2026-11-03
Ivanti Connect Secure before 25.1.1.3 and 22.8R2.6 uses predictable filenames, allowing a remote authenticated attacker to write attacker-controlled content to a deterministic, known location on disk. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N, base 4.3) describes an integrity-only impact with no confidentiality or availability effect. Despite the low base score, the flaw is confirmed actively exploited (CISA KEV); the exact upload endpoint and trigger are not described in the available sources, and patched builds are 25.1.1.3 and 22.8R2.6.
Concurrent order requests to Bagisto's onepage checkout can redeem a single-use or usage-limited coupon multiple times, allowing an attacker to apply the same discount across multiple orders. The issue affects Bagisto before 2.3.16 and 2.4.x before 2.4.1 and stems from a race condition in manageCartRule(); impact is limited to coupon accounting and discount integrity, with no confidentiality or availability impact. A public PoC reference exists but is not verified as working exploit code, and there is no confirmed active exploitation (CISA KEV).
Incorrect type conversion in phpMyAdmin SQL-Parser 6.0.0 and 6.0.1 allows remote attackers to degrade availability when attacker-controlled SQL containing an EXPLAIN statement reaches ExplainStatement::parse with a manipulated nextToken argument. Only applications embedding these two library versions and passing untrusted SQL into the parser are exposed; the parser itself imposes no authentication requirement, but exploitability depends entirely on whether the consuming application parses untrusted input. A public PoC reference (a GitHub gist) has been published but is not verified as working exploit code, and the vendor did not respond to the disclosure; impact is limited to availability with no confidentiality or integrity effect.
Unauthenticated attackers can forge payment-confirmation webhook requests to the Eupago Gateway For WooCommerce WordPress plugin (versions 4.5.0 through 4.7.5) when the store runs a configuration in which the plugin fails to verify webhook authenticity, letting them mark a pending order as paid without actually paying. Impact is integrity-only (no data exposure or availability loss) at CVSS 5.3, and the flaw is scoped to 'some configurations,' so properly validated deployments are not affected. A public PoC reference exists via the WPScan advisory, but it is not verified as working exploit code; there is no KEV listing and exploitation has not been confirmed in the wild.
Unauthenticated attackers can forge CryptoCloud payment notifications to mark arbitrary WooCommerce/WordPress orders as paid or failed without any cryptocurrency payment being made, affecting plugin versions 3.0.0 through 3.0.1. The gateway callback skips its payment-notification authenticity check whenever the webhook secret is still at its empty default, so the flaw is exploitable only on default or unconfigured installs; sites where an administrator has set a non-empty secret retain the integrity check and are unaffected. Severity is moderate and integrity-only (CVSS 5.3, AV:N/AC:L/PR:N/UI:N, C:N/I:L/A:N), and a public PoC reference exists at the WPScan advisory though it is not verified as working exploit code; there is no CISA KEV entry and no public exploit identified at time of analysis.
Reflected cross-site scripting in Vembu BDRSuite before 7.6.0 allows remote unauthenticated attackers to execute arbitrary JavaScript in an operator's browser session when the victim opens a crafted link or request, with effects limited to that session. The assessed vector requires user interaction and shows no server-side impact, making this a moderate, not emergency, priority. A public PoC reference exists but is not verified as working exploit code, and no CISA KEV active-exploitation listing is provided.
TYPO3 sites using the 'mail' extension's newsletter click-tracking can expose recipients' personal data to unauthenticated remote attackers. Requests to the click-tracking middleware that omit the recipient authentication code bypass the validation check, allowing data inserted into tracked newsletter links to be retrieved without credentials or user interaction. The vendor rates the issue medium severity (CVSS 4.0 base 6.9); exploitation is confined to installations that send tracked newsletters containing recipient data, and no public exploit identified at time of analysis.
Denial of service in the Digital I/O function of Welotec TK100, TK500-v2 and TK500-v3 industrial routers lets a remote attacker who already holds high-privilege credentials crash or disrupt availability through insufficient bounds checking. The flaw is a buffer overflow class issue (CWE-120) with a CVSS 4.0 base score of 6.9; confidentiality and integrity are unaffected. No public exploit code was identified at time of analysis, and exploitation is constrained by the high-privilege authentication requirement.
Uninitialized-memory handling in the pybddisasm Python bindings can cause nd_to_text to turn an uninitialized output buffer into a Python return value when the underlying text conversion fails, potentially disclosing residual process memory or crashing the interpreter. The issue is locally scoped (AV:L) and requires low privileges (PR:L); exploitation depends on an application embedding the unmaintained package, passing input that makes conversion fail, and then returning or otherwise using the failed output. No public exploit identified at time of analysis, and the package is no longer maintained, so no vendor patch is expected and migration away from pybddisasm is the effective remediation.
A use-after-free in the pybddisasm Python bindings lets a local, low-privileged consumer of the library read freed heap memory or crash the Python interpreter when it keeps a reference to an element of an INSTRUX array member (such as an entry in the operands/ND_OPERAND list) after the owning INSTRUX object has been destroyed, because the child element does not keep the parent allocation alive. All versions of Bitdefender's pybddisasm package are affected (CPE cpe:2.3:a:bitdefender:pybddisasm:*), and the package is no longer maintained, so no vendor-released patch was identified at time of analysis. The trigger depends on the host application's own object-lifetime handling rather than on network input: no public exploit was identified at time of analysis, and the outcome is bounded to a likely process crash (availability) with only a limited memory-disclosure path (C:L), making this a medium-severity, low-urgency issue rather than a top priority.
Use-after-free in the unmaintained pybddisasm Python bindings lets a local, low-privileged process crash the Python interpreter or potentially read freed process memory when an application retains a structure-valued INSTRUX member reference after the parent object is freed. Exploitation requires a specific application coding pattern - obtaining a member object, letting the parent INSTRUX allocation be released, then accessing the stale member - and there is no remote or unauthenticated path. No public exploit has been identified at time of analysis, the package is no longer maintained, and the practical impact is limited by the narrow trigger and the library's small footprint.
ZipUtil.unpack in zt-zip 1.18.0 and earlier can rewrite the permissions of the extraction output directory itself when an untrusted ZIP contains a self-referencing entry such as '/' or './' that carries attacker-chosen stored Unix mode bits. Applications that unpack attacker-supplied archives are affected; a restrictive output directory (for example owner-only) can be made readable, writable and executable by every local user, weakening the isolation of everything written under it. A public proof-of-concept snippet is included in the vendor's GitHub security advisory; it is not verified as working exploit code against third-party applications, and there is no CISA KEV confirmation, so active exploitation is not established. The vendor-released patch is zt-zip 1.18.1, and the project's priority label places this in the 'this month' remediation window rather than an emergency tier.
Unauthenticated application-name enumeration in Coolify (versions before 4.1.1) lets remote attackers list application names belonging to every team on an instance through the manual GitHub, GitLab, Bitbucket and Gitea webhook endpoints. Because the repository match runs before any webhook secret or signature check, submitting a full_name of '%' (or an empty value) together with a common branch such as 'main' turns the unescaped SQL LIKE wildcard into a match-all and returns the corresponding application names in the response payloads. Impact is limited to name disclosure - no source code, secrets or configuration are returned - and it requires that applications with a matching branch actually exist; the vendor CVSS 4.0 base score is 6.9, our independent assessment is 5.3 (CVSS 3.1), the fix is released in 4.1.1, and no public exploit or active exploitation has been reported.
Server-side request forgery and local file disclosure in Django's GeoDjango module affect 5.2 before 5.2.19, 6.0 before 6.0.10, and 6.1 before 6.1.3, where SpatialReference, the transform() methods on GEOSGeometry/OGRGeometry/GDALRaster, and the OGRGeometry.srs and GDALRaster.srs/srid setters forward attacker-influenced strings to GDAL without restricting its file and network access, letting unauthenticated remote attackers on an affected code path trigger outbound requests or read local files. Exposure is conditional: only applications that pass untrusted spatial-reference strings into these GIS APIs are reachable, and even after patching the file/network blocking is only enforced on GDAL 3.9 or newer. No public exploit code or active exploitation was identified at time of analysis; Django has released fixes in 6.1.3, 6.0.10, and 5.2.19.
Medium-severity server-side request forgery in Django's GeoDjango component allows unauthenticated remote attackers to make a vulnerable server send requests to attacker-selected destinations when crafted GeoJSON containing an external coordinate reference system (CRS) is passed to django.contrib.gis.gdal.OGRGeometry. Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19 are affected, while unsupported older series such as 5.1.x, 5.0.x, and 4.2.x were not evaluated and may also be affected. Vendor patches are available, and no public exploit was identified at time of analysis; practical exposure is limited to deployments that use GeoDjango with the GDAL backend and accept untrusted GeoJSON geometry input.
Log injection in Django's GeoDjango form layer lets remote attackers forge or corrupt application log entries by submitting a crafted geometry value to a form built on django.contrib.gis.forms.GeometryField, because BaseGeometryWidget.deserialize() wrote the rejected input into the django.contrib.gis error log without escaping control characters. Affected releases are Django 6.1 before 6.1.3, 6.0 before 6.0.10 and 5.2 before 5.2.19; older unsupported series (5.1.x, 5.0.x, 4.2.x) were not evaluated by the vendor and may also be affected. The CVSS 4.0 base score is 6.9, but the Django security team classifies the issue as low severity and the practical impact is confined to log integrity - newline or ANSI escape sequences can fake log lines or manipulate terminal output when such logs are viewed or ingested elsewhere. No public exploit code was identified at time of analysis.
Memory exhaustion in Django's MultiPartParser affects Django 6.1 before 6.1.3, 6.0.4 before 6.0.10, and 5.2.13 before 5.2.19 when an endpoint accepts multipart file uploads carrying Content-Transfer-Encoding: base64. Remote attackers can send such an upload without authentication or user interaction, causing the base64 content to be buffered entirely in memory regardless of FILE_UPLOAD_MAX_MEMORY_SIZE before upload handlers receive it. Impact is availability-only and rated low by the vendor; no public exploit is identified at time of analysis.
HDF5 through 2.2.0 reads past the end of the heap buffer holding an external link's user data when that link is traversed, because the default traversal callback H5L__extern_traverse() located the target file name and object path with strlen() without ever validating the payload against its recorded size. The flaw is reachable in default operation and requires a crafted HDF5 file whose external link data is not NULL-terminated or is too short to hold both strings; it triggers when a user or application opens an object through that link (CVSS 4.0 6.9, AV:L/PR:N/UI:P, availability high, confidentiality low). No public exploit code was identified at time of analysis and there is no KEV entry; the practical outcome is a crash/denial of service, with the additional possibility that adjacent heap bytes get folded into the file name or object path the library then attempts to open, and the upstream fix is the pull request referenced below (no released patched version independently confirmed).
Argument injection through proxy settings, plus an unchecked checksum-update path in the privileged service, in Securepoint SSL VPN Client v2 on Windows let a non-privileged local user steer OpenVPN operations that execute with NT AUTHORITY\SYSTEM privileges, producing high integrity and availability impact (VC:N/VI:H/VA:H). The proxy-settings vector is the more accessible one: it requires only the ability to set the client's proxy options and needs neither communication with the privileged service nor modification of the protected OpenVPN configuration. Exploitation requires a pre-existing local session on the affected Windows host (AV:L, PR:L, UI:N), so this is a post-foothold local privilege escalation rather than a remote entry point; no public exploit code or confirmed active exploitation is identified in the available data, and the vendor-reported advisory is the reference of record.
Crashing the Linux kernel is possible through a NULL pointer dereference in AMD's amdgpu GPU driver, giving local users a denial-of-service primitive on affected systems. The CVSS 4.0 vector shows local access (AV:L), no privileges (PR:N), no user interaction, and high availability impact only; confidentiality and integrity are unaffected. No public exploit or CISA KEV designation was identified in the supplied intelligence, and the priority is this_month rather than emergency.
Integer overflow in the DDS RGB888 loader of the AMD Compressonator SDK can be reached when a user opens a crafted DDS file, producing an undersized heap allocation and an out-of-bounds read that may crash the process or disclose limited heap memory. The issue is local and requires user interaction; the supplied intelligence records no CISA KEV entry and no public exploit identified at time of analysis, with AMD advisory AMD-SB-6032 as the vendor reference.
Unauthenticated information disclosure in CTFd's /api/v1/teams list endpoint exposes non-public team custom registration fields - emails, phone numbers, student IDs - to anyone who paginates GET requests, but only on instances configured for team mode with public visibility enabled and teams that have populated hidden custom fields. Impact is confidentiality-only and limited (CVSS 4.0 6.9; independently assessed as CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, Medium), with no integrity or availability effect. There is no CISA KEV listing and no confirmed public exploit code at time of analysis, though harvesting is trivially automatable through pagination once the preconditions hold. A vendor patch exists in CTFd 3.8.7.
Remote attackers can forge Strava webhook events against Dreeve before 5.8.0 and cause permanent deletion of imported Strava activities and their streams. The StravaWebhookRequestHandler::handleEvent path does not verify the signature, verify-token, or owner_id, so a crafted DELETE event carrying a known public Strava activity id is accepted when the instance has imported that activity and its webhook endpoint is reachable. The assessed impact is limited to integrity and availability of imported activity data, with no confidentiality exposure or code execution, and no public exploit was identified at the time of analysis; this is a genuine but moderate-priority issue rather than an emergency.
Path traversal in Koodo Reader 2.4.6 and earlier lets an authenticated user of the optional self-hosted HTTP server read arbitrary files outside the upload directory. The attacker uploads a crafted books.db whose 'cover' value contains ../ sequences and then requests /opds/cover/{key}, causing the server to serve a file readable by the Koodo Reader process; the same unsafe path construction affected the OPDS download handler. Exploitation requires the non-default OPDS/self-hosted mode to be deployed and reachable plus privileges sufficient to upload a database (PR:H), so impact is read-only disclosure of files the server process can already access. No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor fix is contained in commit cbc79a1.
svg-sanitizer 1.1.0 can fail individual PHP 8 requests when an application passes attacker-controlled SVG input that ends inside an unclosed tag, with a lone '<' being the smallest trigger; the resulting uncaught ValueError escapes catch (Exception) handlers and aborts the request. The impact is availability-only and bounded to the affected request, and the vendor fixes it in 1.1.1. A public PoC reference exists; it is not verified as working exploit code, and no confirmed active exploitation is reported in the supplied data.
HTTP response splitting in Wasmtime's wasi-http p3 implementation lets an executing WebAssembly guest set an unvalidated content-length header when it splices an existing body into a new response, creating inconsistent HTTP framing that can enable response splitting or injection against downstream consumers. Wasmtime releases 46.0.0 through 48.0.6 and 49.0.0 through 49.0.3 are affected; vendor patches are available in 48.0.7 and 49.0.4. Exploitation requires a host that embeds Wasmtime and runs untrusted guests through the experimental wasi-http p3 API, and the assessed impact is limited to HTTP message integrity with no direct confidentiality or availability loss; no public exploit identified at time of analysis.
Quadratic CPU consumption in Mistune's inline link parser allows unauthenticated remote attackers to degrade availability by submitting crafted Markdown containing thousands of balanced nested bracket pairs that never resolve into a valid link. Every version prior to 3.3.3 is affected, and exploitation only requires that a downstream application or background job pass attacker-controlled Markdown into the default parser (mistune.create_markdown() or mistune.html()); no plugin, non-default renderer, or user interaction is involved. The impact is availability-only (no confidentiality or integrity loss), but a small input of tens of kilobytes can pin a request handler or worker for seconds, and a public proof-of-concept reproducer included in the vendor advisory was verified against the 3.3.2 release tag. The issue is not listed as actively exploited in CISA KEV, and no EPSS score was supplied with the source data.
Server-side request forgery in AzuraCast through 0.23.8 lets any station user holding the station-scoped WebHooks permission make the AzuraCast server issue outbound HTTP requests to attacker-chosen internal addresses. The flaw is an incomplete fix for GHSA-3jp3-3wqw-jvw4: the Mastodon (instance_url), Telegram (api), GroupMe (api) and RadioReg (webhookurl) connectors were never routed through the UserUrlFilter guard, so a low-privilege user can point them at loopback, private-network or cloud-metadata endpoints and fire the test webhook endpoint (PUT /station/{id}/webhook/{id}/test) for immediate dispatch, with the response captured in the HTTP log. Exploitation is gated by the WebHooks permission rather than being anonymous, and the highest-impact outcomes (metadata credential theft, Docker-internal pivoting) depend on such endpoints being reachable from the host; no public exploit code was identified at time of analysis and the issue is prioritised as a this-month item rather than an emergency.
Alo Suite's password recovery endpoint '/Account/resetPwd' lacks rate and frequency limits, so remote attackers can repeatedly trigger unlimited reset emails to a single account, flooding the user's inbox and consuming application and mail infrastructure resources (CWE-770). The flaw affects Alo Suite installations exposing the password-recovery feature (CPE cpe:2.3:a:am_system:alo_suite), requires no authentication or user interaction (AV:N/AC:L/PR:N/UI:N), and is assessed as a moderate-severity availability issue with limited impact (CVSS:3.1 A:L; no confidentiality or integrity effect). The trigger is straightforward endpoint abuse per the available sources; no public exploit code or active exploitation is confirmed, though the vendor advisory from INCIBE is available.
Unauthenticated information disclosure in AM Systems Alo Suite allows remote attackers to read records belonging to other companies or users by substituting the object identifier in requests to the '/Companies/Edit/{id}' endpoint. The underlying flaw (CWE-639, IDOR) is a missing authorization check on the supplied identifier, so confidentiality impact is limited but the exposure is tenant-crossing: any reachable deployment of the affected product can be queried for data the requester should not see, and its practical value depends on identifiers being enumerable or predictable. Reported severity is moderate (6.9 on CVSS v4.0; assessed 5.3-equivalent vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), the issue is not in CISA KEV and no public exploit identified at time of analysis, and the vuln.today decision label places remediation in the 'this month' window rather than an emergency response.
AxxonSoft AxxonNet ARP Agent before 3.25.0 writes the plaintext password of the LDAP directory-service account into WARNING-level log entries on Windows and Linux hosts where LDAP user synchronization is configured. A local attacker with low privileges and read access to ARP Agent logs or generated support packages can recover that password, resulting in high confidentiality impact but no integrity or availability impact. No public exploit was identified at time of analysis, and the issue is not listed in CISA KEV; the risk is moderate and locally scoped rather than an urgent remote-exploitation priority.
Plaintext storage of the LDAP directory service account password in Axxon One before 3.1.0 allows a local attacker with read access to the SecurityManager shared configuration or configuration backups to recover that credential from main.conf on Windows or Linux. The assessed impact is confidentiality-only (CVSS:3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; CVSS 4.0 score 6.8), and the flaw is only meaningful where an LDAP service account password is actually stored. No public exploit identified at time of analysis; the vendor lists 3.1.0 as the fixed version and this is a moderate, vendor-reported disclosure issue rather than an emergency.
MongoDB Rust Driver can expose client-side-encrypted field values when optional diagnostic tracing and automatic in-use field level encryption are enabled together, because trace records may capture command content before encryption is applied. An authenticated party with local read access to the application's exported trace data could recover fields the application marked for encryption without possessing encryption keys; deployments that do not enable tracing, or that do not combine it with automatic encryption, are not affected. No public exploit was identified at time of analysis.
SQL injection in the End-of-Life SonicWall Global Management System (GMS) 9.5.2 and earlier allows an attacker who already holds high-privilege credentials on the GMS management interface to read or modify data held in the GMS database. The vendor restricts practical exploitation to unspecified 'specific conditions', and the exact vulnerable parameter or feature is not described in the available sources; no public exploit is identified at time of analysis and the issue is not reported as actively exploited. With CVSS 6.8 and a this_month prioritization label, the practical exposure is concentrated in organizations still running the unsupported 9.5.x branch rather than in the general internet-facing population.
Malformed CoAP messages parsed by the Qt CoAP module's QCoapInternalReply::createFromFrame() can crash a CoAP-enabled application or leave it operating on incorrect data, an out-of-bounds read rated 6.7 in CVSS 4.0 (assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:N/C:N/I:L/A:H). Exploitation requires that the application link Qt CoAP and decode incoming CoAP frames through QCoapInternalReply::createFromFrame(); once such traffic reaches the parser, the CVSS vector PR:N/UI:N indicates no authentication or user interaction is needed. Impact is primarily availability (crash) with low integrity impact and no confidentiality loss claimed; a vendor fix is available, and no public exploit was identified at time of analysis.
An out-of-bounds write in the Zephyr Bluetooth host's GATT client allows a malicious, spoofed or compromised GATT server within radio range to hand a subscribed client more than the 512-octet maximum attribute length defined by the Core Specification, corrupting memory in subscribers that size their receive buffers to that documented limit. Affected releases are Zephyr 3.4.0 through 4.3.1 and 4.4.0 through 4.4.x (fixed in 4.3.2 and 4.5.0), specifically the in-tree LE Audio unicast client and BAP Broadcast Assistant as well as any out-of-tree subscriber that assumes the 512-octet ceiling. Practical exploitation is heavily conditional: the device must already be connected and subscribed to the attacker's handle, and the build must negotiate an ATT MTU above 515 octets, which the shipped defaults (27/69/70/200/265) never reach; the assessed vector (PR:L) reflects that established subscription relationship rather than classic credential authentication, and no public exploit has been identified at time of analysis.
Queue-pointer corruption in libslirp's if_output() lets a guest on a libslirp user-mode network crash the host-side networking process. When burst traffic forces a session to migrate from the fast queue to the batch queue, the code unlinks and reinserts an arbitrary packet via ifm->m_nextpkt instead of the session queue head, leaving the queue pointers inconsistent; the result is an availability-only denial of service (CVSS 6.5, AV:A/AC:L/PR:N/UI:N, C:N/I:N/A:H) with no confidentiality or integrity impact and no demonstrated code execution. Affected deployments are those actually running the slirp/slirp4netns backend - QEMU user networking and rootless Podman/OpenShift container networking among Red Hat Enterprise Linux 8, 9 and 10 and OpenShift Container Platform 4 and 5 - while bridge, tap or passt setups are out of scope. Exploitation requires the attacker to already control a guest attached to that virtual network; no public exploit code has been identified at time of analysis, and this is a medium-severity, availability-only issue rather than a top-priority emergency.
Stored cross-site scripting in the WPVibes AnyWhere Elementor WordPress plugin, affecting all versions through 1.3.0, lets a holder of a low-privileged authenticated WordPress account persist a script payload that later executes in the browser of any user viewing the affected page - potentially including site administrators. The CVSS 3.1 score is 6.5 with a scope change (S:C), reflecting that the injected script runs outside the plugin's own security boundary; the assessed vector is AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, so exploitation needs valid credentials plus victim interaction rather than a fully unauthenticated attack. No public exploit code or CISA KEV entry was identified at time of analysis, and the specific plugin field or parameter that fails to neutralize input is not described in the available sources.
Stored cross-site scripting in the Barn2 Posts Table with Search & Sort WordPress plugin through 1.4.14 lets an authenticated low-privilege user inject persistent script that executes when a victim loads the affected table page. The medium-severity flaw (CVSS 6.5) requires a foothold account and victim interaction, which limits real-world exploitation; no public exploit was identified at time of analysis.
Sensitive information exposure in the WordPress plugin AnyWhere Elementor through version 1.3.0 lets low-privilege authenticated users retrieve embedded sensitive data that should not be sent to the client. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/C:H/I:N/A:N, 6.5) means a logged-in account at low privilege on an affected site can remotely read data on the confidentiality side with no interaction and no integrity or availability impact. No public exploit code or CISA KEV entry is part of the available data, and the trigger mechanism is not described in the available sources; risk is moderate and depends on how readily low-privilege accounts exist or can be obtained on a target site.
Memory exhaustion in Elastic APM Server's OpenTelemetry (OTLP/HTTP) intake lets an attacker who can submit OTLP data drive the server out of memory and terminate it, halting all APM and OpenTelemetry ingestion until the service restarts. The flaw is a resource-allocation-without-limits weakness (CWE-770, CAPEC-231 oversized serialized payloads) rated CVSS 6.5 with availability-only impact (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), so it is a moderate-severity denial of service rather than a confidentiality or integrity risk, and only deployments that expose the OTLP/HTTP endpoint are reachable by this path. No public exploit code identified at time of analysis and no CISA KEV listing; vuln.today priority is this_month, and vendor fixes are published as APM Server 8.19.24, 9.4.9 and 9.5.6 under ESA-2026-236.
Heap exhaustion in Elasticsearch's optional analysis-phonetic plugin allows an authenticated user who can write documents to, or run searches against, an index configured with an affected phonetic encoder to drive a node out of memory until it becomes unresponsive or terminates. The flaw is CWE-770 (allocation of resources without limits or throttling) and is reachable remotely with low complexity and no user interaction (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, 6.5), but only when the non-default plugin is installed and a target index actually uses a vulnerable encoder - prerequisites that substantially narrow the exposed population. Availability is the only impacted property; no public exploit code was identified at time of analysis, and the issue is not on the CISA KEV list, consistent with a this_month remediation priority rather than an emergency response.
A single crafted AMQP packet can crash Elastic Packetbeat by triggering a null pointer dereference in its AMQP protocol parser, producing an unrecovered Go runtime panic that terminates the process and halts network telemetry collection. The flaw is rated CVSS 6.5 (availability-only) and requires no AMQP authentication, but exploitation is constrained to attackers who can inject traffic onto a network segment the sensor actually monitors and only where AMQP protocol analysis is enabled - the CVSS vector is Adjacent (AV:A), so this is not reachable against an internet-exposed service. There is no CISA KEV listing and no public exploit identified at time of analysis; the vendor has published fixed releases (8.19.24, 9.4.9, 9.5.6) under ESA-2026-208, and vuln.today prioritizes it as a this-month item rather than an emergency.
Kibana can disclose the Elasticsearch credentials it uses as a service account to any authenticated user who holds privileges to onboard Observability data, because those credentials are inserted into data sent back to the client during the onboarding flow. The exposure is conditional: it occurs when the Elasticsearch connection credentials are embedded inside the Elasticsearch host URLs in the Kibana configuration, so deployments that keep credentials in separate username/password settings do not appear to expose them through this path. Fixed versions 8.19.24, 9.4.9 and 9.5.6 are published in Elastic security advisory ESA-2026-204; no public exploit has been identified at time of analysis, and the issue is rated moderate with a 'this month' remediation priority rather than an emergency.
Stored cross-site scripting in Cozmoslabs Paid Member Subscriptions through version 3.1.3 allows an authenticated user with low-level privileges to inject script that executes when another user or administrator views the affected page. The plugin does not properly neutralize input during web page generation (CWE-79), and exploitation requires victim interaction with the stored payload, which limits reliability. No public exploit was identified at time of analysis.
A denial-of-service flaw in the GStreamer JPEG 2000 decimator shipped in gst-plugins-bad allows crafted JPEG 2000 media to crash applications that decode it, via integer overflows or division by zero during tile processing. Per the assessed vector (AV:N/AC:L/PR:N/UI:R, C:N/I:N/A:H), the attack is remote but requires the user to open or play the malicious file, and impact is limited to availability - no code execution or data exposure. This is a moderate-severity issue rather than a high-priority emergency; no public exploit is identified in the supplied data, and Red Hat tracks the flaw across Red Hat Enterprise Linux 7, 8, 9 and 10. The only complete fix stated in the sources is updating to GStreamer 1.28.
SQL injection in runZero's search feature lets authenticated low-privileged users retrieve search results belonging to other organizations, breaking tenant-level data isolation. The flaw affects deployments prior to 5.1.261013.1 and has a medium CVSS score of 6.5 with confidentiality-only impact; runZero's hosted-environment logs showed testing but no adversary traffic. No public exploit code or proof-of-concept was identified at time of analysis, and exploitation requires a valid low-privileged account.
GStreamer's gst-plugins-good FLV demuxer can be driven into an assertion failure or process crash by malformed or truncated FLV streams carrying enhanced audio/video tags, producing a denial of service in applications that open or stream the file. The assessed CVSS score is 6.5 with availability-only impact and UI:R, and affected deployments include gst-plugins-good plus Red Hat Enterprise Linux 7, 8, 9, and 10. No CISA KEV entry or public exploit code was identified in the supplied data, and the vuln.today priority label is this_month.
Stored cross-site scripting in the Photo Engine (Media Organizer & Lightroom) WordPress plugin, known in the plugin directory as wplr-sync, affects every version up to and including 6.5.7 and allows an authenticated attacker with only subscriber-level access to plant arbitrary script in the 'hierarchy[].name' field. The subscriber barrier is unusually low here because the plugin's /?wplr-sync-api endpoint authenticates solely on the wplr_auth_token usermeta with no capability check, and that token is exposed in localized script data on every admin page due to a commented-out screen-condition guard, so any registered user can reach the vulnerable write path. The injected script then executes when a victim - potentially an administrator - later views the poisoned page; the issue is rated 6.4 (Medium) on the CVSS 3.1 scale with a scope change, is tracked for remediation this month rather than as an emergency, is fixed in 6.5.8, and no public exploit code has been identified at time of analysis.
Stored cross-site scripting in the SEO Engine - Smart SEO with AI, Schema & Redirection for WordPress plugin (all versions through 0.9.9) lets authenticated users with Contributor-level access or higher store entity-encoded script payloads through the REST API 'title' field; those payloads execute when a victim views the affected page. The issue is scored CVSS 6.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) and requires a pre-existing content-authoring role, so it is not unauthenticated or self-triggering. No KEV listing or public exploit reference appears in the supplied intelligence, and the referenced changeset compares 0.9.9 with 1.0.0, identifying 1.0.0 as the release to validate for the fix.