Apache Kylin 4 through 5.0.4 performs unsafe Java deserialization of data returned by a configured external cache service, enabling remote code execution if an attacker can control or impersonate that cache. The authoritative assessment rates this as network-reachable with high attack complexity and no privileges required, because exploitation depends on the external-cache precondition rather than a default Kylin endpoint. No public exploit identified at time of analysis or CISA KEV entry was available; EPSS is 0.36% (28th percentile), and the vendor-released fix is 5.0.5.
Unauthenticated attackers can overwrite enterprise profile data in 53AIHub through version 0.5.3 by sending crafted PUT requests to /api/enterprises/:id when the deployment does not have IS_SAAS set to true. This allows modification of logos, display names, and branding, enabling defacement or phishing. The independent assessment rates this as a moderate-severity integrity-only issue with no data disclosure or service disruption; no public exploit identified at time of analysis. Deployments correctly configured with IS_SAAS=true are not vulnerable because authorization checks engage in that mode.
Unauthenticated path traversal in CoAI (Chat Nio) through 4.0.0 lets remote attackers download arbitrary readable .tar.gz or .zip archives, including archives generated by other users, by injecting ../ sequences into the hash query parameter of the generation and article archive download endpoints. The flaw is remotely exploitable without credentials against default configurations (CVSS 4.0 vector PR:N, consistent with the assessed CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N), but the impact is confidentiality-only: only files readable by the service process and matching an archive extension can be retrieved, and there is no write or code-execution capability. No public exploit identified at time of analysis and no CISA KEV listing; the issue remains a moderate-severity information-disclosure risk on exposed instances.
Unauthenticated order forgery in Waynboot-mall through 2.0.0 allows remote attackers to create fraudulent orders, expose stored shipping details, clear carts, and decrement stock by invoking the internal /callback/order/submit message-queue callback. The endpoint is exposed without authentication by the application's SecurityConfig, so no credentials or user interaction are required; attackers supply arbitrary userId, addressId, and cart IDs in the order JSON. Exploitability hinges on network reachability-an internet-exposed instance is trivially exploitable, whereas an internal-only deployment limits the attack to parties with network access; no public exploit code or active exploitation is identified at time of analysis (CVSS 4.0 base 6.9; independent assessment aligns with CVSS 3.1 base 6.5).
Server-side request forgery in fish-island-backend through commit 7c61b78 allows unauthenticated remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse, potentially reaching internal hosts, loopback services, and cloud metadata endpoints through redirect-following OkHttp requests. Successful exploitation can disclose limited internal data reflected by the parser, such as page titles, meta descriptions, and favicons, so the practical impact is constrained to what the targeted service returns in those fields. No public exploit code or CISA KEV entry is identified in the provided data, and the assessed CVSS:3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Denial of service in FreeRDP clients before 3.32.0: a NULL pointer dereference in the websocket transport lets a malicious or man-in-the-middle gateway crash the client by sending a zero-length websocket ping frame. Affected are all FreeRDP builds prior to 3.32.0 that connect through the websocket gateway transport; the attacker must occupy the gateway position rather than being an arbitrary remote host, and the outcome is limited to terminating the client process with no code execution, privilege gain, or data disclosure. No public exploit code has been identified at time of analysis and there is no confirmed active exploitation, though the low attack complexity and lack of authentication or user interaction keep the practical bar for abuse low for anyone controlling the gateway path.
Unauthenticated retrieval of sensitive backend metadata is possible in Apache Kylin 4.x through 5.0.4 because the metadata dump API performs no authorization check and does not confine the requested path to an intended location. The CVSS vector (AV:N/AC:L/PR:N/UI:N) means any party who can reach that API over the network can invoke it without credentials or user interaction; per our assessment the confirmed impact is confidentiality only (C:H/I:N/A:N), even though the NVD-published score of 9.1 also claims integrity impact. Apache explicitly limits the practical risk to installations where the Kylin backend is directly exposed to the public internet - an uncommon posture - so standard internally segmented deployments are largely unaffected. No public exploit code or confirmed active exploitation was identified at time of analysis, and EPSS is low at 0.19% (8th percentile), which reinforces that this is an exposure-dependent issue rather than a broadly exploited one.
Missing authorization in the internal /api/v1/secrets/ REST API of Moxa's AIG-302 series industrial computing gateways lets an attacker who already holds a valid low-privileged session on the device read secrets and cryptographic key material directly from that endpoint. Exploitation requires two preconditions: pre-existing valid credentials (PR:L) and adjacent, Layer-2 network access to reach the internal API (AV:A), so the flaw is not reachable from the open internet or by unauthenticated users. Impact is confidentiality-only - high-value disclosure of stored credentials and key material - with no integrity or availability effect, giving a moderate severity rating (CVSS 4.0 base 6.9 / Medium); no public exploit code has been identified at time of analysis, and the issue is published alongside a related flaw, CVE-2026-109813, in Moxa advisory MPSA-262560.
Unauthenticated attackers who can reach the management interface of a Netcore NR256CN router can bypass authentication and invoke protected management CGI handlers simply by prefixing the request URI with a recognized public route such as l7_web_auth.cgi or an .ico path. The defect affects NR256CN firmware through 1.5.140116 and is rated medium severity (CVSS 4.0 base 6.9; independent assessment CVSS 3.1 6.9, AV:N/AC:L/PR:N/UI:N), with limited confidentiality and integrity impact on router management functions and no availability impact. No public exploit code identified at time of analysis, but exploitation is a single crafted HTTP request with no credentials or user interaction required, so the practical limiting factor is whether the management interface is reachable from an untrusted network rather than any exploitation complexity.
99AI through version 4.3.0 allows unauthenticated attackers to read other users' private chat messages and task data, because the querySingleChat handler in the chatLog service performs no ownership check on the requested chat identifier. A remote attacker simply supplies a fingerprint header to be issued a low-privilege visitor JWT, then enumerates sequential integer chatId values to harvest message content belonging to other users. The source CVSS 4.0 vector rates this 6.9 (Medium) with PR:N/UI:N and low confidentiality impact, and our independent assessment agrees it is trivially and reliably exploitable, though it is read-only, grants no write or administrative access, and is not confirmed actively exploited (no CISA KEV listing) or accompanied by packaged exploit code; a public technical writeup describing the attack path is referenced.
Server-side request forgery in Chaskiq through 2.0.3 allows unauthenticated remote attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint. The FetchLinkCardService follows redirects and skips TLS verification, enabling access to loopback, private, or cloud metadata addresses; the impact is limited because only the fetched page's title and description are returned, not full response bodies. No public exploit identified at time of analysis; CVSS 4.0 score 6.9 (Medium) reflects unauthenticated network access with low confidentiality impact.
Unauthenticated email relay in waynboot-mall 2.0.0 and earlier lets anyone who can reach the application POST a caller-chosen subject, body, and recipient to the anonymously mapped /callback/email endpoint (EmailController.sendEmail), causing messages to be sent from the operator's own configured SMTP account. Because that path is permitted without authentication in the default Spring Security configuration, a default, network-reachable deployment with working SMTP credentials is directly abusable for phishing, spam, and mail-quota exhaustion, while the independent assessment rates it moderate severity since impact is confined to outbound mail integrity (I:L) with no confidentiality or availability loss. No public exploit identified at time of analysis, although a public technical writeup of the callback abuse is referenced, and the CVE is not listed in CISA KEV.
Engineercms through version 2.0.5 allows unauthenticated attackers to download project image and video attachments by directly requesting known or derivable /attachment/* paths for .jpg, .png, .bmp, or .mp4 files. The files are served before any casbin, owner, or admin authorization checks are applied, resulting in a limited confidentiality exposure. The independent assessment rates this as low impact (CVSS 3.1: 5.3, AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), and no public exploit code has been identified at time of analysis; the vulnerability is not listed in CISA KEV.
Unauthenticated remote attackers can read accounting transaction records from NexoPOS through 6.2.4 by requesting GET /api/fields/{resource}/{identifier}, because the endpoint does not enforce the nexopos.read.transactions permission. By enumerating sequential identifiers for transaction field classes such as ns.entity-transaction, an attacker can retrieve transaction field names, values, account IDs, and descriptions; the independent assessment rates this as limited read-only information disclosure (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), and no public exploit identified at time of analysis. This is a genuine but moderate-severity exposure rather than a top-tier emergency, with no integrity or availability impact confirmed.
Unauthenticated WebSocket access in WHartTest through 2.8.1 lets remote attackers connect to the /ws/ui/web/ and /ws/ui/actuator/ endpoints without credentials, register an actuator under a client-supplied id, and thereby intercept other users' test-case payloads while spoofing step results and screen frames into victim UI-automation sessions. Exploitation is practical only where the Django Channels endpoints are network-reachable and concurrent test traffic exists, since the flaw yields limited confidentiality and integrity impact with no availability effect (independent assessment CVSS 3.1 5.3 medium; vendor-published v4.0 score 6.9). No public exploit code has been identified at time of analysis, no confirmed active exploitation (CISA KEV) has been reported, and no vendor-released patch is currently documented in the available data.
Oqtane Framework through 10.2.6 exposes one tenant's stored private settings to the administrator of another tenant, allowing an authenticated site administrator to retrieve SMTPPassword and SMTPClientSecret values by requesting a foreign site's entityId through their own site alias. The flaw is an authorization bypass in SettingController (CWE-639, user-controlled key), scored 6.9 Medium under CVSS 4.0 (AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N) and assessed as CVSS 3.1 6.0-style confidentiality-only impact (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). Exploitation requires a multi-tenant Oqtane deployment hosting more than one site plus the attacker already holding the Administrators role on at least one tenant site; single-site installations are unaffected, no public exploit identified at time of analysis, and the impact is limited to credential disclosure with no integrity, availability, or code-execution effect (vendor advisory: https://www.vulncheck.com/advisories/oqtane-framework-through-10.2.6-cross-site-settings-disclosure-via-setting-api).
An authorization bypass in the Photo Engine (Media Organizer & Lightroom) plugin for WordPress, affecting all versions up to and including 6.5.6, allows a lower-privileged account to permanently delete arbitrary media attachments and upload new ones without holding the required upload_files or edit_others_posts capabilities. The root problem is that the admin-screen guard in Meow_WPLR_Sync_Admin::__construct() is commented out, so wp_localize_script leaks the wplr_auth_token into every admin page view; a Subscriber can read their own token straight from the profile.php page source and replay it in a cookie-less HTTP session against the /?wplr-sync-api endpoint. No public exploit code has been identified at time of analysis, and although the published vector is PR:N, exploitation realistically depends on either open self-registration or an existing low-trust account, which constrains fully anonymous abuse; EPSS and KEV signals are absent, so this is a moderate, situational risk rather than an emergency.
Parsing a crafted Word 8 (.doc) file with Antiword 0.37 and earlier can crash the process through a heap out-of-bounds read in vGet8LstInfo (prop8.c), where an inverted bounds check trusts a PlcfLst record count claiming up to 0xffff list entries against a much smaller heap buffer. The vector is local and file-driven: the file itself is unauthenticated input, but the target must actually invoke antiword on the attacker-supplied document (a user or an automated conversion pipeline opening it), so exploitation requires the victim side to feed the file to the tool. Impact per the assessed vector is availability-only (CVSS 3.1 AV:L/AC:L/PR:N/UI:R/C:N/I:N/A:L) - a crash of the antiword process with no code execution or data disclosure demonstrated - and no public exploit or vendor patch has been identified at time of analysis, though the CVSS 4.0 vector supplied by the reporter scores it 6.8 with high availability impact.
Incorrect authorization in the NordVPN for Windows client before version 8.12 lets a low-privileged local user impersonate a trusted process and drive privileged service-control operations through the named pipe \\.\pipe\nord-security\v1\NordVpnService\Server. By invoking the ISettingsGrpc.StopService and ISettingsGrpc.ChangeServiceStartType methods with an arbitrary service name, the attacker can halt unprotected Windows services and reset their startup type to Manual, producing denial of service against critical system components. Exploitation requires an existing local foothold on a host where NordVPN is installed and running - it cannot be triggered remotely - and is bounded because services protected by Windows (PPL processes and Tamper Protection, such as Windows Defender) are not affected; the assessed CVSS 3.1 vector is AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H with a supplied CVSS 4.0 base of 6.8 (MEDIUM), and no CISA KEV listing or public exploit code has been identified at time of analysis.
A deterministic 3-byte heap-based buffer overflow in ssldump's FAN/1 X.509 fingerprinting routine (fanx_fingerprint in ssl/sslxprint.c) corrupts the heap on every call that processes a valid certificate. Exploitation requires the victim to run ssldump with FAN/1 fingerprinting enabled (the -j and -N options) against an attacker-supplied pcap containing a TLS handshake with a valid X.509 server certificate; the attack vector is local and depends on the user actively choosing to parse the malicious capture with non-default options. The most likely outcome is a crash/denial of service, with arbitrary code execution in the context of the ssldump user remaining a worst-case possibility; no public exploit code has been identified at time of analysis, and the overflow content is largely fixed, which makes code execution substantially harder than a denial of service.
Path traversal in the document-import feature of Open Zaak (1.13.0 through 1.27.1, 1.28.x before 1.28.2, and 1.29.x before 1.29.0) lets a client holding an all-authorizations application token supply an absolute or parent-traversal bestandspad value in an import CSV, causing the Celery worker to copy an arbitrary file readable by its service account into document storage, where it can then be fetched through the normal document download API and leak server secrets. Exploitation is authenticated with a highly privileged token (CVSS PR:H), requires the document-import feature to be active, and is a straightforward information-disclosure issue (CWE-200); no public exploit code was identified at time of analysis, and the privileged-token prerequisite keeps practical risk below the raw network/low-complexity score. Fixes are available in 1.27.2, 1.28.2, and 1.29.0.
Information disclosure in the Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 allows an authenticated user with only Contributor-level access to read other customers' order details via the plugin's calendar-view AJAX actions, which are missing a capability check. Publicly available exploit code exists per WPScan, but EPSS is a low 0.15% (4th percentile) and there is no confirmed active exploitation (not listed in CISA KEV). Practical exposure is limited to WooCommerce stores that grant Contributor-or-higher accounts to untrusted or semi-trusted users, since a valid low-privilege login on the target site is required.
Improper authorization in the Smush WordPress plugin before 4.3.4 lets an administrator of a single subsite on a WordPress multisite network change a network-wide access setting that should be modifiable only by a network super-administrator. Only multisite deployments running Smush versions earlier than 4.3.4 are exposed, and the attacker must already hold the administrator role on at least one subsite (PR:H, per the supplied vector), so the issue is not reachable by unauthenticated or low-privilege users. Impact is limited to modification of a configuration value - no data disclosure or service disruption - and public exploit code exists, though EPSS is only 0.14% (3rd percentile) and there is no evidence of active exploitation; the vendor has released a fix in Smush 4.3.4.
Arbitrary file deletion in GNOME Nautilus (GNOME Files) affects desktop users on Red Hat Enterprise Linux 6 through 10 and other distributions shipping the file manager: when a removable drive or disk image is unmounted or ejected, Nautilus offers to empty the trash without verifying that the volume's trash directory paths are symbolic links. An attacker who persuades a local, authenticated user to mount a crafted storage volume and then confirm that prompt can have files the victim has permission to delete removed through the symlinked path. The issue carries a moderate CVSS 3.1 score of 6.6 (AV:L/PR:L/UI:R, integrity and availability High, confidentiality None), and no public exploit identified at time of analysis; successful abuse requires a local desktop session, attacker-supplied media, and explicit user confirmation of the dialog.
Authenticated file disclosure in the Tainacan WordPress plugin (all versions up to and including 1.3.0) allows any logged-in user with subscriber-level access or above to read the contents of arbitrary files on the web server, including sensitive files such as wp-config.php. The flaw is conditional and only exploitable when the uploads/tainacan directory does not exist on the target server; on any installation where Tainacan has previously run and created that directory, the path-containment check holds and the attack fails. Impact is limited to read-only information disclosure (no write or code execution), no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis, and the assessed severity is moderate given the authentication requirement and the narrow environmental prerequisite.
Stack exhaustion in pupnp (libupnp) before 2.0.0 allows an unauthenticated attacker on the local or adjacent network to crash a UPnP service thread by delivering a SOAP request whose XML body is nested deeply enough to exhaust the stack inside the library's recursive ixml DOM traversal functions. The issue is rated CVSS 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and affects availability only, with no confidentiality or integrity impact; hosts running 2.0.0 or later are not affected. This is an incomplete-fix case for CVE-2021-28302, and no public exploit code was identified at time of analysis.
Authenticated users with Subscriber-level access or above can read the titles, URLs, authors, categories, tags, and 40-word excerpts of every unpublished draft, pending, or scheduled post on WordPress sites running the WSP MCP AI Agents Connector plugin through version 2.9.5. The wsp_get_posts MCP tool is registered with an empty capability requirement, the MCP endpoint's authenticate() method accepts any logged-in user, and the tool's callback honors a caller-supplied status=all argument that expands the underlying WP_Query without an author or ownership filter. No public exploit code or confirmed active exploitation was identified at the time of analysis, and the vendor-assigned CVSS of 6.5 is higher than this assessment's estimate (4.3, C:L) because disclosure is bounded to post metadata and short excerpts rather than full post content.
SQL injection in the Mail Mint plugin for WordPress (versions up to and including 1.31.4) allows an authenticated attacker with the plugin-specific 'mint_read_contacts' capability to read sensitive database contents through the /wp-json/mrm/v1/segments/contacts REST endpoint. The issue is a genuine but moderate-priority SQL injection rather than a top-tier emergency because the capability is granted only to Administrators by default, although sites that have delegated it to lower-privileged roles via Mail Mint's role manager face greater risk. No public exploit identified at time of analysis; no KEV or EPSS data was provided.
Memory exhaustion in Mattermost (versions 11.10.x through 11.10.0, 11.7.x through 11.7.9, 11.8.x through 11.8.5, and 11.9.x through 11.9.1) allows an authenticated, low-privilege user to drive the server to buffer an arbitrarily large remote image response in memory by making the local image proxy perform a direct fetch from an attacker-controlled endpoint, degrading or crashing the instance. The defect is a missing size limit on the buffered response (CWE-770), and impact is confined to availability - there is no confidentiality or integrity loss, and no data disclosure or modification occurs. Rated CVSS 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H); exploitation requires a valid low-privilege account and a configuration in which the local image proxy performs direct remote image fetches, and no public exploit identified at time of analysis, though a structured advisory (MMSA-2026-00726) is published.
Unauthenticated arbitrary shortcode execution in the WordPress plugin Forminator Forms (Contact Form, Payment Form & Custom Form Builder) affects all versions up to and including 1.58.1, allowing remote attackers to run any WordPress shortcode registered on the target site by submitting a quiz form. Exploitation is gated by a non-default configuration: a published quiz whose email/notification template contains the {quiz_result} merge tag, after which attacker bytes injected via the User-Agent header or the referer_url POST parameter (neither of which is stripped of the '[' and ']' shortcode delimiters by sanitize_text_field()/esc_html()) are fed to do_shortcode(). The assessed vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N (Attack Complexity High, unauthenticated) because the quiz-result template precondition must be met; no public exploit code and no CISA KEV active-exploitation entry were identified at time of analysis, and real-world impact scales with which dangerous shortcodes other installed plugins or themes expose.
Arbitrary shortcode execution in the WordPress Broken Link Checker plugin (all versions up to and including 2.4.14.1) allows an unauthenticated commenter to embed a shortcode payload in a comment's href or src attribute; once that comment is approved through the site's normal moderation workflow, the plugin's link parser passes the value to do_shortcode during a scheduled WP-Cron scan, executing the shortcode with no further attacker interaction. The published CVSS v3.1 base score is 6.5 (AV:N/AC:L/PR:N/UI:N), but the practical vector carries a user-interaction precondition (UI:R) because moderator approval is required, and impact is bounded by which shortcodes are registered on the target site. No public exploit code has been identified at time of analysis.
Blind SQL injection in the Vitepos - Point of Sale (POS) for WooCommerce plugin, affecting all versions up to and including 3.6.1, lets an authenticated attacker with vendor-level access or higher inject arbitrary SQL through the src_by[].val.start and src_by[].val.end parameters when the 'bt' (BETWEEN) operator is used, allowing extraction of sensitive data from the WordPress database. The defect is an incomplete fix for a SQL injection patched in 3.6.0, which hardened only the gt/lt/le/ge operator branches and left the BETWEEN branch unescaped. The assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, 6.5) reflects high confidentiality impact with no integrity or availability effect, and no public exploit identified at time of analysis; this is a moderate-priority issue rather than an emergency, since exploitation requires a privileged vendor account and the blind nature of the injection makes data extraction slower and noisier.
Unauthenticated shortcode injection in the Forminator Forms WordPress plugin (≤1.58.1) allows remote attackers to execute arbitrary registered shortcodes by sending a GET request to the search results page on any block-theme install, or by submitting an anonymous comment on any post with comments enabled. With a CVSS score of 6.5 and no public exploit identified at time of analysis, the practical impact is bounded by which shortcodes are present on the target site, but the exceptionally low exploitation barrier-no authentication, no user interaction, and no Forminator-specific configuration-makes this an elevated-priority issue.
Tandoor Recipes instances running versions prior to 2.6.10 let any authenticated user infer sensitive database values - including password hashes, email addresses, and administrator status - by supplying crafted sort_order or order_field values that Django's ORM resolves as double-underscore foreign-key traversal paths during recipe search and RecipeBook ordering. The exposure is scored 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, CWE-943), with confidentiality impact rated High but reach constrained by the need for valid credentials and the indirect, oracle-style nature of the leak. No public exploit code has been identified at time of analysis, and there is no confirmed active exploitation.
SQL injection in the 'Salary Payments via ECS' report of Frappe HR (HRMS) lets an authenticated HR/payroll user read sensitive database records by supplying crafted report filter values. The vulnerability affects Frappe HR releases before 15.60.3 on the 15.x line and before 16.7.1 on the 16.x line, and is rated CVSS 3.1 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N); because the CVSS vector specifies PR:L, exploitation requires a valid low-privileged account and is therefore an insider or post-compromise vector rather than an anonymous remote attack. No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, and the issue is resolved by vendor patches 15.60.3 and 16.7.1.
IBM i releases 7.3, 7.4, 7.5, and 7.6 contain an improper authentication weakness that lets a remote attacker who already holds valid IBM i credentials bypass intended security restrictions and read limited information they should not be able to access. The flaw is network-reachable with low attack complexity and no user interaction (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, score 4.3), but it cannot be triggered by an unauthenticated outsider, so realistic risk is confined to malicious insiders or attackers who have already obtained a low-privileged account. No public exploit code and no confirmed active exploitation have been identified at time of analysis, and IBM has published vendor-supplied fixes.
Information disclosure in Mattermost (versions 11.7.x through 11.7.9, 11.8.x through 11.8.5, 11.9.x through 11.9.1, and 11.10.0) allows an authenticated member of a channel to recover the server-side webhook URLs and authentication secrets embedded in interactive-message posts. The server fails to strip action integration secrets before broadcasting the post_deleted WebSocket event and before returning thread API responses, so a channel member who deletes or observes deletion of an interactive-message post - or simply reads the threads REST API - can harvest credentials intended to stay server-side. Exploitation requires a valid authenticated account with membership in a channel that actually uses interactive message/action integrations, and there is no public exploit identified at time of analysis; the issue is a moderate-severity confidentiality exposure rather than an urgent emergency, with an assessed CVSS of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Authenticated users of Frappe HRMS (Frappe HR) can read sensitive HR records belonging to other employees because the product's PWA employee-data API endpoints fail to enforce object-level authorization prior to versions 15.58.3 (15.x branch) and 16.4.3 (16.x branch). Rated CVSS 6.5 (medium) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, the flaw is a read-only confidentiality breach: no integrity or availability impact, and it requires a valid employee-level session, so anonymous external attackers cannot exploit it. Exploitation only works where the deployment exposes the affected PWA endpoints; no public exploit code has been identified at time of analysis, and there is no CISA KEV confirmation of active exploitation. Vendor-released patch: 15.58.3 and 16.4.3.
ERPNext instances prior to 15.118.0 (v15 branch) and 16.27.0 (v16 branch) expose financial data through the Sales Person-wise Transaction Summary report because the report's server-side query omits the requesting user's document-permission match conditions. An authenticated attacker holding only a limited role that can run this report can read Sales Order/Sales Invoice, Sales Team, and item-level financial rows for records the role should never see, resulting in a high-confidentiality, read-only disclosure (CVSS 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; CWE-862 Missing Authorization). No public exploit code has been identified at time of analysis, and the flaw is not listed in CISA KEV, so risk is driven by the low exploitation complexity for any logged-in low-privilege user rather than by observed attacks.
Authenticated guest accounts on Mattermost 11.7.x through 11.7.9, 11.8.x through 11.8.5, 11.9.x through 11.9.1, and 11.10.0 can be escalated to team or channel administrator by abusing the member roles API endpoint, which fails to validate a crafted combination of guest and admin scheme roles. The flaw requires only a valid guest login and network reachability to the API, so any server that provisions guest accounts is exposed, though no public exploit code or confirmed active exploitation has been identified at time of analysis. Vendor advisory MMSA-2026-00752 tracks the issue, and Mattermost has published it on its security updates page.
Mattermost Server versions 11.7.x through 11.10.x can disclose the stored client secret of an outgoing OAuth connection to an attacker who holds the administrative permission to manage those connections. The platform fails to require re-entry of the stored secret during connection validation, so an authenticated high-privileged user can repoint the connection's token URL at an attacker-controlled endpoint and trigger validation, causing the secret to be sent to that endpoint (CWE-201, information disclosure). Our assessment rates this CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N), with the practical risk tempered by the privilege prerequisite - the feature must be enabled and at least one outgoing OAuth connection with a stored secret must already exist; no public exploit was identified at time of analysis and there is no KEV listing. Exploitation is remote, requires no victim interaction, and yields confidentiality impact only (no integrity or availability impact).
Incorrect authorization in Devolutions Server 2026.3.8.0 and earlier lets an authenticated user who holds only View permission on a connection retrieve stored add-on passwords, because the connection data returned to the client includes add-on properties unredacted rather than masked. Exploitation requires a pre-existing low-privilege account and only exposes secrets for connections that account can already view, so the impact is high-confidentiality but scoped to credentials stored in add-on properties; no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV). The vendor has released a fix, making this a genuine but moderate-priority information-disclosure issue rather than a critical emergency.
Authorization bypass in SFM Software Technologies Inc.'s Costifier allows any authenticated user to reach or alter resources belonging to other users by manipulating a trusted, user-controlled object identifier. The flaw is rated CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N), a moderate-severity CWE-639 (Authorization Bypass Through User-Controlled Key) issue that requires only low-privilege credentials - remote unauthenticated exploitation is not possible, and no user interaction is needed. All Costifier versions through the 2026-10-16 build are affected; the vendor was contacted but did not respond, so no patched version is confirmed, and no public exploit identified at time of analysis. Because integrity impact is rated High while confidentiality and availability are None, the primary risk is unauthorized modification of other users' records rather than bulk data exposure.
Memory exhaustion in Text::CSV_XS before 1.65 allows remote attackers to degrade or crash long-running Perl services by repeatedly submitting malformed CSV records. Each parse failure in getline() - and the trailing row in getline_all() - abandons the already-parsed field array without freeing it, so the process's resident memory grows with every bad record, with wide records amplifying the per-record leak; authentication requirements are not a barrier per the assessed vector (PR:N, UI:N). No public exploit identified at time of analysis, and EPSS is low at 0.19% (8th percentile), but any internet-facing daemon or worker parsing untrusted CSV is exposed.
Unauthenticated request-context confusion in Wheels 4.0.6 through 4.1.2 lets any remote client push a normal request into a separate test application context by supplying an X-Wheels-Test-Context header, a WHEELS_TEST_CONTEXT cookie with any value, or a test-runner path anywhere in the URL - including the query string. Because the alternate context reuses the same configuration, environment, datasource and debug settings, there is no confidentiality or privilege gain; the realistic impact is limited to bypassing maintenance mode when it was enabled only at runtime, obtaining a second independent set of in-memory rate-limit counters, and triggering extra application-startup side effects and memory consumption under repeated requests. No public exploit code has been identified at time of analysis, and the vulnerability is fixed in Wheels 4.2.0.
Out-of-bounds reads and writes in the X.Org X client libraries (libX11, libXi, libXpm, libXrender and libXtst) can be triggered when a connecting X11 client parses crafted replies or events returned by a malicious, compromised, or man-in-the-middled X server, causing client crashes and, in a subset of cases, limited memory disclosure. The lead issue in the advisory is an out-of-bounds write in libX11's XKB action parser when a XkbGetMap reply contains keycode values above max_keycode + 1; the family also includes multiple out-of-bounds reads in libXi's XI2 class parsing and XQueryDeviceState/XListInputDevices replies, all of which are fixed in libX11 1.8.14, libXi 1.8.4, libXpm 3.5.20, libXrender 0.9.13 and libXtst 1.2.6. The assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H, 6.5) indicates exploitation is unauthenticated but requires user interaction, with impact limited to denial of service rather than confirmed code execution; no public exploit identified at time of analysis, and no KEV entry or EPSS score was supplied.
Denial of service in libtirpc allows an authenticated remote RPC client to exhaust server memory by sending oversized wrapped-data requests to an RPC service that is configured with RPCSEC_GSS integrity (rpc_gss_svc_integrity) or privacy (rpc_gss_svc_privacy) protection. Only services explicitly running in that non-default, Kerberos-backed mode are exposed - most commonly NFS deployments on Red Hat Enterprise Linux 6 through 10, Red Hat Hardened Images, and Red Hat OpenShift Container Platform 4 - and the impact is availability-only (CVSS 6.5, A:H) with no confidentiality or integrity effect. No public exploit code was identified at time of analysis and the issue is not confirmed actively exploited (no CISA KEV listing), so it warrants medium-priority patch tracking rather than emergency response, although affected RPC services can become unstable or terminate under the resource exhaustion.
Missing authorization filtering in Open Zaak's POST search endpoints (/zaken/api/v1/zaken/_zoek and /documenten/api/v1/enkelvoudiginformatieobjecten/_zoek) allows an authenticated API client holding a valid OAuth/JWT token with the zaken.lezen or documenten.lezen scope to retrieve case or document metadata outside the case types and confidentiality levels that token was authorized for. Exploitation requires a legitimate token (authenticated, PR:L) and does not require user interaction; the exposure is limited to metadata, with document searches additionally requiring the attacker to already know the target UUIDs, and document content remaining protected by a separate download authorization. No public exploit code has been identified at time of analysis, and the issue is fixed in Open Zaak 1.27.2, 1.28.2, and 1.29.0, so all earlier releases in the affected branches should be considered vulnerable.
Stored cross-site scripting in the WordPress plugin PowerPack Addons for Elementor (slug powerpack-lite-for-elementor) through version 3.1.0 lets an authenticated attacker with contributor- or editor-level access inject malicious script through the plugin's Elementor widgets, which then executes in the browser of any user who later views the affected page. CVSS 3.1 scores this 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L), reflecting a low-privileged but authenticated requirement plus user interaction from the victim viewer, so exploitation is not fully automatic. No public exploit code was identified at time of analysis and the issue is not in CISA KEV; the practical risk is a moderate, deliverable-but-conditional stored XSS rather than an emergency.
Stored cross-site scripting in the WordPress plugin The Events Calendar (versions through 6.18.1) lets an authenticated attacker with event-authoring privileges inject persistent JavaScript that executes when another user, such as an administrator, views the affected event page. Exploitation requires a low-privilege WordPress account (PR:L) and victim interaction (UI:R), and the flaw carries a CVSS 3.1 score of 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L). No public exploit has been identified at time of analysis, and the issue was reported by Patchstack.