Missing authorization enforcement in certain Frappe ERPNext endpoints allows an authenticated user holding only low-privilege role access to modify documents and records beyond the permissions assigned to their role, affecting all releases before 15.121.1 and 16.x before 16.34.2. Exploitation requires valid ERPNext credentials and the ability to reach the affected endpoints, but no user interaction and no non-default configuration - the flaw lies in the endpoints' own failure to check roles (CWE-862). Impact is bounded to low confidentiality and low integrity effects with no availability impact, no public exploit code has been identified at time of analysis, and the vendor has released patched versions (see advisory GHSA-49wp-r82c-j825).
Former collaborators of a Heym workspace can keep running JWT-authenticated workflows after their share is removed, because scoped 'workflow:execute' tokens minted while they still had access remain valid and cannot be listed or revoked by the workspace owner. Heym versions from v0.0.5 up to (but not including) v0.0.113 are affected, matching CPE cpe:2.3:a:heymrun:heym; the issue is an insufficient session expiration flaw (CWE-613) rated CVSS 5.3 with an authenticated-remote vector (CVSS:4.0 PR:L, corroborated by the assessed CVSS:3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N), so only someone who legitimately held collaborator privileges can abuse it. The token's configurable TTL can extend to roughly ten years, letting the removed collaborator repeatedly trigger the workflow and consume the shared credentials it uses; there is no public exploit identified at time of analysis and no evidence of active exploitation, and no EPSS score was supplied.
Notification injection in Fire-Boltt BSW013 smartwatches (firmware through V0.0.8) allows unpaired attackers within Bluetooth Low Energy range to send spoofed alerts and vibrate the device, enabling phishing via fake notifications. The vulnerability stems from missing authentication on a proprietary BLE command characteristic, with only a non-cryptographic CRC-16 checksum protecting commands. No public exploit code has been identified at the time of analysis, and the impact is limited to integrity (spoofed notifications) without confidentiality or availability loss.
Broken access control in Frappe Suite's JMAP mail APIs allows authenticated mail users to read other accounts' mailbox metadata by supplying a victim's JMAP account ID. Affected deployments are any Frappe Suite build prior to commit 2697564a9c46da6acc614743eaf9915fe5238f4f that runs the Mail service with more than one account; a valid low-privileged mail login (PR:L) is required, and the impact is read-only disclosure of mailbox names, message counts, automation rules containing sender addresses, and storage quota usage rather than message contents. No public exploit identified at time of analysis and no confirmed active exploitation (not in CISA KEV), keeping this a moderate-severity (CVSS 5.3) information-disclosure issue.
Cross-site WebSocket hijacking in Network-AI (vendor: jovancoding) versions 5.0.0 up to but not including 5.15.2 lets an attacker-controlled web page open a WebSocket to the victim's loopback DashboardServer and read live agent topology - agent IDs, roles, task descriptions and token budgets. The upgrade handler performs no Origin or token check, so the connection is unauthenticated (CVSS PR:N), but exploitation still requires the victim to be actively running the dashboard and to be lured into loading a malicious page in a browser on the same host (UI:P), which keeps the CVSS 4.0 base score at 5.3 and our re-scored CVSS 3.1 at AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N. Impact is confined to read-only reconnaissance - no write, disruption or code-execution component - and no public exploit code was identified at time of analysis.
Missing authorization checks in Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 let an authenticated low-privileged user change the status of records they should not be able to touch, bypassing role-based access restrictions. The flaw carries a vendor/VulnCheck CVSS 4.0 base score of 5.3 (moderate) and requires a valid low-privileged session, so exploitation is limited to insiders or holders of legitimately provisioned low-tier accounts; impact is integrity-only, with no confidentiality or availability effect. No public exploit code has been identified at time of analysis and the issue is not known to be actively exploited (no CISA KEV listing); vendor patches are available in 15.110.0 and 16.21.0, so the practical priority is moderate - patch on a normal maintenance cadence.
Authenticated users in Frappe ERPNext deployments before 15.112.0 can bypass role-based record permissions by calling specific endpoints that lack proper authorization validation, allowing them to modify individual fields on record types they are not permitted to edit. This is a medium-severity (CVSS 5.3) broken-access-control flaw (CWE-862) with integrity-only impact and no confidentiality or availability loss; no public exploit identified at time of analysis. A vendor security advisory (GHSA-f7x9-qfrf-92m8) and VulnCheck advisory provide further details.
Authenticated low-privileged users can cause ERPNext to send transactional emails for documents they are not permitted to read, due to missing authorization checks in certain endpoints. This affects ERPNext before 15.119.0 and 16.x before 16.31.0. The vulnerability is not known to be actively exploited, no public exploit code has been identified, and the CVSS 3.1 base score is 5.3 (moderate), with limited confidentiality and integrity impact.
Authenticated users of Frappe ERPNext (before 15.121.3 and 16.x before 16.35.0) can abuse a transactional-email endpoint to send arbitrary messages through the site's own configured outgoing mail account, because the endpoint does not verify the caller's authorization before dispatching mail. Any low-privilege account is sufficient - no admin role or special permission is required - and the site must simply have an outgoing email account configured, which is the default for a functioning ERPNext deployment. The result is email relay abuse under the organisation's trusted sending identity, useful for phishing, spam, or reputational damage rather than data theft or service disruption; the assessed impact is limited to low integrity (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N), and no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis.
Missing authorization checks in Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 let authenticated users with low-privilege roles modify data beyond their assigned permissions through certain network-reachable endpoints. According to the assessed CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N), exploitation requires a valid authenticated session and results only in limited integrity impact, with no confidentiality or availability loss. No public exploit code has been identified at time of analysis, and the vendor has released fixed versions 15.121.0 and 16.34.0.
Missing authorization in Frappe Framework's whitelisted send_sms API endpoint allows any authenticated low-privilege user who lacks SMS-sending permissions to send arbitrary SMS messages that impersonate the Company, affecting releases before 15.120.0 and 16.x before 16.33.0. Exploitation requires a valid Frappe session (PR:L per the assessed vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) and no user interaction, but impact is confined to integrity/impersonation of outbound messaging with no data disclosure or service disruption, and is further gated by whether the instance has a functioning SMS gateway configured. No public exploit code was identified at time of analysis, and this is assessed as a medium/low-priority issue rather than a high-severity emergency.
Unauthenticated remote attackers can supply their own values for web parameters that the VillaTheme Salevo (woo-boost-sales) WordPress plugin treats as immutable, letting them tamper with the data the plugin accepts and acts on in versions up through 1.3.0. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, base score 5.3) confirms the request path needs no authentication, no user interaction, and no non-default configuration, but the impact is capped at a partial integrity loss with no confidentiality or availability effect. No public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS score was supplied, so this is a moderate-priority hardening item rather than an emergency patch, with real exposure confined to sites that actually run this specific plugin.
Missing authorization in the WPMU DEV Forminator WordPress plugin (versions up to and including 1.58.0) allows unauthenticated remote attackers to reach functionality that should be gated by an access-control check, resulting in low-impact but unauthenticated disclosure of site data. The assessed vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N indicates no credentials, no user interaction and no special complexity are needed against an affected installation, though the impact is confined to confidentiality (no integrity or availability loss). No public exploit code and no confirmed active exploitation were identified at time of analysis, and no EPSS score was supplied with the source data, so the practical risk is medium and primarily affects sites still running 1.58.0 or earlier.
Missing authorization checks in the Arraytics Booktics WordPress plugin through version 1.0.28 let unauthenticated remote attackers invoke functionality that should require elevated privileges, resulting in a limited integrity-only impact (CVSS 5.3, CWE-862). Because the CVSS vector is PR:N/UI:N, exploitation needs only network reachability of the vulnerable endpoint on a site running the plugin - no account, no victim interaction, and no non-default configuration. There is no CISA KEV listing and no public exploit code identified at time of analysis, though the low attack complexity makes the flaw attractive to automated WordPress scanning and mass-exploitation tooling; risk is tempered by the plugin's small deployment footprint and the fact that confidentiality and availability are unaffected.
Code injection in Zen Cart through 2.2.2 lets an attacker who already has privileged admin/database write access to the `configuration` table supply a malicious `use_function` value that `zen_call_function()` in `admin/includes/functions/general.php` then invokes as PHP, achieving limited code execution (low confidentiality, integrity and availability impact). The attack is network-reachable but rated highly complex and requires high privileges (CVSS:4.0 PR:H / assessed CVSS:3.1 PR:H, AC:H, base score 2.1), because the vendor states the only ways to control `use_function`/`configuration_value` are the admin SQL Patch tool (raw SQL execution) or a separate pre-existing SQL injection - normal unprivileged input does not reach it. Publicly available exploit code exists per the disclosed proof-of-concept, but there is no evidence of confirmed active exploitation and the vendor explicitly rejects the issue as independently exploitable.
SQL injection in Zen Cart 2.2.2's Admin Panel (admin/configuration.php) lets an attacker influence the SQL executed through the eval-based handling of set_function/use_function values reached via the gID argument. Exploitation is deliberately hard to reach: per the vendor, set_function/use_function are not editable through any normal admin UI and can only be introduced at plugin-install time via SQL or through direct database access, so the practical precondition is pre-existing database write access or equivalent high administrative privilege (CVSS 3.1 AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L; CVSS 4.0 base 2.1). Publicly available exploit code exists, but there is no evidence of active exploitation, and this is assessed as a low-priority issue rather than a remotely reachable flaw in default, properly configured installations.
An out-of-bounds write in the SPI host command interface of Semtech's LR11xx transceiver firmware lets an attacker who already has hands-on hardware access and logical control of the SPI bus send a crafted host command with an oversized length field, causing the firmware to write up to 254 arbitrary bytes beyond an internal non-persistent memory buffer. The affected product lines are the LR1110 transceiver and modem-E, the LR1120 transceiver, and the LR1121 transceiver and modem-E; the vulnerability is rated 5.2 (CVSS 4.0) and assessed at CVSS 3.1 AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H, meaning integrity and availability of the transceiver can be corrupted but no confidentiality loss occurs. There is no network or remote attack vector - exploitation requires physical access to the device plus SPI bus access - and no public exploit identified at time of analysis, with no confirmed active exploitation (CISA KEV) reported. Because the corrupted buffer is non-persistent, effects may be cleared by a device reset, keeping real-world risk low to moderate.
Local information disclosure in Code for IBM i (the codefori/vscode-ibmi Visual Studio Code extension) before 3.0.1 lets other local accounts on the same host read sensitive content written to the shared /tmp directory during Object Browser downloads and the edit-save workflow, because those files are not reliably cleaned up after use. Although the vendor scored it 5.1 on a CVSS:4.0 vector carrying AV:N, exploitation in practice requires an attacker who already holds a separate local account on a shared multi-user machine with a readable /tmp (a common default on many Unix/Linux systems) plus a legitimate developer having performed a download or edit-save in a vulnerable version; single-user workstations and hosts with per-user private temp directories are not affected. Our independent assessment rates it CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N - a low-to-medium risk, confidentiality-only issue - and there is no public exploit identified at time of analysis.
Privilege escalation in ZITADEL 3.0.0 through 4.19.1 lets accounts that already hold the IAM_END_USER_IMPERSONATOR or ORG_END_USER_IMPERSONATOR role obtain tokens for administrators, including IAM_OWNER, and sign in to relying applications carrying those administrators' roles and claims, because the OIDC token-exchange flow fails to enforce the admin.impersonation check (CWE-863). Exploitation requires the high-privilege prerequisite that an end-user impersonator role has been deliberately granted (CVSS PR:H), so arbitrary authenticated users and unauthenticated attackers cannot trigger it, and no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis. The vendor fixed the bypass in ZITADEL 4.19.2.
Reflected cross-site scripting in Admidio 4.0.12 through 4.3.17 and 5.0.0 through 5.0.14 allows unauthenticated attackers to execute arbitrary JavaScript in the context of the Admidio origin by tricking a victim into clicking a crafted link to system/redirect.php with a malicious url parameter. The flaw stems from an incomplete fix for CVE-2021-43810 and can be exploited via a javascript: URL containing a decoy http:// segment that defeats validation. Exploitation requires user interaction (UI:A), and no public exploit code has been identified at time of analysis.
Cross-site scripting in DOMPurify 3.4.15 and earlier lets an attacker smuggle live markup through the library's IN_PLACE sanitization path when a rawtext element such as <style> is passed as a DOM Node: the killed node is returned detached but its text content still contains the closing </style> tag plus an img onerror payload, which materializes as script if the application serializes that node and re-parses the resulting HTML in a plain HTML context. Only applications that call DOMPurify.sanitize(node, { IN_PLACE: true }) with a Node (not a string) and then perform a serialize-then-reparse round-trip on the returned value are affected; the CVSS 4.0 base score is 5.1 (medium, AV:N/AC:L/PR:N/UI:A, no impact to the vulnerable system, low confidentiality and integrity impact on a subsequent system), and a working proof-of-concept is published in the upstream advisory, though there is no indication of confirmed active exploitation. Vendor-released patch: 3.4.16.
Memory corruption in the legacy USB CDC virtual COM (vcom) driver shipped in RT-Thread through 5.3.0 lets a physically connected USB host trigger writes past the serial ring buffer and, on port close, an invalid rt_free(), causing denial of service on the affected device. Only builds that include components/legacy/usb/usbdevice/class/cdc_vcom.c and enable RT_USING_SERIAL_V2 are exposed; exploitation requires physical USB access (CVSS 3.1 AV:P, PR:N), and impact is limited to availability with no code execution, data disclosure, or integrity loss. No public exploit code has been identified at time of analysis and the issue is not listed as actively exploited, so this is a medium-severity, low-operational-priority item for most environments; an upstream fix exists (PR #11770 / commit ceef6e0c).
DOM-based cross-site scripting in DOMPurify 3.4.13 through 3.4.15 lets unauthenticated attackers who supply markup retain armed on* event handlers on a subtree that a sanitization hook removes, so a queued handler such as an img onerror fires in the victim origin after sanitize() returns. The flaw is conditional rather than universal: it only triggers when the host application calls DOMPurify.sanitize(node, { IN_PLACE: true }) and registers an afterSanitizeElements or afterSanitizeAttributes hook that removes a non-root element, a supported but non-default configuration, which sharply narrows the affected population despite DOMPurify's very broad deployment. Independent assessment rates it CVSS 3.1 AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N (attacker markup, victim interaction required, script execution confined to the victim origin rather than host compromise); no public exploit code identified at time of analysis.
Stored cross-site scripting (XSS) in Open WebUI versions 0.6.31 up to but not including 0.11.4 allows authenticated users to inject malicious JavaScript via crafted Markdown tool-call details blocks whose embeds attribute is mounted in script-enabled iframes. A victim passively viewing the crafted channel message, chat message, or citation content can be subjected to in-app phishing or, if the non-default iframeSandboxAllowSameOrigin option is enabled, session hijacking. This moderate-severity vulnerability (CVSS 4.0 base 5.1) has no public exploit identified at time of analysis and requires a valid account plus victim interaction.
Path traversal in Samsung Smart Switch prior to version 3.7.73 allows someone with physical access to the machine running the utility to reach files outside the intended working directory and read them with the privileges of the Smart Switch process. The vendor rates it CVSS 4.0 base 5.1 (medium), and our independent assessment scores it CVSS 3.1 5.1 with a physical attack vector (AV:P), no authentication and no user interaction required, which rules out remote or mass exploitation and confines realistic risk to lost, stolen, or otherwise physically controlled devices; devices updated to 3.7.73 or later are not affected. No public exploit code has been identified and the issue is not listed in CISA KEV, so it is not confirmed as actively exploited; a vendor patch exists (3.7.73).
Stored cross-site scripting in Frappe ERPNext (15.x before 15.110.0 and 16.x before 16.21.0) lets an authenticated user who holds write access to item master data persist JavaScript inside a record name, which is then rendered without escaping and executes in the browser of any operator who opens the affected item page. Exploitation requires an existing account with item-write privileges plus a second user later viewing the poisoned record, so it is an insider- or compromised-account scenario rather than a remote unauthenticated attack, and the impact is confined to the viewing operator's browser session rather than the ERPNext server. Severity is moderate (CVSS 4.0 base 5.1; independent assessment 3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N), no public exploit code and no confirmed active exploitation were identified at time of analysis, and upgrading to 15.110.0 or 16.21.0 removes the condition.
Stored cross-site scripting in Frappe ERPNext 16.x before 16.27.0 allows an authenticated user who holds edit (write) rights on a document type to set a record's name field to a script payload that the application later renders without HTML escaping. The script executes in the browser of any colleague who subsequently opens the affected record page, enabling session-context actions such as data theft or UI manipulation within that victim's ERPNext session. No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has released a fix in version 16.27.0, so this is a genuine but limited medium-severity issue rather than an urgent emergency.
Stored cross-site scripting (XSS) in Frappe versions prior to 15.118.0 and 16.x before 16.31.0 allows authenticated attackers with dashboard chart editing privileges to inject malicious filter values that execute in the browsers of users who view the affected chart. The vulnerability arises because jQuery renders filter values as rich text instead of escaping them. Exploitation requires the victim to open the dashboard chart, and no public exploit code has been identified at time of analysis. This medium-severity issue (CVSS 5.1) can lead to session hijacking or other client-side attacks for the viewing user.
Stored cross-site scripting in the Hugo static site generator (versions v0.60.0 up to but not including v0.167.0) lets anyone holding Markdown content-authoring privileges break out of the href attribute generated for heading anchors by .TableOfContents or .Fragments.ToHTML and inject arbitrary HTML elements carrying event handlers into the rendered page. The issue is scored CVSS 4.0 base 5.1 (CWE-79) and requires low-privileged content access (PR:L) plus a victim viewing the poisoned page (UI:P); because the injected content is only dangerous when Hugo processes Markdown from multiple or untrusted authors, single-author sites built from a fully trusted repository are effectively not exposed. No public exploit code was identified at the time of analysis and the flaw has not been confirmed actively exploited (no CISA KEV listing), making this a moderate-priority hardening item rather than an urgent remote-code-execution-class emergency.
Stored cross-site scripting (CWE-79) in the Frappe framework's leaderboard page allows an authenticated user to persist a crafted display name whose payload executes in the browsers of other users who open the leaderboard, in all versions before 14.99.10 and 15.x before 15.91.1. Because the name is stored server-side and rendered on a shared page, the payload fires for every visitor without further attacker interaction, giving cross-site scripting in the context of the Frappe application's origin. Exploitation requires a valid account capable of setting its own user name (PR:L) plus a victim navigating to the leaderboard (UI:P); no public exploit code or confirmed active exploitation was identified at time of analysis, and the CVSS 4.0 base score of 5.1 (MEDIUM) reflects the limited direct confidentiality/integrity impact on the vulnerable system offset by scope change to the victim's browser session.
Out-of-bounds write in Samsung Android's libsmkvextractor.so media parsing library allows a local attacker to corrupt memory by supplying a crafted Matroska (MKV) file, resulting in low integrity and availability impact. Affected are Samsung devices running firmware prior to SMR Oct-2026 Release 1; no public exploit code or active exploitation has been identified at time of analysis, and the CVSS 4.0 base score is 5.1 (medium). The attacker requires local access but no special privileges, and the flaw does not compromise confidentiality or change scope.
Out-of-bounds write in Samsung Android's libcodec2-sec-flacdec.so FLAC decoder allows a local attacker to write memory beyond the intended buffer, degrading integrity and availability of the affected device process. The issue affects devices running firmware prior to SMR Oct-2026 Release 1, and exploitation requires local access plus the ability to push attacker-controlled FLAC data into the codec path, typically through a malicious or compromised app. There is no public exploit identified at time of analysis, and the vendor-assigned CVSS 4.0 base score of 5.1 (bounded to low integrity and low availability impact with no confidentiality loss) places this in routine monthly-patch priority rather than emergency response.
Local information disclosure in Samsung's CocktailBarService allows a malicious or compromised app already running on a Galaxy device to access sensitive data without additional user interaction or authentication. The flaw requires local code execution (AV:L) and affects Samsung builds prior to SMR Oct-2026 Release 1; no public exploit code has been identified at the time of analysis, and the confidentiality impact is limited (C:L). This is a moderate, locally-exploitable issue rather than a remote or high-severity threat.
Local path traversal in Samsung Flow before version 4.9.22.1 allows an attacker who already has a foothold on the host device (Android or Windows) to escape the application's intended file boundaries and read clipboard contents. The attack requires local access - typically a malicious app installed on the same device or interactive access - with no authentication and no user interaction needed, but the impact is limited to disclosure of clipboard data with no effect on integrity or availability. There is no CISA KEV listing and no public exploit code identified at time of analysis, making this a genuinely moderate, low-urgency issue rather than a critical priority.
Local attackers who can run code on a Samsung device can exploit improper input validation in Samsung Checkout's CreditCardRegisterActivity to launch arbitrary activities using Samsung Checkout's own privileges, yielding low-level confidentiality and integrity exposure. The flaw affects Samsung Checkout versions prior to 5.1.03.1 and requires local code execution on the device, but no additional authentication or user interaction (CVSS:4.0 AV:L/AC:L/PR:N/UI:N, score 5.1; independently assessed as CVSS:3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; overall this is a medium-severity, locally-scoped issue with limited real-world urgency.
Improper input validation in the CreditCardRetrieveActivity component of Samsung Checkout prior to version 5.1.03.1 allows a locally installed malicious application to launch arbitrary activities with Samsung Checkout's own privileges, resulting in low-severity information disclosure and integrity impact. Exploitation is not remote: the attacker must already have code executing on the device, typically through a sideloaded or otherwise installed malicious app, and must be able to pass crafted input to the affected activity. There is no confirmed active exploitation and no public exploit code identified at time of analysis, and Samsung has shipped a fixed build (5.1.03.1) as documented in its mobile security bulletin.
Improper input validation in the GuestCreditCardRegisterActivity component of Samsung Checkout allows a malicious or malfunctioning app already installed on the same Samsung device to launch arbitrary activities with Samsung Checkout's privileges, giving limited unauthorized read and write impact (low confidentiality and integrity, no availability impact). Only Samsung Checkout builds prior to 5.1.03.1 are affected, and the flaw requires local on-device access from a separate app; it cannot be triggered remotely or over a network, and neither user interaction nor authentication is required once that local app is running. No public exploit code has been identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV); the medium-severity rating (CVSS 4.0 base 5.1, assessed CVSS 3.1 5.1) reflects that the mandatory prerequisite of pre-existing local code execution substantially narrows realistic exposure.
Cleartext transmission of sensitive information in IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 can allow a local attacker who can observe the relevant channel to obtain limited sensitive information. The assessed vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, meaning exploitation requires local access and no authentication or user interaction but only affects confidentiality; the CVE record lists a base score of 5.1. No public exploit identified at time of analysis, and a vendor patch is available per IBM's advisory.
Missing authorization in the WordPress plugin Paid Videochat Turnkey Site (ppv-live-webcams, versions through 7.5.13) lets an attacker who already holds a low-privilege account on the site bypass the plugin's access-control checks and read information that should be restricted to higher-privileged users. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N, score 5.0) confirms it is remotely reachable, requires no user interaction, and is limited to a confidentiality disclosure of low severity, with no integrity or availability impact; the scope change (S:C) reflects that the weakness lets the attacker reach resources beyond the plugin component itself. Exploitation status is no public exploit identified at time of analysis - there is no KEV listing and no published proof-of-concept code - and the practical prerequisite is that the attacker must first register or otherwise obtain a low-privilege session on a site running the vulnerable version.
Arbitrary file write on the orchestrator host affects Vercel deepsec versions 0.1.0 through 1.1.16, where the extractTarballLocally routine in the sandbox download path follows symbolic and hard links planted inside result tarballs. An attacker who already controls code running inside the deepsec sandbox - the canonical case being a prompt-injected coding agent - can plant links in the host data directory so that extraction of the returned tarball writes files outside the sandbox and onto the orchestrator host. The issue is rated medium severity (CVSS 4.0 base 4.9; independent assessment CVSS 3.1 AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N), exploitation is highly conditional (attacker must already hold sandbox code execution, and the extraction must succeed on an attacker-influenced tarball), and no public exploit identified at time of analysis; there is no CISA KEV listing.
Stored cross-site scripting in Thelia (all versions from 0 through 2.6.0) lets an authenticated back-office user - specifically one with permission to create categories or products - persist malicious JavaScript that is later executed when an administrator in the admin interface or a shopper on the storefront product pages views the poisoned content. Because the script fires in the victim's browser session, the attacker can read or manipulate whatever that session can access, but there is no direct server-side compromise and a second user must load the affected page for the payload to run. No public exploit identified at time of analysis, and the EPSS score is low at 0.17% (5th percentile), making this a low-to-moderate priority issue rather than a critical one.
Availability loss in Zephyr RTOS Bluetooth Mesh affects nodes built with the default access-layer delayable message queue, where an unsynchronized race between the host RX thread and the system workqueue lets the handler touch a context slot that has already been purged. The attacker must be a provisioned mesh member - holding the NetKey and a bound AppKey - within Bluetooth radio range, who can control arrival rate, response size and destination address to exhaust the 4-entry context pool and 40-entry chunk pool and force the purge path; the trigger is a narrow, high-complexity race. Winning it produces a read-modify-write through a NULL-based pointer on the system workqueue thread, which on typical targets faults and aborts that thread (stopping all workqueue-driven functionality, including the mesh timing machinery) or resets the node, so impact is availability only - the write value and address are fixed, so there is no memory corruption or code execution path. Scoring is CVSS 3.1 4.8 (AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H); no public exploit identified at time of analysis, and there is no KEV listing.
Stored cross-site scripting (XSS) in the OTRS Custom Pages feature allows an authenticated administrator to inject arbitrary JavaScript that is stored and later executed in the browsers of users who access the affected page. Affecting OTRS 7.0.X, 8.0.X, 2023.X, 2024.X, and 2025.X, plus 2026.X before 2026.7.X, exploitation requires a high-privileged admin account and a victim to actively visit the page. No public exploit has been identified at time of analysis, and the issue is assessed as low-to-moderate priority.
Out-of-bounds read and write in the native AI sound-separation library (lib_sag_ai_sound_sep_v2.00.so) on Samsung mobile devices allows a local, low-privileged attacker to read and write memory outside the intended buffer, with impact bounded to low confidentiality, integrity, and availability within the affected component. The flaw is only reachable by an attacker who already holds local code execution on the device - typically a malicious or compromised app capable of supplying crafted input to the library - and affects firmware versions prior to SMR Oct-2026 Release 1. There is no public exploit identified at time of analysis and no indication of confirmed active exploitation; the moderate CVSS 4.8 score reflects the local attack vector and limited per-component impact rather than a remote or high-severity threat.
Local policy bypass in ImageMagick's -script operation (versions before 7.1.2-32) lets a low-privileged local user close file descriptors not opened by the current operation, undermining security restrictions configured in policy.xml. The flaw is a CWE-404 resource lifecycle issue (CVSS 4.0 base 4.8; assessed CVSS 3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) with availability-only impact and no scope change; it is most relevant where policy.xml is used as a containment boundary for untrusted ImageMagick operations. No public exploit code or active exploitation was identified at time of analysis, and vendor-released patch 7.1.2-32 is available.
ImageMagick before 7.1.2-32 leaks heap memory when its command-line -process option is invoked with certain crafted arguments, allowing an attacker who can run the magick/convert tooling and influence those arguments to gradually exhaust memory and degrade service availability. The flaw is classified as CWE-401 (missing release of memory) and is strictly local, requiring at least low-level privileges to execute the CLI (AV:L/PR:L per the assessed vector), with impact limited to low availability loss and no confidentiality or integrity effect. No public exploit code and no confirmed active exploitation have been identified at time of analysis; the vendor has published a fix commit and an advisory, and the issue rates as medium severity (CVSS 4.0 base 4.8) with low real-world urgency.
Heap buffer over-read in ImageMagick's -fx expression processor affects versions 7.1.0-21 through 7.1.2-31, allowing a local, low-privileged attacker who can get a crafted -fx expression evaluated to read past the end of an allocated heap buffer and disclose limited memory contents or trigger a crash. The issue is rated CVSS 4.0 4.8 (AV:L/AC:L/PR:L/UI:N, confined to low confidentiality and availability impact), and there is no public exploit identified at time of analysis. Practical risk is highest where a service passes untrusted input into ImageMagick -fx expressions and is comparatively small for typical operator-driven command-line use, matching the independent assessment that this is a low-to-moderate priority issue rather than a high-severity emergency.
Local privilege escalation in Yun Jia Security Guard up to 2.7.1.9 allows an authenticated local attacker to manipulate the Pid argument to function sub_14000885C in the kgameprotect.sys kernel driver, resulting in improper privilege management. The vulnerability requires the product to be installed with the driver loaded and a low-privileged local account; it cannot be exploited remotely. No public exploit code has been identified, and the vendor has not responded to disclosure attempts.
Server-side request forgery and local file inclusion in Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 allow an authenticated user who can render user-controllable content to PDF to make the server fetch internal resources or embed local server files into the resulting PDF. The root cause is Frappe's dependency on a vulnerable version of the pdfkit library (CVE-2025-26240), which resolves external URLs and file references during server-side PDF rendering. The assessed vector is network-accessible but requires a valid Frappe account with access to a PDF-generating feature (print formats, templates, or report-to-PDF flows), and impact is limited to confidentiality; it is a medium-severity, low-priority issue for most deployments, and no public exploit was identified at time of analysis.
Repeated directory traversal during image-layer unpacking in containerd allows a malicious container image to consume excessive CPU by interleaving ordinary files with opaque whiteout markers, delaying container startup and reducing image-pull concurrency for unrelated deployments. Affected versions are containerd prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5; exploitation requires an operator, orchestrator, or CI/CD pipeline to pull or import the attacker-controlled image (CVSS 4.0 base 4.6, Medium; independent assessment CVSS 3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L), so environments restricted to trusted, signed images from controlled registries are effectively not exposed. Only availability is affected - there is no code execution or data exposure - and no public exploit code had been identified at the time of analysis; this is a genuine but low-priority denial-of-service issue rather than a high-severity emergency.