constrained less by technique than by exposure: the application is an obscure open-source project with limited real-world deployment, so real-world risk is real but lower priority than the numeric score alone suggests.
Hard-coded JWT signing key in Lybbn Django-Vue-Lyadmin through version 3.2.12 allows remote attackers who know the publicly documented default SECRET_KEY in backend/application/settings.py to forge valid JSON Web Tokens, impersonating arbitrary users and bypassing authentication (CWE-321). Publicly available exploit code exists, but exposure is context-dependent: the maintainer states the key is documented and must be changed manually before deployment, so any instance that rotated SECRET_KEY to a private value is not affected. Our independent assessment rates this CVSS 3.1 9.1 (network-reachable, no authentication or user interaction required against an unremediated instance) versus the CVSS 4.0 5.5 recorded by VulDB, but the decisive limiting factor is operator configuration rather than attacker capability.
Improper authorization in onetwothreeneth HospitalManagementSystem (Account Administration component) allows remote attackers to modify arbitrary user subaccounts by manipulating the user_id parameter in the update_subaccount function of php/controller.php. Public exploit code exists, and the independent assessment indicates the flaw is an IDOR-style defect that likely requires an authenticated session, with low impact to confidentiality, integrity, and availability. No vendor patch is available; the project was notified but has not responded, and version details are unavailable due to the rolling release model.
SQL injection in SourceCodester Online Reviewer Management System 1.0 allows an attacker to manipulate the SQL statement executed by the administrative assessment handler at /reviewer_0/admins/assessments/Subject/btn_functions.php?action=update by supplying crafted input in the 'Subject' argument, enabling unauthorized read and modification of data stored by the application. Publicly available exploit code exists (referenced through a GitHub proof-of-concept issue linked from the VulDB entry), but there is no CISA KEV listing confirming active exploitation, and no EPSS signal was provided. Impact is bounded rather than catastrophic: our independent assessment (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) rates confidentiality, integrity and availability effects as low, and exploitation likely requires an authenticated admin/reviewer session to reach the /admins/ path despite the vendor's CVSS 4.0 vector claiming PR:N; the dominant real-world limiter is that this product is rarely run in production.
Unauthenticated SQL injection in the signup.php registration handler of girishsaraf Online-Appointment-Booking-System lets remote attackers inject arbitrary SQL through the 'fname' form parameter, potentially reading or altering the application's backend database. The flaw carries a CVSS v4.0 base score of 6.9 (CVSS:3.1 equivalent assessed as 6.9, AV:N/AC:L/PR:N/UI:N with low confidentiality, integrity and availability impact) and publicly available exploit code exists, though there is no evidence of confirmed active exploitation (CISA KEV). No official patch is available: the project ships as a rolling release, version information is unavailable, and the maintainer was notified via GitHub issue #9 but has not responded, so the practical risk is driven mainly by exposure of the niche open-source application rather than by attack complexity.
Unauthenticated SQL injection in the Doctor Search endpoint (locateus.php) of girishsaraf's Online-Appointment-Booking-System lets remote attackers inject arbitrary SQL through the 'doctorname' request argument, potentially reading or altering data reachable by the application's database account. Because the project uses a rolling release model, no fixed version is published and the issue report filed against the upstream repository remains unanswered, so every deployed instance that exposes locateus.php over the network is potentially affected. Publicly available exploit code exists (CVSS 4.0 E:P), though the vulnerability is not confirmed as actively exploited and requires the niche PHP application to be publicly reachable for real-world abuse; the vendor has issued no patch.
Unauthenticated SQL injection in the administrative login handler (Admin/mlogin.php) of girishsaraf's Online-Appointment-Booking-System allows remote attackers to manipulate the uname and pass parameters, which are passed unsanitized into mysqli_query. Exploitation requires only network reachability to the admin login endpoint - no credentials, user interaction, or non-default configuration - making it trivially automatable against any exposed instance; the CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) is rated 6.9, and publicly available exploit code exists (reported via VulDB). The vendor was notified through a GitHub issue but has not responded, and because the project follows a rolling-release model there is no fixed version to upgrade to, so no vendor-released patch is identified at time of analysis. The project is a rarely deployed open-source PHP application, so real-world exposure is limited to internet- or network-reachable instances.
Unauthenticated SQL injection in onetwothreeneth HospitalManagementSystem (rolling release, confirmed vulnerable through commit 9ef91ed6007314b6473110ed699dff76d158f61d) lets remote attackers inject arbitrary SQL through the transaction_id parameter of transaction_details.php, exposing or altering database contents such as patient and billing records. Publicly available exploit code exists (disclosed via a public GitHub issue), and exploitation requires no authentication or user interaction, though its CVSS 4.0 base score of 6.9 reflects limited confidentiality, integrity, and availability impact rather than total compromise. There is no CISA KEV entry confirming active exploitation and no vendor patch: the project was notified through an issue report but has not responded, and the rolling-release model means no fixed version has been published.
SQL injection in onetwothreeneth HospitalManagementSystem lets remote attackers execute arbitrary SQL through the transaction_idS parameter handled by php/controller.php, allowing limited confidentiality and integrity impact (CVSS 4.0 base 5.5). Publicly available exploit code exists, but there is no confirmed active exploitation (CISA KEV), and the project has not released a fix or responded to the report. The CVSS vector indicates unauthenticated reachability (PR:N), though the advisory does not confirm whether the vulnerable endpoint is accessible before application login, so deployed instances that require a session may limit the attack to authenticated users.
SQL injection in itsourcecode Online Admission System Project 1.0 exposes the admin login handler at /admin/login1.php, where the User parameter is used in a database query without adequate sanitization. Remote unauthenticated attackers can submit crafted input to the login form and manipulate SQL statements, with limited confidentiality, integrity, and availability impacts per the provided CVSS 4.0 score of 6.9 and the independent CVSS 3.1 assessment. Publicly available exploit code exists, no CISA KEV active exploitation is confirmed, and the realistic exposed population is small because this is a rarely deployed sample application.
SQL injection in SourceCodester Online Reviewer Management System 1.0 lets unauthenticated remote attackers execute arbitrary database queries through the 'Subject' GET parameter of /reviewer_0/admins/assessments/Subject/btn_functions.php when action=course. Per the CVSS v4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N, E:P) no credentials or user interaction are required against a default deployment, and publicly available exploit code exists (a proof-of-concept was published via the VulDB-linked GitHub issue); there is no confirmed active exploitation (CISA KEV). Impact is scoped to confidentiality, integrity and availability of the application's backend data at a low level, making this a moderate-severity, exposure-dependent risk rather than a broad remote-takeover event.
Unauthenticated SQL injection in the delivery-partner registration page (delivery/deliverysignup.php) of kishor-23's food-waste-management-system PHP project allows remote attackers to manipulate the username, email, and location form fields to inject arbitrary SQL. The flaw affects the project as shipped on its rolling-release branches (no fixed version details are published), and publicly available exploit code exists, though there is no indication of confirmed active exploitation. Per the assessed impact, an attacker can achieve only partial confidentiality, integrity, and availability loss rather than full database takeover, and exploitation requires that a network-reachable instance of this niche application be deployed.
Unauthenticated SQL injection in the kishor-23 Food Waste Management System allows remote attackers to tamper with database queries through the Admin Registration handler at admin/signup.php, manipulating the email, username, and location parameters. Because the vulnerable endpoint is the public signup form, no authentication, user interaction, or special configuration is needed - the only practical prerequisite is that the application be network-reachable. Publicly available exploit code exists (documented in the project's GitHub issue #15 and catalogued by VulDB), and the vendor has not responded to the report; no CISA KEV listing has been observed, so this is exploit-code availability rather than confirmed active exploitation. Per the authoritative assessment the impact is bounded to Low confidentiality, integrity, and availability with no privilege escalation or system-wide compromise implied, making this a low-to-moderate real-world priority driven by the small deployment footprint of an open-source project unlikely to be exposed in production.
Unauthenticated SQL injection in the kishor-23 Food Waste Management System (PHP web application) lets a remote attacker inject arbitrary SQL through the delivery_person_id and order_id parameters handled by delivery/deliverymyord.php, permitting partial reading and modification of the application's database. Tracked as CVE-2026-105230 (CWE-89) and scored 6.9 under CVSS 4.0, with an independently assessed equivalent of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, the flaw requires no credentials or victim interaction and only network reachability of the exposed endpoint; publicly available exploit code exists and the upstream issue report has gone unanswered. Because the project ships as a rolling release with no tagged versions, neither affected nor patched releases can be enumerated, and no vendor fix is available at time of analysis.
SQL injection in itsourcecode Online Admission System 1.0 lets remote attackers manipulate the ID argument processed by /admin/examinee.php and inject arbitrary SQL into the application's database queries, potentially exposing or altering stored admission records. Exploitation is assisted by publicly available exploit code (publicly available exploit code exists; VulDB submission and a public GitHub issue reference the flaw) and the CVSS 4.0 vector rates it 6.9 with E:P (proof-of-concept maturity), but there is no CISA KEV entry, so this is not confirmed actively exploited (CISA KEV). The practical limiting factor is reachability: the vulnerable script sits under /admin/, so while the provided CVSS 4.0 vector claims PR:N/UI:N, deployments that enforce an admin login would require valid or bypassed admin credentials, which our independent assessment reflects by modeling the flaw as PR:L with high confidentiality impact.
SQL injection in SourceCodester Online Reviewer Management System 1.0 lets remote attackers manipulate the Title argument in /reviewer_0/admins/assessments/activities/btn_functions.php?action=update to alter database queries, and publicly available exploit code exists. The supplied CVSS 4.0 vector is 6.9 with PR:N, but the independent assessment notes the '/admins/' path strongly implies administrative authentication; if that login gates the endpoint, exploitation requires authenticated admin access. Because the product is niche and real-world exposure depends on whether the admin area is reachable, this is assessed as a low-to-moderate priority despite the public exploit.
Unauthenticated SQL injection in itsourcecode Online Admission System 1.0 allows remote attackers to manipulate the 'User' login argument in /login1.php to execute arbitrary SQL queries against the underlying database. Publicly available exploit code exists, but the product is a niche educational PHP application with limited real-world deployment, and the assessed impact is Low (VC:L/VI:L/VA:L), indicating partial rather than full database compromise. Signals are mixed and lean toward low-to-moderate real-world risk despite the network-facing, unauthenticated nature of the flaw.
SQL injection in UNION HospitalManagementSystem lets remote, unauthenticated attackers manipulate the patient_id parameter in patient_info.php to read or modify limited data in the underlying database. The flaw affects a rolling-release PHP project, with publicly available exploit code and no fixed version identified because the maintainers have not responded; exploitation requires a deployed, reachable instance. Despite the medium CVSS, real-world priority is low because this is a small open-source hospital management system without an enterprise footprint.
Unauthenticated guests can force execution of any published automation task in TF Content for Joomla versions 2.9.0 through 2.9.4 by supplying a task's numeric ID to the records.custom_action endpoint. The extension lacks authentication, ACL, CSRF, task-trigger, content-binding, and cron-token enforcement, allowing immediate dispatch of the configured executor. No public exploit identified at time of analysis, and the risk is assessed as a genuine but mid-tier priority.
Local file disclosure in Docling's OpenDocument backend (versions 2.107.0 through 2.120.3) allows an attacker-supplied ODF file to force the parser to read arbitrary filesystem paths. When a draw:image element's xlink:href references a part missing from the document archive, the vulnerable backend treats the href as a local filesystem path without a scheme check or extraction-directory confinement, then embeds Pillow-decodable files into the converted output; non-image paths still leak existence information through read success or failure. Exploitation requires a victim or automated pipeline to convert a malicious ODF document (UI:A) in an unauthenticated network-reachable context (PR:N), and no public exploit code or CISA KEV active-exploitation entry has been identified at time of analysis. Note that on affected versions this code path bypassed the enable_local_fetch setting that other Docling backends honor, so the read occurred regardless of that configuration. The vulnerability is fixed in 2.120.3.
Information disclosure and entitlement bypass in Docker Buildx Bake allows an attacker-supplied Bake definition to read files that should have required an explicit fs.read entitlement approval. An unauthenticated attacker can craft a definition that exposes a readable file via a pathless secret whose ID is interpreted as a client-side pathname, or that consumes a local OCI image layout outside the project because entitlement validation checks a different path representation than the one actually used. Exploitation requires the victim to run an untrusted Bake definition (CVSS 4.0 AV:N/AC:L/PR:N/UI:A, assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N), impact is read-only with no code execution, write, or availability loss, and no public exploit has been identified at time of analysis; environments that build only their own trusted first-party Bake definitions are not exposed. This is a genuine but moderate-priority entitlement-bypass issue rather than a critical remote threat.
Authorization bypass in CozyThemes Cozy Blocks WordPress plugin versions up to 2.2.23 allows unauthenticated remote attackers to access data they are not authorized to view via an insecure direct object reference (IDOR). The flaw, rated CVSS 4.0 6.9 by Patchstack, requires no authentication or user interaction and results in low confidentiality impact only. No public exploit code has been identified at time of analysis.
TF Content 2.9.0 through 2.9.4, a Joomla content extension distributed by joomlafry.com, allows unauthenticated remote attackers to create and modify arbitrary TF Content records because its public RecordController performs no authorization check and its shared frontend save controller writes the raw jform array without filtering it through the configured form. By pulling a valid Joomla token from the public login form and supplying an existing record ID, a guest - with no account, privileges, or user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N) - can mass-assign fields such as published, access, and created_by on any TF Content row. Impact is bounded to low confidentiality, integrity, and availability effects on TF Content data rather than full site compromise; no public exploit code or confirmed active exploitation was identified at time of analysis, placing this as a genuine but moderate-priority issue.
Authorization bypass in Themeisle's AI Chatbot for WordPress - Hyve Lite plugin (versions through 2.0.2) allows unauthenticated remote attackers to modify chatbot-related records they do not own by supplying a user-controlled object identifier, per the assessed CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. This is a moderate-severity IDOR (CWE-639) tracked as CVE-2026-97305 and scored CVSS 4.0 6.9; exploitation is limited to a Low integrity impact, with no confidentiality or availability effect, and no public exploit was identified at time of analysis.
Information disclosure in the Zabbix server's JavaScript preprocessing engine (embedded Duktape interpreter) allows an authenticated 'limited administrator' account to read raw heap memory and potentially expose data belonging to other concurrently running preprocessors that the account should not be able to access. The root cause is an out-of-bounds read (CWE-125) in the JavaScript preprocessing path; exploitation requires only the ability to define or run a JavaScript preprocessing step, and there is no integrity or availability impact. No public exploit code was identified at time of analysis and there is no CISA KEV entry; this is a moderate-severity privilege-boundary/tenant-isolation issue (CVSS 4.0 base 6.9; assessed CVSS 3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) rather than an unauthenticated remote compromise.
Unauthenticated information disclosure in GROWI (CVSS 5.3) lets a network attacker read files attached to non-public pages when the instance's file upload setting is configured as 'Local' rather than a cloud or object-storage backend. Exploitation requires no credentials and no user interaction (PR:N/UI:N), but the impact is limited to low-confidentiality exposure of files that already reside on the server, with no write access or code execution. No public exploit code has been identified at time of analysis and the flaw is not reported as confirmed actively exploited (CISA KEV); the 'Local' storage precondition is the primary factor bounding the exposed population.
Zabbix Server and Zabbix Proxy accept the active-agent heartbeat message without validating the configured PSK or TLS certificate, so anyone who can reach the trapper port (default TCP 10051) and knows or guesses a valid host identifier can report an arbitrary host running an active agent as available. The resulting impact is integrity-only - falsified host availability state - with no data exposure, no code execution and no denial of service; our independent assessment (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) matches the vendor's CVSS 4.0 base score of 6.9 in treating this as a moderate, non-emergency issue. No public exploit code or confirmed active exploitation was identified at time of analysis.
A malicious frontend can crash the BuildKit daemon (buildkitd) by submitting a crafted LLB (Low-Level Build) definition, causing a panic that terminates the daemon and interrupts all running builds. The vulnerability affects BuildKit versions prior to v0.33.1 and requires the attacker to have access to the build submission interface; no authentication is needed (PR:N) and no user interaction is required (UI:N), but the attack vector is local/adjacent (AV:L), making shared or multi-tenant build infrastructure the primary risk. No public exploit code has been identified at the time of analysis, and the vendor has released a patch in v0.33.1.
Denial of service in Moby BuildKit allows anyone able to submit an LLB build definition to a buildkitd daemon to panic and terminate the daemon process, aborting every build running on that instance. The flaw is an out-of-bounds array index (CWE-129) reached during processing of an attacker-controlled low-level build graph, and it affects all BuildKit releases prior to v0.33.1, including BuildKit embedded in Docker Engine and CI/build-service deployments. The assessed impact is availability-only (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, 6.9), the attack surface is the local build API/daemon socket rather than arbitrary network exposure, and severity scales with multi-tenancy - a shared CI runner or multi-tenant build service loses all concurrent builds from a single crafted definition. Vendor patch v0.33.1 is available; no public exploit code was identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV).
Stored cross-site scripting in Ghost CMS versions 4.0.0 through 6.66.x allows an attacker to plant malicious JavaScript on the victim site's own domain by convincing an Administrator to import a crafted content archive containing an unsanitized SVG image. Per the CVSS vector (AV:N/AC:H/PR:N/UI:R), the attacker does not need credentials but the attack is not self-service: it depends on successful social engineering of a privileged Administrator to run the import (UI:R), and impact on staff users' admin sessions further depends on that stored SVG being rendered in an authenticated admin context. Exploitation is therefore conditional rather than opportunistic, and no public exploit code has been identified at time of analysis (no CISA KEV listing).
Local privilege escalation in MediaTek's meta component affects numerous MediaTek chipsets (including MT6789, MT6895, MT6985, MT8195, and others listed in EUVD-2026-92196) and allows an attacker with physical access to the device to trigger an out-of-bounds write due to a missing bounds check, achieving high confidentiality and integrity impact. No authentication, existing execution privileges, or user interaction are required once physical access is obtained. No public exploit has been identified at time of analysis; the physical access prerequisite limits remote exploitation and confines realistic abuse to scenarios such as lost or stolen devices, border inspection, or supply-chain tampering.
Physical access to a Mercusys AC12 V2 router's printed circuit board lets an attacker take full control of the device: the UART debug header on the board is exposed with no authentication gate or lockdown, so wiring a serial adapter to the correct pins yields an interactive, root-level console from which arbitrary code can be executed (CWE-1299, unprotected alternate hardware interface). The CVSS 3.1 base score of 6.8 (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects complete loss of confidentiality, integrity, and availability, tempered only by the requirement for hands-on hardware access - there is no network, Wi-Fi, or LAN attack path, so remote exploitation is not possible. No confirmed active exploitation and no public exploit code have been reported, and the EPSS score is 0.16% (4th percentile), consistent with a flaw whose realistic exposure is limited to supply-chain, device-resale, lost/stolen, or evil-maid scenarios.
LibreOffice Calc fails to confine file operations when processing an external data-source link to an embedded Firebird database, allowing a crafted document to write files to any location the user has write permission to. Exploitation requires the victim to open the malicious spreadsheet (user interaction) and does not by itself escalate privileges; no public exploit or active exploitation has been identified at time of analysis. The vulnerability is a moderate-severity, user-interaction-dependent file-write issue (CVSS 6.8) rather than a high-priority remote threat.
Improper validation of integrity check values in HP ThinPro thin-client OS images allows an attacker who already has physical access to a device to supply tampered data that the system fails to verify, resulting in high confidentiality and integrity impact (CVSS:3.1 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N; vendor CVSS 4.0 base 6.8). Organizations are affected if they run HP ThinPro 8.1 prior to Service Pack 10 or HP ThinPro 9 prior to Service Pack 3, typically on kiosks, lobbies, and shared VDI endpoints where physical access is loosely controlled. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, so the realistic risk is moderate and tightly constrained by the mandatory physical-access prerequisite rather than by remote exposure.
Denial of service in the BuildKit Dockerfile frontend (buildkitd) allows a user who can submit a build context to exhaust the daemon's memory and terminate it by placing an oversized Dockerfile or .dockerignore file in that context, because these files were loaded into memory without any size limit (CWE-789). The assessed vector (AV:L/PR:L) indicates low-privilege, local/context-level access is required to submit the build, so the practical risk is concentrated on shared or multi-tenant buildkitd instances such as CI/CD pipelines and hosted build services, where one submitter's crash interrupts other users' builds, while a single-user workstation daemon only harms its own environment. Impact is bounded to availability with no code execution, data disclosure, or integrity impact, no public exploit code or CISA KEV confirmation was identified at time of analysis, and the vendor has released BuildKit v0.33.1, which rejects such files above 16 MiB.
Cross-workspace project modification in Plane prior to 1.4.0 allows an authenticated administrator of one workspace to alter project metadata and configuration in another workspace by supplying a known target project UUID. The vulnerability stems from an IDOR (CWE-639) in the project partial-update endpoint, which validates the caller against the workspace slug in the URL but loads the project globally without binding it to that workspace. Exploitation requires admin privileges and knowledge of the victim project's UUID, and impact is limited to multi-tenant deployments; no public exploit identified at time of analysis.
Opening a crafted LibreOffice Calc document can cause a local text file on the victim's machine to be read into the spreadsheet, leaking its contents to anyone who later views or receives the file. The document must embed a saved external data link of the sql type that points at a local folder of text files as a database; vulnerable versions automatically restore that link at load time, whereas fixed versions restore only the csv, html and xml data providers. Exploitation requires the victim to open the attacker-supplied document (user interaction, UI:P in the vendor's CVSS 4.0 vector of 6.7, and UI:R in the independent CVSS 3.1 assessment), so exposure is limited to targeted social-engineering scenarios where the attacker also knows or guesses a useful local path and has a way to retrieve the populated sheet; no public exploit identified at time of analysis and the issue is not in CISA KEV.
An out-of-bounds read/write flaw in MediaTek's ccci (cross-core/modem control) component allows an authenticated local attacker who already holds System privilege to corrupt memory, potentially leading to information disclosure, crashes, or further privilege escalation. Exploitation requires local access and, per the vendor description, user interaction - though the vendor CVSS vector omits UI:R - and is limited to specific MediaTek chipsets (MT6880, MT6890, MT6980D, MT6990, MT6986, MT6986D, MT6813, MT6988, MT2735, MT2737). No public exploit code has been identified, SSVC reports exploitation: none and not automatable, making this a high-severity but low-urgency issue due to its high-privilege prerequisite.
Environment-variable and INI-file value disclosure in LibreOffice lets a crafted document exfiltrate host configuration data to a remote server when the victim opens it, because document-supplied URLs can still be expanded in code paths that the earlier CVE-2024-12426 fix missed. The incomplete fix overlooked XForms instance data and the Calc CSV and SQL data providers, which continue to resolve internal-scheme URLs originating from the document. This is a moderate-severity, confidentiality-only flaw (CVSS 4.0 base 6.7, CWE-200) that requires the victim to open an attacker-supplied file, with no public exploit identified at time of analysis; the independent assessment scores it as a local-vector, passive-user-interaction issue with no impact on integrity or availability.
LibreOffice Calc on affected versions automatically fetched external CSV data links embedded in a spreadsheet while the document loaded, so an attacker-crafted Calc file could read a local file into a sheet or force a request to a host of the document author's choosing (SSRF, CWE-918). Exploitation is local and interaction-gated - the attacker must deliver the malicious document and the victim must open it - and the flaw affects confidentiality only, with no impact on integrity or availability. No public exploit code and no confirmed active exploitation were identified at time of analysis; the vendor addressed it by placing external data links under the same link-update control that governs other spreadsheet links.
Server-side request forgery in LibreOffice on Linux can expose local files and internal or remote URLs when a document links to a crafted HLS media playlist and the victim opens it and permits link updates. LibreOffice relies on the GStreamer media backend on Linux to play linked audio and video; a malicious playlist's listed resources were fetched while the document loaded and their contents could be written into the document, yielding confidentiality impact (VC:H, SC:H) with no integrity or availability impact in the assessed CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N). The issue is moderate severity and interaction-dependent rather than an urgent priority; no public exploit code and no confirmed active exploitation (no CISA KEV listing) were identified at time of analysis, and exploitation is constrained to Linux installations using the GStreamer backend.
Local privilege escalation in MediaTek venc on multiple chipsets allows an attacker who already possesses System-level privileges to escalate to kernel-level code execution via a type confusion that leads to an out-of-bounds write. The vulnerability requires local access and high privileges (PR:H) with no user interaction, and no public exploit has been identified at the time of analysis. This is a post-compromise escalation step, not a remote or initial-access vector.
Local privilege escalation in MediaTek's mtee (MediaTek TEE) allows an attacker who already holds System privilege to exploit a missing bounds check, causing an out-of-bounds write that can elevate privileges on affected MediaTek chipsets. The vulnerability requires local access and high privileges (PR:H) with no user interaction, and affects 25 listed MediaTek chipset models including MT8196, MT6768, MT6769, MT6833, MT6877, MT8186, and MT8188. No public exploit code or active exploitation has been identified at time of analysis.
Local privilege escalation in MediaTek mtee allows a local attacker who already holds Android System privilege to exploit a CWE-843 type confusion and elevate code execution on affected MediaTek chipsets; user interaction is not required. The flaw is local-only (AV:L) and requires high privileges (PR:H), so it cannot be used for initial access or remote compromise and is primarily useful as a chain component after an attacker has already obtained a System-level foothold. MediaTek has published Patch ID ALPS11383899 in its October 2026 bulletin, and no public exploit identified at time of analysis.
Local privilege escalation in MediaTek's vdec (video decoder) component allows an attacker who already holds System privilege on an affected chipset to supply crafted input that triggers a type-confusion-driven out-of-bounds write, corrupting memory and achieving high confidentiality, integrity, and availability impact at a higher privilege level. The issue affects 24 MediaTek SoCs including MT8395, MT6833, MT6789, MT8195, MT6877, MT8189, MT8391, MT8676, MT8678, MT8793, MT8799, MT6855, MT8367, MT8781, MT8196, MT8910, MT8668, MT8188, MT8792, MT6769, MT6768, MT8186, MT8788E, and MT2718, across mobile, tablet, and embedded platforms. Exploitation is local only, requires the System-privilege prerequisite, and needs no user interaction; the CVSS 3.1 base score is 6.7 (MEDIUM) and no public exploit was identified at time of analysis, so the practical risk is a post-compromise escalation primitive rather than a remote entry point.