OS command injection in DrayTek Vigor2960 firmware 1.5.1.6 Revision 8218 allows authenticated, low-privilege attackers to execute arbitrary shell commands on the device through the web management interface. The flaw resides in the CGI handler /cgi-bin/mainfunction.cgi (function sub_182B0), where the usefile, usescript, and option parameters are passed to a shell without adequate sanitization. Publicly available exploit code exists, and the vendor has classified the Vigor2960 as End-of-Service with only limited support, so legacy deployments exposing the management interface are the primary exposure.
Remote code execution in Google Chrome for iOS prior to 156.0.8078.47 is possible when a victim opens a crafted HTML page, triggering a use-after-free in the iOSWeb component. The CVSS 3.1 score is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), reflecting mandatory user interaction and code execution confined to the browser sandbox; no public exploit was identified at time of analysis. Google has released 156.0.8078.47 to correct the flaw.
Authenticated remote code execution in JoySafeter through 1.0.0 allows any self-registered low-privilege user to run host operating-system commands by selecting Copilot standard mode and invoking its unsandboxed execute tool over the WebSocket chat.start extension. Successful exploitation can expose other tenants' data and server secrets because the agent calls subprocess.run with shell=True outside a sandbox, and publicly available exploit code exists. The assessed CVSS 3.1 vector requires only PR:L with no user interaction, so internet-facing deployments that allow open registration are directly exposed and warrant operational priority.
Aix-DB 1.2.4 ships a ChatBI 'common agent' that exposes the deepagents execute tool without any gating, letting any authenticated non-admin user escalate from chat input to host-level operating system command execution. The two documented paths are crafted text sent to the POST /dify/get_answer endpoint and uploaded documents containing malicious text that the agent processes; successful exploitation exposes datasource credentials and model API keys held by the application. Publicly available exploit code exists, and the issue carries a CVSS 4.0 base score of 8.7, though exploitation is bounded by the need for a valid low-privileged account on a deployment that has the ChatBI common agent enabled.
Remote code execution in Coze Studio before 0.5.0 allows any registered user to run arbitrary commands through workflow code nodes because the shipped default CODE_RUNNER_TYPE="local" executes Python in an unsandboxed host subprocess. The regex import filter can be bypassed with __import__('subprocess'), exposing environment variables, model API keys, and connected services including MySQL, MinIO, Redis, and etcd; publicly available exploit code exists. The vendor fix changes the default runner to "sandbox" in 0.5.0, so self-hosted instances that have not overridden the default are the primary exposure.
Indirect prompt injection in LangAlpha through 2026.09.07 allows remote attackers to run shell commands or Python inside the agent's workspace sandbox by planting instructions in web content the agent retrieves; the described payload then reads vault secrets from _internal/.vault_secrets.json. No CISA KEV entry or confirmed active exploitation is reported, and a public PoC reference exists; it is not verified as working exploit code. EPSS is 0.43% (36th percentile), the reporting source is VulnCheck, and the vuln.today priority is this_week, reflecting a real but non-emergency risk.
Coze Studio through 0.5.1 exposes cross-tenant workflow access because its workflow API trusts a client-supplied workflowID without verifying that the object belongs to the caller's space. An authenticated low-privilege user who knows or enumerates another tenant's workflowID can pair it with their own spaceID and read, run, overwrite, or delete that workflow via the save, update_meta, batch_delete, canvas, test_run, and nodeDebug routes. Publicly available exploit code exists, and exposure is highest on shared or multi-tenant deployments that allow untrusted users to register, while single-tenant private installations face lower practical risk.
Unauthenticated file disclosure in LavaLite CMS through 10.1.2 allows remote attackers to download private stored files through the Filer module's filer/download and filer/display routes. Attackers can supply arbitrary disk names and paths to FileController, exposing private local uploads or data on configured remote S3 disks when paths or disk names are known or enumerable. Publicly available exploit code exists, and no CISA KEV status is indicated in the provided data; assessed impact is confidentiality-only, with no integrity or availability effect.
Cross-tenant impersonation in Letta through 0.16.8 allows an authenticated low-privileged API caller to read and modify another user's agents, memory, and configuration by setting the self-asserted user_id HTTP header to the victim's tenant ID, even when LETTA_SERVER_SECURE is enabled. The server trusts the client-supplied identity key during request resolution, so the bypass requires only API connectivity and a known or guessed target user_id, not credential theft or memory corruption. Publicly available exploit code exists, with no CISA KEV listing confirming active exploitation; this is a genuine high-priority issue for multi-tenant or shared Letta deployments, while single-user instances have little cross-tenant data to expose.
Authenticated remote command injection in aaPanel through 8.25.0 allows a logged-in panel user to execute arbitrary operating-system commands through the File Manager ExecShell code path in class/public/common.py by manipulating the sfile, dfile, access, or user argument. The vendor confirms the issue requires authentication, and publicly available exploit code exists with no CISA KEV confirmation provided. Panels exposed to the internet with weak, shared, or semi-trusted credentials carry the highest practical risk.
Stirling-PDF 2.13.2 through 3.2.0 lets an authenticated administrator regain Java method execution by uploading a crafted SQL backup to the import-database endpoint. The incomplete denylist in DatabaseService.validateSqlContent() does not block CREATE OR REPLACE ALIAS statements, so a RUNSCRIPT payload can define H2 Java function aliases and re-enable the code-execution path the import restrictions were meant to close (CWE-184). Publicly available exploit code exists, including a proof-of-concept repository and accompanying research writeups; there is no CISA KEV listing, and the decisive mitigating factor is the PR:H administrator prerequisite, which confines realistic risk to compromised or malicious admin accounts and to shared or multi-tenant instances where an administrator is not fully trusted.
Authenticated command injection in DrayTek Vigor2960 1.5.1.6 Revision 8218 allows a low-privileged user with valid credentials to reach the web administration interface and supply a crafted language-upload filename that is executed as shell commands, compromising confidentiality, integrity, and availability of the device. This is a genuine but conditional priority: publicly available exploit code exists, but successful exploitation requires network reachability to the management interface and valid low-privilege credentials. DrayTek has released firmware 1.5.1.7, which the vendor indicates corrects this issue and other security problems in the end-of-sale Vigor2960 line.
Authenticated command injection in DrayTek Vigor2960 1.5.1.6 Revision 8218 lets a low-privileged user of the web management interface run arbitrary OS commands by manipulating the sectiontype argument to set_table in /cgi-bin/mainfunction.cgi. Publicly available exploit code exists, but the attack requires valid credentials and network reachability to the HTTP(S) management service. The vendor has placed the Vigor2960 on end-of-support with limited maintenance, so replacement or mitigation is more realistic than waiting for a dedicated fix.
PHP object injection in DokuWiki's draft subsystem lets an authenticated user who holds edit rights on any page race concurrent draft rewrites to splice attacker-controlled serialized data into a draft file that Draft::getDraftText() passes to unserialize() without an allowed_classes restriction, enabling arbitrary file write, file deletion, and PHP code execution through core gadgets such as MemoryIndex and Installer. All DokuWiki installations before the 2026-07-14c release are affected in their default configuration, and exploitation is gated on a valid account with write permission plus a non-deterministic race, so repeated attempts may be required; environments where only trusted administrators can edit face substantially reduced exposure. Publicly available exploit code exists (a proof-of-concept gist is linked from the vendor issue), but there is no CISA KEV confirmation of active exploitation. This is a credible but conditional priority rather than a drop-everything emergency.
Authenticated users of Letta through 0.16.8 can read server secrets when the LocalSandbox tool backend is used, because tool subprocesses inherit the server process environment; calling POST /v1/tools/run or running a custom tool can expose LETTA_PG_URI, POSTGRES_PASSWORD, and provider API keys. In multi-tenant deployments sharing one Postgres instance, those leaked database credentials can be used to reach other tenants' data, although single-tenant or properly isolated sandbox deployments are much less exposed. Publicly available exploit code exists, but the provided data does not confirm active exploitation (no CISA KEV entry), and exploitation requires an authenticated account with permission to execute tools.
Authenticated users on multi-user Stirling-PDF 3.0.0 through 3.2.0 can reach other tenants' stored documents by creating a processing folder whose path points into the server's storage directory at storage/<victimUserId>, then listing and running pipelines against that folder to read, alter, or delete the victim's files. The flaw is an authorization bypass through a user-controlled key (CWE-639) exposed by the proprietary processing-folder API (POST /api/v1/processing-folders) and the FolderAccessGuard check shipped in those releases. Publicly available exploit code exists, published alongside a technical write-up and a proof-of-concept repository, so the barrier to reproduction is low for anyone holding a valid account on an instance that hosts more than one user's files; EPSS scoring was not supplied in the available intelligence. The supplied CVSS 4.0 vector rates it 7.1 with PR:L, while our independent CVSS 3.1 assessment scores it 8.8 (C:H/I:H/A:H), and neither rating reflects anonymous exploitation - the practical exposure is a multi-tenant deployment risk rather than an internet-wide mass-exploitation event.
Out-of-bounds write in Adobe Acrobat for Edge can lead to arbitrary code execution in the context of the current user when a victim opens a crafted PDF. The flaw is remotely reachable with low attack complexity and no attacker authentication, but it requires user interaction and does not by itself elevate privileges beyond the current user. No public exploit code has been identified at time of analysis, though the high CVSS score and Edge default PDF-handler exposure make prompt patching advisable.
Stack-based buffer overflow (CWE-121) in IBM Planning Analytics 2.0 and 2.1 allows a remote attacker who holds valid low-privilege credentials to overflow an improperly bounds-checked stack buffer and potentially execute arbitrary code on the Planning Analytics server. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.8) confirms network reachability, low attack complexity, no user interaction, and high confidentiality, integrity and availability impact, with the credential requirement being the principal limiting factor rather than any technical obstacle. There is no CISA KEV listing and no public exploit code identified at time of analysis, so this is a high-priority patching item rather than an emergency, with exposure driven by how widely authenticated access is granted and whether the service is reachable from untrusted networks.
Memory corruption in Google Chrome's WebRTC component, affecting builds prior to 156.0.8078.47, allows a remote attacker to corrupt memory and potentially execute arbitrary code inside the browser's renderer sandbox by convincing a victim to load a crafted HTML page. Exploitation is unauthenticated (PR:N) but requires user interaction (UI:R) - the victim must navigate to attacker-controlled content that exercises WebRTC processing - and any resulting code execution is confined to the renderer sandbox, so full system compromise would additionally require a separate sandbox-escape flaw. Google rates the issue Chromium security severity Critical and a vendor patch is available; no public exploit code or confirmed active exploitation was identified at time of analysis, so this is a high-priority patch-now item rather than a top-tier emergency.
Memory corruption in the WebAppInstalls component of Google Chrome builds prior to 156.0.8078.47 lets a remote attacker who convinces a user to load a crafted HTML page potentially execute arbitrary code inside the browser sandbox. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R) confirms no privileges are required but victim interaction is mandatory, and the vendor's own 'inside the sandbox' qualifier means host-level compromise would additionally require a separate sandbox escape. No public exploit code or CISA KEV entry is associated with this CVE in the available intelligence, so it is a hardening/patch-priority item rather than a confirmed active threat; a vendor fix exists in Chrome 156.0.8078.47.
Memory corruption in Google Chrome's WebProtect component (versions prior to 156.0.8078.47) lets a remote, unauthenticated attacker who convinces a victim to render a crafted HTML page potentially execute arbitrary code inside the renderer sandbox. Exploitation requires user interaction per CVSS UI:R, and the flaw alone does not permit host compromise - escaping the sandbox would require chaining a separate vulnerability. No public exploit code or confirmed active exploitation was identified in the provided intelligence, and Google rates the Chromium security severity as Low despite the 8.8 CVSS base score.
Memory corruption in the BrowserTag component of Google Chrome before 156.0.8078.47 lets a remote attacker who convinces a victim to load a crafted HTML page corrupt memory within the renderer and potentially execute arbitrary code inside the browser sandbox; no credentials or privileges are required, only that the victim renders the page (CVSS PR:N/UI:R). The resulting code execution is scope-limited to the sandbox - escaping to the host requires a separate sandbox-escape bug not covered by this CVE - which is why Google rates the Chromium security severity Low even though the generic CVSS base score computes to 8.8. No public exploit code or confirmed active exploitation was identified at time of analysis, and Chrome's silent auto-update mechanism shortens the exposure window on default desktop installations. Signals are mixed and must be weighed carefully: the numeric severity is high while the practical post-exploitation impact is constrained by the sandbox.
Use-after-free in Google Chrome's BrowserTag component, affecting desktop builds prior to 156.0.8078.47, allows remote unauthenticated attackers to execute arbitrary code inside the Chrome renderer sandbox when a victim loads a crafted HTML page (CVSS 3.1: 8.8, AV:N/AC:L/PR:N/UI:R). Because code execution is confined to the renderer sandbox, full host compromise would additionally require a separate sandbox-escape vulnerability, which limits the practical blast radius. No public exploit code or confirmed active exploitation was identified at time of analysis, and Google rates the issue Chromium security severity Medium despite the high base score.
Remote code execution inside the Chrome renderer sandbox is achievable via a use-after-free condition in the WebRTC implementation of Google Chrome builds prior to 156.0.8078.47. A victim only needs to load a crafted HTML page (UI:R, PR:N per the CVSS vector), and because WebRTC is enabled by default in standard Chrome builds the vulnerable code path is reachable without special configuration. The vendor rates Chromium security severity High, and while code execution is confined to the sandbox - meaning a separate sandbox escape is required for full host compromise - the CVSS 8.8 and confirmed availability of a vendor patch make this a genuine high-priority patching target; no public exploit code has been identified at time of analysis.
Memory corruption in Google Chrome's WebFonts handling allows a remote attacker to potentially execute arbitrary code inside the renderer sandbox by convincing a victim to load a crafted HTML page in any Chrome desktop build prior to 156.0.8078.47. The attack requires no authentication but is not zero-click - the victim must visit the attacker-controlled page (CVSS:3.1/AV:N/AC:L/PR:N/UI:R, 8.8), and Google rates the underlying Chromium bug as Low severity because any code execution achieved stays confined to the sandboxed renderer unless the attacker chains a separate sandbox escape. No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has released a fixed build.
Use-after-free in Google Chrome's WebAppInstalls component allows a remote attacker who convinces a victim to open a crafted HTML page to corrupt heap memory and potentially execute arbitrary code inside the renderer sandbox, affecting Chrome builds prior to 156.0.8078.47 on Windows, macOS, and Linux. Exploitation is constrained by two factors: the attacker has no path to trigger the bug without user interaction (UI:R, the victim must navigate to the malicious page), and the resulting code execution is sandbox-confined, so standalone impact is limited to the renderer process unless chained with a separate sandbox-escape primitive - which is why our assessed vector (C:L/I:L/A:L) is materially lower than the 8.8 base score derived from the C:H/I:H/A:H vector. Signals conflict sharply and must be read together: Google rates the flaw Chromium security severity Low and has shipped a fix in 156.0.8078.47, while the NVD-style vector implies full confidentiality, integrity, and availability loss; no public exploit code or confirmed active exploitation was identified at time of analysis.
Use-after-free in Google Chrome's WebAppInstalls component before 156.0.8078.47 allows a remote, unauthenticated attacker to execute arbitrary code inside the browser sandbox when a victim loads a crafted HTML page. Google rates the issue Low, and the independent assessment emphasizes that the flaw does not escape the sandbox, which explains the sharp conflict with the 8.8 CVSS score. No public exploit identified at time of analysis, and Google has released Chrome 156.0.8078.47 as the vendor fix.
Privilege escalation through the REST WebServices component of Oracle Identity Manager 12.2.1.4.0 and 14.1.2.1.0 allows a low-privileged authenticated attacker with HTTP network access to take over the OIM deployment, with high confidentiality, integrity and availability impact (CVSS 8.8). Exploitation requires a valid low-privilege account on the target instance (PR:L) but no user interaction and only low attack complexity, so exposure hinges on whether the REST interface is reachable by untrusted networks. No public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS score was supplied with the source data.
Mobile Field Service in Oracle E-Business Suite 12.2.3 through 12.2.15 exposes the Admin UI to a low-privileged authenticated network attacker over HTTP, allowing takeover of the module with high confidentiality, integrity, and availability impact (CVSS 8.8). Exploitation requires valid application credentials and reachability of the Admin UI endpoint; it is not remote-unauthenticated, and deployments without the module are not exposed. No public exploit code was identified at time of analysis.
Authenticated low-privilege users can compromise and take over Oracle E-Business Suite Integrated SOA Gateway 12.2.3 through 12.2.15 over HTTP, with high confidentiality, integrity, and availability impact per CVSS 3.1 score 8.8. The assessed vector requires a valid low-privilege EBS account and reachable SOA Provider component, so fully anonymous attackers cannot exploit it. No public exploit code or CISA KEV entry was identified at time of analysis, and Oracle's October 2026 CPU advisory provides the remediation path.
Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 through 12.2.15 contain a high-severity flaw in the SOA Provider component that allows a low-privileged, authenticated attacker with HTTP network access to take over the affected gateway. Successful exploitation can fully compromise confidentiality, integrity, and availability of the Integrated SOA Gateway (CVSS 8.8). No public exploit code or confirmed active exploitation was identified at time of analysis; exposure is limited to EBS deployments that enable and expose the Integrated SOA Gateway.
Oracle Cost Management, a module of Oracle E-Business Suite (releases 12.2.3 through 12.2.15), permits a low-privileged authenticated attacker with HTTP network access to fully compromise the Cost Planning component, resulting in high confidentiality, integrity, and availability impact. Oracle's own advisory characterizes the flaw as easily exploitable and capable of leading to takeover of the module, yielding a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The practical barrier is authentication: the attacker must already hold valid low-privilege EBS credentials, and no public exploit code or confirmed active exploitation was identified at time of analysis.
Authenticated low-privileged users with network HTTP access can achieve takeover of Oracle Purchasing 12.2.3 through 12.2.15, with high confidentiality, integrity, and availability impact (CVSS 8.8). The vulnerability is low-complexity and requires no user interaction, but exploitation depends on a valid low-privileged E-Business Suite session and reachability of the Purchasing Internal Operations component. No public exploit identified at time of analysis; the October 2026 Oracle Critical Patch Update is the remediation reference.
Authenticated compromise of Oracle Enterprise Manager for Siebel 13.5 and 24.1 can escalate to full takeover through the Configuration Management component, with a low-privileged network attacker able to affect confidentiality, integrity, and availability at CVSS 8.8. The flaw requires only a valid low-privileged account and HTTP access, not user interaction, so exposure is significant wherever such accounts exist; however, no public exploit identified at time of analysis and no CISA KEV confirmation is present, so this is not assessed as an active emergency.
Low-privileged attackers who can reach Oracle Enterprise Manager for Siebel over HTTP can escalate to full takeover of the product's Configuration Management component in versions 13.5 and 24.1, per Oracle's October 2026 Critical Patch Update. The flaw carries a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), meaning no user interaction and low attack complexity, but a valid low-privileged account is a hard prerequisite. No public exploit code and no confirmed active exploitation were identified at time of analysis; EPSS and KEV data were not available in the supplied intelligence, so real-world risk currently rests on the intrinsic severity and the niche deployment footprint of the Siebel management plug-in.
Authenticated low-privileged attackers can take over Oracle Enterprise Manager Base Platform 13.5 and 24.1 through the Agent Next Gen component over HTTP. The flaw is easily exploitable (CVSS 8.8, AC:L/UI:N) once any low-privilege account is obtained and the management interface is reachable, with high confidentiality, integrity, and availability impact. No public exploit was identified at time of analysis, and Oracle's October 2026 Critical Patch Update advisory is the remediation reference.
Google Chrome before 156.0.8078.47 contains an improper input validation flaw that can let a remote attacker who convinces a victim to load a crafted HTML page potentially execute arbitrary code inside the browser sandbox. The issue is network-reachable, low-complexity, and requires no privileges, but exploitation depends on user interaction (visiting the malicious or compromised page); resulting execution is confined to the renderer/browser sandbox unless chained with a separate sandbox escape. No public exploit code or CISA KEV entry was identified at time of analysis.
A use-after-free in Chrome's TrustedWebActivities component on Android allows remote code execution inside the renderer sandbox when a victim loads a crafted HTML page in Chrome for Android versions prior to 156.0.8078.47. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base 8.8) reflects an unauthenticated, network-reachable flaw that nevertheless requires user interaction - the victim must navigate to or render attacker-controlled content - so no zero-click path is present in the available data. Successful exploitation yields high-confidentiality, high-integrity code execution confined to the sandboxed renderer process; escaping the sandbox to compromise the underlying Android device would require chaining a separate sandbox-escape vulnerability. No public exploit code has been identified at time of analysis, and Google rates the issue Chromium security severity Medium despite the 8.8 base score.
Chrome for Android before 156.0.8078.47 carries a high-priority WebGL use-after-free that can let a remote, unauthenticated attacker execute arbitrary code inside the browser sandbox when a victim opens a crafted HTML page. The CVSS 8.8 vector requires user interaction (UI:R) but no privileges (PR:N), and the Unchanged scope plus the vendor's 'inside the sandbox' wording mean full device compromise would need a separate sandbox-escape chain. No public exploit identified at time of analysis, and Google has released 156.0.8078.47 as the vendor fix.
Improper input validation in Chrome's WebShare component allows a remote, unauthenticated attacker to potentially execute arbitrary code inside the renderer sandbox in any build prior to 156.0.8078.47, triggered when a victim opens a crafted HTML page. The primary limiting factor is user interaction (UI:R) - the victim must navigate to attacker-controlled content - and the resulting code execution stays confined to the sandbox, so host compromise would additionally require chaining a separate sandbox-escape flaw that is outside this CVE. Chromium's own security team rates the issue Medium despite a CVSS 3.1 base score of 8.8; no public exploit code and no confirmed active exploitation were identified at time of analysis, and a vendor patch (156.0.8078.47) is available.
Memory corruption in Google Chrome's browser component allows a remote attacker who convinces a victim to load a crafted HTML page to potentially execute arbitrary code inside the Chrome sandbox on any desktop build prior to 156.0.8078.47. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U) confirms no authentication or privileges are needed, but user interaction is mandatory, so this is not a zero-click issue. Impact is materially limited by the fact that code execution is confined inside the sandbox (S:U) and would need chaining with a separate sandbox-escape bug for host compromise; no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis, and Google assigned Chromium severity Medium despite the 8.8 CVSS base score.
Use-after-free in Google Chrome's WebProtect component affects builds prior to 156.0.8078.47 and lets an unauthenticated remote attacker execute arbitrary code inside the renderer sandbox when a victim opens a crafted HTML page. The impact is confined to the sandboxed browser process unless a separate sandbox-escape flaw is chained, and user interaction is required. No public exploit identified at time of analysis, and Google has released a fixed build.
Use-after-free in Google Chrome's WebAppInstalls component, affecting versions prior to 156.0.8078.47, lets an unauthenticated remote attacker execute arbitrary code inside the browser sandbox when a victim opens a crafted HTML page; the CVSS vector requires user interaction (UI:R) and does not require privileges (PR:N). The 8.8 CVSS rating contrasts with Google's Low Chromium severity because the code execution is confined to the renderer sandbox and full host compromise would require a separate sandbox escape. No public exploit was identified at time of analysis, and Google has released Chrome 156.0.8078.47 as the fixed build.
Use-after-free in Google Chrome's WebUI layer allows a remote attacker to execute arbitrary code inside the browser sandbox when a victim opens a crafted HTML page, affecting all Chrome builds prior to 156.0.8078.47 on desktop and ChromeOS. Successful exploitation requires user interaction (UI:R) but no authentication or privileges (PR:N), and the resulting code execution is confined to the renderer sandbox, so full host compromise would require chaining with a separate sandbox-escape flaw. Rated 8.8 (High by Chromium standards), the bug carries no public exploit code and no confirmed active exploitation (no CISA KEV entry) at time of analysis, and Google has shipped a fixed build.
Arbitrary code execution inside the Google Chrome renderer sandbox is possible when a victim loads a crafted HTML page in any desktop Chrome build prior to 156.0.8078.47. The CVSS vector requires user interaction (UI:R) but no authentication (PR:N), and successful exploitation is contained by the renderer sandbox; host compromise would require a separate sandbox-escape flaw. Chromium's Low severity rating conflicts with the 8.8 CVSS score, no public exploit was identified at time of analysis, and a vendor patch is available in 156.0.8078.47.
Authenticated low-privileged attackers can take over Oracle Applications Manager in Oracle E-Business Suite 12.2.3 through 12.2.15 over HTTP, with high confidentiality, integrity, and availability impact. The flaw is network-reachable, requires no user interaction, and has low attack complexity, but it is not unauthenticated: an attacker must already hold a valid low-privileged account on the EBS instance. No public exploit was identified at time of analysis, and no CISA KEV entry or EPSS score was supplied; the main barrier to mass exploitation is the authentication prerequisite.
Oracle ZFS Storage Appliance Kit 8.8 can be taken over by a low-privileged, authenticated attacker who can reach the appliance's HTTP management interface, with full confidentiality, integrity, and availability impact. Exploitation is network-reachable, low complexity, and requires no user interaction, but valid low-privilege credentials are required; no public exploit was identified at time of analysis. The authentication prerequisite and the appliance's typical placement on internal management networks are the main practical constraints.
Authenticated low-privileged users can take over Oracle Agile Product Lifecycle Management for Process 6.2.4 through the Product Quality Management component, achieving full confidentiality, integrity, and availability compromise (CVSS 8.8). Oracle describes the flaw as easily exploitable and requiring no user interaction, so a valid low-tier account or compromised low-privileged credentials is the main prerequisite. No public exploit code or confirmed active exploitation was identified at time of analysis.
Privilege escalation in Oracle Database 23ai (versions 23.4.0 through 23.26.3) allows a low-privileged database account holding the DBMS_VECTOR privilege to take over the RDBMS over Oracle Net, with full confidentiality, integrity, and availability impact (CVSS 3.1 base score 8.8). The attack is network-reachable and requires no user interaction, but is gated by the DBMS_VECTOR grant that ships with the Oracle AI Vector Search feature, so environments that do not use vector search or that tightly control this privilege are not exposed to arbitrary low-privileged users. No public exploit code has been identified and the flaw is not listed in CISA KEV at time of analysis; Oracle disclosed it in its October 2026 Critical Patch Update.
Authenticated low-privilege users of Oracle PeopleSoft Enterprise SCM Strategic Sourcing 9.2 can achieve full takeover of the Strategic Sourcing component over HTTP, with high impact to confidentiality, integrity, and availability (CVSS 3.1 base score 8.8). Exploitation requires only network reachability to the application tier and a valid low-privilege PeopleSoft account - no user interaction and no elevated privileges - so any provisioned user who can reach the Strategic Sourcing interface could attempt it. No public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis; the vulnerability is addressed in Oracle's October 2026 Critical Patch Update advisory, and risk is concentrated in internet-exposed or broadly provisioned instances.