Decoding a crafted RLE8- or RLE4-compressed BMP image with NetSurf's libnsbmp 0.1.7 or earlier can drive a one-byte heap over-read in bmp_decode_rle8() or bmp_decode_rle4(), crashing the consuming application. The trigger is narrow: the image must use RLE compression and end on an odd-length absolute run, so the word-alignment pad byte that the decoder forgets to count defeats its absolute-run bound check. Publicly available exploit code exists (a technical write-up with a reproducer is linked in the advisory), and exploitation is unauthenticated but requires a user or process to load and decode the attacker's image; impact is bounded to denial of service via crash, with no code execution, memory corruption, or confidentiality impact, making this a moderate, bounded issue rather than a top-tier priority.
Heap out-of-bounds read in AdPlug through 2.4 can crash an application that parses a truncated TwinTeam DMO file, yielding a local availability-only denial of service rather than code execution or data disclosure. The attack requires the victim to open or load a crafted 12- or 13-byte DMO file that still passes dmo_unpacker::decrypt() and reaches CdmoLoader::load() via CAdPlug::factory; publicly available exploit code exists, but exploitation is local and depends on user interaction. The independent assessment rates this as a low-priority memory-safety defect, not an urgent crisis.
Out-of-bounds read in AdPlug through 2.4 lets a crafted XSM file (with 'ofTAZ!' signature and a song byte of 0x80 or higher) crash applications that play the file, requiring victim interaction. Publicly available exploit code exists, but there is no confirmed active exploitation (not in CISA KEV); the CVSS 4.0 score is 6.8 while the independent CVSS 3.1 assessment is 5.4 (AV:L/AC:L/PR:N/UI:R, availability-only). The vulnerability is a low-to-moderate priority local denial-of-service issue, with no code execution, privilege escalation, or data disclosure per the assessed impact (C:N/I:N/A:H).
Information disclosure in EspoCRM's portal Note API allows an authenticated portal user (CVSS PR:L) who already has stream access to a parent record to retrieve internal agent notes by directly requesting a single Note by its known identifier; the stream list endpoint correctly filters notes where isInternal is true, but the direct single-Note read path fails to apply that restriction. Only EspoCRM versions prior to 9.3.7 are affected, and the issue is resolved in 9.3.7. Publicly available exploit code exists, but the practical risk is moderated by the preconditions: a valid portal credential, stream access to the relevant parent record, and knowledge of the specific note identifier - there is no described bulk enumeration, so exposure is per-known-identifier rather than wholesale dumping of internal content. No public exploit identified at time of analysis is contradicted here - exploitation code is public, but this is not confirmed as actively exploited (no CISA KEV listing).
Unauthenticated visitors to WordPress sites running the Spin Wheel plugin before 2.2.1 can bypass the plugin's spin-validation logic and retrieve the coupon codes stored for any campaign, including campaigns that have not been published. Because the plugin does not confirm that a legitimate spin actually occurred before handing back and consuming a configured prize, an attacker can repeatedly harvest the full pool of stored coupon codes and drain a campaign's prize inventory; the flaw is remotely reachable with no authentication, user interaction, or special configuration, and publicly available exploit code exists. Scored at CVSS 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N), the impact is confined to the coupon/prize feature and does not provide a path to code execution or broader site compromise.
EspoCRM versions prior to 10.0.3 can disclose restricted record and user fields to an authenticated user who holds both email-template edit access and mass-email sending access, because the template renderer stops applying per-user ACL filtering when messages are generated for mass email and for administrator-controlled group-email auto-replies. Only fields explicitly marked FORBIDDEN, INTERNAL, or ONLY_ADMIN are exposed, so the impact is limited to information disclosure with no code execution, data modification, or availability loss, consistent with the assessed vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (6.5, authenticated remote). Publicly available exploit code exists for this issue, but the prerequisite privilege pairing is not part of a typical default non-administrative role, keeping real-world priority at medium rather than urgent.
Broken object-level authorization in EspoCRM before 9.3.7 allows any authenticated user who has been granted Import scope access to read the row-level error CSV of another user's import job by posting to /api/v1/Import/{id}/exportErrors with a foreign import identifier. The endpoint returns an attachment identifier for the error file, exposing imported data rows (customer records, contact data, and similar) that the caller does not own; the exposure is limited to the contents of that import's error export and requires the attacker to know or enumerate a target import ID. Publicly available exploit code exists (the upstream advisory, fix commit, and 9.3.7 release are publicly linked), but there is no confirmed active exploitation via CISA KEV and no EPSS score was supplied; the vendor-released patch is 9.3.7, which adds the missing entity-level read check.
EspoCRM installations prior to 10.0.2 allow an authenticated user holding the mass-update permission to duplicate an existing Attachment record by supplying its identifier, because the mass-update processor copied the file without performing an ACL read check - the resulting copy is then readable by the attacker, disclosing the file's contents. Impact is confidentiality-only (no integrity or availability effect) and exploitation is constrained: the attacker must already possess an elevated mass-update privilege and must know a valid attachment ID for a file they are not authorized to read, which the vendor acknowledges is difficult to obtain. Publicly available exploitation material exists in the form of the upstream advisory, the fix commit that pinpoints the vulnerable code path (Tools/MassUpdate/Processor.php), and the 10.0.2 release notes; there is no CISA KEV listing indicating confirmed active exploitation of this issue.
OS command injection in the pfSense-pkg-frr package (2.0.2_1 and source revision 2.1.2_1) lets an authenticated WebGUI user holding only the low-privilege page-status-frr role execute arbitrary commands as root on the firewall. The flaw sits in the FRR status filter on status_frr.php, where a crafted filter value escapes a single-quoted sed expression that concatenates escapeshellarg() output before being evaluated through a popen() pipeline. Exploitation requires the optional FRR package to be installed plus a valid authenticated session with the page-status-frr privilege (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, score 8.8), so it is a post-authentication privilege escalation rather than a pre-auth compromise; there is no public exploit identified at time of analysis, and no CISA KEV listing. Updated FRR packages resolve the issue for pfSense Plus 26.07/26.03.1 and CE 2.9.0/2.8.1.
Unauthenticated arbitrary file upload in the 10Web Booster WordPress plugin (tenweb-speed-optimizer) in all versions up to and including 2.34.10 allows remote attackers to place executable files on a target site, leading to remote code execution. The compressCustom REST endpoint fails to validate file type or extension on the page_id parameter, and the authentication check is bypassed because the plugin's tenwebio_rest nonce is written to a world-readable file under wp-content/uploads/ whenever a bulk optimisation batch pauses - a nonce minted in a cron/loopback context with user ID 0, so it is accepted for unauthenticated visitors. Our independent assessment rates this CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (below the 9.8 base published elsewhere) because exploitation is conditional on the site having previously paused a bulk optimisation batch and on the uploaded file landing in a PHP-executable, web-accessible path; no public exploit code was identified at time of analysis and the CVE is not in CISA KEV.
Arbitrary file read in EnergizeLab station-middleware Docker images 1.6.5 through 1.8.2 lets any registered low-privilege account supply a request parameter that the backend treats as a file path, resolving it without adequate restriction and returning files from outside the intended directories, which can expose middleware source, configuration and server secrets. Exploitation is remote and authenticated (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N in our independent assessment) and is confined to the listed Docker image versions; the CNA-published score of 9.9 (with scope change plus high integrity and availability impact) conflicts with our read-only impact assessment and should be reconciled before treating this as a top-tier emergency. No CISA KEV entry is present in the supplied data and no public exploit was identified at time of analysis, although the reference set includes a GitHub repository link that may contain a demonstration. Exposure risk is highest where container images carry secrets, tokens, or private keys on a filesystem reachable by the middleware process.
OS command injection in the AUTOM8N plugin for WHM/cPanel (all versions through commit 82821f7) allows an attacker who can reach the borg_restore.cgi endpoint to execute arbitrary shell commands on the hosting server, with the assessed impact being full loss of confidentiality, integrity and availability. The supplied CVSS 3.1 vector scores 9.8 (AV:N/AC:L/PR:N/UI:N) and the tags classify it as RCE/command injection, but our independent assessment raises the privilege requirement to PR:L: borg_restore.cgi is an administrative panel CGI that most plausibly requires an authenticated cPanel/WHM session (reseller or operator), and AUTOM8N is a third-party plugin that is not present in a default cPanel installation, so real exposure is confined to hosts that deployed it and left the endpoint reachable. Threat signals are currently modest - EPSS 0.76% (54th percentile), no CISA KEV entry, and no confirmed public exploit code identified at time of analysis, although a GitHub repository naming this CVE ID exists and should be monitored - meaning the practical priority is driven by the severity of the RCE outcome on affected hosts rather than by observed exploitation.
Unauthenticated model administration in the EnergizeLab Eilik and EilikO companion robots allows any party who can reach the on-device FastAPI AI inference and profiling service over the network to alter AI model configuration and swap the model loaded at runtime, with no credentials or user interaction required (CWE-306). The supplied CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); an independent re-assessment keeps the same unauthenticated, network-reachable vector but rates confidentiality impact as Low and lands on AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H, reflecting that the exposed functions are configuration/administration rather than data-exfiltration endpoints. The practical constraint is exposure: the service runs on a consumer desktop robot that normally listens only on a local or home network, so an attacker generally needs LAN adjacency or a deliberately port-forwarded/exposed device. No public exploit code and no CISA KEV listing were identified at time of analysis, and no vendor-released patch was identified in the provided data.
Root-level code execution on OPNsense firewalls running versions prior to 26.1.11 is achievable by an authenticated operator who holds the 'Firewall Alias Edit' privilege and can point a GeoIP alias at an attacker-controlled source URL. The GeoIP importer's process_zip() and process_gzip() routines trust the CSV country_code field when building output filenames under /usr/local/share/GeoIP/alias, so a crafted value traverses out of that directory and writes attacker-controlled files as root; chaining a planted newsyslog fragment with an oversized log file then lets the default hourly root cron job execute the payload, yielding complete firewall compromise (CVSS 9.9, AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). No public exploit code and no confirmed active exploitation were identified at time of analysis, and exploitation requires a non-default alias configuration that the operator must supply.
Remote code execution affects JetBrains TeamCity releases older than 2026.2, 2026.1.4, and 2025.11.8, where a type-whitelist bypass in the build messages protocol lets a serialized payload cross the deserialization trust boundary and execute code in the server process; the flaw carries a CVSS of 9.8 (AV:N/AC:L/PR:N/UI:N, unauthicated per the PR:N vector). There is no public exploit identified at time of analysis, CISA's SSVC records Exploitation as 'none' with Automatable set to 'no', and EPSS is low at 0.38% (31st percentile), though Technical Impact is rated 'total'. JetBrains has released fixes, so the primary risk is unpatched, network-reachable TeamCity servers whose agent-facing build messages channel is exposed beyond trusted build-agent hosts.
SQL injection in the Wheels CFML framework versions 1.1.8 through 4.1.1 can let unauthenticated remote attackers alter SQL queries when applications pass caller-supplied string values into dynamic finders such as findOneByEmail, query-builder where(property, value) and where(property, operator, value), string/UUID-key lookup paths like findByKey, updateByKey, deleteByKey, findOrCreateBy..., or validatesUniquenessOf. The parser mishandles a doubled single quote by treating it as the end of a string literal, potentially exposing authentication, password-reset, and token lookups; the whereBetween() variant in 4.0.0 through 4.1.1 is additionally gated on MySQL/MariaDB running with backslash escaping enabled, and numeric-column values are not affected. The issue is fixed in 4.1.2, and no public exploit was identified at time of analysis.
Local jail escape in FreeBSD allows an attacker with code execution inside a jail to bypass the filesystem root restriction by re-sending a directory file descriptor received from a different jail via SCM_RIGHTS, because FD_RESOLVE_BENEATH is not preserved during descriptor transfer. The flaw requires a cross-jail file-descriptor-passing channel, is not remotely reachable, and at time of analysis no public exploit code or active exploitation has been identified; EPSS is low at 0.19% (8th percentile). The input CVSS of 9.8 (AV:N/AC:L/PR:N) overstates risk; the authoritative assessment is CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N, reflecting local access, high complexity, and required cross-jail descriptor passing.
A use-after-free in the Linux kernel's IPv4 TCP request-socket handling lets a remote, unauthenticated attacker potentially free inet_opt while it is still being read during SYNACK construction, producing memory corruption in ip_options_build(). Every IPv4 TCP listener using the default SYN_RECV ehash path is in scope, but exploitation is constrained: it requires winning a race between the RSOURCE read of ireq->ireq_opt under rcu_read_lock() and the child socket's plain kfree() in inet_sock_destruct() on a multi-CPU system, and the second variant additionally requires the non-default net.ipv4.tcp_migrate_req=1 setting or an attached BPF_SK_REUSEPORT_SELECT_OR_MIGRATE program. No public exploit code has been identified at time of analysis; EPSS is low at 0.17% (5th percentile), yet the vuln.today decision label is act_now and the assessed vector (AC:H rather than the published AC:L) puts this at high impact if the race is won.
Frontend Admin by DynamiApps (the acf-frontend-form-element WordPress plugin) through version 3.29.13 assigns privileges incorrectly, letting a submitted frontend form escalate the submitting user's role - most seriously to administrator - which on WordPress equates to full site compromise. The provided CVSS 3.1 vector scores this 9.8 as network-reachable with no privileges required (PR:N), while our independent assessment scores it 8.8 with PR:L, because the real-world precondition is that a Frontend Admin form capable of affecting roles (for example a user-registration or profile-edit form) is published and reachable by the attacker; sites that expose such a form to anonymous visitors are effectively unauthenticated targets, whereas sites gating it behind login require at least a low-privilege account first. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, so there is no confirmation of active exploitation, though the low complexity and high payoff make opportunistic scanning plausible.
PHP object injection in Link Whisper Free (a WordPress plugin) through version 0.9.7 allows unauthenticated remote attackers to pass untrusted data into PHP's unserialize() and instantiate arbitrary objects, per the CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8) supplied with the advisory. Our independent assessment keeps the network-reachable, unauthenticated, no-interaction prerequisites but raises attack complexity to High (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), because CWE-502 only translates into full confidentiality, integrity, and availability loss when a usable POP gadget chain exists somewhere in the plugin, its bundled libraries, or other code loaded on the target site; absent such a chain the injected object may be inert. No public exploit identified at time of analysis, there is no CISA KEV listing, and no EPSS score was provided, so exposure today is limited to sites running the vulnerable plugin version that also happen to carry a viable gadget chain.
Privilege escalation in the Fluent CRM WordPress plugin (all versions through 3.2.5) allows a low-privileged account to elevate itself to higher privileges, including administrator-equivalent capabilities, by abusing an incorrectly assigned privilege (CWE-266). The vendor-supplied vector scores this 9.8 (AV:N/AC:L/PR:N/UI:N), but the independent vector analysis assigns PR:L, meaning the realistic starting point is an authenticated low-privileged WordPress account, and that prerequisite is the one condition that most changes the real-world risk; the exact vulnerable endpoint and required account level are not detailed in the available data. No public exploit code has been identified at time of analysis, and Fluent CRM is not listed in CISA KEV; the sole public reference is the Patchstack advisory. Sites running Fluent CRM 3.2.5 or earlier should treat this as high priority because WordPress administrator takeover typically yields full site compromise, data theft, and persistent backdooring.
Path traversal in NetLicensing MCP Server versions prior to 0.1.8 allows an authenticated MCP client holding a valid but non-administrative NetLicensing API key to redirect the netlicensing_get_product lookup away from the intended product endpoint and onto the /token endpoint by supplying '../token' (or percent-encoded equivalents such as '..%2ftoken') as the product_number. Because the traversed response is serialized through the generic _wrap_json wrapper instead of _wrap_json_token_read, the redact_token_read() masking of APIKEY 'number' and SHOP 'shopURL' fields never runs, so plaintext token values - including admin-level credentials if present in the account - are returned in the tool output. No vendor patch is available below 0.1.8, where the issue is fixed; it is a confirmed privilege-escalation-by-credential-disclosure vector rather than direct code execution, and no public exploit has been identified at time of analysis beyond the exact payload documented in the vendor advisory.
EnergizeLab's station-middleware (a NestJS-based service distributed as Docker images 1.6.5 through 1.8.2) exposes administrative APIs that perform no role or authorization checks, so any authenticated user holding a valid low-privilege account can read AI provider API keys and modify configuration and object-store contents. Tracked as CWE-862 and rated 9.6 Critical (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) because the flaw lets a low-privileged principal cross a security boundary to reach high-confidentiality and high-integrity resources; no availability impact is described. Exploitation requires pre-existing valid credentials plus network reachability to the middleware API - there is no pre-authentication path - and no public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS data was supplied.
Improper input validation in Google Chrome Desktop versions prior to 155.0.8059.84 could let a remote attacker execute arbitrary code outside the browser sandbox when a victim loads a crafted HTML page. The CVSS 3.1 vector scores 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), meaning no authentication is required but the victim must interact with attacker-supplied content, and the Changed Scope rating implies a security-boundary crossing such as an escape from the renderer sandbox - a non-trivial step that CISA's SSVC rates as not automatable. Despite the critical base score, the practical risk signal is mixed at time of analysis: exploitation status is none per SSVC, no public exploit code has been identified, and EPSS is only 0.21% (11th percentile), while Chromium's own severity classification for this issue is Medium and a vendor patch is available.
Unauthenticated attackers can bypass authentication on BMC Helix Network Management on-prem deployments (versions before 26.3.01) when SAML single sign-on is configured, logging in as the local administrator with any password to obtain a SuperAdmin session. This flaw allows modification of device credentials, execution of device commands, and alteration of audit records. No public exploit code has been identified at time of analysis, but the vulnerability is remotely exploitable without authentication and requires only that the SAML SSO feature be enabled.
Unauthenticated remote command execution in QNAP HybridDesk Station (HD Station) lets network attackers run arbitrary operating system commands on affected QNAP NAS devices that have the optional desktop/multimedia add-on installed. The root cause is an OS command injection (CWE-78) rated 9.3 under CVSS v4.0 (AV:N/AC:L/PR:N/UI:N), so no credentials, user interaction, or special preconditions are required; the vendor has fixed it in HybridDesk Station 4.2.23 (4.2 branch) and 4.3.4 (4.3 branch). No public exploit code or confirmed active exploitation has been identified at time of analysis, but real-world risk is governed by whether HD Station is installed and whether its interface is reachable from the attacker's network position (LAN versus internet-facing), as the specific vulnerable feature and input parameter have not been disclosed.
Unauthenticated attackers who can reach the Nutanix Prism Element management API can bypass authentication completely by sending an HTTP request with a crafted "internal management" header that the application's authentication filter trusts, and the server then issues a Set-Cookie response containing a valid JSESSIONID that decodes to a JWT carrying maximum cluster administrative privileges. Successful exploitation lets the attacker run root-level commands on every Controller VM (CVM) in the cluster and reach VM memory and virtual disks, resulting in total cluster compromise; the vulnerability is rated 9.3 with an independently assessed CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, and publicly available exploit code exists (the CVSS 4.0 vector rates exploit maturity as Proof-of-Concept), while no confirmed active exploitation (CISA KEV) has been identified and the decisive exposure factor is whether the Prism management plane is reachable from untrusted networks.
Authentication bypass in Znuny through 7.3.6 allows a remote, unauthenticated attacker to impersonate any existing account - including administrators - by sending a forged 'Remote-User' HTTP header, granting full access to confidential ticket data and system controls without any password. The flaw only manifests when the HTTPBasicAuth authentication backend (Kernel::System::Auth::HTTPBasicAuth for agents and/or Kernel::System::CustomerAuth::HTTPBasicAuth for customers) is configured, which is a non-default deployment choice, and when the fronting web server passes an inbound Remote-User header through to the Perl process unsanitized. No public exploit code and no confirmed active exploitation were identified in the available data, and the CNA's CVSS 9.5 rating is tempered by the genuine configuration prerequisite; installations using the default database or LDAP authentication backends are not affected.
An authenticated administrator on EspoCRM instances prior to 9.3.10 can abuse the administrative Label Manager to read, modify, create, or delete JSON files outside the intended language directory by supplying crafted 'scope' and 'language' parameters. Exploitation requires a full administrator session (CVSS PR:H) and is bounded by filesystem permissions and server configuration, which limits the reachable files to those the PHP/web-server process can access, making this mainly a privilege-abuse and defense-in-depth concern rather than a path to arbitrary file compromise. Publicly available exploit code exists (the vendor's advisory and a fix commit were published), but there is no CISA KEV entry confirming active exploitation; EPSS data was not provided, so exploit likelihood should be treated as elevated but not critical.
Authenticated remote attackers holding a valid QuMagie account can exploit a Unix symbolic-link following flaw (CWE-61) in QNAP's QuMagie photo and media management application to compromise the security of the underlying NAS system. The vulnerable code follows attacker-influenced symlinks during file operations, allowing file reads and writes outside the intended media library boundaries, with the assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) reflecting high confidentiality, integrity and availability impact that crosses a security scope boundary - essentially escaping the application sandbox to reach the host NAS. Exploitation requires the attacker to first obtain a QuMagie user account (PR:L) and the ability to place a symlink or control a path the app will follow; no victim interaction is needed. There is no public exploit identified at time of analysis, and QNAP has released a fix in QuMagie 2.9.2 and later.
Server-side template injection in SolusVM 2 up to and including build 2.0.0-44576 lets a remote authenticated user run arbitrary code as root on the management node, so a single low-privileged panel account - a client, reseller, or sub-account on the hosting provider's instance - is enough to potentially take over the underlying virtualization infrastructure. Exploitation requires valid credentials (CVSS PR:L) and no user interaction (UI:N), which is the primary limiting factor and excludes fully anonymous attackers, but because the injected template reaches a code-execution sink running with root privileges the confidentiality, integrity, and availability impact is high across both the vulnerable component and dependent systems (CVSS 9.4). No public exploit identified at time of analysis and the flaw is not reported as confirmed actively exploited.
Amazon Neptune engine versions prior to 1.5.0.0 contain a deserialization flaw in the Gremlin graph data import component that lets an authenticated remote actor holding standard database permissions execute arbitrary code and reach internal service credentials. Exploitation requires working database credentials and network access to the Gremlin import interface, so exposure is greatest in multi-user, multi-tenant, or lower-trust deployments where untrusted parties hold standard DB accounts; no public exploit code or confirmed active exploitation was identified at time of analysis, but the high CVSS 4.0 score (9.4) and our independent CVSS 3.1 assessment (8.8, scope-changed, high confidentiality/integrity/availability impact) confirm this is a genuine high-priority issue rather than a CVSS-inflated one. Vendor-released patches are available as engine version 1.5.0.0 with backports to 1.4.8.1 and 1.4.7.1, and clusters enrolled in auto-update may be remediated without operator action.
Improved privilege escalation via insecure default DCOM permissions in Mitsubishi Electric GENESIS64 (10.97.3 and prior), along with ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI (all 10.97.3 and prior) and MC Works64 (all versions), lets a holder of the product's administrator account launch and operate DCOM objects locally or remotely that would normally require UAC elevation, enabling disclosure, tampering, destruction or deletion of internal data and potential denial of service. Exploitation requires authenticated access to that administrator account (CVSS PR:H), so risk is concentrated in insider, credential-theft, or compromised admin-session scenarios rather than unauthenticated mass exploitation; the network-reachable vector and high confidentiality, integrity and availability impact (assessed CVSS:3.1 base 9.x, vendor CVSS:4.0 9.4) still make this a serious privilege-management flaw. No public exploit code has been identified at time of analysis and the issue is not listed on CISA KEV.
EspoCRM versions prior to 9.3.9 fail to neutralize spreadsheet formula triggers in exported CSV and XLSX files, because sanitizeCellValue() only inspects the first byte of a cell value. An authenticated low-privileged user can store free-text content such as " =cmd|' /C calc'!A0" (whitespace or a control character before the trigger), so the leading single-quote neutralization prefix is never applied; a separate privileged user must then export the affected records, open the file, and accept the spreadsheet application's formula/security prompts before the cell is evaluated, enabling outbound data disclosure and, on legacy configurations with DDE enabled, command execution. Tracked as CWE-1236 with CVSS 3.1 base score 5.4 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N), and publicly available exploit code exists; no confirmed active exploitation (CISA KEV) was identified. This is a moderate, conditional risk best treated as a medium-priority hygiene fix rather than an urgent emergency.
Unauthenticated attackers with network access to Archon 0.2.13 through 0.11.1 can execute arbitrary commands on the host as the Archon user by sending messages to the AI coding agent through the exposed /api/* control API. The API binds to 0.0.0.0 by default and lacks any authentication, while the agent runs with bypassPermissions, directly translating messages into host command execution. No public exploit code has been identified at the time of analysis, but the issue is rated critical (CVSS 9.3) and affects all default deployments unless the API is network-restricted.
Path traversal in QNAP Qsirch lets remote attackers reach the full-text search application without authentication and read files and system data outside the intended directory structure on the host NAS. The vendor states the flaw is fixed in Qsirch 7.0.3.0 and later, so only NAS devices running an earlier build of this optional app - and exposing its web interface to the attacker's network path - remain at risk; no public exploit code and no confirmed active exploitation were identified at time of analysis. Our independent assessment scores the issue at CVSS 3.1 8.6-class severity on the confidentiality axis (C:H/I:N/A:N), meaning the realistic worst case is read-only disclosure of sensitive files rather than the file modification or service disruption implied by the higher input CVSS 4.0 score of 9.3.
Protected resources in Eclipse Jetty deployments that enable the EthereumAuthenticator can be reached without authentication when the requested path contains the configured login path as a later segment, because the authenticator replaces the resource's authentication or role requirement with ALLOWED. The flaw is rated critical (CVSS 4.0 base 9.3; our independent CVSS 3.1 assessment scores 9.1, AV:N/AC:L/PR:N/UI:N with high confidentiality and integrity impact), but real-world exposure is narrow: EthereumAuthenticator is a non-default, rarely enabled mechanism, the protected path must happen to embed the login path, and explicitly FORBIDDEN routes remain protected. No public exploit code and no confirmed active exploitation were identified at time of analysis.
Missing authentication in sMedio DTCP MOVE before version 1.4.5 lets remote, unauthenticated attackers reach critical functions of the DTCP-IP content-transfer service (sMedioDTCPServer) running on QNAP NAS devices, yielding high impact to confidentiality, integrity and availability (vendor CVSS 4.0 base 9.3; independent assessment CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The vendor has shipped a fixed release (1.4.5 and later), and no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis. Real-world exposure is limited mainly by deployment scarcity - this is an optional, niche QNAP add-on rather than a default NAS service - and by whether the affected service is network-reachable rather than confined behind NAT or a segmented LAN.
Hard-coded administrator credentials (admin/123456) shipped in JuggleIM im-server through version 1.8.16 allow unauthenticated remote attackers to log in to the admin console exposed on TCP port 8090 and take control of tenant applications and their application secrets. Because the console's CheckLogin routine recreates the admin account whenever it is absent, deleting the default administrator does not remove the exposure - the account simply returns. Exploitation requires only that port 8090 is network-reachable and that the operator has not rotated the shipped password; no public exploit code was identified at time of analysis, although the vendor advisory, a public technical writeup, and the upstream SQL seed and login source are all publicly referenced.
Authentication bypass in Diaple Stela versions prior to 1.60.1 allows an unauthenticated remote attacker to forge the client-side 'authProcess' cookie and impersonate any account, including one with SUPER_ADMIN privileges, ultimately obtaining a valid administrative JWT. Rated CVSS 4.0 9.3 (assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:N with high confidentiality and integrity impact, no availability impact), the flaw requires no credentials and no victim interaction - only network reachability to a vulnerable instance and knowledge or guessing of a valid target userId. No public exploit code has been identified at time of analysis.
Native code execution inside the shim zygote process is possible in runwasi's containerd-shim-wasmtime-v1 prior to 0.6.1 when a victim pulls and runs an attacker-crafted OCI image whose single Wasm layer is actually Wasmtime precompiled (serialized native-code) bytes. Because the shim trusts precompiled-format bytes from image layers as if they came from the trusted precompile-cache path, it deserializes them without normal WebAssembly validation, yielding the filesystem, environment, credentials, networking, and Linux syscall access of the workload container; the escape reaches the workload container boundary but does not by itself break container isolation or give direct host code execution. Per the CVSS vector the attack is network-reachable with no privileges (PR:N), though the independent assessment notes required user interaction (UI:R) to induce the victim to run the image; no public exploit code or confirmed in-the-wild exploitation was identified at time of analysis, and the issue is fixed in 0.6.1.
Unauthenticated SQL injection in the TMS Amelia (ameliabooking) plugin for WordPress, affecting all versions through 2.4.10, allows remote attackers to inject arbitrary SQL into database queries executed by the plugin. Per the assessed vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N), no authentication, no user interaction, and no non-default configuration are required - the only prerequisites are that the plugin be installed and active at a version at or below 2.4.10 on a network-reachable WordPress instance, making exposure broad across unpatched booking sites. The impact is confidentiality-focused: the classification indicates high confidentiality impact with no integrity or availability impact, so the practical risk is large-scale extraction of data from the site's WordPress database rather than data destruction or code execution. No public exploit code has been identified at time of analysis and the vulnerability is not listed as confirmed actively exploited (CISA KEV); no EPSS score was available in the source data, but given the unauthenticated, pre-auth access path and the database-level target, this should be treated as high priority on paper.
Unauthenticated attackers can invoke several cancellation-related AJAX actions in the eaSYNC Booking WordPress plugin before 1.3.31 because those actions lack authorization and nonce validation, letting them create booking cancellation requests, fire booking notification emails, and overwrite the content of emails the site sends. Publicly available exploit code exists (the WPScan advisory is the exploit reference), but there is no indication of confirmed active exploitation in CISA KEV. The impact is confined to integrity of booking state and outbound email content - there is no code execution, data disclosure, or site takeover - making this a moderate-priority web application flaw (CVSS 5.3).
Unauthenticated attackers can forge payment notifications against WordPress/WooCommerce stores running the Cardinity Payment Gateway plugin before version 3.4.2, because the plugin ships with an empty notification signing secret and fails to properly validate the authenticity of incoming callbacks. By sending a crafted 'approved payment' (or 'failed') notification to the plugin's payment-callback handler, a remote attacker with no credentials and no user interaction can mark arbitrary orders as paid - payment fraud - or force legitimate orders into a failed state. The vulnerability is exploitable against default installations, and publicly available exploit code exists (documented by WPScan), though there is no confirmation of active exploitation in the wild; impact is bounded to order-status manipulation rather than code execution, data theft, or service disruption.
Order status manipulation in Rede Itaú for WooCommerce before 5.5.3 allows unauthenticated remote attackers to change arbitrary WooCommerce order states - including marking unpaid orders as paid and cancelling completed orders - by forging payment gateway webhook requests. Publicly available exploit code exists, though the impact is limited to integrity (CVSS 5.3) and requires the plugin to be installed and its webhook endpoint reachable. No special configuration or user interaction is needed, but exposure is limited to merchants using the Itaú (Brazil) payment gateway.
Unauthenticated attackers can arbitrarily change the status of WooCommerce orders - including orders already marked paid or completed - by sending forged callbacks to the payment webhook endpoint of the Rede Itaú for WooCommerce WordPress plugin, which performs no authenticity verification on incoming requests. Any store running the plugin at a version prior to 5.5.3 with an active, network-reachable webhook URL is exposed remotely and without credentials (CVSS 5.3, AV:N/AC:L/PR:N/UI:N, C:N/I:L/A:N), and the impact is confined to order-status integrity with no data disclosure or denial of service. Publicly available exploit code exists and the issue was reported by WPScan, though it is not confirmed as actively exploited (no CISA KEV listing); the deployment base is narrow - merchants using the Itaú gateway, largely in Brazil - which limits real-world exposure and keeps this a moderate-severity integrity flaw rather than an emergency.
Blind SQL injection in the Link Whisper Free WordPress plugin (versions up to 0.9.7) enables remote attackers to extract sensitive information from the site's database by injecting crafted SQL commands into an unspecified request handler. The vulnerability is rated critical with a CVSS score of 9.3, and the supplied vector indicates network exploitability, low complexity, and no authentication or user interaction required (PR:N/UI:N); however, the independent assessment notes that the true authentication requirements are unconfirmed and may involve a low-privilege account, and the exact trigger parameter is not publicly documented. No public exploit code or confirmed active exploitation is identified at time of analysis.
SQL injection in the Mang Board WP WordPress plugin (Kitae Park) affects all versions through 2.4.4 and lets an attacker inject arbitrary SQL into the site's backend database queries, with the primary impact being high confidentiality loss (bulk read of user records, password hashes, and other stored data) plus a limited integrity effect. The vendor/Patchstack vector advertises a 9.3 score with scope change and no privileges required (PR:N/UI:N), but the independent assessment rates the issue as PR:L with unchanged scope (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N), so the authentication requirement should be treated as unconfirmed - the PR:N rating in the published vector is unusually permissive for a WordPress plugin SQLi and is not corroborated by the description text, which names no vulnerable parameter, endpoint, or feature. Only a Patchstack database entry is available: no vendor patch version is stated and no public exploit code has been identified at time of analysis.
OpenHealth through 0.2.0 fails to enforce authentication or ownership checks in the /api/health-data/[id] GET, PATCH, and DELETE handlers, allowing unauthenticated attackers who know a HealthData record id to read another user's medical record data and file metadata, overwrite the record with arbitrary JSON, or delete it. The issue is rated CVSS 4.0 9.2 and is reported by VulnCheck; no public exploit identified at time of analysis, and no CISA KEV active-exploitation confirmation is provided. Exploitation still depends on obtaining a valid record id: if ids are sequential or otherwise enumerable, the impact scales to mass medical-record theft or tampering, while high-entropy UUIDs narrow exploitation to targeted abuse after an id leak.
Eclipse Vert.x DB2 Client versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and 5.2.0 can deserialize attacker-controlled DRDA UDT column data, enabling remote code execution if a Java deserialization gadget chain is present on the classpath or denial of service otherwise. The affected component is io.vertx:vertx-db2-client, and exploitation requires an application to connect to a malicious or man-in-the-middle DRDA server that returns a result-set column tagged with FDOCA LID 0x50; legitimate DB2 servers never emit that type, and client-side TLS is disabled by default. The CVSS 4.0 score is 9.2 with PR:N, but practical exploitation requires attacker server-side/MITM position (AC:H) and, for RCE, a classpath gadget chain; no public exploit identified at time of analysis, and the real-world blast radius is narrower than the score alone suggests.