Critical Watch

Unauthenticated pickle-deserialization RCE in InternLM LMDeploy (0.9.1-0.10.1), a popular LLM-serving framework whose RPC endpoint runs arbitrary commands on any network-reachable attacker request-critical as organizations rapidly stand up AI inference infrastructure with weak network isolation, and it already has a public exploit and threat-actor interest.

Argument-injection RCE-as-root in Cohesity NetBackup Flex OS management shell reachable by low-privileged users gives full control of a widely deployed enterprise backup appliance-the exact system attackers target to disable recovery before ransomware, and it has a public POC and available patch.

Block-password bypass in Mitsubishi Electric GX Works3/Motion Control Setting engineering software (CVSS 9.2, known-actor threat intel) lets attackers defeat protection on PLC project logic, a serious OT/ICS exposure for manufacturing and critical-infrastructure operators that should trigger asset review even though exploitation is local.

SQL injection in Marten (7.0.0-9.12.x), the widely used .NET transactional document DB and event store for PostgreSQL, lets an attacker who can influence LINQ/tenant strings reach the database-broadly relevant to .NET shops, with a public POC, threat-intel signals, and a patch available now.

Unauthenticated RCE in the wpShopGermany IT-RECHT KANZLEI WordPress plugin (all releases 1.6 to <2.4) stems from an attacker-controllable API auth token, giving full site takeover with no credentials-an unauthenticated RCE with public POC and threat-actor interest that warrants immediate patching on any affected WooCommerce/e-commerce site.

Optimole is a widely deployed WordPress image-optimization plugin (hundreds of thousands of active sites), and this unauthenticated stored XSS with a public PoC lets attackers plant persistent JavaScript that executes in visitors' and admins' browsers - a mass-exploitable web-defacement and session-hijack vector.

Digital Watchdog VMAX/VG4 DVRs and NVRs are common commercial and government surveillance appliances, and this unauthenticated adjacent-network flaw grants full root control (part of a cluster including hardcoded FTP creds and an admin-credential-leaking auth bypass) that known actors are already interested in, making these recorders prime footholds and botnet targets.

WP Import Export Lite is a popular WordPress plugin, and this arbitrary-file-upload-to-RCE flaw (every version before 3.9.33, public PoC and patch available) lets a low-privileged import user achieve full server code execution - a direct site-takeover path on a huge install base.

GNU libextractor is embedded in many Linux file managers and metadata-processing pipelines, so this unauthenticated stack buffer overflow triggered by a crafted StarOffice document (public PoC) can crash - and potentially compromise - any application that parses untrusted files with the library.

MCP servers like @zereight/mcp-gitlab are increasingly running on developer and CI machines, and this DNS-rebinding flaw (public PoC, patched in 2.1.30, active threat interest) lets a malicious web page reach a victim's loopback MCP endpoint and drive GitLab API actions, turning routine browsing into supply-chain and source-code compromise.

Unauthenticated authorization bypass on mySCADA myPRO Manager's command API (CVSS 9.3, known-actor threat intel) hands attackers privileged control of an ICS/SCADA platform, a critical-infrastructure target class already under active adversary interest.

Command injection in the gNSI Certz service of Arista EOS lets an authenticated user escalate to root arbitrary-command execution on Arista's widely-deployed enterprise/datacenter switches, and a public POC makes network-core compromise immediately actionable.

Casdoor (a popular open-source IAM/SSO server) leaks its instance-wide JWT signing private key via /api/get-certs with a public POC, meaning any org running it faces total authentication forgery and account impersonation across every connected application.

Hard-coded FTP root credentials in Digital Watchdog VMAX/VG4 recorders (CVSS 9.4, tied to known actors/malware) give unauthenticated read/write file access to internet-exposed NVRs that are prime botnet and surveillance-tampering targets.

ESPHome Device Builder silently disables dashboard authentication on upgrade (CVSS 9.8, public POC plus known-actor intel), so widely-used IoT/home-automation deployments can be fully exposed to unauthenticated takeover the moment operators update.

Really Simple Security is one of the most widely deployed WordPress security plugins (millions of installs), and this 2FA-bypass flaw carries threat-intel of known actors, so any org relying on it for account protection needs to patch to 9.8.1 immediately.

The CryptoPayment Gateway plugin's missing AJAX authorization lets unauthenticated attackers delete/overwrite arbitrary server files (CVSS 10.0, public exploit), giving a direct path to site defacement or full compromise on any WordPress site running it.

This unauthenticated arbitrary-PHP-upload RCE in the Teddy Bear Customize Addon plugin (CVSS 10.0, public exploit) is exactly the kind of WordPress flaw mass-scanned and weaponized by botnets, yielding full server takeover with no credentials.

MultiVendorX powers many WordPress multi-vendor marketplaces, and this flaw lets any low-privilege vendor user grant themselves administrator capabilities for complete site takeover, a severe insider/compromised-account escalation.

The YouTube Embed plugin is broadly installed, and this unauthenticated stored XSS lets any site visitor persist malicious JavaScript in the database, enabling admin-session hijacking and drive-by attacks against every page viewer.

Unauthenticated blind SQL injection in SPIP's public sitemap endpoint (all versions before 4.4.18) lets anyone dump the database with no credentials - SPIP powers many government, institutional, and media sites, and a public POC plus patch means mass scanning is imminent.

The Ultimate Gift Cards for WooCommerce plugin (before 3.2.10) lets unauthenticated users mint coupons worth more than they paid, and it carries the batch's only threat-intel signal (known actors/malware), making it an active financial-fraud risk for e-commerce sites.

A 2FA bypass in the widely deployed miniOrange 2FA WordPress plugin lets an attacker with a stolen password brute-force the OTP with no rate limiting, undermining the exact protection organizations installed it for.

OS command injection in FileRun before 2026.3.0 gives superusers arbitrary command execution on the host via a deliberately neutered escapeshellcmd(), turning a self-hosted file-sharing server into a full RCE foothold; patch and POC are public.

Unauthenticated arbitrary WordPress option deletion in the zipMoney (Zip Co) Payments plugin for WooCommerce before 2.4.0 lets remote attackers wipe site configuration and take stores offline, a direct availability threat to the large WooCommerce payment ecosystem.