Unauthenticated remote code execution in LMCache through 0.5.5 allows network-reachable attackers to execute arbitrary Python and operating-system commands as the LMCache process by posting scripts to the /run_script endpoint; the endpoint's existing __import__ guard is bypassed via the injected FastAPI app object, which exposes real builtins (CWE-306, CVSS 9.3 v4.0 / 3.1 AV:N/AC:L/PR:N/UI:N). No public exploit code or confirmed in-the-wild activity has been identified at time of analysis, though the vulnerability details and vendor advisory are public. The primary limiting factor is deployment exposure: exploitation requires the internal API HTTP server to be enabled and bound to a network-accessible interface rather than restricted to localhost or a trusted management network.
Cross-host request replay in AsyncHttpClient (AHC) before 3.0.13 and 2.16.1 can disclose the original origin's request path, Host header, Authorization credentials, or even a plaintext request to a completely different destination when an application's ResponseFilter fails over or retries a request onto a different base origin (host, scheme, or port) or downgrades HTTPS to HTTP. The assessed vector is unauthenticated from the network perspective (PR:N, AV:N), but exploitation hinges on a concrete application-side prerequisite: a ResponseFilter (or equivalent retry/failover code path) that replays requests across origins - default AHC usage with same-host retries is unaffected, and AC:H/AT:P reflect the specific sequencing that must occur. No public exploit code and no confirmed active exploitation were identified at time of analysis, and because the impact depends on configuration rather than an attacker-reachable endpoint, the CVSS 4.0 score of 9.4 and the independent CVSS 3.1 assessment point in different directions; prioritization should be driven by whether a cross-host replaying filter is deployed.
Email HTML injection in the MetForm WordPress plugin before 4.3.1 lets unauthenticated attackers submit crafted form-field values that are inserted into the HTML body of administrator and submitter notification emails without sanitization or escaping, allowing arbitrary markup to be rendered in the recipient's mail client. Successful exploitation yields limited confidentiality and integrity impact (CVSS 3.1 base 5.4, AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) and is confined to email-rendered content - spoofing or phishing-style content rather than server-side execution - because the injected markup takes effect only when a recipient opens the notification. Publicly available exploit code exists (WPScan published the finding and a proof-of-concept reference), and no public exploit identified at time of analysis would be misleading here; there is no CISA KEV listing, so this is treated as a moderate-priority, non-actively-exploited issue.
Session fixation and cross-user session reuse in the Apache Jackrabbit WebDAV server lets remote attackers ride on a cached authenticated session, yielding high confidentiality and integrity impact with no credential check performed. The flaw affects Jackrabbit 2.20.0 through 2.20.17, 2.22.0 through 2.22.4, and 2.23.0 through 2.23.5, and is triggered whenever a request carries a Lock-Token, TransactionId, SubscriptionId, or If-header token value that matches a token bound to a session already held in the server's authenticated session cache. Per the vendor CVSS 4.0 vector the attack is network-reachable, requires no privileges (PR:N) and no user interaction (UI:N), with the practical limiting factor being that the attacker must obtain or guess a token that currently maps to a live cached session; no public exploit code has been identified at time of analysis, and the product does not confirm active exploitation.
Unauthenticated remote code execution in Manacle Multi-Tenant ERP allows attackers to execute arbitrary code or manipulate application data through unsafe deserialization of user-controlled input (CWE-502). The vulnerability (CVE-2026-107104) is rated critical with a CVSS 4.0 score of 9.3 and requires no privileges or user interaction to exploit (PR:N/UI:N). No public exploit or active exploitation is known at time of analysis, but the high impact to confidentiality and integrity, combined with network reachability, makes this a high-priority risk.
Unauthenticated remote attackers who can reach the lmadmin management service can seize a privileged administrator session by abusing a hardcoded authentication path in its SOAP handler, granting full control over the license server's administrative functions. The flaw is rated CVSS 9.3 by the reporter and was independently assessed as CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, meaning no credentials or user interaction are required and the confidentiality, integrity and availability impacts are all high. No public exploit code or confirmed active exploitation was identified at time of analysis, but the low complexity, network vector and administrative payoff make this a genuine high-priority issue for any organization exposing lmadmin beyond a trusted management network.
Unauthenticated SQL injection in the Manacle Multi-Tenant ERP System's API endpoint allows remote attackers to inject arbitrary SQL through crafted input, giving high impact to both data confidentiality and integrity (CVSS 4.0 score 9.3; assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:N). The affected CPE (cpe:2.3:a:manacle_technologies:multi-tenant_erp_system:*) carries no version constraint, indicating the flaw is described against the product as a whole rather than a bounded release range, and no fixed version is named in the advisory. There is no public exploit identified at time of analysis and no CISA KEV listing; no EPSS score was supplied in the source data, so likelihood of exploitation should be judged from exposure alone.
Cross-site scripting in ASUS router web-management modules lets a remote, unauthenticated attacker read DOM information from the administrator's browser session, modify router settings, and drive the device into a denial-of-service condition when a logged-in administrator is induced to visit a crafted URL. The vendor assigns this CWE-79 flaw a CVSS 4.0 base score of 9.3 (Critical), and the weakness affects ASUS router firmware generally per the wildcard CPE, with no specific model or firmware versions enumerated in the available data. Successful exploitation still depends on social engineering and on a legitimate administrator being actively authenticated to the management interface at the time the link is opened; no public exploit code was identified at time of analysis and no EPSS score or CISA KEV listing is present in the source data.
Guest-to-host code execution in VMware Workstation and Fusion 25H2 and 26H1 lets an attacker who already holds local administrative privileges inside a guest VM equipped with the VMXNET3 virtual network adapter escape the hypervisor isolation boundary and run code on the host. The flaw is an integer overflow (CWE-190) in the virtual NIC's device emulation and carries a CVSS 9.3 with Scope:Changed, placing it in the most severe class of hypervisor defects; it is not remotely reachable, since the attacker must first obtain a guest admin foothold and the target guest must use a VMXNET3 adapter. No public exploit code has been identified at time of analysis, and patched builds are available as 26H1u1 for both products.
Unauthenticated authentication bypass in Manacle Technologies' Multi-Tenant ERP System lets a remote attacker forge payment-callback requests to mint a valid authenticated session as an arbitrary user, yielding full read and write access to that account and, given the multi-tenant design, potentially to data across tenant boundaries. Per the independent assessment (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) this is a genuine high-priority issue rather than an inflated score: exploitation requires no credentials and no user interaction, but it does depend on the payment-callback API being network-reachable and on the payment-integration feature being enabled and in use. No public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV); the CPE data does not pin specific affected versions.
Blind SQL injection in the WordPress WP Data Access plugin through version 5.5.82 could allow a remote attacker to read sensitive database contents; the supplied CVSS vector rates it 9.3 with PR:N, indicating network-reachable unauthenticated exploitation, though the provided advisory data does not independently corroborate the unauthenticated condition and comparable plugin SQLi often requires at least subscriber-level access. This is a genuine high-priority issue by severity signals but with important caveats, and no public exploit identified at time of analysis.
Unauthenticated attackers can read WooCommerce product sales counts, exact stock levels, and private product meta from WordPress sites running the WPCafe plugin before version 3.0.21, because several of the plugin's REST API endpoints fail to enforce the access restrictions WooCommerce applies to that same data. CVSS 3.1 scores the flaw 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), reflecting a network-reachable, credential-free, read-only disclosure with limited confidentiality impact, and publicly available exploit code exists. The real-world blast radius depends on the target also running a populated WooCommerce store, since without WooCommerce product data there is nothing meaningful to leak.
Out-of-bounds write in the TLS 1.3 client of Eclipse ThreadX NetX Duo 6.5.1.202602 allows a malicious or compromised server to corrupt memory in the session control block by sending an oversized handshake message before certificate authentication completes, potentially achieving code execution or causing denial of service. The flaw is client-side and unauthenticated from the network perspective, requiring the victim device to initiate a TLS 1.3 handshake to an attacker-controlled server; no valid server certificate is needed and certificate pinning does not prevent exploitation. No public exploit code was identified at time of analysis, but the CVSS 9.3 base score and the pre-authentication nature make this a high-priority memory-corruption issue for affected embedded deployments.
Unauthenticated email relay in the Magee Shortcodes WordPress plugin (versions through 2.1.1) allows remote attackers to send arbitrary emails to any address through an affected site, because the plugin does not restrict the recipient of some of its unauthenticated contact-form actions. Any WordPress site running the plugin with a page that renders one of its contact-form shortcodes is exposed; sites with the plugin installed but no such page are substantially less exposed, since the vulnerable action endpoint is not reachable. No authentication (PR:N) and no user interaction (UI:N) are required, publicly available exploit code exists, and there is no CISA KEV confirmation of active exploitation. The impact is limited to mail abuse - the assessed vector (C:N/I:L/A:N) reflects no data disclosure, no code execution and no denial of service, making this a moderate abuse-of-functionality issue rather than a system compromise.
A stack-based buffer overflow in ASUS router firmware modules lets an attacker who already holds administrative credentials on the device and is connected to the same local or Wi-Fi network segment execute arbitrary code by uploading a crafted configuration file that exceeds an expected buffer size. The flaw is rated CVSS 4.0 9.3 (Critical) and assessed as CVSS 3.1 AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, because successful exploitation yields full compromise of confidentiality, integrity and availability of the router, although the adjacent-network (AV:A) and high-privilege (PR:H) requirements exclude anonymous Internet-wide attack. No public exploit code has been identified at time of analysis, the issue is not listed in CISA KEV, and no EPSS score was supplied; vendor guidance is available through the ASUS Security Advisory.
Unauthenticated arbitrary file read affects ASUSTOR ADM 4.1.0 through 4.3.3.RWC1 and 5.0.0 through 5.1.4.RL21, where a single crafted HTTP request to start-page-loader.cgi injects headers through the state parameter and abuses the underlying web server's X-Sendfile mechanism to return the contents of sensitive files on the host. No credentials or user interaction are required and default configurations are exploitable, making internet-exposed NAS web interfaces the highest-risk deployment, while LAN-only devices require attacker network presence; the flaw is not confirmed as actively exploited (CISA KEV) and no public exploit code has been identified at time of analysis. The independent assessment rates this as a genuinely high-priority confidentiality-only flaw (CVSS 3.1 scope-changed, C:H/I:N/A:N; CVSS 4.0 base 9.2) rather than a CVSS-inflated one.
Server-side request forgery in Gophish 0.11.0 through 0.12.1 allows authenticated, low-privileged users to force the server to fetch arbitrary internal URLs through the POST /api/import/site endpoint, because the default dialer deny list does not block loopback or RFC1918 private destinations. Attackers can read the responses of reachable internal services and enumerate internal hosts and ports from differential error messages, but the impact is confined to information disclosure with no write, code-execution, or availability effect, and authentication is mandatory (CVSS:4.0 PR:L / assessed CVSS:3.1 PR:L). Publicly available exploit code exists - documented in an Ostorlab review of Gophish 0.12.1 and tracked by VulnCheck - while the reported CVSS 4.0 score is a moderate 5.3 and no CISA KEV entry is present in the supplied intelligence, so this is confirmed as a moderate-severity issue rather than an emergency.
Unauthenticated code injection in the upgrade script shipped with Movable Type allows a remote attacker to execute an arbitrary Perl script or run an SQL query against the affected installation once the upgrade handler is reachable over the network. The flaw affects Movable Type, Movable Type Premium, and their Cloud Editions (Six Apart), and carries a critical severity rating (vendor CVSS 9.4; our assessment scores availability impact as High rather than Low, yielding CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no authentication or user interaction is required, but the practical prerequisite is exposure of the installation/upgrade endpoint: sites that remove, restrict, or firewall the upgrade script after installation are substantially less reachable, while sites leaving it publicly accessible are directly exploitable. No public exploit code and no confirmed active exploitation were identified at time of analysis, so the immediate risk is driven by mass internet exposure of the endpoint rather than by observed attacks.
Unauthenticated account takeover in Sungrow iSolarCloud is achievable by sending a login request to the platform's API with "login_type":"5" and the victim's email address in the user_account property, letting an attacker assume control of an arbitrary account without valid credentials. The affected range is stated as iSolarCloud builds 'before 2026' (CPE is a wildcard, so no exact fixed build is published), and because iSolarCloud is the control plane for grid-connected PV and battery-storage fleets, the assessed impact is scope-changed (S:C) with high integrity and availability loss - the disclosure's author cautions about regional blackouts in Europe, which should be read as worst-case rather than demonstrated. No public exploit code has been identified at time of analysis, and the principal operational constraint is knowing a target email, which the report notes is obtainable by a legitimate sub-account holder who can view the email associated with their parent organization.
Unauthenticated remote attackers can write arbitrary files or cause a denial-of-service condition on Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) via the Cisco Smart Licensing Utility management API. The vulnerability arises from improper input validation and missing authentication, allowing crafted requests to traverse paths and modify system files or disrupt service. No public exploit code exists and exploitation has not been confirmed as active (CISA KEV); exploitation requires only network reachability to the management API.
Unauthenticated remote attackers can reset the password of any account, including administrative users, in Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) by exploiting improper authorization checks in the web-based password-reset function, leading to full application compromise. The flaw has a CVSS score of 9.1 (AV:N/AC:L/PR:N/UI:N) and requires only network reachability to the management interface; no public exploit has been identified at time of analysis. Deployments exposing the interface to untrusted networks are at highest risk, while well-segmented instances are materially harder to attack.
Heap memory corruption in llama.cpp's chat/tool parser lets unauthenticated remote attackers crash llama-server and potentially shape a controlled heap write primitive by sending a crafted POST /completion request containing a chat_parser that emits a tool-id token after a tool-close tag. Versions prior to build b11393 are affected; the trigger leaves the mapper's current_tool pointer dangling, producing a use-after-free and double-free in common_chat_peg_mapper::map. No public exploit code was identified at time of analysis and the flaw is not in CISA KEV, but the CVSS 4.0 score of 9.2 reflects high confidentiality, integrity and availability impact, and the independent assessment confirms high severity (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) - reliable denial of service is straightforward, while converting the bug into a controlled heap write requires heap grooming. A vendor patch exists as upstream PR/commit and as build b11393.
Unauthenticated network access to the WebSocket handler on Fanvil X7A desk phones running firmware 2.6.0.1182 exposes device internals: any client able to reach the interface can read operational logs and issue diagnostic requests without a session, credentials, or user interaction (CWE-306, missing authentication for a critical function). NVD rates this 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N), while the independent assessment adjusts integrity impact to Low (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) and treats the exposure as a genuine access-control flaw rather than a top-tier emergency. No public exploit code was identified at time of analysis and CISA's SSVC decision point records no observed exploitation, so practical risk hinges on whether the phone's WebSocket/management interface is reachable beyond the local VoIP VLAN.
Remote, unauthenticated attackers can reach insufficiently protected credentials in Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) and potentially read and modify them, based on Cisco's hardening advisory covering several internally discovered CWE-522 issues tracked under this single CVE. Cisco rates it CVSS 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N), indicating a network-reachable, low-complexity flaw requiring no privileges and no user interaction, with high confidentiality and integrity impact but no availability impact. The wildcard CPE cpe:2.3:a:cisco:cisco_license_on-prem:*:*:*:*:*:*:*:* indicates all shipping versions are affected until the vendor's hardening release is applied; no public exploit code or confirmed active exploitation was identified at time of analysis (no CISA KEV listing and no PoC referenced), and practical exposure is constrained because these on-prem appliances normally sit on internal management networks rather than the public internet.
Python code injection in PraisonAI's deploy tooling (all versions up to and including 4.6.77) lets a high-privileged actor who controls the `agents_file` value break out of an f-string and execute arbitrary code on the host running the deploy command. The flaw is triggered at build/deploy time: the unsanitized value is interpolated into generated server or Dockerfile source in `deploy/api.py` and `deploy/docker.py`, written to disk, and then launched via `subprocess.Popen(['python', server_file])`, so the primary realistic exposure is CI/CD pipelines or shared build environments where `agents_file` originates from externally influenced configuration. The vendor advisory includes a proof-of-concept demonstrating the string-breakout payload and a fix is available in 4.6.78; no CISA KEV entry or other confirmation of active exploitation was present in the source data, and this is not a remotely reachable flaw in a default running service - exploitation requires the attacker to already be positioned to set or tamper with deploy-time input and for someone to invoke the deploy command.
Command injection in h-ui v0.0.25 and earlier allows an authenticated administrator to execute arbitrary OS commands as root by supplying shell metacharacters in the 'listen' configuration field of the administrative API. Because the application builds nftables/iptables rule strings with fmt.Sprintf and runs them through bash -c with root privileges, a successful injection yields full host compromise with high confidentiality, integrity, and availability impact. Exploitation requires valid administrative credentials plus the ability to set the listen field, so realistic risk concentrates on multi-operator or weakly-secured panels; no public exploit code or confirmed active exploitation was identified at time of analysis, and no vendor-released patch has been identified.
Host key substitution in wolfSSH clients using ECDSA host keys lets an unauthenticated, network-positioned attacker have the client import an attacker-chosen public key, because ParseECCPubKey() derives the curve from the untrusted KEXDH_REPLY blob rather than from the negotiated host key algorithm, so the attacker's own signature over the substituted key verifies successfully. Exploitation is doubly gated: the attacker must hold an active man-in-the-middle position able to rewrite the key exchange reply, and the client must be deployed with a lax public-key verification callback such as trust-on-first-use, an algorithm-name-only check, or fingerprint matching performed against the already-parsed key. No public exploit code has been identified at time of analysis; the vendor's CVSS 4.0 score of 9.0 (Critical) overstates realistic urgency for most fleets, and our independent assessment maps the same defect to CVSS 3.1 7.4 (High) with AC:H.
Authenticated remote code execution affects IBM Langflow OSS 1.0.0 through 1.12.2, where improper control of code generation lets any account with at least low privileges (CVSS PR:L, AV:N, UI:N) cause attacker-supplied code to run server-side on the Langflow host, yielding high confidentiality, integrity, and availability impact (CVSS 8.8). Exploitation is not possible against a default install without valid credentials, and no public exploit code or confirmed active exploitation was identified at time of analysis. The practical exposure therefore concentrates on internet-reachable or multi-tenant instances that permit self-registration or host untrusted users; isolated, single-tenant, network-restricted deployments with trusted operators carry substantially lower risk.
Command injection in GitAhead 2.7.1 and earlier on macOS allows an attacker to execute arbitrary shell commands as the victim user by placing a crafted filename containing a double quote and AppleScript payload into a repository and convincing the victim to select 'Show in Finder' on that file. The flaw requires user interaction (the victim must open an attacker-controlled repository and explicitly trigger the action) and affects only macOS; no public exploit code or active exploitation has been identified at time of analysis. The CVSS 4.0 score is 8.7 with a vector indicating network attack, no privileges required, and passive user interaction.
Remote code execution in IBM Langflow OSS versions 1.0.0 through 1.12.2 allows an authenticated attacker with flow-authoring privileges to inject and execute arbitrary code through Langflow's code-generation mechanism (CWE-94). The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) rates this as high severity (8.8), requiring network reachability, low privileges, and no user interaction; however, in typical deployments where flow creation or modification is broadly granted, the practical barrier may be lower than the PR:L metric implies. No public exploit code or CISA KEV entry has been identified at time of analysis, and EPSS is 0.61% (48th percentile); IBM has released a vendor patch.
LMCache through 0.5.5 ships a multiprocess-mode HTTP management/internal API server that binds to all network interfaces by default with no authentication, letting remote unauthenticated attackers reach management endpoints that should never be exposed. An attacker who can reach the management port can read process environment credentials via GET /env, read configuration via GET /config, clear or delete cached objects, and modify tenant quotas so that other tenants' cached data is evicted. No public exploit code has been identified at time of analysis and the issue is not confirmed as actively exploited (CISA KEV), but exploitation requires only that LMCache runs in multiprocess mode and that the management port is network-reachable, so exposure is bounded mainly by network segmentation rather than by any authentication or user-interaction barrier (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/C:H/I:L/A:H).
Authenticated code injection in IBM Langflow OSS 1.0.0 through 1.12.2 lets any remote user holding a valid low-privileged account execute arbitrary code on the hosting server, with high impact to confidentiality, integrity, and availability (CVSS 8.8, PR:L, no user interaction required). The attack surface is the code path where special elements used in code are not properly neutralized (CWE-94), so deployments that allow untrusted or self-registered accounts to author and run flows are the most exposed, while instances with closed registration and no internet exposure are materially less at risk. No public exploit code has been identified at time of analysis, EPSS is only 0.58% (46th percentile), and CISA SSVC rates exploitation as 'none', making this a serious-but-not-emergency issue; a vendor patch is available per IBM's advisory.
Authenticated remote code execution in IBM Langflow OSS 1.0.0 through 1.12.2 allows a low-privileged user to run arbitrary code because the platform improperly controls generation of executable code (CWE-94). Exploitation requires only a valid account on the instance (CVSS PR:L, AV:N, AC:L, UI:N), so an attacker who holds or obtains any credential able to create, import, or execute a flow/component that reaches the vulnerable code-generation path can achieve full confidentiality, integrity, and availability impact on the host. No public exploit code was identified at time of analysis, CISA's SSVC assessment records exploitation as "none", and EPSS is 0.58% (46th percentile), placing this as a genuinely serious but not emergency-tier issue whose real-world risk scales with how exposed the Langflow instance is and how freely low-privilege accounts are provisioned.
Remote code execution affects IBM Langflow OSS versions 1.0.0 through 1.12.2, where improper access control lets an attacker with a valid low-privilege account execute arbitrary code on the server. The flaw is network-reachable with low attack complexity and no user interaction (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 8.8), but it is gated by the requirement to hold an authenticated account, so exposure is greatest where the platform offers open self-service registration, uses shared credentials, or is internet-facing without network restrictions. No public exploit code has been identified and the issue is not listed as confirmed actively exploited (CISA KEV) at time of analysis; exploitation status and patch availability should be re-checked against the IBM advisory.
Authenticated remote code execution in the @backstage/plugin-techdocs-node package shipped with the Backstage developer portal framework allows a user who can register or influence an SCM-backed documentation source to execute arbitrary code on the TechDocs backend host. The flaw (CWE-502, CVSS 8.8, vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) arises because mapping-style markdown_extensions entries in a committed mkdocs.yml were not sanitized, letting an attacker name Python callables such as subprocess:Popen or os:system that MkDocs then imports and instantiates during documentation generation. Exploitation requires a valid account and an instance that performs server-side TechDocs generation of attacker-controlled sources, so risk is highest where generation runs with backend credentials, filesystem access, or internal network reachability; no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV).
Remote code execution in IBM Langflow OSS 1.0.0 through 1.12.2 lets a remote attacker who already holds a valid low-privilege session execute arbitrary code on the host by sending a crafted request that bypasses improper input validation. The flaw is network-reachable, low complexity, and requires no user interaction (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.8), so the authentication requirement is the main barrier; deployments with open or self-service sign-up, internet exposure, or multi-tenant use carry the highest risk. No public exploit code was identified at time of analysis and the issue is not confirmed as actively exploited (no CISA KEV listing); the vendor has released a fix.
Remote unauthenticated attackers can disrupt and manipulate LMCache's multiprocess coordinator fleet control API in default deployments through 0.5.5, using the /instances, /quota, /events, and /directory/keys endpoints to deregister instances, overwrite quotas, inject events, and disclose placement metadata. The independent assessment confirms that the only material barrier is network reachability because the API binds to all interfaces with no authentication (PR:N) and no user interaction, resulting in low confidentiality and integrity impact and high availability impact. No public exploit identified at time of analysis and no CISA KEV entry was present, but this is a genuine, actionable priority rather than an inflated CVSS score.
Digest mutual-authentication bypass in AsyncHttpClient (AHC) 3.0.12 allows a rogue or on-path peer to be accepted as the authenticated server: when a Digest challenge advertises qop="auth-int" as the only supported quality-of-protection, the client negotiates it but cannot compute the expected rspauth, treats that as unverifiable-but-nonfatal, and accepts a response whose rspauth value is invalid. The flaw is network-reachable, unauthenticated and requires no user interaction (CVSS 4.0 AV:N/AC:L/PR:N/UI:N, 8.8), with the primary impact on integrity (VI:H) consistent with server impersonation rather than the data theft implied by the 'Information Disclosure' tag. It only affects applications that use AHC's Digest Realm with mutual authentication and connect to a peer offering an auth-int-only challenge; deployments where the server offers 'auth' or 'auth,auth-int' are unaffected because AHC prefers and verifies 'auth'. No public exploit code and no confirmed active exploitation were identified at time of analysis; the vendor-released patch is version 3.0.13.
Improper neutralization of input in Cisco NX-OS software, NX-OS System Software running in ACI mode, and Cisco Unified Computing System (Managed) allows an authenticated attacker holding low-privilege credentials to reach high confidentiality, integrity, and availability impact against the affected device (CVSS 3.1: 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The flaw surfaced during Cisco's internal security review and is remediated through a software hardening release rather than through an out-of-band emergency fix, which indicates internally discovered rather than customer-reported or externally exploited issues. There is no public exploit code and no confirmed active exploitation at time of analysis, though the network-reachable attack path and the breadth of affected platforms (standalone Nexus switches, ACI-mode fabrics, and UCS Managed systems) make it a credible operational priority despite the absence of exploitation signals.
A stack-based buffer overflow in Zephyr's Bluetooth Mesh On-Demand Private Proxy solicitation handler lets any BLE device within radio range overwrite a target node's stack with attacker-controlled bytes by sending a non-connectable advertisement carrying an oversized mesh Proxy Solicitation. Exploitation requires no pairing, bonding, provisioning, or key material because the vulnerable copy happens before decryption, but it is limited to nodes built with CONFIG_BT_MESH_OD_PRIV_PROXY_SRV that are currently eligible to be solicited (GATT Proxy disabled, On-Demand Private Proxy enabled) and physically within BLE range (CVSS 8.8, AV:A/PR:N/C:H/I:H/A:H, unauthenticated). Impact ranges from a reliable remote denial of service to plausible remote code execution; no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis, and a vendor fix is available.
PHP object injection in the WordPress plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) through version 2.0.19 lets an authenticated low-privilege user pass attacker-controlled data into an unsafe PHP deserialization path, resulting in high confidentiality, integrity, and availability impact per the vendor-assigned CVSS 3.1 score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation requires a logged-in WordPress account with at least low privileges on a site running an affected plugin version, and no end-user interaction is needed; realistic exploitation further depends on the presence of a usable POP gadget chain in the plugin, Elementor, or WordPress core, which is not confirmed by the available data. No public exploit code and no confirmed active exploitation were identified at time of analysis, so exposure is driven primarily by sites that permit self-registration or retain low-privilege accounts they do not tightly control.
Remote code execution in Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) lets a network-positioned attacker who holds only low-privilege credentials inject and execute code on the appliance, resulting in complete loss of confidentiality, integrity, and availability (CVSS 3.1 base 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The flaw is one of multiple internally discovered code-injection weaknesses (CWE-94) that Cisco addressed in a bundled hardening release for the product, so the specific vulnerable endpoint is not individually itemized in the advisory. There is confirmed actively exploited status neither reported nor any public exploit identified at time of analysis, but the low-complexity, no-user-interaction profile and requirement for only an ordinary authenticated account make rapid patching of internet- or partner-reachable instances important; exploitation status is best described as no public exploit identified at time of analysis.
Incorrect-calculation flaws in Cisco's hardening release for Meraki MR wireless access points, MV cameras, MX security appliances, and Campus Gateway software allow an unauthenticated attacker on an adjacent network segment to achieve high impact to confidentiality, integrity, and availability (CVSS 8.8). Because the vector is AV:A/AC:L/PR:N/UI:N, exploitation requires the attacker to already sit in the same Layer-2 broadcast domain, management VLAN, or directly connected segment as the target device - it is not reachable from an arbitrary internet host, and that adjacency requirement is the principal limiting factor. No public exploit identified at time of analysis, and Cisco states the issues were discovered through its own proactive internal security review rather than through exploitation, so real-world urgency is moderate despite the high base score.
Cross-site request forgery in the Fanvil X7A IP phone web management interface (firmware 2.6.0.1182) allows any state-changing endpoint to be invoked from an attacker-controlled web page, because the request handler enforces no anti-CSRF token and no origin/referer validation. The flaw is network-reachable and requires no attacker authentication (CVSS:3.1/AV:N/AC:L/PR:N/UI:R), but it can only be triggered while a victim administrator holds an active authenticated management session and is lured into visiting the malicious page; the forged requests succeed silently against the phone. Impact is bounded to what the admin's privileges permit - configuration, account, provisioning, or availability-affecting actions - and, per this assessment (C:N on the assessed vector), no confidential response data can be read back due to same-origin policy. Exploitation likelihood is currently low (EPSS 0.16%, ~5th percentile); there is no CISA KEV listing and no public exploit identified at time of analysis, though a third-party disclosure write-up exists.
Cross-site request forgery in the Fanvil x7a IP desk phone (firmware 2.6.0.1182) lets an attacker who lures an authenticated administrator to attacker-controlled web content silently perform any state-changing action on the device's web management interface, since the request handler enforces no CSRF token, origin, or referer checks. Exploitation is not self-triggering: it requires a live admin session (CVSS vector is PR:N/UI:R, so the attacker needs no credentials of their own but does need the victim's authenticated browser and a reachable management interface, typically on the same LAN). No public exploit code has been identified at time of analysis and the CVE is not in CISA KEV; EPSS is 0.16% (5th percentile), and the signals conflict - the high base score and complete absence of cross-origin protection are offset by user-interaction, session and network-reachability prerequisites. A public technical disclosure exists (DarkPoint, February 2026) and references also point to Fanvil PA2S firmware, suggesting the affected web stack may span more than the x7a model.
Kernel crash via a use-after-free read in the Linux kernel TCP retransmission path: tcp_send_synack() frees the cloned SYN skb at the head of the retransmit queue and repairs tp->highest_sack but leaves tp->retransmit_skb_hint pointing at the released skbuff_fclone_cache object, which is later dereferenced during the rbtree walk in tcp_xmit_retransmit_queue(). The assessed vector is local (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H): an unprivileged local process must open a connection using TCP Fast Open (sendmsg(MSG_FASTOPEN)), a crafted ICMP fragmentation-needed message arms the hint, and a simultaneous open must free the armed SYN skb at the right moment - only the resulting UAF read and kernel crash (availability impact) is confirmed by the available sources, with no demonstrated confidentiality or integrity compromise beyond an out-of-bounds read of freed slab memory. No public exploit code was identified at time of analysis, EPSS is low at 0.16% (5th percentile), and the issue is not in CISA KEV; vendor patches ship in the 5.15.222, 6.1.189, 6.6.158, 6.12.112, 6.18.55, 7.2.9 and 7.3-rc5 stable releases.
Authenticated low-privilege users with network access to the Splunk Enterprise management/web interface can abuse improper resource lifetime handling to achieve high confidentiality, integrity, and availability impact on deployments running versions below 9.4.15, 10.0.10, 10.2.7, or 10.4.3. The flaw is rated CVSS 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and is one of a group of internally discovered issues covered by Splunk advisory SVD-2026-1002, where CVEs are assigned per CWE group, so the specific vulnerable subsystem is not individually named. Real-world likelihood currently appears limited: EPSS is 0.15% (4th percentile), there is no CISA KEV listing and no public exploit identified at time of analysis, and the primary gating factor is that an attacker must already hold valid Splunk credentials or a session.
Improper access control in Cisco Meraki firmware - spanning MR wireless access point software, MX security appliance firmware, MV camera firmware, and Cisco Campus Gateway Software - lets an attacker positioned on an adjacent Layer 2 or wireless segment bypass authentication and reach protected functionality, with the highest impact on confidentiality. No credentials (PR:N) and no user interaction (UI:N) are required, attack complexity is low, and the Cisco-assigned score is 8.8 because the flaw crosses a security boundary (S:C); however, the attack is not routable from the internet, so real-world exposure is limited to whoever already shares a segment with the device, and no public exploit code or confirmed active exploitation was identified at time of analysis. Cisco addressed the issue in a proactive internal hardening release and published advisory cisco-sa-hardening-meraki-os-drbEX9GH, which should be used to confirm exact affected firmware versions because the advisory bundles several internally discovered issues.
Authenticated attackers who already hold low-privileged access to a local or management interface of Cisco Meraki MR wireless access points, MV cameras, MX security appliances, or Cisco Campus Gateway Software can supply crafted input that the affected component fails to neutralize correctly, a CWE-74 injection-class condition rated CVSS 8.8 with scope change (S:C) and high confidentiality, integrity, and availability impact. Because the vector is AV:L with PR:L, the attacker must already be able to reach the device's management or local interface - exposure is tied to the management plane rather than the public internet - and the flaws were identified during a Cisco internal security review rather than through external reporting, with fixes delivered as software hardening releases described in Cisco advisory cisco-sa-hardening-meraki-os-drbEX9GH. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the specific vulnerable feature and exact affected firmware builds are not specified in the available data.
Unauthenticated SQL injection in the Site Search function of Movable Type allows a remote attacker to run arbitrary SQL queries against the affected site's database, producing high confidentiality impact with limited integrity and availability impact (CVSS 8.8; independently assessed as CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). Affected deployments are Movable Type and Movable Type Premium (self-hosted) plus the Movable Type Cloud Edition and Premium Cloud Edition services from Six Apart Ltd. This is a genuine high-priority vulnerability: the CVSS vector confirms the attack is network-reachable with no privileges and no user interaction, so any instance exposing the standard public Site Search is in scope, although no public exploit code and no confirmed active exploitation were identified at time of analysis.