Authenticated database tuning users in ArcadeDB 26.8.1 through 26.10.1 can disable the OpenCypher LOAD CSV server-side request forgery guard and then make the ArcadeDB server fetch arbitrary internal HTTP resources on their behalf. Because the SSRF block list (arcadedb.opencypher.loadCsv.blockedIpRanges) is a database-scoped setting changeable via ALTER DATABASE under the updateDatabaseSettings permission, an attacker who holds that permission but not updateSecurity or root can set it to an empty string, after which LOAD CSV returns the body of loopback, RFC 1918 and link-local targets such as cloud metadata at 169.254.169.254 as query rows. The exposure is read-only and requires that privilege split to exist in practice; the advisory publishes a reproducible proof-of-concept walkthrough using curl against POST /api/v1/command/{database}, but no active exploitation has been reported and no CISA KEV entry applies. EPSS data was not supplied; the vuln.today decision label is this_week, reflecting a genuine but bounded risk rather than an emergency.
SQL injection in Dell OpenManage Enterprise versions prior to 4.8.0 allows an authenticated, low-privileged remote user to influence SQL queries and access confidential data; the assessed impact is high confidentiality loss with no integrity or availability impact. No public exploit code or active exploitation is identified in the supplied intelligence, and Dell has released the fix in version 4.8.0 or later. The vulnerability is tracked with a this_week priority label.
Path traversal in Moodle's Blackboard question-import format lets an authenticated Teacher-level user copy arbitrary files readable by the web server - notably config.php, which holds database credentials and the site salt - into their own draft file area. Affected releases are 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11 and 4.5.x through 4.5.15; scoring is CVSS 4.0 7.1 (assessed as CVSS 3.1 AV:N/AC:L/PR:L/UI:N/C:H/I:N/A:N), a confidentiality-only impact gated behind existing question-import or lesson-edit rights. There is no CISA KEV listing and no confirmed working exploit code; a public Abraxas Labs research writeup describes the flaw, and the issue is prioritized for remediation this week.
Jellyfin through 12.4 allows any authenticated non-administrator to bypass library and parental-control restrictions through SuggestionsController.GetSuggestions when the userId parameter is omitted. An attacker can repeatedly call GET /Items/Suggestions without userId to enumerate restricted item IDs and server filesystem paths, then stream the restricted media; the CVSS 4.0 vector confirms network access, low privileges (PR:L), no user interaction, and high confidentiality impact with no integrity or availability impact. A public research write-up is referenced, but working exploit code is not verified in the provided data; no CISA KEV entry is provided, and the vuln.today decision label is this_week.
Jellyfin through 12.4 allows an authenticated low-privilege user to bypass SvgSecurityValidator by uploading a profile image that hides gzip-compressed SVG inside a non-SVG image data URI, then trigger server-side rendering through unauthenticated GET /UserImage requests. The Svg.Skia rasterizer resolves external <image xlink:href> references, enabling SSRF to internal URLs, disclosure of local files that decode as images, and repeatable memory exhaustion because the stored SVG is re-rasterized on every request. CVSS 4.0 scores this 7.1 with high availability impact; no KEV listing or confirmed public exploit code is present in the supplied data.
Element Web and Element Desktop 1.12.31 and earlier will silently log out a logged-in user who opens a link whose URL fragment carries both guest_user_id and guest_access_token, because loadSession adopted those attacker-supplied guest credentials and cleared local stores. The practical consequence is loss of unbacked end-to-end encryption keys and, where no secure backup exists, of the user's digital identity; users with secure backup enabled can recover keys, reducing the outcome to a forced logout. Exploitation requires the victim to already be signed in and to click a crafted link - there is no zero-click path - and version 1.12.32 fixes it; no public exploit code has been confirmed, though the advisory and a research write-up describe the mechanism.
Authenticated path traversal in SABnzbd before 5.1.0Beta3 lets a holder of a valid API key delete files and directories writable by the SABnzbd process, including its configuration, queue database, and downloads. The orphan-job status handlers pass the user-controlled value parameter into os.path.join() with download_dir, so an absolute path overrides the base and reaches recursive deletion through shutil.rmtree(); the advisory also flags _api_add_orphan and _api_delete_all_orphan for the same validation gap. No CISA KEV entry confirms active exploitation, and the vendor advisory includes a public curl-based PoC reference that was not independently verified as working exploit code; the issue is fixed in 5.1.0Beta3.
Path traversal in the GNU C Library gettext implementation lets an attacker who can set the LANGUAGE environment variable make any gettext-using program load an attacker-supplied .mo message catalog from an arbitrary filesystem location, even though the earlier CVE-2014-0475 fix blocked '..' components in the locale variables. A crafted catalog can crash the target through out-of-range offsets or supply translations whose printf format directives do not match the program's arguments, producing undefined behaviour that may escalate to code execution with the program's privileges. Exploitation is conditional: the program must not be running AT_SECURE (setuid/setgid, which rejects such LANGUAGE entries), the environment must cross a trust boundary (the description's example is an SSH server with AcceptEnv accepting LANGUAGE and LANG for an account limited to a forced command), a non-C/POSIX LC_MESSAGES locale must also be selectable, and the crafted .mo file must be readable by the target. The vendor advisory GLIBC-SA-2026-0025 is published, the assigned CVSS is 7.0 with AV:L/AC:H/PR:L, and no public exploit code has been identified at time of analysis; the priority signal is to address this within the current week rather than as an emergency.
Credential leakage in pgAdmin 4 before 9.19 allows one authenticated user of a server-mode deployment to connect to a PostgreSQL server using another user's saved password, because the server manager wrote passwords into pgAdmin's own shared process environment (PGPASSWORD and a per-process utility variable) and never removed them. Only multi-user web deployments are exposed: pgAdmin's environment is shared by every user's requests and copied into every process it starts, so a later PSQL session or background utility started on behalf of a different user inherits the value, and libpq silently applies PGPASSWORD to any connection made without a password of its own. Exploitation is opportunistic rather than attacker-controlled - it requires a victim to have triggered a password-bearing process earlier and the value to still be resident, and the attacker gains only the database access the victim's credentials grant; no public exploit code was identified at time of analysis and there is no CISA KEV entry.
Argument injection in Zuke's @zuke/core package (all versions before 1.51.0) on Windows lets attacker-influenced text passed to a resolved node_modules/.bin .cmd or .bat shim escape the argument boundary and be executed by cmd.exe as an additional attacker-chosen command, running in the build's own context with access to whatever credentials that build holds. Only Windows builds that resolve a batch shim and interpolate untrusted text - a branch name, a filename, or a parameter taken from repository content - into a wrapper argument are on the affected path; POSIX platforms were never affected and the CVSS vector records local attack, high attack complexity, no privileges required and user interaction required. The issue is fixed in 1.51.0, and no public exploit code was identified at time of analysis; the advisory notes the flawed launch path was the primary route for every wrapper resolving its tool from node_modules on Windows, not a rarely-taken fallback.
mTLS client authentication can be silently bypassed in Traefik 3.7.0-ea.1 through 3.7.14 when the Kubernetes Ingress NGINX provider is used and a second Ingress on the same host declares a path without matching auth-tls-secret settings. With core.strictTLSOptions disabled, Traefik falls back to default TLS options that do not request a client certificate, allowing unauthenticated remote attackers to reach backends intended to require mTLS. No public exploit identified at time of analysis; exploitation requires the non-default multi-Ingress same-host configuration collision described by the vendor.
AdminNeo before 5.5.1 renders the database server's version string inside an inline <script> tag that carries a valid CSP nonce, without escaping, so a rogue MySQL server can return a crafted version string such as "1');alert(origin)//" that closes the JavaScript string and runs arbitrary script in the administrator's browser - the nonce means Content Security Policy does not block it. The vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N: unauthenticated (PR:N) but requiring victim interaction (UI:R), because the login form carries no CSRF token and an attacker page can auto-submit a login pointing at the attacker's server. Administrators are advised to patch this week; the vendor advisory itself publishes a complete rogue MySQL server script and Login-CSRF form as proof of concept, though no KEV entry, EPSS score, or independently confirmed working exploit was supplied in the structured feeds. A vendor patch exists: AdminNeo 5.5.1.