2026-10-28
Unauthenticated remote attackers can exhaust EspoCRM server workers by concurrently sending a small number of large API requests that drive the password-redaction regular expression applied during API error handling into excessive CPU consumption, degrading or denying service to legitimate users. EspoCRM versions through 10.0.7 and 9.3.10 and earlier are affected; fixes are released in 10.0.8 and 9.3.11. A public advisory exists and a PoC reference is noted, though it is not verified as working exploit code; the vulnerability is not confirmed as actively exploited, and impact is limited to availability (no confidentiality or integrity loss).
Class-name polymorphic deserialization in jackson-databind is insufficiently validated: the outer class in a type ID is checked, but classes named inside generic arguments (and array element types) are accepted even when they would be rejected as direct type IDs, letting an attacker instantiate arbitrary classes. Affected are com.fasterxml.jackson.core:jackson-databind 2.10.0 through 2.18.11, 2.19.0 through 2.21.7 and 2.22.0 through 2.22.3, plus tools.jackson.core:jackson-databind 3.0.0 through 3.1.7 and 3.2.0 through 3.2.3; releases before 2.10.0 are unaffected because PolymorphicTypeValidator did not yet exist, and the earlier CVE-2026-54512 fixes (2.18.8, 2.21.4, 3.1.4) do not remediate this bypass. The default-validator case needs no application-authored validator at all, and the advisory's PoC demonstrates that with Spring on the classpath and attacker-controlled XML, FileSystemXmlApplicationContext is reached through map-key discovery and ProcessBuilder.start() executes arbitrary commands under the application account; the issue carries a public reproducer and warrants the act_now priority label, although exploitation remains gated on the specific polymorphism configuration, available classpath gadgets and a reachable deserialization entry point.
Unauthenticated OS command injection in AVideo-Encoder before 8.1.0 gives remote attackers arbitrary command execution as the web-server user through the live-streaming endpoint view/videosListToLive.php. The endpoint requires only non-empty playlists_id and APISecret values, forwards APISecret without comparing it to any stored secret, and never applies the Streamer::isURLAllowed allowlist, so an attacker can point webSiteRootURL at an HTTP stub they control, have Login::run adopt the returned JSON as session state (self-granting isLogged and canStream), then return a video list whose videos[].path values are interpolated without escaping into ffprobe and ffmpeg commands run via exec. Successful exploitation discloses database and stored streamer credentials, permits upstream platform compromise, file modification and persistence as the web-server user, and can deny encoder service; the vendor fixed this in 8.1.0 and no public exploit code is confirmed in the supplied data, though the advisory includes a detailed working PoC recipe.
Unauthenticated PHP code injection in AVideo-Encoder before 8.1.0 allows a remote attacker to write arbitrary PHP into videos/configuration.php through install/checkConfiguration.php and execute it as the web-server user. The attack works only while videos/configuration.php is absent-the default on a fresh deployment or after the file is deleted or moved-and requires the attacker to supply a reachable database host, which they control, plus a systemRootPath containing index.php. Version 8.1.0 fixes the flaw; a public PoC reference exists and is not verified as working exploit code, and the decision label is act_now with CVSS 10.0.
Unauthenticated attackers can upload arbitrary files, including PHP, through the WordPress plugin Checkout Files Upload for WooCommerce in every version before 2.4.0 whenever the plugin's 'accepted file types' setting is left empty - which the plugin itself documents as the way to accept all files, so this is an expected configuration rather than an exotic misconfiguration. Code execution follows only where the web server actually runs PHP from the uploads directory; on hosts that block PHP execution there, the flaw is limited to stored malicious files without RCE. Scoring is 9.8 (AV:N/AC:L/PR:N/UI:N) with EPSS at 0.24% (15th percentile) and no public exploit identified at time of analysis, but the flaw is prioritized act_now given unauthenticated, no-interaction upload to potential RCE; the vendor has released a patch in 2.4.0.
Juniper Networks Session Smart Router exposes an insecure endpoint that runs as root and performs no authentication check, letting a remote attacker who can reach it obtain administrative privileges by passing crafted URL parameters. Per the CVSS vector the attack is network-reachable, unauthenticated (PR:N) and requires no user interaction, so severity is rated 9.8 - but exploitability is gated by deployment state: only devices that have not yet been onboarded to Mist or Conductor are exposed, and the endpoint becomes unreachable once onboarding completes. No KEV listing or public exploit reference appears in the supplied intelligence, so no public exploit identified at time of analysis; the vulnerability is nevertheless tracked as act_now priority because of the pre-auth root-level impact within the pre-onboarding window.
Unauthenticated remote command execution as root affects Juniper Networks Session Smart Conductor through its Salt-based AutomatedProvisioner: a crafted salt minion ID containing shell special characters is not neutralized before being used in an OS command. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, an attacker who can reach the Conductor's provisioning interface needs no credentials and no user interaction, and the injected commands execute with root privileges. No public exploit or CISA KEV entry is identified at time of analysis, but the 9.8 vendor-reported severity and the act_now priority label make reachable management interfaces a high-priority exposure.
PHP object injection in the Ultimate Member WordPress plugin through 2.13.1 allows unauthenticated remote attackers to pass untrusted serialized data into the plugin, carrying a CVSS 9.8 score and a vuln.today act_now priority. The assessed vector (AV:N/AC:L/PR:N/UI:N) confirms network reachability without authentication or user interaction, but the exact endpoint, parameter, or feature that reaches unserialize() is not described in the available sources. No public exploit was identified at time of analysis and no KEV entry is present in the supplied data; practical impact depends on whether a usable POP gadget chain exists in the plugin or the surrounding WordPress/PHP environment, and the high-priority signal rests on limited sourcing.
Remote code execution in che-machine-exec allows network-reachable attackers to execute commands inside containers the service can access when authentication is disabled, which the description identifies as the default. The service concatenates attacker-controlled username and namespace values from the /exec/init and /exec/config JSON endpoints into a double-quoted sh -c command without escaping, enabling shell command substitution via $(...) or backticks. The upstream fix is commit a78541c29e5f48fd59a49cf206bc0e507628bd23; no public exploit was identified at time of analysis, and the priority decision is act_now.
Unauthenticated remote command execution is possible on Dell PowerProtect Data Domain appliances running Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, or LTS2026 8.6.1.0 through 8.6.1.20 because of a stack-based buffer overflow (CWE-121). CVSS 9.8 reflects network reachability with no authentication or user interaction, and the independent assessment labels this a genuine high-priority issue rather than a high-score-but-low-risk case. No public exploit was identified at time of analysis, but the act_now priority and pre-auth network vector mean externally reachable appliances should be treated as urgent.
Remote, unauthenticated attackers can obtain exposed credentials from Dell PowerProtect Data Domain appliances running Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, or LTS2026 8.6.1.0 through 8.6.1.20 because hard-coded cryptographic key material is present in the affected firmware. Exploitation requires network reachability to the appliance and results in access bounded by the privileges of the compromised user, not guaranteed administrative control. No public exploit code or CISA KEV entry is identified in the available data, but the 9.8 CVSS score and act_now priority reflect a genuine high-priority credential-exposure risk; the exact key-to-credential mechanism is not described.
Unauthenticated remote attackers can create privileged accounts on Dell PowerProtect Data Domain appliances running Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, or LTS2026 8.6.1.0 through 8.6.1.20, potentially taking complete control of the system. The flaw is rated CVSS 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and is classified as CWE-862 missing authorization, with the vendor describing it as an improper authentication issue leading to privileged account creation. No public exploit code has been identified in the supplied intelligence at time of analysis, but the vuln.today decision label is act_now and Dell recommends upgrading at the earliest opportunity.
Improper authentication in Dell PowerProtect Data Domain allows remote unauthenticated attackers to bypass authentication and execute arbitrary commands with root privileges, giving complete control of the appliance. Affected systems are Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, and LTS2026 8.6.1.0 through 8.6.1.20. No public exploit has been identified at time of analysis, but the CVSS vector indicates no privileges or user interaction are required; exploitation is limited by whether an attacker can reach the appliance's remotely accessible interface.
Unauthenticated arbitrary file upload in the Contact Manager plugin for WordPress through 9.1.2 can escalate to remote code execution, but only on Apache servers running libapache2-mod_php and only if the attacker retrieves the uploaded .phar file within the brief window before the plugin unlinks it. The bypass uses a filename ending in a trailing dot, causing the extension-derivation check to return an empty string and pass the blacklist, after which sanitize_file_name() strips the dot and restores the .phar suffix on disk. Vuln.today priority is act_now; no public exploit code has been identified at time of analysis.
Unauthenticated attackers can upload arbitrary files - including PHP scripts - through the piereg_file_upload AJAX handler in the Pie Register Premium WordPress plugin in every version up to and including 3.8.4.0, and the server returns the generated destination filename in its response, handing the attacker the exact URL needed to trigger the uploaded file and potentially achieve remote code execution. The upload path enforces neither a nonce nor a capability check, and the results of wp_check_filetype/wp_check_filetype_and_ext are never inspected before move_uploaded_file() runs, so the type filter provides no effective barrier. No KEV entry or public exploit reference was supplied with this record; however, the vulnerability.today decision label is act_now and the independently assessed vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8), with the practical limit on full RCE being whether the target upload directory is web-accessible and executes PHP.
Unauthenticated WordPress account takeover in the Jupiter X Core plugin (all versions up to and including 4.61.0) allows a remote attacker to be logged in as the site's administrator through the Raven forms Twitter/X social login handler. After exchanging the visitor's oauth_verifier for an access token, the handler never calls setOauthToken() to rebind the TwitterOAuth client, so the follow-up account/verify_credentials call is still signed with the site operator's stored Access Token and Secret; the plugin then resolves a local WordPress user by the X application owner's email and issues a session with wp_set_auth_cookie(). Exploitation requires that the Twitter/X social login feature be enabled and configured with the operator's X credentials, but once it is, the attack needs no authentication and no user interaction (CVSS 3.1 base 9.8, decision label act_now); no public exploit was identified at time of analysis.
OS command injection in Topluyo Desktop for Linux before 2026.9.2410 lets an unauthenticated attacker who controls a URL opened in the application execute arbitrary operating-system commands with the victim user's privileges. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H (9.6), so exploitation requires the victim to open the crafted link but then crosses from the app into the OS with high confidentiality, integrity, and availability impact. The vendor advisory identifies 2026.9.2410 as the fix; no public exploit is identified at time of analysis, and the supplied priority label is act_now.
SQL injection in Dell PowerProtect Data Domain Management Center allows a remote attacker holding a low-privileged authenticated session to execute arbitrary SQL within the console and, because the assessed scope is changed (S:C), cross the console boundary to gain unauthorized access to the managed Data Domain systems. Affected builds are Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, and LTS2026 8.6.1.0 through 8.6.1.20; the flaw is rated 9.6 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) and is tracked with an act_now priority. No public exploit code was identified at time of analysis and there is no CISA KEV entry, but vendor fixes are available and the required credentials are the only barrier, so consoles reachable from untrusted networks should be updated promptly.
Missing authorization in Dell PowerProtect Data Domain Management Center (DDMC) allows an authenticated low-privileged, network-positioned user to invoke operations that should be restricted, with high integrity and availability impact on managed Data Domain systems and no confidentiality impact. The affected builds are Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, and LTS2026 8.6.1.0 through 8.6.1.20; the CVSS 3.1 score is 9.6 with scope changed. No public exploit identified at time of analysis, and the vulnerability is prioritized act_now.
Unbounded recursion in the a2ui web_core v0_9 renderer (DataContext.resolveSignal / resolveDynamicValue) lets a remote attacker who can supply A2UI dynamic-value or function-call expression trees crash or hang the rendering context through call-stack exhaustion, an availability-only denial of service. All versions listed through 0.10.6 (EUVD enumerates 0.10.0 through 0.10.6) are affected; the CVSS 4.0 score is 6.9 with VA:L only, and the project's own assessed vector (CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) confirms no confidentiality or integrity impact and no authentication or user interaction requirement. A public PoC reference exists in issue #2388; it is not verified as working exploit code, and there is no KEV listing, so this is a moderate, availability-only issue rather than a top-tier emergency, prioritized as 'this_month' by vuln.today. A vendor fix is available as PR #2432 / commit c76e17272e52c12c6dcf68905b1df978c39e9aa5, which introduces a MAX_DYNAMIC_VALUE_DEPTH guard of 1000.
Remote code execution in EagleCloud Aquila on-premises deployments through 2.6.7.2 allows authenticated low-privileged attackers to inject and execute arbitrary code through the Pigeon MFA service. The flaw is rated CVSS 9.4 and assessed as network-reachable with no user interaction, so a valid low-privileged account is the main prerequisite. No CISA KEV entry or public exploit code was identified at time of analysis; the vuln.today decision label is act_now given the high impact and limited authentication requirement.
Unauthenticated remote attackers can overwrite FearlessCMS content, plant persistent JavaScript on public pages, and enumerate and read host files through five leftover debug/test scripts in admin/ that perform privileged operations with no login check, no CSRF token, and no path validation. The anonymous entry point depends on the deployment mode: on the project's default Docker setup, which runs PHP's built-in development server, router.php tests an unnormalized admin URI prefix while the filesystem still resolves dot segments, so a request to /./admin/... is executed directly instead of being routed through the admin login gate. The issue is fixed in 0.1.4, the GitHub advisory publishes proof-of-concept request sequences with observed results, and there is no CISA KEV listing indicating active exploitation at time of analysis.
Authenticated administrators on Wing FTP Server can escape the server's configured base folder by adding user directories through the administrative scripting interface, because the product fails to verify that a user's base folder remains within bounds. Successful abuse gives the attacker arbitrary file writes with the privileges of the FTP process, and where the service was started with sudo as described in the vendor installation guide, files land as root, making remote code execution at root level realistic. The issue is rated 9.4 (CVSS 4.0) and carries an act_now priority from CERT-PL reporting, but exploitation requires a pre-existing administrator account (PR:H) and no public exploit code has been identified at time of analysis. Fixed in version 8.2.6.
The Java RMI service exposed by Tactis NoviGest Desktop App accepts remote method invocations on critical functions without verifying the caller, letting a network-positioned attacker reach stored credentials and issue arbitrary SQL against the application's PostgreSQL backend. Because the database account the application uses is described as holding elevated privileges, the SQL access can be chained into operating system command execution on the server, taking over confidentiality, integrity and availability. The defect is rated 9.4 under CVSS 4.0 and flagged act_now by vuln.today based on severity and breadth of impact, but no public exploit code has been identified at time of analysis and no CISA KEV listing exists; the practical barrier is network reachability to the RMI port, since a service bound to localhost or shielded by firewall rules is not remotely abusable. Note that the authentication requirement is not consistently described across sources - the narrative states critical RMI methods lack authentication, while the CVSS 4.0 vector asserts PR:L - so the exact precondition should be confirmed with the vendor.
Cross-application artifact access in Google Agent Development Kit (ADK) for Python lets a caller in one ADK application list, read, overwrite or delete file-backed artifacts belonging to a different application when both applications share the same FileArtifactService root directory and operate under the same user_id (plus the same session_id for session-scoped artifacts). This is an authenticated, low-privilege issue (CVSS 4.0 5.3, vector PR:L) and only manifests in that specific shared-root, colliding-identity deployment; single-application deployments, apps with distinct roots, and apps with distinct user_ids are not affected, so it is a bounded tenant-isolation flaw rather than an emergency. Affected ranges are 1.19.0 before 1.39.1 and 2.0.0a1 before 2.7.0, with 2.6.0 being only partially fixed; there is no CISA KEV listing and no confirmed working exploit, only a public issue/PR reference (google/adk-python#5618 and #5619), and vendor patches are released in 1.39.1 and 2.7.0.
Server-side request forgery in the Request Forwarder of MusicFreeDesktop 0.0.6, 0.0.7 and 0.0.8 allows a crafted proxy request to be relayed to an attacker-chosen destination, giving low confidentiality, integrity and availability impact (CVSS 4.0 base 5.3; independently assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:R with low C/I/A). The CVSS vector indicates the attack path is unauthenticated (PR:N) but requires user interaction (UI:P/UI:R), for example a user loading or playing attacker-influenced content that causes the app to emit a proxy request; the exact trigger is not described in the available sources. A public PoC reference exists in the form of GitHub issue #443, but it is not verified as working exploit code, there is no CISA KEV listing, and the vendor fix is upstream commit b0d3876247a0a64fa0e430e4b21870e41f503182.
Unauthenticated remote attackers can pull a ZIP of the Signal K Server log/config directory from the /skServer/ziplogs route in every signalk-server release before 2.33.0, and that archive contains security.json with the server's HS256 JWT signing key. Possession of the secretKey lets an attacker forge administrator tokens or create a persistent admin account and then authenticate through the normal login flow, yielding full control over NMEA routing, plugin configuration and alarms on affected installations, including vessel deployments. The endpoint was confirmed reachable without credentials on a live signalk-server 2.32.0 instance and roughly 66 potentially affected servers were visible to Shodan at disclosure; no public exploit identified at time of analysis, and the vendor addressed the issue in 2.33.0 by placing the route behind admin middleware.
Blind SQL injection in the WordPress plugin FunnelKit Automations (wp-marketing-automations) through version 3.8.5.2 lets remote attackers pass crafted SQL through a plugin input and infer database contents, exposing WordPress user credentials, session tokens and stored marketing/automation data. The vulnerability carries a 9.3 vendor-side CVSS score, while the independent assessment scores it as scope-unchanged with high confidentiality impact only (no integrity or availability effect); because the sources do not name the vulnerable parameter, AJAX action or REST route, the unauthenticated (PR:N) rating cannot be confirmed from the description, and WordPress plugin SQLi flaws are frequently limited to low-privilege authenticated roles - verifying that prerequisite is the decisive exposure question. No public exploit code has been identified at time of analysis, but the issue is flagged act_now priority and a public PoC reference may appear quickly given the plugin's wide install base.
Unauthenticated SQL injection in the Crowd Favorite DXP ToolKit WordPress plugin through version 2.0.1 allows remote attackers to read data from the underlying database, with the supplied assessment rating confidentiality impact as high and integrity and availability impact as none. The vulnerable endpoint or injectable parameter is not described in the available sources, and no public exploit code is identified at time of analysis. The vuln.today decision label is act_now, so remediation should be prioritized.
Essential Addons for Elementor (WordPress plugin) versions 6.7.3 up to but not including 6.8.7 fail to apply the plugin's administrator-approval requirement to accounts created through its email one-time-password registration flow, so unauthenticated visitors can register and immediately log in without an administrator ever approving them. Exploitation is only possible on sites that have both the approval requirement and the email OTP registration flow enabled at the same time; sites using approval without the OTP flow, or not using the plugin's registration features, are not exposed, which substantially limits the number of affected installations despite the plugin's wide deployment. The assessed impact is integrity-only and moderate (CVSS 3.1 base 5.3, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N), and no confirmed working exploit code or active exploitation is known - only a public PoC/advisory reference exists and has not been verified as working exploit code.
Unauthenticated email relay in the Royal Elementor Addons WordPress plugin before 1.7.1070 allows remote attackers to replace the recipient list of form notification emails and relay attacker-composed messages from the site's own domain. The flaw is only reachable when a form's notification recipient field is explicitly configured to echo a submitted value - a non-default setup - so sites using static or hardcoded recipient addresses are not affected. Impact is bounded to integrity (spoofed or relayed email), with no confidentiality or availability consequence, giving a CVSS 3.1 score of 5.3; a public PoC reference exists but is not verified as working exploit code, and the issue is not listed in CISA KEV.
Unauthenticated attackers can forge a valid payment confirmation and mark store orders as paid without any payment in the Sadad QA Payment WordPress plugin through version 1.28, because the authenticity check on incoming payment notifications is keyed on a merchant secret that is empty by default while the remaining signed data is attacker-controlled. Scored CVSS 5.3 (AV:N/AC:L/PR:N/UI:N, integrity-only impact), the flaw is exploitable against default installations with a reachable confirmation callback, but a deployment where the operator has configured a non-empty merchant secret breaks the forgery precondition. A public PoC reference exists (a WPScan vulnerability entry); it is not verified as working exploit code, and the vuln.today priority label is 'this_month' - a moderate-severity integrity issue rather than a top-tier emergency.
Unauthenticated attackers can mark arbitrary high-value WooCommerce orders as paid on any store running the BitPay Gateway for WooCommerce plugin through version 4.1.3, because the plugin accepts a payment-provider transaction confirmation without checking that it belongs to the order being completed or that the confirmed amount matches the order total. The only prerequisite is that the site has the BitPay payment method active and that the attacker possesses one genuine - even very low-value - BitPay transaction to reuse as the confirmation. Impact is limited to payment-status falsification (integrity) rather than site takeover or data exposure, and a public proof-of-concept reference exists (the WPScan advisory entry); it is not verified as working exploit code, no CISA KEV entry is recorded, and vuln.today schedules this at this_month priority rather than act_now.
Stack-based out-of-bounds write in llama.cpp's ggml-rpc RDMA receive path (builds b8841 through b11865) lets unauthenticated network peers corrupt the rpc-server stack by advertising RDMA support in the HELLO message and sending up to 256 KiB into a 1-byte stack variable, crashing the server or potentially enabling code execution. The input CVSS 4.0 score is 9.2 Critical and the vuln.today decision is act_now, but exploitation requires the opt-in llama.cpp rpc-server to be running with the non-default RDMA transport and reachable from the attacker, which is reflected in the independent CVSS 3.1 assessment as AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. No public exploit was identified in the provided intelligence at time of analysis, and the vendor fix is available in build b11865.
Remote code execution as root in Sophos UTM (SG UTM) affects all versions when the email proxy is used with scanning enabled; unauthenticated network attackers can exploit a path traversal flaw, but must win a race condition by sustaining repeated attacks for several minutes. The product is end-of-life and requires a manual patch, so exposure persists until an operator actively installs the vendor fix. No public exploit has been identified at time of analysis, and the priority decision is act_now based on the vendor report and assessed impact.
Blind SQL injection in the Futurum Software User Authentication Module allows unauthenticated remote attackers to send crafted HTTP requests to private-area endpoints that the deployed WAF fails to filter, exposing the full database structure and sensitive customer records including PII. The root cause is user-supplied input that reaches database queries without adequate validation or sanitisation, compounded by an incorrect WAF configuration that lets the protection layer be bypassed rather than serving as a compensating control. No public exploit code has been identified at time of analysis, but the issue carries an act_now priority label and a CVSS 4.0 base score of 9.1, and the affected version range is not enumerated in the available data.
Dell PowerProtect Data Domain Management Center can be coerced into granting elevated privileges to a remote attacker who already holds a low-privileged authenticated account, because the product performs an authentication decision on a spoofable identity attribute rather than a verified one. Affected releases are Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, and LTS2026 8.6.1.0 through 8.6.1.20. The impact does not stop at the management appliance: the scope change in the assessed vector (S:C) reflects that a successful escalation can reach other managed Data Domain systems, and vendor-published fixes exist, so the priority decision is act_now; no public exploit code and no CISA KEV entry were identified at time of analysis.
AI Gateway Payload Processing allows an authenticated tenant to submit another tenant's model identifier, causing the service to inject the victim's LLM API keys and consume the victim's model resources and quotas; CVSS 3.1 score is 9.1 with scope change and high confidentiality impact. The flaw is CWE-639 (Authorization Bypass Through User-Controlled Key) and requires a valid tenant account plus knowledge or guessing of the target model identifier. No public exploit identified at time of analysis, but the act_now priority label reflects the critical cross-tenant key exposure.
Echo's Proxy middleware can forward later HTTP requests straight to the configured upstream without invoking Echo's router or route-specific middleware after a client WebSocket upgrade is rejected by that upstream with an ordinary keep-alive response. This affects Echo v4 releases from 4.0.0 through 4.16.0 and v5 releases from 5.0.0 through 5.4.0, and can let unauthenticated remote attackers reach upstream resources that rely solely on Echo route-level authentication or authorization. Exploitation is conditional-it needs a reachable proxy route, an upstream that keeps the connection alive after rejecting the upgrade, and a target with no independent upstream authorization-so the independent assessment rates it high severity with high attack complexity; fixed releases are 4.16.1 and 5.4.1, and no public exploit or CISA KEV entry was identified at time of analysis.
Remote code execution in HCL BigFix AEX is reachable over the network with low attack complexity, but the CVSS vector requires a high-privilege account (PR:H), so an attacker must already hold privileged access to the product before exploiting the code-injection flaw (CWE-94). The scope change (S:C) indicates that successful exploitation can affect resources beyond the vulnerable component, with high confidentiality, integrity, and availability impact. No public exploit has been identified at the time of analysis, and the vendor advisory KB0134281 is the primary reference; the vuln.today decision label is act_now.
Grafana OSS and Grafana Enterprise 13.2 installations that have explicitly enabled the experimental kubernetesSsoSettingsApi feature toggle let any authenticated user read SSO client secrets and modify instance-wide SSO configuration, because the SSO settings endpoints are missing an authorization check (CWE-285). Default deployments are not exposed, since the toggle ships disabled, and an attacker needs a valid Grafana account but not the SSO-settings permission that should normally be enforced. No public exploit code or confirmed active exploitation has been identified at time of analysis; the Grafana security advisory is the authoritative reference for fixed releases and any interim guidance.
Authenticated attackers holding a WordPress administrator account can store an encoded template-injection payload in a Smart Popup by Supsystic text block, which the plugin's template engine later evaluates server-side, allowing PHP constants such as database credentials and authentication keys to be read. Only sites running the plugin before version 2.0.2 are affected. Exploitation requires high privileges (PR:H) with no victim interaction, which confines realistic exposure to trusted or insider administrators or a hijacked admin session; the vulnerability is not in CISA KEV, and the available WPScan reference is a public PoC reference that is not verified as working exploit code. The vendor has released a fix, and the priority label is this_month.
Privilege escalation in Dell PowerProtect Data Domain Feature Release 7.7.1.0 through 8.8 allows an authenticated, low-privileged remote attacker to obtain high-impact confidentiality, integrity, and availability effects on the appliance. Dell has released a vendor fix in 8.9.0.0; no public exploit has been identified at time of analysis, and the issue warrants prompt remediation rather than emergency action.
Cross-site request forgery in the VikRentCar Car Rental Management System plugin for WordPress (all versions through 1.4.8) lets an unauthenticated attacker write arbitrary PHP into the plugin's own template files - including site/helpers/email_tmpl.php - which loadEmailTemplate() and loadPdfTemplate() later include(), achieving remote code execution on the server. The condtext_update_tmpl handler lacks a working nonce check, so the only prerequisite beyond an active plugin is luring a logged-in administrator into clicking a link or visiting a page that fires the forged request (CVSS 3.1: 8.8, AV:N/AC:L/PR:N/UI:R). It is not in CISA KEV and no public exploit code has been identified at time of analysis; Wordfence-driven triage places remediation in this week's queue rather than emergency response, and a forged request is reliable against default installs once an administrator is tricked.
AnkiMCP Server addon 0.20.0 and earlier ships a FastMCP Streamable HTTP listener enabled by default on 127.0.0.1:3141 with DNS-rebinding protection globally disabled, so a malicious web page that rebinds a hostname to loopback can complete MCP `initialize`, enumerate tools with `tools/list`, and dispatch `tools/call` against the victim's Anki collection without any bearer token, API key, session secret, or Host/Origin allowlist check. Because the flaw needs the victim to browse an attacker-controlled page while Anki and the listener are live, and depends on successful rebinding and timing (CVSS 3.1 AV:N/AC:H/PR:N/UI:R/S:C), the practical window is conditional rather than continuous; the vendor GHSA includes a reproduction harness that reaches real MCP tool dispatch with substituted Anki bridge responses, but it is not verified as working exploit code that modifies a real collection. There is no CISA KEV entry and no confirmed active exploitation at time of analysis; default impact is unauthorised read of the collection plus non-destructive note/deck creation and updates, since destructive tools stay hidden unless `enabled_destructive_tools` is opted into.
Authorization bypass in the Rucio `/credentials/signurl` REST endpoint lets any holder of a valid auth token obtain presigned read, write or delete URLs for arbitrary objects in cloud-backed storage. The endpoint performs its root-only permission check against the client-supplied `X-Rucio-Account` header rather than the token-authenticated identity, so a low-privilege user can simply send `X-Rucio-Account: root` and have the server sign a URL with the RSE's stored S3/GCS/Swift credentials. Exploitation requires an authenticated account (CVSS PR:L) and a cloud-backed RSE, with no user interaction; the advisory documents a proof-of-concept request, and no active exploitation is confirmed (not in CISA KEV).
Authenticated command injection in WSO2 Business Process Server and the BPS profile of WSO2 Enterprise Integrator allows any valid low-privileged account to execute arbitrary OS commands through insufficiently validated input parameters on the BPMN System REST APIs. Rated CVSS 8.8 (AV:N/AC:L/PR:L/UI:N/C:H/I:H/A:H, CWE-78), the flaw is network-reachable and needs no user interaction, but impact is bounded by the privileges of the product's runtime account - a least-privileged service account limits damage while a root/administrator runtime account yields full host compromise. No public exploit code, PoC reference, or CISA KEV entry appears in the available intelligence; the vendor (WSO2) published advisory WSO2-2026-5692 and prioritization is 'this_week'.
Filesystem sandbox escape in Wasmtime's wasmtime-wasi crate allows a sandboxed guest on macOS or FreeBSD to move host directories accessible to the host process into its own sandbox and then read or write their contents, defeating the runtime's core isolation guarantee. Affected releases are 36.0.17 and earlier, 37.0.0 through 48.0.5, and 49.0.0 through 49.0.2; Linux and Windows hosts are explicitly not affected. Exploitation requires a guest already executing with write access to at least one sandbox directory, and no public exploit code has been identified at time of analysis - though the vendor notes the bug affects every published version as of the advisory and provides no workaround other than upgrading.
Path traversal in Ultralytics's Google Drive download handling lets remote, unauthenticated attackers place files outside the intended download destination and ultimately execute arbitrary code in the context of the current process - provided the victim first visits a malicious page or opens a malicious file. The flaw (CWE-22, ZDI-CAN-32376) is rated 8.8 with a UI:R vector, so it is interaction-gated rather than a self-propagating or wormable issue, and it only applies where the application actually exercises the Google Drive download code path. No public exploit code is confirmed, the CVE is not listed in CISA KEV, and no EPSS score was supplied; the vuln.today decision label places it at this_week priority - genuine and worth scheduling, not a drop-everything emergency.
A stack-based buffer overflow in the Android Auto service on Alpine iLX-F511 head units lets network-adjacent attackers run arbitrary code as root without authentication or user interaction. The flaw is an unchecked length on user-supplied data copied into a fixed-length stack buffer (CWE-121), rated CVSS 8.8 High (AV:A/AC:L/PR:N/UI:N, C/H/I/H/A:H); successful exploitation grants full control of the device in the root context. Confirmed affected firmware is iLX-F511 7.0.000 per ENISA EUVD-2026-112205; no public exploit code and no CISA KEV listing were identified at time of analysis, and the practical constraint is that an attacker must be within the Android Auto connection range (wireless or USB proximity) rather than able to reach the unit over the open internet.