SAML authentication bypass in ManageEngine Key Manager Plus before 7151 allows remote attackers to log in with a SAML assertion that the identity provider issued for a different service provider, because the product does not verify that the assertion's audience and recipient are Key Manager Plus itself. Exploitation requires SAML single sign-on to be enabled and a shared or trusted identity provider relationship with at least one other service provider, and the attacker must first obtain a genuine assertion issued to that other SP, which is reflected in the high attack complexity. No public exploit was identified at time of analysis and there is no confirmed active exploitation; the vendor fix is version 7151 or later, and the priority is scheduled remediation this week rather than emergency response.
ManageEngine Log360 and EventLog Analyzer builds 13071 and below allow an unauthenticated, network-reachable actor to register a local collector by sending a specially crafted registration request, bypassing authentication on that interface. The issue is rated CVSS 7.5 with confidentiality-only impact (C:H/I:N/A:N) and maps to CWE-284 improper access control. No public exploit was identified at time of analysis.
Command execution in Dell OS Recovery Tool versions prior to 2.4.4 arises from an untrusted search path condition (CWE-428) that lets a local attacker plant a malicious file in a location the tool resolves before its trusted path. The attacker needs local access to the host and the victim must actually launch the tool for the planted file to be loaded (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, 7.8), and code then runs only in the context of the user who started the application. There is no CISA KEV listing and no public exploit identified at time of analysis, so this is a conditional local risk rather than a mass-exploitation emergency; Dell's DSA-2026-445 advisory covers this and other flaws in the product.
Local privilege escalation in HPE Networking Fabric Composer's underlying operating system allows an authenticated low-privileged local user to gain elevated privileges on the appliance, with high confidentiality, integrity, and availability impact confined to the affected system. The CVSS 3.1 score is 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), and exploitation requires prior local account or shell access rather than remote or unauthenticated access. No public exploit was identified at time of analysis, and the provided intelligence does not confirm active exploitation (CISA KEV).
Local privilege escalation in HPE Networking Fabric Composer lets an attacker who already holds low-privileged authenticated access on the host create or overwrite arbitrary files in the underlying operating system with elevated privileges, with high impact on confidentiality, integrity and availability. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 7.8) confirms the flaw is not remotely reachable and requires valid local credentials, so realistic abuse is confined to users who already have a foothold on the appliance; no user interaction is needed once that access exists. No public exploit code has been identified at time of analysis and there is no CISA KEV listing, so this is a post-compromise escalation and persistence primitive rather than an internet-facing emergency; the vulnerability.today decision label places it in the this_week remediation queue.
Local privilege escalation in the HPE Aruba Networking VIA client for Linux allows a low-privileged local user to inject commands into a VIA client operation that runs with elevated privileges, gaining arbitrary code execution as a higher-privileged account (CVSS 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Only Linux systems that actually have the VIA client installed and on which the attacker already holds an unprivileged account or shell are exposed; there is no remote or network path described in the available sources. No public exploit code or confirmed active exploitation was identified at time of analysis, and the exact injectable feature or input is not described in the available sources.
Local attackers on Linux kernels built with sched_ext can race task migration against a dispatcher still inside ops.dequeue(), causing unsynchronized access to a task's dispatch-queue state with potential confidentiality, integrity and availability impact. The flaw is reachable only when CONFIG_SCHED_CLASS_EXT is enabled and a BPF struct_ops scheduler is loaded and active, which normally requires CAP_SYS_ADMIN; the assessed AV:L/AC:H/PR:L vector reflects the timing-dependent race, and EUVD lists Linux 7.1 as affected with fixed releases 7.2.14 and 7.3. No public exploit identified at time of analysis and the supplied data does not confirm CISA KEV status; the vuln.today decision is this_week.
Cross-request buffer reuse in the Linux kernel's io_uring networking receive path allows a local process to read or overwrite data belonging to another receive request when an application uses incremental ring-provided buffers (IOU_PBUF_RING_INC) or multi-buffer bundles together with a receive that is partially satisfied and then retried, typically under MSG_WAITALL semantics. Affected kernels span the 6.6.103+, 6.12.44 through 6.12.115, 6.15.11 through 6.16, and 6.16.2 through 6.17 branches per EUVD, with vendor fixes released in 6.12.115, 6.18.60 and 7.2.14. The flaw is local only, requires a low-privileged process that drives these specific io_uring buffer modes, and no public exploit has been identified at time of analysis; exploitation also requires a partial transfer plus retry, so it is not reachable against typical default application configurations.
Authenticated remote code execution in GitHub Enterprise Server's Git service (babeld) lets an attacker who has an account and SSH access convert a use-after-free into arbitrary commands as the babeld user, including exposure of its environment secrets. All releases prior to 3.23 are affected; fixes are available in 3.22.3, 3.21.8, 3.20.10, and 3.19.14. Exploitation is constrained by the need for per-build memory offsets and by babeld crashes on failed attempts, and no public exploit was identified at time of analysis.
Sensitive information disclosure in HPE Networking Fabric Composer allows an authenticated low-privileged attacker with adjacent-network access to access sensitive information and potentially intercept protected network traffic when conditions outside the attacker's control are met. The issue is rated CVSS 7.7, but exploitation requires a valid low-privileged account plus an adjacent-network position and a conditional trigger confirmed by AC:H; HPE does not describe the exact precondition in the available sources. No public exploit identified at time of analysis, and the available data does not confirm active exploitation.
A time-of-check to time-of-use race in Claude Code's Edit tool before version 2.1.251 allows attacker-controlled code already running inside the macOS Bash sandbox to swap a validated in-workspace parent directory for a symlink, causing the unsandboxed Edit implementation to overwrite an attacker-chosen user-writable file outside the workspace. This is a genuine but conditional integrity risk rather than a broad remote threat: it is macOS-only, presupposes the attacker has already achieved code execution inside the sandbox via a malicious repository or dependency script, requires the user to invoke Edit on an in-workspace path, and depends on reliably winning a timing window rather than a deterministic single-shot trigger. The flaw was fixed in 2.1.251, and auto-update users have already received it; no public exploit code was identified at time of analysis.
Integer overflow in the msg_aes_dec function of the /usr/bin/auto_ac binary on Netcore NBR100V2 routers (firmware 1.3.240614.030928) allows remote, unauthenticated attackers to cause a denial of service. The CVSS 4.0 vector scores 7.7, but the impact is availability-only (VC:N, VI:N, VA:H) per the assessed CVSS:3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H; no code execution or data disclosure is confirmed despite the 'Information Disclosure' tag. A public exploit reference exists and the vendor did not respond to the disclosure; no vendor patch or fixed version is identified, and the CISA KEV catalog does not list this CVE.
Offline recovery of the CFNext admin password allows anyone holding a valid subscription link to take over the admin panel and read stored Trojan, Clash, Telegram and Cloudflare API secrets in all versions before 3.1.0. The subscription UUID is an MD5 hash of the admin password combined with a fixed, publicly known salt, so the UUID functions as an offline password verifier that can be attacked with unlimited guesses because no rate limiting applies. Exploitation is constrained: the attacker must first obtain a subscription link, and the brute-force only succeeds against an admin password weak enough to crack; no public exploit code was identified at time of analysis, and a vendor fix exists in CFNext 3.1.0 (commit ca8ad82).
Two-factor authentication bypass in ManageEngine Key Manager Plus builds before 7150 lets an attacker who already possesses valid account credentials finish the login flow without entering a verification code. The vendor rates the issue CVSS 7.4, but our independent assessment treats it as a moderate-priority authenticated problem: exploitation requires prior credential compromise and an account or instance with 2FA enabled, so it erodes defense-in-depth rather than enabling unauthenticated access. No public exploit code has been identified at time of analysis, and the vendor advisory documents the fixed build.
Authenticated AQL injection in YETI 2.5.0 and earlier lets any low-privileged analyst account push attacker-controlled subexpressions into ArangoDB queries through the `sorting` and `filter_aliases` fields accepted by the search API, giving that user a cross-collection read primitive and a parser-level error oracle. Exploitation requires only a valid non-admin account and default search functionality - no administrator role or special configuration - so realistic risk centers on insiders or compromised analyst credentials, and impact is bounded to read/search contexts (arbitrary database writes were not established). The GitHub advisory documents working request payloads that were verified only against the reporter's authorized local lab instance; it is not confirmed as active in the wild, but the public PoC reference lowers the effort needed to reproduce it and a fix is available upstream.
Improper TLS certificate validation in Nanosystems Supremo for Windows and macOS before 5.0.2.3874 lets an attacker positioned on the same LAN or Wi-Fi segment terminate and relay a Supremo client's TLS session using a self-signed certificate, exposing usernames, SHA-256 password hashes and license codes. The flaw is rated CVSS 7.6 (CVSS:4.0 AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N) and requires no authentication or user interaction, but exploitation is conditional on adjacent-network positioning and an active man-in-the-middle with correct timing rather than being reachable across the internet. No public exploit code has been identified at time of analysis, and the vendor-released fix is version 5.0.2.3874 or later.
An authenticated account holder can bind a TOTP authenticator secret they control onto another user's account in AshAuthentication 5.0.0-rc.0 through 5.0.0-rc.15, then sign in as that user (when sign_in_enabled? is true) or quietly hold their second factor. The exposure is conditional rather than universal: it requires the application to expose the TOTP setup or confirm_setup action on a record the caller names - for example through AshJsonApi, AshGraphql, or a custom controller that passes a looked-up user into AshAuthentication.Strategy.Totp.Actions.confirm_setup/3 - and requires the attacker to be able to read the victim's user record, whereas the built-in AshAuthentication and AshAuthenticationPhoenix routes always operate on the signed-in user and are not affected. Fixed in 5.0.0-rc.16; no public exploit code identified at time of analysis, and only pre-release builds are in scope.
An OS command injection flaw in Tanium Threat Response lets a remote attacker who already holds low-privilege credentials execute arbitrary code on the affected system, with high impact to confidentiality, integrity and availability. The CVSS vector (AV:N/AC:H/PR:L/UI:N) means the attack is network-reachable but requires valid low-privilege authentication and a high-complexity precondition the vendor advisory does not describe; the specific vulnerable feature, protocol or configuration is not stated in the available sources. Exploitation status is not confirmed - no public exploit code has been identified at time of analysis and the CVE is not in CISA KEV - and Tanium's own advisory TAN-2026-095 is the authoritative reference for affected versions and fixes.
OS command injection in Tanium Threat Response can let a network-reachable user with low privileges execute arbitrary code, although the supplied CVSS vector rates successful exploitation conditions as high complexity. The affected product is identified by a wildcard CPE for Tanium Threat Response, so a precise version range is not available from the provided data, and Tanium's TAN-2026-088 advisory is the vendor reference. No public exploit is identified at time of analysis and there is no CISA KEV confirmation, but the issue is scheduled as this_week priority and requires authentication per PR:L.
Improper certificate validation in HPE Networking Fabric Composer can disclose sensitive information, including credentials, to an unauthenticated remote attacker who can intercept or sit in the path of affected TLS communications, but HPE states that exploitation also requires preconditions outside the attacker's control. No CISA KEV entry or public exploit code is identified in the available intelligence, and the priority label is this_week. Consult HPE advisory hpesbnw05172en_us for affected versions and fixes.
Code execution in Fabric Composer is possible when the product accepts an artifact without properly validating its integrity, allowing an unauthenticated remote attacker to run arbitrary code if a legitimate user performs the required action. The CVSS 3.1 score is 7.5 with AV:N/AC:H/PR:N/UI:R, so reachability is network-based and no credentials are needed, but success depends on a condition the attacker does not fully control and on user interaction. No public exploit or active exploitation is identified at time of analysis, and the exact trigger is not described; consult HPE advisory hpesbnw05172en_us.
SQL injection in HPE Networking Fabric Composer lets an unauthenticated attacker who can reach the management interface from an adjacent network position run arbitrary database commands, with high confidentiality, integrity, and availability impact. The CVSS 3.1 score is 7.5 (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), and the adjacency requirement plus high attack complexity bound practical exploitability. The vuln.today priority label is this_week; no public exploit or CISA KEV confirmation is present in the provided data, so no public exploit was identified at time of analysis.
Privilege escalation in the SSH interface of HPE Fabric Composer allows an authenticated low-privileged attacker to exceed their authorized access level and potentially reach internal services, but only when vendor-unspecified preconditions outside the attacker's control are met. The issue requires a valid low-privileged SSH account and is rated high complexity; no public exploit was identified at time of analysis and there is no CISA KEV confirmation in the supplied data. The HPE advisory is the primary source for affected releases and remediation.
Authentication bypass in the HPE Networking Fabric Composer API endpoint can allow an unauthenticated attacker on an adjacent network segment to gain unauthorized access, but only when HPE's unspecified preconditions outside the attacker's control are satisfied. The 7.5 CVSS score reflects high confidentiality, integrity, and availability impact, while the adjacent-network requirement and high attack complexity keep realistic exploitability below what the score alone suggests. No public exploit identified at time of analysis, and CISA KEV active exploitation is not indicated.
Denial of service in HPE Networking Fabric Composer's API allows unauthenticated remote attackers to make management services unavailable, with a CVSS 3.1 base score of 7.5 and availability-only impact. The assessed vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) describes a network-reachable, low-complexity path that needs no authentication or user interaction, though real-world exposure depends on whether the management/API interface is reachable from untrusted networks. No public exploit identified at time of analysis, and no CISA KEV entry is present in the supplied data.
A buffer overflow in the HPE Networking VIA client lets an unauthenticated remote attacker interrupt normal operation of the affected endpoint, producing a denial of service rather than code execution or data compromise (CVSS 7.5, AV:N/AC:L/PR:N/UI:N, A:H with C:N/I:N). Per the assessed vector no authentication or user interaction is required, though the delivery path to a running client is not described in the available sources. It is not in CISA KEV and no public exploit code has been identified at time of analysis; the vuln.today priority is this_week, reflecting availability-only impact on client deployments.
Arbitrary code execution on Windows in Claude Desktop versions prior to 1.8089.0 allows a malicious git.exe planted in an opened project directory to run at the victim's privileges, because the application invoked git.exe through uv_spawn without an absolute path and Windows search-path resolution selected the current working directory ahead of the intended system executable. Unauthenticated remote attackers must get the victim to open an attacker-controlled or shared repository in the app (the UI:A active user interaction), after which the substituted program executes with no confirmation beyond opening the project. The issue is fixed in 1.8089.0, users on standard auto-update have already received the fix, and no public exploit has been identified at time of analysis.
Unauthenticated information disclosure in Yeti Platform (yeti-platform/yeti) before 2.5.1: the audit router is mounted on the FastAPI application without the Depends(auth.get_current_active_user) gate that every other router enforces, so a remote unauthenticated attacker who can reach the /api/v2 API (default port 8000) can read the entire TimelineLog audit trail. Because the route uses a wildcard {id:path} parameter, an empty, partial, or specific path segment returns all matching records, exposing analyst usernames, object identifiers, and full before-and-after details of threat-intelligence objects such as IP addresses, domains, URLs, and file hashes. The advisory publishes reproduction steps validated against a live Docker deployment, but there is no KEV listing and no confirmed active exploitation; the flaw is read-only (no integrity or availability impact) and is remediated in version 2.5.1.
Uncontrolled memory allocation in ag-psd (npm) lets remote attackers crash Node.js services that parse attacker-supplied PSD files: a crafted file with oversized layer dimensions forces a huge Uint16Array allocation regardless of the caller's totalMemoryLimit setting, which is silently ignored due to a property-name mismatch between totalMemoryLimit and memoryLimit. Versions at or below 31.0.0 are affected; layer decoding is enabled by default in readPsd(), so no special configuration is needed and the CVSS vector (AV:N/AC:L/PR:N/UI:N, availability-only) indicates unauthenticated network exploitation. The upstream advisory ships a working proof-of-concept in which an 86-byte PSD allocates a 200 MB buffer (5000x5000 layer, 16-bit depth), and it documents a second unbounded path where inflateSync() decompresses ZIP-encoded channel data without an output-size cap; a fix is published in 31.0.1 (commit 57ea7d8) with a 31.0.3 release also referenced.
Denial of service in Elasticsearch lets an unauthenticated, network-positioned attacker terminate a node by sending a crafted request containing deeply nested serialized data to the remote cluster/server interface; repeating the request against each reachable node can take down multiple nodes. The issue is uncontrolled recursion (CWE-674), is rated CVSS 7.5 with high availability impact, and is fixed in Elasticsearch 8.19.24, 9.4.9, and 9.5.6 according to the vendor advisory. No public exploit code has been identified at time of analysis, and exposure depends on whether node interfaces are reachable from untrusted networks.
Heap exhaustion in the vertx-stomp module (Eclipse Vert.x) allows any connected peer to crash the affected JVM process, causing a complete denial of service; versions 4.0.0 through 4.5.35 and 5.0.0 through 5.2.2 are affected. Because FrameParser builds its RecordParser without a maxRecordSize limit, a peer that streams bytes without ever sending a newline makes the parser buffer indefinitely until JVM heap is exhausted. Both roles are exposed: a malicious STOMP client can attack a server before or after authentication, and a malicious STOMP server can attack a client that connects to it. No public exploit code was identified at time of analysis, but the flaw is remotely reachable without authentication or user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, 7.5 High) and vendor fixes exist in 4.5.36 and 5.2.3.
Eclipse Vert.x Web Client (maven io.vertx:vertx-web-client) versions 4.0.0 through 4.5.35 and 5.0.0 through 5.2.2 can leak one user's HTTP response to another user or to an anonymous caller when a single CachingWebClient is shared across user principals - the documented pattern of a per-user WebClientSession layered over a shared caching client. A user-specific but cacheable response that the origin did not mark private or no-store is written into the client-level shared cache tier under a key with no per-user marker, so a later session-private miss or an anonymous request for the same URL is served the stored body, disclosing authenticated content or, where the response carries Set-Cookie, a session identifier that can support session fixation or hijacking. The disclosed score of 7.5 reflects unauthenticated network access, but practical exposure is conditional: the shared-client deployment pattern and a permissive origin caching policy must both be present, no public exploit code has been identified at time of analysis, and the affected version ranges are bounded by fixed releases 4.5.36 and 5.2.3.
Heap-based buffer overflow in the Space Packet Protocol (SPP) parser of µD3TN v0.15.1 allows an unauthenticated remote attacker to reliably crash the DTN node, a denial-of-service condition rated CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The off-by-one out-of-bounds write corrupts heap memory and aborts the process; confidentiality, integrity, and code-execution impacts are not confirmed in the available sources. No public exploit was identified at time of analysis, and the CVE is not listed in CISA KEV.
Memory exhaustion through amplified BPv6 EID reference handling in µD3TN can let remote attackers degrade or crash a network-reachable node by sending crafted bundles, requiring no authentication or user interaction. The flaw is a CWE-401 memory leak affecting versions matched by the vendor CPE; the precise malformed EID reference is not described in the available sources, and no fixed version is listed. No public exploit identified at time of analysis and no CISA KEV entry is present, but the vendor work item and this_week priority warrant prompt triage for network-reachable BPv6 deployments.
An unauthenticated remote heap out-of-bounds write in µD3TN's Bundle Protocol version 6 (BPv6) administrative record parser lets a network attacker reliably crash or destabilize a node, with impact limited to availability (A:H, C:N, I:N) per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, 7.5). Affected are µD3TN deployments that actually receive and parse BPv6 administrative records and are reachable by the attacker; BPv7-only configurations fall outside the described parsing path. No public exploit code or confirmed active exploitation is identified in the available sources, and the issue carries a 'this_week' priority rather than an emergency rating.
Unauthenticated arbitrary file deletion in the WordPress plugin Contact Form Extender for Divi Builder (Submissions DB & Extra Fields) affects every version up to and including 1.0.6: the AJAX handler cfefd_remove_uploaded_file() takes an attacker-supplied path without adequate validation (CWE-22), and the nonce meant to guard that action is printed into the public page source by wp_localize_script, so any anonymous visitor viewing a page that renders the file-upload module can obtain it. Successful abuse lets an attacker unlink arbitrary server-side files, and deleting a sensitive file such as wp-config.php can quickly escalate into remote code execution or a full site takeover. No public exploit code or active exploitation is identified at time of analysis, and there is no KEV listing; the Wordfence-reported issue is prioritised as a fix-this-week item, with urgency bounded by the plugin's install footprint and by whether a publicly reachable page emits the nonce. The vendor correction is version 1.0.7.
Improper certificate validation in multiple Tanium products causes affected installations to continue trusting several intermediate CA certificates whose private keys are known to be compromised, so an unauthenticated network attacker who holds those keys and can intercept traffic could impersonate trusted endpoints with high confidentiality and integrity impact. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) rates 7.4 High: no privileges or user interaction are needed, but exploitation requires both possession of the compromised intermediate CA keys and a man-in-the-middle position on the network path, which is why complexity is rated High and real-world exploitation is materially constrained. TaniumOS/TanOS, Asset, Comply, Connect, Integrity Monitor, Health Check, Endpoint Configuration Toolset, Patch, Performance and Reputation are all listed as affected; no public exploit code has been identified at time of analysis and the flaw is not confirmed actively exploited (no CISA KEV listing).
Improper certificate validation in the API of HPE Networking Fabric Composer allows an unauthenticated remote attacker to circumvent existing authentication controls and gain unauthorized access to the system, rated CVSS 7.4 (AV:N/AC:H/PR:N/UI:N/C:H/I:H/A:N). Exploitation is explicitly gated on preconditions outside the attacker's control, which the vendor does not enumerate in the available sources; this attacker-uncontrolled precondition set, reflected as AC:H, is the practical limiting factor and prevents reliable on-demand exploitation. No public exploit code or CISA KEV entry is associated with this CVE; per the vuln.today priority it is labeled this_week, making it a meaningful but not top-tier-urgent issue.
Code injection in Elo's programmatic AST API (npm @enspirit/elo) through version 1.0.0 allows an integrator who populates AST node fields from JSON-deserialized input, plugin output, or other untyped sources to inject arbitrary expressions and identifiers into the JavaScript, Ruby, Python, or SQL emitted by the compiler, yielding arbitrary code execution on the JS/Ruby/Python backends and SQL injection on the SQL backend. The CVSS 3.1 vector (AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, base 7.4) reflects maximum impact but a gated exploitation path: the flaw is reachable only when an application builds the AST itself rather than parsing plain Elo strings, and the advisory ships end-to-end proof-of-concept payloads that were verified against all four backends, though there is no CISA KEV entry and no confirmed active exploitation. It is a non-default integration choice, not a flaw in the parser, and is distinct from the earlier plain-string constructor-chain sandbox escape. Fixed in 1.0.1.
Elastic Docker images ship an operating-system certificate bundle whose trust anchors lead to eight eMudhra intermediate CAs with compromised private keys, enabling a network-positioned attacker who holds one of those keys to forge a certificate for any hostname these products trust and intercept or modify TLS traffic. The affected Docker builds cover APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent including Fleet Server and Cloudbeat; Logstash; Elastic connectors; Universal Profiling (host agent, collector and symbolizer); and Elastic Maps Server when TLS validation uses the OS bundle. Exploitation requires a man-in-the-middle position and key possession; no public exploit code was identified at the time of analysis.
Heap out-of-bounds read and write in NTPsec's NTS client extension-field parser (extens_client_recv) affects releases before 1.2.5 and lets a remote attacker who can deliver NTP server-mode replies to a client corrupt heap memory and crash ntpd. When chained with the NTS-KE client out-of-bounds read fixed in 1.2.4, the same flaw can be escalated to bypassing NTS authentication and setting the client's time; the assessed vector (AV:N/AC:H/PR:N/UI:N, high integrity and availability impact, no confidentiality impact) rates attack complexity as high because the attacker needs an on-path or spoofing position to inject server-mode responses. No public exploit code or confirmed active exploitation was identified at time of analysis, and the current priority signal is a this-week, time-bound fix rather than an emergency.
An out-of-bounds heap read in libslirp's icmp_forward_error() causes host memory to be copied into the ICMP error reply that libslirp sends back to a guest VM or container, disclosing adjacent heap contents across the virtualization boundary. Affected deployments are those using libslirp as their network backend - QEMU user-mode ('slirp') networking and rootless Podman's slirp4netns/slirp4netns-style networking - with packaged builds tracked for Red Hat Enterprise Linux 8, 9 and 10 and Red Hat OpenShift Container Platform 4 and 5. The flaw is scored 7.4 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) with confidentiality-only impact; no public exploit identified at time of analysis, and exploitation requires an attacker who already controls a guest or container on the emulated network and can emit traffic that drives libslirp down the ICMP error path.
Use-after-free in Eclipse ThreadX Modules (6.0.1 through 6.5.2.202603) leaves a user-mode module's trace-buffer-full callback registered after the module is stopped and unloaded, so a later wrap of a still-active kernel-owned trace buffer can call into released module code from privileged thread context and compromise kernel confidentiality, integrity and availability. Reaching it is conditional: a local attacker must already execute code inside a loaded user-mode module, the build must enable TX_ENABLE_EVENT_TRACE with trace-buffer-full notification exposed to modules, and the trace wrap must occur after unload but before the freed code allocation is reused or becomes inaccessible - a sequence the module does not fully control. No public exploit identified at time of analysis; the reporter reproduced the post-unload invocation on a user-mode MPU-protected GNU Cortex-M3 module, and the vendor has fixed the issue in 6.5.2.202603b.
OS command injection in the Offline Download component of TP-Link Archer AX3000 v2 routers allows an authenticated administrator to execute arbitrary commands on the device when a USB storage device is attached and a crafted path containing shell metacharacters is submitted to the USB storage allocation function. Exploitation requires adjacent-network access to the management interface, valid administrator credentials, and the attached USB device, making this a moderate-severity, high-barrier issue rather than an emergency. No public exploit code and no CISA KEV entry were identified in the available data.
Docker Buildx versions from 0.21.0 before 0.37.2 can skip the bake entitlement consent gate when a build is run with the non-default --progress=rawjson flag, allowing an untrusted bake definition to reach paths outside the working directory without an --allow grant or interactive prompt. Exploitation requires a local user to invoke buildx bake with that specific progress mode against an untrusted definition; default progress modes still enforce consent. The vendor fixed this protection-mechanism bypass in v0.37.2, and no public exploit was identified at time of analysis.
An OAuth2 authorization flaw in traQ prior to 3.28.3 lets a malicious OAuth client escalate privileges by sending a silent authorization request (prompt=none) with an empty or omitted scope parameter. Because the consent check was compared against the empty requested scope set while all of the client's registered scopes became eligible for issuance, an attacker controlling a registered client can obtain an access token carrying broader scopes than the victim previously approved. Only users who already consented to a strict subset of that client's scopes are exploitable, while users who never consented still receive consent_required; exploitation requires a victim with an active authenticated session, and no public exploit code or active exploitation is identified in the available data (EPSS not provided, not in CISA KEV).
Stored cross-site scripting in traQ prior to 3.28.3 lets an authenticated user with file-upload capability stage a crafted SVG or HTML file that executes attacker-controlled JavaScript in another user's browser when that user opens the file URL, but only on instances configured with TRAQ_STORAGE_TYPE=local. The attacker needs an account with upload permission and the victim must actively open the crafted URL, so exploitation is not unauthenticated or zero-interaction. The issue is fixed in 3.28.3; no public exploit was identified at time of analysis.
Path traversal in Kibana's Fleet feature lets a low-privileged user who holds Fleet agent-policies write access steer a later administrative action onto unintended resources, deleting Kibana spaces and other organizational assets that the attacker could not remove directly. Exploitation needs an authenticated account with that non-default Fleet write grant plus a separate Kibana administrator interacting with the affected Fleet interface (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H, 7.3), and it affects Kibana releases before the fixed 9.4.9 and 9.5.6 versions; no public exploit identified at time of analysis. The vendor's advisory is public, so the flaw is discoverable even though the attacker cannot complete the deletion alone.
SQL injection in the Advanced Shipment Tracking for WooCommerce plugin (all versions up to and including 3.9) allows an authenticated user with Shop Manager-level access or higher to inject SQL through the tracking_provider parameter of the POST /wp-json/wc-ast/v3/orders/<order_id>/shipment-trackings REST route, letting them append additional queries to an existing statement and read data from the WordPress database. The assessed impact is confidentiality-only (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N); integrity and availability effects are not established by the available evidence, and the practical barrier is the Shop Manager privilege requirement rather than any exotic configuration. No public exploit code has been identified at time of analysis, and there is no KEV or other active-exploitation signal in the supplied intelligence.
ManageEngine Key Manager Plus builds up to and including 7150 allow any authenticated low-privileged user to export X.509 certificates owned by other users into a key vault they have registered themselves, defeating the per-user isolation the product relies on in multi-user deployments. The weakness is an access-control granularity flaw (CWE-1220): the application checks that the requester is a valid user but does not enforce object-level ownership before performing the export, so confidentiality impact is high and the CVSS scope is changed because the exposed certificate material belongs to other principals rather than to the vulnerable component itself. Exploitation requires working credentials and a registered key vault to receive the stolen material, no public exploit was identified at time of analysis, and the priority label is 'this week' rather than an emergency response.