BeyondTrust Remote Support appliances contain an authentication bypass (CWE-290) in internal components that fail to validate the origin of received messages, potentially allowing an attacker to perform file operations on the appliance. According to the CVSS 4.0 vector (9.3), no authentication or user interaction is required, but the vendor notes exploitation is conditional ('under the right conditions') and the independent assessment emphasizes that an attacker must reach the internal messaging path and spoof a trusted source. No public exploit code or active exploitation has been identified at time of analysis, though this is a credible high-priority issue given the high impact.
OS command injection in Wavlink WL-WN530BE2-A firmware up to M30BE2_V250604 lets remote attackers reach the api.cgi login handler (api=info&client=app, function sub_12580) and inject shell metacharacters through the value the firmware treats as the client address (REMOTE_ADDR), potentially yielding arbitrary command execution with root-level privileges on the device. The vendor has confirmed the finding and shipped a fix in firmware 2026-09-24-841a51c6d5_tclinux.bin, which replaces the system() call with execvp and length-limits/null-checks the client address; publicly available exploit code exists (a GitHub PoC), though the weakness is not confirmed as actively exploited (CISA KEV). Exploitation is not as trivial as the raw CVSS 4.0 score of 9.3 implies: REMOTE_ADDR is conventionally derived from the TCP source address, so a real-world attacker likely needs the web server to trust a client-supplied address header or needs an on-path/proxy position, which materially narrows the population of reachable targets despite PR:N in the published vector.
Unauthenticated attackers can register an administrator-equivalent account on any WordPress site running the User Rights Access Manager plugin through version 1.1.3, resulting in full site takeover. The plugin leaves one of its AJAX account-registration handlers accessible without any capability or nonce check, and assigns newly self-registered users a role that was created as a direct copy of the administrator role, so a single crafted request yields a fully privileged account. Publicly available exploit code exists, and the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) confirms the attack is remote, unauthenticated, and requires no user interaction; no CISA KEV entry has been reported, so active exploitation is not confirmed, but the low complexity and public proof-of-concept make this a high-priority patch target wherever the plugin is deployed.
Remote code execution in Jooan JA-A12 IP cameras running firmware 009_20171107 or 05.02.31.105 allows unauthenticated attackers to execute root-level commands by abusing hard-coded credentials. An attacker sends singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with attacker-controlled authserverip and authcode values, causing the jooandiag daemon to run commands through /bin/sh and granting full device control. Publicly available exploit code exists, and the provided CVSS 4.0 score is 9.3; no CISA KEV listing is present in the supplied data.
Memory corruption in the Linux kernel IPv4 receive path lets a local attacker who can inject a packet with malformed checksum metadata (an out-of-range skb checksum_start) into the host IPv4 stack cause skb_checksum_help to write into and corrupt the network header, yielding high-integrity and high-confidentiality impact with a changed security scope (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, 9.3). The flaw is realistically reachable by an unprivileged process inside a sandbox, container, or guest VM that can supply attacker-controlled checksum metadata to the host kernel, making multi-tenant and sandboxed environments the primary exposure; single-tenant systems with no untrusted local or sandboxed workloads are materially less exposed. Exploitation requires local access only (no remote network path indicated), and intelligence available at the time of analysis shows no confirmed active exploitation (no CISA KEV) - though linked references to sandbox-escape research (pwn.ai's 'Pwnescape' and Vercel's $1M sandbox challenge findings) indicate the underlying primitive is being actively studied.
A heap-based buffer overflow in the api.cgi management handler of Wavlink WN530HG4B routers (firmware M30HG4B_V260724) allows unauthenticated remote attackers to corrupt heap memory by sending a crafted request to the api=info&client=app endpoint. The vulnerability is rated 9.3 under CVSS 4.0 (assessed 9.8 under CVSS 3.1, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting no authentication requirement, no user interaction, and full loss of confidentiality, integrity, and availability on the affected device. Publicly available exploit code exists, and while the issue is not confirmed as actively exploited (not in CISA KEV), the weaponizable nature of an unbounded parameter flowing into a shell-invoked handler makes patching exposed devices a priority; the vendor has released firmware 2026-09-24-841a51c6d5_tclinux.bin that resolves the flaw.
PHP object deserialization in EspoCRM versions prior to 9.3.7 lets an authenticated administrator achieve remote code execution by storing crafted serialized object data in background MassAction or Export parameters that the application later unserializes without any allowed-class restriction. The deserialization sinks are reachable over the network (AV:N) with no user interaction (UI:N), and an attacker with admin credentials can instantiate arbitrary PHP objects and execute code, provided a usable gadget chain is reachable in the deployed codebase or its dependencies. Publicly available exploit code exists, and the vendor released a fix in version 9.3.7; the practical limiting factor is the administrator-privilege prerequisite (PR:H), which tempers real-world urgency even though the flaw is rated 9.1.
Unauthenticated arbitrary file upload in the 10Web Booster WordPress plugin (tenweb-speed-optimizer) in all versions up to and including 2.34.10 allows remote attackers to place executable files on a target site, leading to remote code execution. The compressCustom REST endpoint fails to validate file type or extension on the page_id parameter, and the authentication check is bypassed because the plugin's tenwebio_rest nonce is written to a world-readable file under wp-content/uploads/ whenever a bulk optimisation batch pauses - a nonce minted in a cron/loopback context with user ID 0, so it is accepted for unauthenticated visitors. Our independent assessment rates this CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (below the 9.8 base published elsewhere) because exploitation is conditional on the site having previously paused a bulk optimisation batch and on the uploaded file landing in a PHP-executable, web-accessible path; no public exploit code was identified at time of analysis and the CVE is not in CISA KEV.
Arbitrary file read in EnergizeLab station-middleware Docker images 1.6.5 through 1.8.2 lets any registered low-privilege account supply a request parameter that the backend treats as a file path, resolving it without adequate restriction and returning files from outside the intended directories, which can expose middleware source, configuration and server secrets. Exploitation is remote and authenticated (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N in our independent assessment) and is confined to the listed Docker image versions; the CNA-published score of 9.9 (with scope change plus high integrity and availability impact) conflicts with our read-only impact assessment and should be reconciled before treating this as a top-tier emergency. No CISA KEV entry is present in the supplied data and no public exploit was identified at time of analysis, although the reference set includes a GitHub repository link that may contain a demonstration. Exposure risk is highest where container images carry secrets, tokens, or private keys on a filesystem reachable by the middleware process.
OS command injection in the AUTOM8N plugin for WHM/cPanel (all versions through commit 82821f7) allows an attacker who can reach the borg_restore.cgi endpoint to execute arbitrary shell commands on the hosting server, with the assessed impact being full loss of confidentiality, integrity and availability. The supplied CVSS 3.1 vector scores 9.8 (AV:N/AC:L/PR:N/UI:N) and the tags classify it as RCE/command injection, but our independent assessment raises the privilege requirement to PR:L: borg_restore.cgi is an administrative panel CGI that most plausibly requires an authenticated cPanel/WHM session (reseller or operator), and AUTOM8N is a third-party plugin that is not present in a default cPanel installation, so real exposure is confined to hosts that deployed it and left the endpoint reachable. Threat signals are currently modest - EPSS 0.76% (54th percentile), no CISA KEV entry, and no confirmed public exploit code identified at time of analysis, although a GitHub repository naming this CVE ID exists and should be monitored - meaning the practical priority is driven by the severity of the RCE outcome on affected hosts rather than by observed exploitation.
Unauthenticated model administration in the EnergizeLab Eilik and EilikO companion robots allows any party who can reach the on-device FastAPI AI inference and profiling service over the network to alter AI model configuration and swap the model loaded at runtime, with no credentials or user interaction required (CWE-306). The supplied CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); an independent re-assessment keeps the same unauthenticated, network-reachable vector but rates confidentiality impact as Low and lands on AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H, reflecting that the exposed functions are configuration/administration rather than data-exfiltration endpoints. The practical constraint is exposure: the service runs on a consumer desktop robot that normally listens only on a local or home network, so an attacker generally needs LAN adjacency or a deliberately port-forwarded/exposed device. No public exploit code and no CISA KEV listing were identified at time of analysis, and no vendor-released patch was identified in the provided data.
Root-level code execution on OPNsense firewalls running versions prior to 26.1.11 is achievable by an authenticated operator who holds the 'Firewall Alias Edit' privilege and can point a GeoIP alias at an attacker-controlled source URL. The GeoIP importer's process_zip() and process_gzip() routines trust the CSV country_code field when building output filenames under /usr/local/share/GeoIP/alias, so a crafted value traverses out of that directory and writes attacker-controlled files as root; chaining a planted newsyslog fragment with an oversized log file then lets the default hourly root cron job execute the payload, yielding complete firewall compromise (CVSS 9.9, AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). No public exploit code and no confirmed active exploitation were identified at time of analysis, and exploitation requires a non-default alias configuration that the operator must supply.
Remote code execution affects JetBrains TeamCity releases older than 2026.2, 2026.1.4, and 2025.11.8, where a type-whitelist bypass in the build messages protocol lets a serialized payload cross the deserialization trust boundary and execute code in the server process; the flaw carries a CVSS of 9.8 (AV:N/AC:L/PR:N/UI:N, unauthicated per the PR:N vector). There is no public exploit identified at time of analysis, CISA's SSVC records Exploitation as 'none' with Automatable set to 'no', and EPSS is low at 0.38% (31st percentile), though Technical Impact is rated 'total'. JetBrains has released fixes, so the primary risk is unpatched, network-reachable TeamCity servers whose agent-facing build messages channel is exposed beyond trusted build-agent hosts.
SQL injection in the Wheels CFML framework versions 1.1.8 through 4.1.1 can let unauthenticated remote attackers alter SQL queries when applications pass caller-supplied string values into dynamic finders such as findOneByEmail, query-builder where(property, value) and where(property, operator, value), string/UUID-key lookup paths like findByKey, updateByKey, deleteByKey, findOrCreateBy..., or validatesUniquenessOf. The parser mishandles a doubled single quote by treating it as the end of a string literal, potentially exposing authentication, password-reset, and token lookups; the whereBetween() variant in 4.0.0 through 4.1.1 is additionally gated on MySQL/MariaDB running with backslash escaping enabled, and numeric-column values are not affected. The issue is fixed in 4.1.2, and no public exploit was identified at time of analysis.
Local jail escape in FreeBSD allows an attacker with code execution inside a jail to bypass the filesystem root restriction by re-sending a directory file descriptor received from a different jail via SCM_RIGHTS, because FD_RESOLVE_BENEATH is not preserved during descriptor transfer. The flaw requires a cross-jail file-descriptor-passing channel, is not remotely reachable, and at time of analysis no public exploit code or active exploitation has been identified; EPSS is low at 0.19% (8th percentile). The input CVSS of 9.8 (AV:N/AC:L/PR:N) overstates risk; the authoritative assessment is CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N, reflecting local access, high complexity, and required cross-jail descriptor passing.
A use-after-free in the Linux kernel's IPv4 TCP request-socket handling lets a remote, unauthenticated attacker potentially free inet_opt while it is still being read during SYNACK construction, producing memory corruption in ip_options_build(). Every IPv4 TCP listener using the default SYN_RECV ehash path is in scope, but exploitation is constrained: it requires winning a race between the RSOURCE read of ireq->ireq_opt under rcu_read_lock() and the child socket's plain kfree() in inet_sock_destruct() on a multi-CPU system, and the second variant additionally requires the non-default net.ipv4.tcp_migrate_req=1 setting or an attached BPF_SK_REUSEPORT_SELECT_OR_MIGRATE program. No public exploit code has been identified at time of analysis; EPSS is low at 0.17% (5th percentile), yet the vuln.today decision label is act_now and the assessed vector (AC:H rather than the published AC:L) puts this at high impact if the race is won.
Frontend Admin by DynamiApps (the acf-frontend-form-element WordPress plugin) through version 3.29.13 assigns privileges incorrectly, letting a submitted frontend form escalate the submitting user's role - most seriously to administrator - which on WordPress equates to full site compromise. The provided CVSS 3.1 vector scores this 9.8 as network-reachable with no privileges required (PR:N), while our independent assessment scores it 8.8 with PR:L, because the real-world precondition is that a Frontend Admin form capable of affecting roles (for example a user-registration or profile-edit form) is published and reachable by the attacker; sites that expose such a form to anonymous visitors are effectively unauthenticated targets, whereas sites gating it behind login require at least a low-privilege account first. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, so there is no confirmation of active exploitation, though the low complexity and high payoff make opportunistic scanning plausible.
PHP object injection in Link Whisper Free (a WordPress plugin) through version 0.9.7 allows unauthenticated remote attackers to pass untrusted data into PHP's unserialize() and instantiate arbitrary objects, per the CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8) supplied with the advisory. Our independent assessment keeps the network-reachable, unauthenticated, no-interaction prerequisites but raises attack complexity to High (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), because CWE-502 only translates into full confidentiality, integrity, and availability loss when a usable POP gadget chain exists somewhere in the plugin, its bundled libraries, or other code loaded on the target site; absent such a chain the injected object may be inert. No public exploit identified at time of analysis, there is no CISA KEV listing, and no EPSS score was provided, so exposure today is limited to sites running the vulnerable plugin version that also happen to carry a viable gadget chain.
Privilege escalation in the Fluent CRM WordPress plugin (all versions through 3.2.5) allows a low-privileged account to elevate itself to higher privileges, including administrator-equivalent capabilities, by abusing an incorrectly assigned privilege (CWE-266). The vendor-supplied vector scores this 9.8 (AV:N/AC:L/PR:N/UI:N), but the independent vector analysis assigns PR:L, meaning the realistic starting point is an authenticated low-privileged WordPress account, and that prerequisite is the one condition that most changes the real-world risk; the exact vulnerable endpoint and required account level are not detailed in the available data. No public exploit code has been identified at time of analysis, and Fluent CRM is not listed in CISA KEV; the sole public reference is the Patchstack advisory. Sites running Fluent CRM 3.2.5 or earlier should treat this as high priority because WordPress administrator takeover typically yields full site compromise, data theft, and persistent backdooring.
Path traversal in NetLicensing MCP Server versions prior to 0.1.8 allows an authenticated MCP client holding a valid but non-administrative NetLicensing API key to redirect the netlicensing_get_product lookup away from the intended product endpoint and onto the /token endpoint by supplying '../token' (or percent-encoded equivalents such as '..%2ftoken') as the product_number. Because the traversed response is serialized through the generic _wrap_json wrapper instead of _wrap_json_token_read, the redact_token_read() masking of APIKEY 'number' and SHOP 'shopURL' fields never runs, so plaintext token values - including admin-level credentials if present in the account - are returned in the tool output. No vendor patch is available below 0.1.8, where the issue is fixed; it is a confirmed privilege-escalation-by-credential-disclosure vector rather than direct code execution, and no public exploit has been identified at time of analysis beyond the exact payload documented in the vendor advisory.
EnergizeLab's station-middleware (a NestJS-based service distributed as Docker images 1.6.5 through 1.8.2) exposes administrative APIs that perform no role or authorization checks, so any authenticated user holding a valid low-privilege account can read AI provider API keys and modify configuration and object-store contents. Tracked as CWE-862 and rated 9.6 Critical (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) because the flaw lets a low-privileged principal cross a security boundary to reach high-confidentiality and high-integrity resources; no availability impact is described. Exploitation requires pre-existing valid credentials plus network reachability to the middleware API - there is no pre-authentication path - and no public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS data was supplied.
Improper input validation in Google Chrome Desktop versions prior to 155.0.8059.84 could let a remote attacker execute arbitrary code outside the browser sandbox when a victim loads a crafted HTML page. The CVSS 3.1 vector scores 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), meaning no authentication is required but the victim must interact with attacker-supplied content, and the Changed Scope rating implies a security-boundary crossing such as an escape from the renderer sandbox - a non-trivial step that CISA's SSVC rates as not automatable. Despite the critical base score, the practical risk signal is mixed at time of analysis: exploitation status is none per SSVC, no public exploit code has been identified, and EPSS is only 0.21% (11th percentile), while Chromium's own severity classification for this issue is Medium and a vendor patch is available.
Unauthenticated attackers can bypass authentication on BMC Helix Network Management on-prem deployments (versions before 26.3.01) when SAML single sign-on is configured, logging in as the local administrator with any password to obtain a SuperAdmin session. This flaw allows modification of device credentials, execution of device commands, and alteration of audit records. No public exploit code has been identified at time of analysis, but the vulnerability is remotely exploitable without authentication and requires only that the SAML SSO feature be enabled.
Unauthenticated remote command execution in QNAP HybridDesk Station (HD Station) lets network attackers run arbitrary operating system commands on affected QNAP NAS devices that have the optional desktop/multimedia add-on installed. The root cause is an OS command injection (CWE-78) rated 9.3 under CVSS v4.0 (AV:N/AC:L/PR:N/UI:N), so no credentials, user interaction, or special preconditions are required; the vendor has fixed it in HybridDesk Station 4.2.23 (4.2 branch) and 4.3.4 (4.3 branch). No public exploit code or confirmed active exploitation has been identified at time of analysis, but real-world risk is governed by whether HD Station is installed and whether its interface is reachable from the attacker's network position (LAN versus internet-facing), as the specific vulnerable feature and input parameter have not been disclosed.
Unauthenticated attackers who can reach the Nutanix Prism Element management API can bypass authentication completely by sending an HTTP request with a crafted "internal management" header that the application's authentication filter trusts, and the server then issues a Set-Cookie response containing a valid JSESSIONID that decodes to a JWT carrying maximum cluster administrative privileges. Successful exploitation lets the attacker run root-level commands on every Controller VM (CVM) in the cluster and reach VM memory and virtual disks, resulting in total cluster compromise; the vulnerability is rated 9.3 with an independently assessed CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, and publicly available exploit code exists (the CVSS 4.0 vector rates exploit maturity as Proof-of-Concept), while no confirmed active exploitation (CISA KEV) has been identified and the decisive exposure factor is whether the Prism management plane is reachable from untrusted networks.
Authentication bypass in Znuny through 7.3.6 allows a remote, unauthenticated attacker to impersonate any existing account - including administrators - by sending a forged 'Remote-User' HTTP header, granting full access to confidential ticket data and system controls without any password. The flaw only manifests when the HTTPBasicAuth authentication backend (Kernel::System::Auth::HTTPBasicAuth for agents and/or Kernel::System::CustomerAuth::HTTPBasicAuth for customers) is configured, which is a non-default deployment choice, and when the fronting web server passes an inbound Remote-User header through to the Perl process unsanitized. No public exploit code and no confirmed active exploitation were identified in the available data, and the CNA's CVSS 9.5 rating is tempered by the genuine configuration prerequisite; installations using the default database or LDAP authentication backends are not affected.
Authenticated remote attackers holding a valid QuMagie account can exploit a Unix symbolic-link following flaw (CWE-61) in QNAP's QuMagie photo and media management application to compromise the security of the underlying NAS system. The vulnerable code follows attacker-influenced symlinks during file operations, allowing file reads and writes outside the intended media library boundaries, with the assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) reflecting high confidentiality, integrity and availability impact that crosses a security scope boundary - essentially escaping the application sandbox to reach the host NAS. Exploitation requires the attacker to first obtain a QuMagie user account (PR:L) and the ability to place a symlink or control a path the app will follow; no victim interaction is needed. There is no public exploit identified at time of analysis, and QNAP has released a fix in QuMagie 2.9.2 and later.
Server-side template injection in SolusVM 2 up to and including build 2.0.0-44576 lets a remote authenticated user run arbitrary code as root on the management node, so a single low-privileged panel account - a client, reseller, or sub-account on the hosting provider's instance - is enough to potentially take over the underlying virtualization infrastructure. Exploitation requires valid credentials (CVSS PR:L) and no user interaction (UI:N), which is the primary limiting factor and excludes fully anonymous attackers, but because the injected template reaches a code-execution sink running with root privileges the confidentiality, integrity, and availability impact is high across both the vulnerable component and dependent systems (CVSS 9.4). No public exploit identified at time of analysis and the flaw is not reported as confirmed actively exploited.
Amazon Neptune engine versions prior to 1.5.0.0 contain a deserialization flaw in the Gremlin graph data import component that lets an authenticated remote actor holding standard database permissions execute arbitrary code and reach internal service credentials. Exploitation requires working database credentials and network access to the Gremlin import interface, so exposure is greatest in multi-user, multi-tenant, or lower-trust deployments where untrusted parties hold standard DB accounts; no public exploit code or confirmed active exploitation was identified at time of analysis, but the high CVSS 4.0 score (9.4) and our independent CVSS 3.1 assessment (8.8, scope-changed, high confidentiality/integrity/availability impact) confirm this is a genuine high-priority issue rather than a CVSS-inflated one. Vendor-released patches are available as engine version 1.5.0.0 with backports to 1.4.8.1 and 1.4.7.1, and clusters enrolled in auto-update may be remediated without operator action.
Improved privilege escalation via insecure default DCOM permissions in Mitsubishi Electric GENESIS64 (10.97.3 and prior), along with ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI (all 10.97.3 and prior) and MC Works64 (all versions), lets a holder of the product's administrator account launch and operate DCOM objects locally or remotely that would normally require UAC elevation, enabling disclosure, tampering, destruction or deletion of internal data and potential denial of service. Exploitation requires authenticated access to that administrator account (CVSS PR:H), so risk is concentrated in insider, credential-theft, or compromised admin-session scenarios rather than unauthenticated mass exploitation; the network-reachable vector and high confidentiality, integrity and availability impact (assessed CVSS:3.1 base 9.x, vendor CVSS:4.0 9.4) still make this a serious privilege-management flaw. No public exploit code has been identified at time of analysis and the issue is not listed on CISA KEV.
Unauthenticated attackers with network access to Archon 0.2.13 through 0.11.1 can execute arbitrary commands on the host as the Archon user by sending messages to the AI coding agent through the exposed /api/* control API. The API binds to 0.0.0.0 by default and lacks any authentication, while the agent runs with bypassPermissions, directly translating messages into host command execution. No public exploit code has been identified at the time of analysis, but the issue is rated critical (CVSS 9.3) and affects all default deployments unless the API is network-restricted.
Path traversal in QNAP Qsirch lets remote attackers reach the full-text search application without authentication and read files and system data outside the intended directory structure on the host NAS. The vendor states the flaw is fixed in Qsirch 7.0.3.0 and later, so only NAS devices running an earlier build of this optional app - and exposing its web interface to the attacker's network path - remain at risk; no public exploit code and no confirmed active exploitation were identified at time of analysis. Our independent assessment scores the issue at CVSS 3.1 8.6-class severity on the confidentiality axis (C:H/I:N/A:N), meaning the realistic worst case is read-only disclosure of sensitive files rather than the file modification or service disruption implied by the higher input CVSS 4.0 score of 9.3.
Protected resources in Eclipse Jetty deployments that enable the EthereumAuthenticator can be reached without authentication when the requested path contains the configured login path as a later segment, because the authenticator replaces the resource's authentication or role requirement with ALLOWED. The flaw is rated critical (CVSS 4.0 base 9.3; our independent CVSS 3.1 assessment scores 9.1, AV:N/AC:L/PR:N/UI:N with high confidentiality and integrity impact), but real-world exposure is narrow: EthereumAuthenticator is a non-default, rarely enabled mechanism, the protected path must happen to embed the login path, and explicitly FORBIDDEN routes remain protected. No public exploit code and no confirmed active exploitation were identified at time of analysis.
Missing authentication in sMedio DTCP MOVE before version 1.4.5 lets remote, unauthenticated attackers reach critical functions of the DTCP-IP content-transfer service (sMedioDTCPServer) running on QNAP NAS devices, yielding high impact to confidentiality, integrity and availability (vendor CVSS 4.0 base 9.3; independent assessment CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The vendor has shipped a fixed release (1.4.5 and later), and no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis. Real-world exposure is limited mainly by deployment scarcity - this is an optional, niche QNAP add-on rather than a default NAS service - and by whether the affected service is network-reachable rather than confined behind NAT or a segmented LAN.
Hard-coded administrator credentials (admin/123456) shipped in JuggleIM im-server through version 1.8.16 allow unauthenticated remote attackers to log in to the admin console exposed on TCP port 8090 and take control of tenant applications and their application secrets. Because the console's CheckLogin routine recreates the admin account whenever it is absent, deleting the default administrator does not remove the exposure - the account simply returns. Exploitation requires only that port 8090 is network-reachable and that the operator has not rotated the shipped password; no public exploit code was identified at time of analysis, although the vendor advisory, a public technical writeup, and the upstream SQL seed and login source are all publicly referenced.
Authentication bypass in Diaple Stela versions prior to 1.60.1 allows an unauthenticated remote attacker to forge the client-side 'authProcess' cookie and impersonate any account, including one with SUPER_ADMIN privileges, ultimately obtaining a valid administrative JWT. Rated CVSS 4.0 9.3 (assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:N with high confidentiality and integrity impact, no availability impact), the flaw requires no credentials and no victim interaction - only network reachability to a vulnerable instance and knowledge or guessing of a valid target userId. No public exploit code has been identified at time of analysis.
Native code execution inside the shim zygote process is possible in runwasi's containerd-shim-wasmtime-v1 prior to 0.6.1 when a victim pulls and runs an attacker-crafted OCI image whose single Wasm layer is actually Wasmtime precompiled (serialized native-code) bytes. Because the shim trusts precompiled-format bytes from image layers as if they came from the trusted precompile-cache path, it deserializes them without normal WebAssembly validation, yielding the filesystem, environment, credentials, networking, and Linux syscall access of the workload container; the escape reaches the workload container boundary but does not by itself break container isolation or give direct host code execution. Per the CVSS vector the attack is network-reachable with no privileges (PR:N), though the independent assessment notes required user interaction (UI:R) to induce the victim to run the image; no public exploit code or confirmed in-the-wild exploitation was identified at time of analysis, and the issue is fixed in 0.6.1.
Unauthenticated SQL injection in the TMS Amelia (ameliabooking) plugin for WordPress, affecting all versions through 2.4.10, allows remote attackers to inject arbitrary SQL into database queries executed by the plugin. Per the assessed vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N), no authentication, no user interaction, and no non-default configuration are required - the only prerequisites are that the plugin be installed and active at a version at or below 2.4.10 on a network-reachable WordPress instance, making exposure broad across unpatched booking sites. The impact is confidentiality-focused: the classification indicates high confidentiality impact with no integrity or availability impact, so the practical risk is large-scale extraction of data from the site's WordPress database rather than data destruction or code execution. No public exploit code has been identified at time of analysis and the vulnerability is not listed as confirmed actively exploited (CISA KEV); no EPSS score was available in the source data, but given the unauthenticated, pre-auth access path and the database-level target, this should be treated as high priority on paper.
Blind SQL injection in the Link Whisper Free WordPress plugin (versions up to 0.9.7) enables remote attackers to extract sensitive information from the site's database by injecting crafted SQL commands into an unspecified request handler. The vulnerability is rated critical with a CVSS score of 9.3, and the supplied vector indicates network exploitability, low complexity, and no authentication or user interaction required (PR:N/UI:N); however, the independent assessment notes that the true authentication requirements are unconfirmed and may involve a low-privilege account, and the exact trigger parameter is not publicly documented. No public exploit code or confirmed active exploitation is identified at time of analysis.
SQL injection in the Mang Board WP WordPress plugin (Kitae Park) affects all versions through 2.4.4 and lets an attacker inject arbitrary SQL into the site's backend database queries, with the primary impact being high confidentiality loss (bulk read of user records, password hashes, and other stored data) plus a limited integrity effect. The vendor/Patchstack vector advertises a 9.3 score with scope change and no privileges required (PR:N/UI:N), but the independent assessment rates the issue as PR:L with unchanged scope (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N), so the authentication requirement should be treated as unconfirmed - the PR:N rating in the published vector is unusually permissive for a WordPress plugin SQLi and is not corroborated by the description text, which names no vulnerable parameter, endpoint, or feature. Only a Patchstack database entry is available: no vendor patch version is stated and no public exploit code has been identified at time of analysis.
OpenHealth through 0.2.0 fails to enforce authentication or ownership checks in the /api/health-data/[id] GET, PATCH, and DELETE handlers, allowing unauthenticated attackers who know a HealthData record id to read another user's medical record data and file metadata, overwrite the record with arbitrary JSON, or delete it. The issue is rated CVSS 4.0 9.2 and is reported by VulnCheck; no public exploit identified at time of analysis, and no CISA KEV active-exploitation confirmation is provided. Exploitation still depends on obtaining a valid record id: if ids are sequential or otherwise enumerable, the impact scales to mass medical-record theft or tampering, while high-entropy UUIDs narrow exploitation to targeted abuse after an id leak.
Eclipse Vert.x DB2 Client versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and 5.2.0 can deserialize attacker-controlled DRDA UDT column data, enabling remote code execution if a Java deserialization gadget chain is present on the classpath or denial of service otherwise. The affected component is io.vertx:vertx-db2-client, and exploitation requires an application to connect to a malicious or man-in-the-middle DRDA server that returns a result-set column tagged with FDOCA LID 0x50; legitimate DB2 servers never emit that type, and client-side TLS is disabled by default. The CVSS 4.0 score is 9.2 with PR:N, but practical exploitation requires attacker server-side/MITM position (AC:H) and, for RCE, a classpath gadget chain; no public exploit identified at time of analysis, and the real-world blast radius is narrower than the score alone suggests.
Unauthenticated path-traversal file writes in the EnergizeLab Eilik and EilikO AI skill upload endpoint allow any remote attacker who can reach the FastAPI AI inference and profiling service to write arbitrary files on the robot's host system by supplying crafted traversal filenames in an upload request. Because the endpoint enforces neither authentication nor path constraints, exploitation is a straightforward, low-complexity primitive that lets an attacker tamper with the AI skill files the robots execute, degrading or subverting robot behavior and causing high integrity and availability impact (CVSS 3.1 base 9.1, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H, CWE-434); confidentiality is assessed as unaffected. The practical limiting factor is network reachability rather than credentials or configuration - these are consumer robots whose service is normally confined to the local network segment, so real-world exposure is materially narrower than the AV:N vector implies, and no public exploit code or confirmed active exploitation was identified at time of analysis (the flaw itself needs no user interaction or non-default toggle once the endpoint is reachable).
Remote, unauthenticated attackers can unlock Mitsubishi Electric's ICONICS GENESIS, GENESIS64, ICONICS Suite and related SCADA/HMI products by obtaining the system's challenge-response unlock value, which the vendor confirms is fixed and identical for every user and every installation, after which the attacker can disclose, tamper with, destroy or delete internal information or force the system into a denial-of-service condition. Affected builds are GENESIS 11.03 and prior, GENESIS64/ICONICS Suite/Hyper Historian/AnalytiX/MobileHMI/IoTWorX 10.97.3 and prior, and MC Works64, GENESIS32 and BizViz at all versions. The vendor assigns CVSS 4.0 a 9.2 score, while our independent CVSS 3.1 assessment lands at 8.1 (AV:N/AC:H/PR:N/UI:N) because exploitation hinges on the one-time prerequisite of acquiring the static challenge response (the CVSS 4.0 AT:P attack requirement); no public exploit code and no confirmed active exploitation were identified at time of analysis, so the risk driver is the universal reusability of a single leaked value rather than any observed campaign.
Server-side template injection in Tianji (msgbyte/tianji) before version 1.31.29 allows an attacker who already holds workspace-administrator privileges to execute arbitrary JavaScript inside the Tianji Node.js process by storing a lodash evaluate block ('<% code %>') in a survey feedTemplate or a monitor notification template. Because formatString() in src/server/utils/template.ts leaves the default lodash evaluate pattern enabled, the planted payload is rendered - and runs - when any unauthenticated user submits a response to the public survey.submit endpoint, so no victim administrator interaction is required to trigger it. The result can be command execution, secret disclosure, data modification, or service disruption; the vendor rates it CVSS 9.1 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H), and the practical limiting factor is the workspace-admin prerequisite rather than any external exploitability. There is no public exploit identified at time of analysis and the issue is fixed in version 1.31.29.
Unauthenticated authorization bypass in the OpenNMS Meridian and Horizon REST API lets any remote attacker who can reach /rest/** read the monitored inventory and create, modify, or delete resources without credentials. The flaw arises because the Spring Security intercept-url rules match the HTTP method as a case-sensitive uppercase token and the filter chains terminate without a deny rule, so a request using a non-canonical method token (for example 'get' or 'put' instead of 'GET'/'PUT') matches no rule and is served without authentication; the /rest/alarms chain additionally leaks whether a specific alarm exists via a difference in the response. All pre-fix Meridian and Horizon versions in default configuration are affected, the vendor-supplied CVSS 3.1 base score is 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, i.e. unauthenticated and low complexity), and no public exploit code was identified at time of analysis; the practical limiting factor is deployment posture, since the vendor states these products belong on private networks and should not be Internet-facing.
Password-recovery brute force in MacCMS v10 (through 2026.1000.4056) lets unauthenticated remote attackers take over member accounts: the six-digit reset code is never rate-limited, so anyone who knows a victim member's registered email address or phone number can request a code and repeatedly submit guesses to findpass_reset until the correct value is found, then overwrite the member's password. Because no attempt cap, lockout, or backoff is enforced, a 1,000,000-value code space becomes brute-forceable within the code's validity window, though the attacker must already know the target identifier and the impact is confined to member (non-administrator) accounts. Assessed as high severity (published CVSS 4.0 base 9.1; independent 3.1 assessment AV:N/AC:L/PR:N/UI:N with high confidentiality and integrity impact); there is no CISA KEV entry and no dedicated exploit tooling confirmed, although a public technical writeup documents the brute-force technique.
Certificate pinning and custom TLS identity checks can be silently bypassed in undici versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1 because the Agent dispatcher drops function-valued tls options such as checkServerIdentity during a JSON deep clone before per-origin pool creation. An unauthenticated man-in-the-middle attacker who can present a certificate satisfying Node.js default hostname and chain validation but that the application's custom callback would have rejected can then be accepted, affecting request, fetch, and setGlobalDispatcher paths plus EnvHttpProxyAgent direct and no-proxy routes when applications rely on function-valued TLS verification. This is a conditional security-control bypass rather than a broad remote-code or data-theft flaw; no public exploit identified at time of analysis and no CISA KEV active exploitation is reported, while vendor-released patches are available in undici 6.29.1, 7.30.1, and 8.12.2.
Persistent cache poisoning and disclosure of user-specific responses affect undici 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1 when an originless Agent uses a shared cache store and composes the redirect interceptor before the cache interceptor. An unauthenticated remote attacker who controls the target of a redirect from a trusted URL can have the resulting cross-origin response stored under that trusted URL and served to later callers, or cause a private redirect response to be stored under the original URL and exposed to a later caller. Exploitation requires all three non-default conditions (originless Agent, shared cache store, redirect-before-cache ordering) and attacker control of a redirect target; no public exploit code or active exploitation was identified at time of analysis, and EPSS is 0.15% (4th percentile). Vendor-released patches are undici 7.30.1 and 8.12.2.
Authentication bypass in the joserfc Python library before 1.7.4 lets remote, unauthenticated attackers submit a JWS General JSON Serialization whose "signatures" array is empty and have joserfc.jws.deserialize_json() accept it as authenticated, so relying applications can be fooled into treating an arbitrary attacker-chosen payload as a signed, trustworthy message. Exposure is scoped: only the General JSON Serialization code path is affected - compact JWS, JWT decoding, Flattened JSON serialization, and JWE JSON processing do not reach the vulnerable logic - but where the vulnerable API is used and its success is treated as proof of authenticity, the integrity impact is high (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N per the independent assessment; the published base score is 9.1). No public exploit code or confirmed active exploitation has been identified at time of analysis; the fix commit, tests, and security advisory are publicly available.