Unauthenticated attackers can retrieve cached content from protected routes in OpenNext Cloudflare (@opennextjs/cloudflare) versions 0.3.0 through 1.20.2 when three deployment-specific conditions coincide: enableCacheInterception is set to true (an opt-in, non-default setting), access control is implemented with middleware matchers rather than inside route handlers, and the protected route has a matching entry in the incremental cache. Because middleware matching and cache-key lookup handle percent-encoded pathnames inconsistently, a request such as /%61dmin/%ZZ can evade authorization middleware while still resolving to the cache key of a protected route, disclosing cached content with no authentication or user interaction required. Rated CVSS 3.1 base 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), this is a confidentiality-only authorization bypass; no public exploit code has been identified at time of analysis, and the issue is resolved in @opennextjs/cloudflare 1.20.2.
Unauthenticated remote attackers can cause a denial of service in the finger daemon of HPE NonStop TCP/IP UTILITIES (version T8602L01^BAA and earlier) by sending crafted requests to the network-reachable finger service. The flaw stems from missing authentication (CWE-306) in the daemon, allowing any remote user to disrupt availability without credentials. No public exploit code has been identified at time of analysis, but the service is legacy and often disabled or firewalled, limiting exposure.
Denial of service in undici 8.11.0 and 8.11.1 allows a malicious or attacker-controlled HTTP/2 WebSocket server to terminate the Node.js process of any client that connects to it. Because the experimental WebSocket client is enabled by default whenever HTTP/2 is permitted (allowH2 defaults to true), an unauthenticated remote server can abort a failed handshake, leave the underlying HTTP/2 stream orphaned without an error listener, and then destroy the connection so the stream emits an uncaught error that crashes Node.js. Severity is rated CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, CWE-248); there is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, and vendor-released patch 8.11.2 is available.
Stack-based buffer overflow in HPE NonStop TELSERV versions T9553L01^BAJ and earlier allows remote, unauthenticated attackers to corrupt memory and crash the service, causing a denial of service. The flaw is network-reachable with low complexity and requires no authentication or user interaction per the CVSS vector (PR:N/UI:N), so any party able to open a TELSERV session can attempt the overflow. No public exploit identified at time of analysis, and the impact is limited to availability - no code execution or data disclosure is described.
Stack-based memory corruption in the HPE NonStop SNMP Trap Multiplexer (T1041L01^BAA and earlier) lets remote, unauthenticated attackers crash the trap-handling service, producing a denial-of-service condition on the SNMP trap collection path. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, base 7.5) confirms network reachability with no authentication, privileges, or user interaction required, but limits impact strictly to availability - there is no assessed loss of confidentiality or integrity, so code execution or data disclosure is not established by the available evidence. No public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS score was supplied; the practical risk is therefore a remotely triggerable service crash on a specialized, typically network-segmented platform.
Process-terminating denial of service in undici, the Node.js HTTP client, affecting versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1. When an application composes the decompress interceptor with a downstream response handler that throws during response processing - most notably the built-in dump interceptor hitting its configured maximum response size - a remote server controlled or compromised by an attacker can return a tiny compressed body that expands past that limit, and the resulting throw originates asynchronously inside a zlib stream callback where undici's engine does not convert it into a per-request failure, so it surfaces as an uncaught exception that terminates the Node.js process. The assessed vector (AV:N/AC:L/PR:N/UI:N, availability-only, A:H) makes this an unauthenticated remote crash with low attack complexity, but exposure is bounded because the vulnerable interceptor pairing is not undici's default behaviour and only the listed version ranges are affected. Vendor patches are available in 7.30.1 and 8.12.2, EPSS is low at 0.25% (15th percentile), SSVC records exploitation as none and automatable as no, and no public exploit code was identified at time of analysis.
Subresource Integrity checks in undici can be bypassed when fetch() integrity metadata uses an uppercase or mixed-case algorithm token, allowing an attacker who controls the response body to deliver bytes that do not match the pinned digest without an integrity error. The issue affects undici 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1 and is fixed in 7.30.1 and 8.12.2; exploitation requires both non-lowercase SRI token usage and attacker control of the HTTP response, and impact is integrity-only. No public exploit was identified at time of analysis, and EPSS is low at 0.25% (15th percentile), consistent with the assessed high attack complexity and limited real-world exposure.
Remote, unauthenticated injection in the Progress Kendo UI for jQuery PivotGrid XMLA transport (all versions prior to v2026.3.1015) lets an attacker place crafted filter values into MDX predicates and the surrounding SOAP request body, altering the query issued to a backend XMLA/OLAP data source such as Microsoft SQL Server Analysis Services. The assessed impact is confidentiality-only (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, 7.5 HIGH) - data reachable through the configured XMLA connection may be read or exposed, but integrity and availability of the source are not affected. Only applications that render PivotGrid with the XMLA transport enabled and a reachable OLAP backend are exposed; no public exploit was identified at time of analysis and the issue is not confirmed as actively exploited.
Information disclosure in Backdrop CMS Core's token browser allows authenticated users to enumerate available token types, though individual token names remain protected. The flaw affects versions 1.34.x before 1.34.6 and 1.35.x before 1.35.2. No public exploit has been identified, and vendor patches are available.
Firmware updates for EnergizeLab AI Station, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 are delivered over plain HTTP without integrity or authenticity verification, allowing a network-adjacent attacker who can intercept traffic to substitute malicious updates and gain full control of the affected device or Windows host. The flaw is CWE-494 (download of code without integrity check), with a CVSS 3.1 base score of 7.5 (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning the attack is unauthenticated but requires an adjacent-network man-in-the-middle position and high complexity. No public exploit code or CISA KEV entry is identified in the provided data; exploitation depends on the attacker holding a MITM position, such as ARP spoofing, a rogue Wi-Fi access point, or a compromised router, and on an update check occurring.
FreeBSD classic (non-VNET) jails can bypass jail network isolation because the IPv6 UDP send path for unconnected sockets fails to rewrite a loopback destination to the jail’s primary IPv6 address, allowing an in-jail process to send datagrams to host services listening on ::1. The assessed vector (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) requires an existing low-privileged process inside a classic jail, IPv6 enabled on the host, and a target service bound to the host’s IPv6 loopback; VNET jails are unaffected and there is no exposure if these conditions are absent. The provided NVD-style vector (AV:N/PR:N) overstates reachability, and no public exploit was identified at time of analysis; EPSS is low (0.19%, 8th percentile).
Denial of service in the undici HTTP client library for Node.js allows any attacker-controlled or compromised HTTPS endpoint to terminate the client process by performing a TLS 1.2 renegotiation. When a server renegotiates after the connection is established and presents a different CA-trusted certificate whose hostname does not match the requested host, Node.js re-runs hostname verification and destroys the socket with a certificate-altname error; undici's established-socket error handler treated that error code as impossible, so the peer-controlled condition became an uncaught assertion (CWE-248) that crashes Node.js and kills all in-flight requests and background work. The flaw affects undici 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1 on both the HTTP/1.1 and HTTP/2 paths, and is reachable through Node's global fetch() as well as direct library use; it is remotely triggerable without authentication or a CA compromise (CVSS 3.1 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), though only TLS 1.2 connections are exploitable since TLS 1.3 removed renegotiation. No public exploit code was identified at time of analysis and there is no indication of confirmed active exploitation, but exploitation is trivial for any adversary who can serve an endpoint the victim fetches from, and patched releases 6.29.1, 7.30.1, and 8.12.2 are available.
Rate-limit bypass in the Eclipse Connected Services Platform api-gateway (affected versions 1.1.1 through 1.7.3) allows any unauthenticated remote client to evade request throttling by rotating the value of the leftmost X-Forwarded-For header element, which the shipped default ClientIpKeyResolver trusts without validation. Because each unique header value produces a fresh rate-limit bucket, an attacker can issue unlimited requests against any route that relies on the default resolver and has rate limiting configured, degrading the availability protections the gateway is meant to enforce. No KEV entry or publicly available exploit code was identified at time of analysis, and EPSS is low (0.15%, 4th percentile); CISA SSVC rates exploitation as 'none' while noting the issue is automatable, so mass scanning should be expected even without a dedicated exploit. The net effect is a moderate-priority security-control bypass (assessed CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) rather than a system compromise, with deployments that customize the key resolver or sanitize X-Forwarded-For at a trusted edge proxy unaffected.
QuRouter 2.6.x devices below 2.6.4.001 contain a time-of-check time-of-use race condition that can allow an unauthenticated attacker on the same adjacent network segment to compromise confidentiality, integrity, and availability, but only if they win a timing-dependent race while a legitimate user operation is in progress. The vendor has released QuRouter 2.6.4.001 and later to fix the issue, and no public exploit was identified at time of analysis; the CVSS 4.0 base score is 7.5, though the adjacent-network, race-window, and user-interaction prerequisites substantially limit realistic exploitation.
Regular-expression denial of service in trentm markdown2 through v2.5.5 lets remote attackers exhaust CPU by submitting a crafted Markdown document to any application that calls extract_metadata() (the front-matter/metadata parsing path). Exploitation is unauthenticated and requires no user interaction once such an endpoint is exposed, but the vulnerable function is an opt-in feature - pure rendering pipelines that never invoke metadata extraction are not affected. Impact is confined to availability; there is no public exploit code reported and EPSS is low (0.15%, 4th percentile), so risk is moderate rather than urgent.
URL validation bypass on the Eclipse Adoptium website (adoptium.net) lets an unauthenticated attacker craft a post-download link that passes the site's trusted-prefix check but resolves - after the browser's RFC 3986 dot-segment normalisation - to an arbitrary attacker-controlled repository, so a victim sees the genuine "Thank you for downloading Eclipse Temurin" page while their browser fetches a binary of the attacker's choosing. Every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24) is affected; the assessed vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, meaning exploitation depends on a victim following a crafted adoptium.net link (typically via phishing) and then executing the downloaded file, so the integrity impact is real but user-interaction-gated. There is no public exploit identified at time of analysis and EPSS is very low (0.11%, 1st percentile), the vendor fix is available, and the advisory is public under GHSA-f228-m952-5r6w - a real but non-urgent issue whose exposure window has already closed on the hosted site.
Authenticated Dolibarr users with privileges to write extrafields, export configurations, or blocked log entries can trigger PHP object injection in versions before 23.0.4, potentially leading to code execution or file manipulation if a suitable gadget chain exists. The flaw resides in jsonOrUnserialize() and requires the stored payload to be non-JSON so that unserialize() runs without class restrictions; exploitation is high-complexity and no public exploit has been identified. Upgrading to 23.0.4 or later is the only complete fix.
Lychee photo-management instances running versions prior to 7.6.1 expose POST /api/v2/Album::unlock with no throttle, attempt counter, backoff, CAPTCHA, or lockout, letting remote unauthenticated attackers (CVSS PR:N, no user interaction) automate password guessing against password-protected albums. Successful recovery of an album password grants access to that album's otherwise private photo collection, so the realistic impact is concentrated on albums secured with weak or common passwords, since high-entropy passwords resist brute-forcing even with unlimited attempts. The fix is available in Lychee 7.6.1, which adds rate-limiting middleware to the unlock route; no public exploit is identified at time of analysis, and exploitation is bounded by the need to know or obtain a valid album identifier and by the strength of the album password.
Nil-pointer dereference in kin-openapi 0.136.0 through 0.148.x lets an unauthenticated remote client reliably panic Go applications that run openapi3filter request validation against an OpenAPI 3.1 spec declaring an array schema without an items definition. Three decoder paths are affected: a plain array query parameter, a deepObject query parameter whose object contains an array property, and an application/x-www-form-urlencoded body whose array property appears inside an allOf, anyOf, or oneOf subschema - each passes a nil items schema into urlValuesDecoder.parseArray or buildResObj, which dereferences it. Impact is availability-only (CVSS 7.5, CWE-476), exploitation is conditional on the target application actually exposing such a nil-items array schema on a validated route, and no public exploit code or CISA KEV entry is identified at time of analysis; the vendor fixed the issue in 0.149.0.
Denial of service in kin-openapi before 0.149.0 allows unauthenticated remote attackers to terminate the entire Go process by triggering unbounded recursion during runtime schema validation. When a loaded OpenAPI document contains an allOf, anyOf, or oneOf chain that refers back to an ancestor schema - a circular reference the loader and document validation accept without error - a request or response that reaches that schema causes Schema.visitJSON or openapi3filter.decodeValue to recurse until the goroutine stack is exhausted; the resulting fatal stack overflow cannot be caught with recover and aborts the whole process, including unrelated in-flight requests. The assessed CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (7.5), driven entirely by availability with no confidentiality or integrity impact; the key limiting factor is that a vulnerable circular schema must already exist in the deployed spec, so default non-circular specs are unaffected. No public exploit code or confirmed in-the-wild exploitation was identified at time of analysis, and the issue is fixed in version 0.149.0.
Unauthenticated path traversal in the report blob endpoint of JetBrains Datalore before version 2026.2.1 allows a remote attacker who can reach the service to read arbitrary files accessible to the Datalore process. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5 HIGH), exploitation requires no credentials and no user interaction, making exposure the primary limiting factor: only network-reachable instances below 2026.2.1 are at risk, and the flaw yields confidentiality loss only, with no integrity or availability impact and no code execution on its own. There is no CISA KEV listing and no public exploit code identified at time of analysis, though the low-complexity, unauthenticated nature of the bug makes it an attractive target for opportunistic scanning of internet-facing deployments.
Stored cross-site scripting in EspoCRM versions prior to 9.3.9 allows an authenticated user holding Email Template or PDF Template edit permission to persist crafted HTML that evades the moderateSanitizeHtml() filtering routine. The payload only executes when a second user opens the tampered template in edit mode on an instance where the non-default setting clientCspDisabled is true, at which point the attacker can hijack the victim's session; default deployments keep Content-Security-Policy enabled and are not affected. Publicly available exploit code exists, but there is no confirmed active exploitation (CISA KEV) and the vendor has shipped a fix in 9.3.9, making this a genuine but low-priority, non-default-configuration-dependent issue.
Authorization bypass in the Webba Booking Lite WordPress plugin (webba-booking-lite, all versions through 6.5.2) allows remote attackers to retrieve booking data they are not entitled to by supplying a user-controlled object identifier that the plugin fails to check against the requester's permissions. The supplied CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, score 7.5 High) characterizes this as an unauthenticated, network-reachable confidentiality breach with no integrity or availability impact, though our independent assessment notes that IDORs of this class in WordPress plugins frequently require at least a low-privileged session in practice, so the authentication prerequisite should be confirmed against the Patchstack advisory. There is no CISA KEV listing and no public exploit code identified at time of analysis, and the practical exposure is limited to sites with the vulnerable plugin installed and active, with impact confined to unauthorized disclosure of booking/attendee data rather than modification or denial of service.
Rate limiting in Eclipse Connected Services Platform's api-gateway (up to and including 1.7.3) can be bypassed completely by any remote attacker who sends a distinct X-Forwarded-For header value on every request, because the shipped default ClientIpKeyResolver builds the per-client rate-limit bucket key from the unvalidated leftmost element of that client-supplied header. The result is an unlimited number of independent buckets on every route that uses the default configuration, letting unauthenticated attackers (CVSS:3.1 AV:N/AC:L/PR:N/UI:N) evade request throttling and degrade availability (C:N/I:N/A:H, score 7.5); confidentiality and integrity are unaffected. Exposure is configuration-dependent - gateways that swap in a trusted-proxy-aware key resolver or do not enforce rate limiting are not impacted, and no public exploit code was identified at time of analysis (SSVC exploitation: none).
Unauthenticated remote attackers can cause the HPE NonStop ANSI SQLUTIL service to terminate unexpectedly, producing a denial-of-service condition on the targeted system. The flaw is rated CVSS 3.1 base 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), meaning it is remotely reachable at low complexity with no credentials or user interaction required, and its impact is confined entirely to availability - there is no confidentiality or integrity effect. Root cause is classified as CWE-248 (Uncaught Exception), consistent with an unhandled error path that aborts the SQLUTIL process; no public exploit code has been identified at time of analysis, and the practical risk depends heavily on whether the SQLUTIL service is exposed to untrusted networks rather than restricted to internal administrative segments, since the affected component is part of the specialized HPE NonStop SQL/MX platform.
FluentCart, the WPManageNinja e-commerce plugin for WordPress, embeds sensitive information inside data it sends to clients in versions through 1.7.1, letting remote attackers pull that embedded data without authenticating. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5) shows the exposure is network-reachable, low-complexity and requires no credentials or user interaction, but yields only confidentiality impact - no integrity or availability effect. No public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV; exposure is limited to WordPress sites running this specific plugin at 1.7.1 or earlier.
Kuadrant operator's internal WebAssembly shim can be made to skip Gateway-level authentication and rate-limiting checks in multi-tenant deployments when an authenticated user with Kubernetes/OpenShift RBAC permission to create or modify an HTTPRoute attached to a shared Gateway supplies a crafted path, header, or query match value. The value is not properly escaped during CEL predicate generation, so the predicate can be altered to bypass those policies while the request is still forwarded to the route backend. No public exploit identified at time of analysis, and exploitation is conditional on a shared/multi-tenant Gateway with Gateway-level auth and/or rate limiting configured, making this a genuine but conditional-priority issue rather than a mass-exploitation threat.
An unauthenticated remote request can slip past kin-openapi's openapi3filter authentication middleware and reach a handler that was meant to be protected, when the library's ValidationHandler is used as middleware in front of a gorilla/mux router configured with UseEncodedPath. The library validates the operation it derives from the decoded URL.Path (0.144.0 through 0.146.x), while the downstream mux router, using the raw encoded path, dispatches to a different, protected parameterized route that overlaps the public exact route after decoding - so requests carrying an encoded slash (%2F) can be validated as the public operation and then served by the protected handler without the configured AuthenticationFunc ever running. Reaching the flaw requires a precise deployment stack (kin-openapi >=0.144.0 <0.147.0, ValidationHandler wired as auth middleware, mux with UseEncodedPath, and an overlapping public exact route plus protected parameterized route sharing an HTTP method), which is reflected in the CVSS 7.4 rating with AC:H; no CISA KEV listing, and no public exploit identified at time of analysis, though the upstream fix commit includes a regression test that reproduces the bypass.
Unauthorized command execution in HPE NonStop SQL/MX SQLCAT allows remote attackers to run arbitrary commands through improperly validated input (CWE-20). The CVSS score is 7.4 with a vector indicating low-privileged authenticated access (PR:L), yet the HPE description states an unauthenticated user can exploit it, creating an unresolved contradiction that complicates prioritization. No public exploit code or active exploitation has been identified at time of analysis, and the risk is confined to HPE NonStop environments where the SQLCAT catalog manager is network-accessible.
Authenticated administrators on a connected P4 Server can exploit a relative path traversal (CWE-23) in P4 Search 2026.4.2 and earlier by supplying a crafted logging configuration, causing files to be written or deleted outside the intended logging directory and potentially achieving code execution as the P4 Search service account. Perforce resolved the issue in P4 Search 2026.4.3; no public exploit code has been identified at time of analysis (no CISA KEV listing), and because a P4 Server administrative account is a hard prerequisite, this is a genuine but conditional integrity/availability risk rather than a mass-exploitation priority.
Server-side request forgery in PhastPress affects WordPress sites running the optional PhastPress performance plugin through version 3.10, allowing unauthenticated remote attackers to make the server fetch arbitrary URLs by spoofing the HTTP Host header. Because the plugin builds its scripts-service URL whitelist from that attacker-controlled header, no login, user interaction, or non-default configuration is required; impact is limited to the response data and any reachable internal or external services the WordPress host can access. No public exploit identified at time of analysis, and EPSS is not supplied in the source data, so this is a genuine but not top-priority SSRF risk pending patch adoption.
Path traversal in QNAP Qsync Central allows an attacker who already holds a valid Qsync Central user account to read files and system data outside the intended directory scope on the NAS. The flaw originates from improper limitation of a pathname to a restricted directory (CWE-22); because the CVSS vector specifies PR:L, exploitation is authenticated - remote unauthenticated Internet attackers cannot reach it against default configurations. Impact is assessed as information disclosure of high confidentiality value rather than code execution or data destruction, and no public exploit code has been identified at time of analysis. All versions prior to Qsync Central 5.0.0.6, 5.1.0.2, and 5.2.0.4 are affected, and QNAP has released fixed builds on each of these branches.
A stack-based buffer overflow in HPE NonStop XABroker can corrupt memory and terminate the broker process, handing an attacker who already holds a valid low-privilege account on the NonStop host a local denial-of-service primitive against a core system service. Exploitation is constrained: the CVSS vector (CVSS:3.1/AV:L/AC:L/PR:L/UI:R) confirms the attack is local, requires an authenticated low-privilege account, and needs a separate user action to deliver or process the crafted input, with our independent assessment narrowing the impact to availability only (S:U/C:N/I:N/A:H) rather than the confidentiality and integrity loss implied by the vendor-published score. There is no public exploit identified at time of analysis, no CISA KEV listing, and no EPSS data supplied, so this rates as a moderate, availability-focused issue that matters most in environments where untrusted or semi-trusted users already have NonStop logon rights.
A stack-based buffer overflow in HPE NonStop ODBC/MX Server (CWE-121) allows a local attacker with valid low-privileged credentials and user interaction to corrupt memory, potentially causing an application crash and denial of service. The assessed CVSS vector (AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H) indicates local access, authentication, and user interaction are required, and the impact is confined to service disruption rather than confirmed code execution. No public exploit code or active exploitation has been identified at time of analysis.
HPE NonStop ODBC/MX Services contains a stack-based buffer overflow (CWE-121) that allows a locally authenticated attacker with low privileges to crash the application via crafted input, provided a user action is performed. The vulnerability is not remotely exploitable and requires user interaction; no public exploit was identified at time of analysis. Per independent assessment, the impact is limited to availability (application crash), with no confirmed confidentiality or integrity impact.
Local, authenticated attackers with low privileges can cause process termination or memory corruption in HPE NonStop SQL/MX UDR Server by sending a crafted message. The vulnerability is an improper input validation (CWE-20) issue in the UDR SERVER component that requires local access and a running UDR process. No public exploit identified at time of analysis; the primary impact is denial of service (availability high) with a low integrity impact and no confidentiality impact.
Stored cross-site scripting in the Groundhogg CRM, Newsletters, and Marketing Automation WordPress plugin (all versions up to and including 4.5.14) lets unauthenticated attackers inject arbitrary JavaScript through the 'ref' parameter, which is persisted as contact activity data and later rendered without escaping in the wp-admin contact editor. The script only executes in the browser of a logged-in staff member or administrator who opens the affected contact and views its activity timeline, so successful exploitation requires both the site to be actively using Groundhogg's link/visit activity tracking and an operator to view the poisoned record; the injection itself needs no authentication. This is a moderate-priority issue rather than a top-tier emergency, and at time of analysis there is no public exploit identified, no confirmed active exploitation (CISA KEV), and a vendor fix is available in version 4.5.15.
Cross-site scripting in HtmlUnit Neko (htmlunit-neko) before 5.4.0 lets an unauthenticated remote attacker smuggle executable markup out of HTML sanitizers and content filters that use the library to serialize parsed HTML. HTMLWriterFilter fails to entity-encode decoded TEXTAREA and TITLE text, so entity-encoded markup supplied inside those elements is decoded on parse and re-emitted as literal markup by printCharacters(); output rendered by a victim's browser executes in that browser, which is why the CVSS 3.1 score of 7.2 (High) carries a scope change (S:C) on the vector AV:N/AC:L/PR:N/UI:N. The flaw is only reachable in a parse-transform-serialize pipeline that both relies on HTMLWriterFilter for its output and renders that output in a browser, and no public exploit code was identified at time of analysis; the issue is fixed in 5.4.0.
Stored cross-site scripting in Mang Board WP 2.4.0 and earlier allows unauthenticated remote attackers to inject arbitrary web scripts through the 'data_type' parameter, with execution occurring when a victim later views the poisoned page. The issue affects WordPress sites that have the kitae-park Mang Board WP plugin active and reachable on the vulnerable API/code path; sites not running the plugin are unaffected. No public exploit code or CISA KEV entry is identified at time of analysis, and the CVSS 3.1 score of 7.2 reflects a moderate-priority issue that should be patched but does not rise to emergency status.
Unauthenticated stored cross-site scripting in the WordPress plugin Premium Packages - Sell Digital Products Securely (all versions up to and including 7.0.5) lets remote attackers inject arbitrary JavaScript into order records by supplying a crafted 'order_email' value during order submission. The payload is stored server-side and only executes later, when a privileged user - per the referenced admin view (list-orders.php), a store administrator - loads the order list page, which is why the assessed vector carries UI:R even though injection itself is unauthenticated (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, base 7.2 High). Scope change (S:C) reflects the script executing in the WordPress admin security context rather than the attacker's unauthenticated context; no public exploit code has been identified at time of analysis and there is no CISA KEV confirmation of active exploitation.
Authenticated XPath injection in the OPNsense firewall and routing platform (all versions prior to 26.1.10) lets a user holding CA Manager or Certificate Manager privileges recover values stored in config.xml character by character. The Trust module stores attacker-controlled certificate and CA refid values and interpolates them unescaped into XPath queries in CAsField.php and CertificatesField.php; because the resulting refcount/in_use boolean is returned to the requester, it acts as a blind injection oracle for secrets such as password hashes, API credentials, certificate private keys, VPN key material, and high-availability credentials, which in turn can enable privilege escalation and compromise of other security domains. Exploitation is post-authentication, requires those specific trust-management privileges, and is high-complexity and iterative (roughly one boolean leak per request), so this is a genuine but second-tier information-disclosure issue rather than a drive-by remote compromise; no public exploit code has been identified at time of analysis. Vendor-released patch: 26.1.10.
QNAP Notes Station 3 versions prior to 3.9.11 contain an OS command injection flaw (CWE-78) that permits unauthenticated network attackers to run arbitrary commands on a NAS where the optional Notes Station 3 add-on is installed and reachable. The vendor's CVSS 4.0 vector (6.9) indicates low confidentiality, integrity, and availability impact, suggesting the injected commands execute in a constrained context rather than granting full system control. No public exploit code has been identified at time of analysis, and the primary exposure is limited to internet-facing or broadly accessible NAS instances running the vulnerable add-on.
SQL injection in QNAP Video Station before version 5.8.8 lets a remote attacker who already holds a valid Video Station user account inject arbitrary SQL into the application's database queries, exposing stored data with high confidentiality impact and a limited availability effect. The vendor-reported vector (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L, 7.1) and our independent assessment (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) agree that the vulnerability is network-reachable, low complexity and requires no user interaction, but that the attacker must first authenticate as a Video Station user - this authentication prerequisite is the main limiting factor and rules out fully unauthenticated internet exploitation. There is no public exploit identified at time of analysis, and QNAP has already shipped a fix in Video Station 5.8.8 and later, so risk is highest for NAS devices that expose Video Station to untrusted networks and provision multiple or guest-level accounts.
SQL injection in QNAP Video Station (versions prior to 5.8.8) allows a remote attacker who already holds a valid NAS user account to read sensitive data from the application's backend database through the Video Station web interface. The flaw is an authenticated issue (CVSS PR:L), and the independent assessment bounds the impact to confidentiality only (C:H), meaning it does not by itself provide code execution or service disruption despite the description's broader wording. No public exploit code was identified at time of analysis, and the vendor has released a fix in Video Station 5.8.8 and later.
Absolute plot names passed to MatplotlibDataset.save() in kedro-datasets 9.3.0 through 9.6.0 let an authenticated user with the ability to influence plot-name keys write files outside the configured dataset directory, overwriting or creating files anywhere the Kedro process has write access. The flaw is rooted in validate_sub_path(), which strips leading slashes before validation, combined with pathlib join semantics that discard the base path whenever the supplied sub-path is absolute (POSIX '/outside.png', Windows 'C:\\outside.png', or UNC '\\\\server\\share\\outside.png'). Integrity impact is rated High (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N; CVSS 4.0 base 7.1), no public exploit code has been identified at time of analysis, and no CISA KEV entry exists; exploitability is gated by the attacker's ability to inject the plot-name keys (e.g., through untrusted input data or catalog configuration) and by the write permissions of the process running Kedro.
Server-side request forgery in JobOps through 0.13.1 lets a caller submit an arbitrary url value to the POST /api/manual-jobs/fetch handler and have the server fetch internal destinations, with the response body returned to the caller, exposing loopback services, private-range hosts, and cloud instance metadata such as the 169.254.169.254 endpoint. In a standard deployment the request must carry valid authentication (PR:L per the assessed CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), but when the instance is running in demo mode unauthenticated clients can trigger the identical request, which is the configuration that removes the authentication barrier. Impact is confidentiality-only at 7.1 (no integrity or availability effect, no user interaction), and exploitation succeeds only if the target internal destination is network-reachable from the JobOps server; no public exploit code was identified at time of analysis, although a public technical writeup describing the flaw exists, and no KEV listing appears in the provided intelligence.
Sonatype Nexus Repository 3 fails to enforce a write-authorization check on the NuGet symbol-package upload path, letting an account that holds only repository read and browse privileges persist .snupkg symbol packages into a hosted NuGet repository. The defect is an integrity-only issue (I:H, with no confidentiality or availability impact) and is reachable by remote, low-privileged authenticated users (CVSS 4.0 7.1 High; assessed CVSS 3.1 7.1 High with PR:L). Exploitation is conditional: the target must be a hosted (not proxy or group) NuGet repository with the Symbol Server feature explicitly enabled, and where anonymous access is on, the built-in anonymous account already carries read and browse rights and satisfies the privilege prerequisite without any credential. No public exploit code was identified at time of analysis and there is no CISA KEV listing; a vendor fix is available.
Denial of service in Lychee before 7.7.0 allows an authenticated user with upload/import permission to tie up image-processing capacity by submitting a tiny PDF whose first page declares an oversized /MediaBox. Lychee hands PDFs to ImageMagick with Ghostscript enabled and applies no pre-render page-size check in ImagickHandler::loadPdf(), so Ghostscript burns CPU rasterizing an enormous page before the pixel-cache policy rejects the result; in synchronous QUEUE_CONNECTION deployments a single request occupies a web worker, while the official asynchronous Docker setup instead backs up the shared image-processing queue and delays other users' work. Exploitation is gated behind authentication, only availability is affected (no confidentiality, integrity, or Ghostscript sandbox-escape impact), and no public exploit was identified at time of analysis. The vendor/CNA scored this 7.1 under CVSS 4.0, whereas the independent assessment rates the same issue CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L (4.3), reflecting limited per-request availability impact.
Incorrect authorization in ClassroomIO through 1.0.0 allows any authenticated course member, including students, to modify or delete lessons in any course or organization by supplying arbitrary lesson IDs to the PUT and DELETE /:lessonId routes. The vulnerability stems from a middleware that verifies course membership but fails to scope lesson access to the caller's course. No public exploit code has been identified at time of analysis, and exploitation requires a valid course-member session plus knowledge or enumeration of target lesson IDs.
Authenticated insecure direct object reference in MinDoc through 2.2-beta.2 lets any user holding a non-observer role on at least one book read markdown and HTML documents belonging to private books they were never granted access to. Because the DocumentController.Content endpoint authorizes the caller only by document ID and not by the book the document belongs to, an attacker can name any target book and iterate predictable, sequential document IDs to harvest its contents. Exploitation requires a valid low-privileged account (authentication requirements confirmed as authenticated per the CVSS vector, PR:L) and is read-only, with no write, integrity, or availability impact; no public exploit code was identified at time of analysis, though a detailed public technical writeup of the flaw exists.