Stack-based buffer overflow in TOTOLINK A950RG firmware 4.1.2cu.5268_B20221104 affects the Device-Information CGI handler infostat.cgi, where manipulation of the CONTENT_LENGTH argument in sub_402340 can corrupt stack memory and potentially lead to code execution or denial of service. The issue is remotely reachable, and the supplied CVSS 4.0 vector (PR:N/UI:N) indicates no authentication or user interaction is required when the router's web interface is reachable, although typical SOHO deployments expose management only on the LAN unless remote/web administration has been enabled. A public PoC reference exists but is not verified as working exploit code; no CISA KEV confirmation is present, EPSS is 0.61% (49th percentile), and the vuln.today decision label is act_now.
Unauthenticated remote attackers can rewrite server environment configuration in danmu_api deployments running a version before 1.21.7 when two conditions coincide: the install still uses the shipped default TOKEN of 87654321 and the ADMIN_TOKEN environment variable is unset. In that state the system-management endpoints /api/env/set, /api/env/add and /api/env/del inherit the token-free default-TOKEN compatibility path and accept unauthenticated POST requests, letting an attacker write ADMIN_TOKEN to seize the management interface, lock out the operator, or repoint OTHER_SERVER and PROXY_URL to internal targets for SSRF and forced redeployment. The vendor addressed this in 1.21.7 by requiring ADMIN_TOKEN on those endpoints (401 when unset) and excluding them from the default-TOKEN bypass; no public exploit code was identified at time of analysis, and instances that already use a non-default TOKEN or have set ADMIN_TOKEN are not exposed.
A parser differential in the Rust `zip` crate (zip2) through 9.0.4 lets a crafted archive present different filenames to different readers: the random-access `ZipArchive` API trusts the Central Directory File Header while the unstable streaming `ZipStreamReader` extracts using the unverified Local File Header name, writing to an attacker-chosen path without reconciling the two. Applications that scan uploads with a Central-Directory-first tool and then extract with the streaming reader can be tricked into overwriting files on disk, giving integrity and availability impact and potentially code execution if the overwritten file is later executed. The advisory includes a public proof-of-concept integration test with claimed verified execution output, but there is no CISA KEV listing and no confirmed report of exploitation in the wild; exploitation is conditional on the consuming application actually using the unstable streaming API in a decoupled scan-then-extract pipeline.
Cross-namespace authorization bypass in HashiCorp consul-k8s 0.42.0 and later can let an attacker with an existing low-privilege authenticated foothold obtain elevated Consul privileges through component ACL binding rules; deployments not using those rules or running releases before 0.42.0 are outside the stated affected scope. The flaw is fixed in consul-k8s 2.1.0 and 1.8.18, and no public exploit was identified at time of analysis, but the 9.9 CVSS score and act_now priority support prompt remediation.
vLLM before 0.32.0 lets untrusted image bytes pick their own Pillow decoder: ImageMediaIO calls Image.open(BytesIO(data)) without an allowlist and the declared MIME label does not constrain format selection, so an EPS payload submitted as image/png is dispatched to the host's Ghostscript. On hosts whose Ghostscript is affected by CVE-2024-29510 this chains to command execution with the vLLM process's privileges, and on environments running Pillow 12.0.0 through 12.2.0 the same boundary reaches CVE-2026-59203, where a malformed EPS parks media-loading workers until the pool is exhausted. The CVSS 3.1 vector is AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (8.1 High), reflecting that reachability still depends on an image-capable endpoint, the deployment's API-key and network policy, and a vulnerable host dependency; the reported reproduction covered the loader-level command execution, while the HTTP request path was only source-traced. No public exploit code was identified at time of analysis, and CISA KEV does not list this CVE.
Unauthenticated webhook forgery in the Padok Burrito Terraform Automation Collaboration Software Kubernetes operator through 0.12.0 lets anyone who can reach burrito-server's /api/webhook endpoint create or delete TerraformPullRequest custom resources with attacker-chosen Branch, Base and ID fields, provided the tracked repository's credential omits webhookSecret or sets it to an empty value. The forged event drives a real terraform plan of the attacker-selected branch under the operator's own stored git and cloud credentials, and code analysis indicates the resulting diff can be posted onto a genuine pull request's comment thread, exposing and misattributing another branch's infrastructure changes; auto-apply is hardcoded off for these temporary layers so the flaw alone cannot force a terraform apply. The CVSS vector is unauthenticated (PR:N) and the priority call is act_now; no CISA KEV entry appears in the supplied data, and the GitHub advisory publishes a proof-of-concept test it reports as passing against envtest.
Remote code execution can result in Mautic 7 (7.0.0 through 7.2.1) when campaign-import archives carry asset files that are copied into the public media directory without filename or type validation. An authenticated user holding campaign-import create permission, without administrator rights, can upload server-side scripts through the UI or the /api/campaigns/import endpoint, but code execution depends on the web server honoring per-directory configuration and executing scripts from media/, as the official Apache Docker image does. The vendor fixed the issue in 7.2.2, and no public exploit is identified at time of analysis; CISA KEV status is not indicated.
SQL injection in Esri ArcGIS Server 12.1 and earlier on Windows and Linux allows remote attackers to invoke database-specific functions that should not be permitted, with high confidentiality, integrity, and availability impact. In default deployments the attacker must hold privileges to access the targeted service; fully anonymous exploitation is possible only when a service is explicitly configured in the non-default 'public' access mode, so realistic exposure is lower than the input 9.8 base score suggests. The vendor has released patches for 12.1, 12.0, 11.5, 11.3, and 11.1, and no public exploit is identified in the supplied data.
Remote command injection in Vertiv Avocent ACS8000's root-privileged wsserver terminal-bridge daemon allows unauthenticated network attackers to execute shell commands by supplying crafted WebSocket fields that reach system() and popen() without quoting, escaping, or character-set validation. The public-key session path performs no appliance-session check, consistent with the CVSS PR:N vector, so the vulnerable command-construction path can be reached without an appliance authentication gate. No public exploit was identified at time of analysis; no CISA KEV entry or EPSS score is present in the supplied intelligence, and the vuln.today decision label is act_now.
Authentication bypass in Fortinet FortiSandbox and FortiSandbox PaaS allows remote attackers to execute unauthorized code or commands through crafted HTTP requests. The flaw (CWE-288, alternate path or channel bypass) carries a 9.8 CVSS score with a PR:N/UI:N vector, meaning no credentials or user interaction are needed against the exposed HTTP interface; affected releases are FortiSandbox 5.0.0-5.0.6, 4.4.0-4.4.9 and 4.2 (all versions), plus FortiSandbox PaaS 5.0.0-5.0.6, 4.4 (all) and 4.2 (all). No public exploit code or CISA KEV entry is present in the supplied data, but the vendor-reported severity and the act_now priority label make this a genuine high-priority issue; internet-exposed management interfaces carry the greatest exposure.
Directory traversal in NexoPOS 6.2.4 through the api/update endpoint carries a CVSS 9.8 severity score, with network reachability of that endpoint as the only confirmed prerequisite; authentication requirements are not confirmed from the available data, and the read-versus-write impact is not established. A public PoC reference exists but is not verified as working exploit code, and no CISA KEV entry confirms active exploitation.
Authentication bypass in Kener 3.0.0 through 4.1.9 lets unauthenticated remote attackers who know an administrator's email address forge a kener-user JWT session cookie and reach /manage/api with full administrative privileges, and also forge password-reset tokens, because the application silently falls back to the hardcoded string 'DUMMY_SECRET' when KENER_SECRET_KEY is empty or unset. The flaw is conditional rather than universal: the assessed vector is AC:H/AT:P precisely because any instance configured with a strong, unique KENER_SECRET_KEY rejects the forged token, so only default or misconfigured deployments are exploitable - but those deployments are fully compromised with no credentials and no user interaction. No public exploit code is confirmed at time of analysis and there is no KEV listing; EPSS is 0.62% (50th percentile), which understates the risk for unhardened instances, and the vendor priority label is act_now.
Unauthenticated remote code execution affects OpenHands Software Agent SDK releases before 1.52.0 when the DockerWorkspace or Apptainer workspace launchers are used in their default configuration: the sandbox agent server binds to 0.0.0.0 with an empty session_api_keys list, so authentication is effectively disabled. A remote attacker who can reach the published container port (CVSS 4.0 base 9.3, assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity and availability impact) can issue unauthenticated HTTP and WebSocket requests to run arbitrary shell commands as root inside the sandbox, read the mounted workspace, and pull plaintext secrets from the secrets store. Vendor patch v1.52.0 is available and the priority decision is act_now; no public exploit code was identified in the supplied data, though VulnCheck reported the issue.
Local privilege escalation in boneIO black_debian_images builds prior to 1.6.0 lets anyone who controls the boneio service account become root, because that account carries a full passwordless sudo rule and membership in the docker group - either one is sufficient for full root compromise. The flaw is strictly local and requires authenticated access (CVSS:4.0 AV:L/PR:L), so an attacker must already have code execution as the boneio user through some other weakness before this becomes useful. No public exploit code and no confirmed active exploitation were identified at time of analysis, but the vendor-assigned severity of 9.3 and a vuln.today priority of act_now reflect that fielded devices remain exposed until the 1.6.0 upgrade is installed and its migrations run.
Unauthenticated path traversal combined with missing authorization in the cloud-storage source of Google MCP Toolbox for Databases (googleapis/mcp-toolbox) 1.2.0 through 1.4.0 lets a remote caller use crafted tool invocation parameters to copy arbitrary files from the host into attacker-chosen Google Cloud Storage buckets and to overwrite arbitrary local files. Every severity signal points the same way: the CVSS 4.0 base score is 9.3 with AV:N/AC:L/AT:N/PR:N/UI:N and high vulnerable-system confidentiality, integrity and availability impact, and the vuln.today decision label is act_now, so this should be prioritized immediately. No public exploit code and no CISA KEV entry were identified at time of analysis; no EPSS score was supplied. Realistic exposure is bounded by whether the toolbox endpoint is network-reachable by untrusted callers and by the GCS permissions granted to the host service account.
Unauthenticated OS command injection in the WolfProt interface of WolfVision Cynap collaboration devices allows a remote attacker who can reach the service to run arbitrary operating-system commands at the privilege level of the Cynap application service. The flaw is rated 9.3 (CVSS 4.0: AV:N/AC:L/AT:N/PR:N/UI:N, with high confidentiality, integrity and availability impact) and maps to CWE-78; the vulnerable surface spans the Cynap, Cynap Core, Cynap Core Pro, Cynap Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro, Cynap Pure Next Gen, Cynap Pure SDM, Cynap Receiver, Cynap Bridge and Cynap Videobar firmware lines. Per the supplied intelligence the decision is act_now; no public exploit code and no confirmed active exploitation were reported in the available data. The practical exposure gate is network reachability of the WolfProt service, so devices reachable from management or meeting-room networks carry the most risk.
Unauthenticated account takeover in MacCMS v10 before 2026.1000.4054 lets any remote attacker reset the password of any registered member, because the password-recovery verification routine never binds the submitted code to the account it was issued for. An attacker requests a recovery code through user/findpass_msg delivered to their own mailbox or phone, then submits that code to user/findpass_reset together with the victim's registered email address or phone number, and the reset succeeds. No authentication, privileges, or user interaction are required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, vendor score 9.3); the only prerequisites are that the member system and its code-delivery channel are enabled and that the attacker knows the victim's registered identifier. Our assessment rates this a genuine high-priority issue rather than an inflated score, and the vendor has released a patch; no public exploit code was identified at time of analysis.
Improper authentication and authorization controls in the CreditNirvana Collections Platform (CollectionWorkz) login service let an unauthenticated remote attacker manipulate authentication requests and reach platform APIs without a valid session - enumerating users and establishing sessions as arbitrary accounts, including administrators, with the ability to read and modify sensitive data at that user's privilege level. The flaw is scored 9.3 under CVSS 4.0 (AV:N/AC:L/PR:N/UI:N with high confidentiality and integrity impact but no availability impact), and CERT-In has issued an advisory; the vuln.today priority is act_now. No public exploit code and no CISA KEV entry were identified in the available data, and the specific affected version range is not stated.
Root-level SSH access to WolfVision vSolution Matrix appliances can be obtained by anyone holding the private key that matches the product's shared cryptographic trust configuration, allowing authentication as root on affected devices. Only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled are in scope, so the exposed population is a non-default subset rather than every deployment; the CVSS 4.0 vector (9.2) marks PR:N and UI:N, meaning no legitimate credentials or victim interaction are required once the key is in hand, while AT:P reflects that the key must first be acquired. No public exploit code or confirmed active exploitation appears in the supplied intelligence, but the vuln.today decision label is act_now and the shared nature of the trust material means one recovered key can potentially be replayed against multiple affected master stations.
Improper certificate validation in the Erlang HTTP client hackney (1.24.0 through 4.8.x) lets an on-path attacker impersonate a server that an application has pinned to a private certificate authority. Because hackney adds its own {partial_chain, fun hackney_ssl:partial_chain/1} to every verify_peer configuration and OTP honours that callback over a caller-supplied cacerts/cacertfile trust store, a chain ending in any certifi-bundled public root can be accepted as the trust anchor; the attacker still needs a man-in-the-middle position and a publicly trusted certificate for the exact pinned hostname that satisfies the hostname check, so only non-default private-CA pinning deployments are exposed. No public exploit identified at time of analysis and no CISA KEV entry, though the issue is triaged as act_now and fixed in hackney 4.9.0.