Monthly
Authenticated code execution in n8n (before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1) is possible through the Git node's Log operation, which invokes the external git program without stripping the target repository's local git configuration first. A member-level authenticated user who can point that node - including the scenario where the Git node is exposed as an agent tool the attacker can steer - at a repository whose local config they control can smuggle configuration directives that cause git to launch arbitrary programs as the n8n process user. There is no public exploit identified at time of analysis and no confirmed active exploitation (CISA KEV); the CVSS 4.0 base score is 7.7, and the independent assessment rates it CVSS 3.1 8.8 (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H), with exploitation gated on valid n8n member credentials and attacker control of the repository's local configuration.
Local privilege escalation in Microsoft PowerToys allows an authenticated low-privileged attacker to tamper with an externally controllable PowerToys configuration setting and, once a legitimate or higher-privileged user or process consumes that tampered configuration, gain elevated privileges on the same host; the vendor-assigned CVSS is 7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H), with high confidentiality, integrity, and availability impact. Affected are PowerToys installations from 0.1 up to but not including 0.101.2632.0 on Windows. Exploitation requires authenticated local access plus user interaction, so it is not remotely triggerable and not an unauthenticated attack path; there is no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis.
Local privilege escalation in the Windows Setup Files Cleanup component allows an authenticated low-privileged local user to gain SYSTEM-level rights on unpatched hosts, with CVSS 3.1 score 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflecting total loss of confidentiality, integrity and availability within the affected machine. Exploitation is not remotely reachable - it requires an existing foothold on the host as an unprivileged user - and there is no public exploit code and no confirmed active exploitation (no CISA KEV listing; SSVC exploitation: none, automatable: no). Microsoft has released vendor patches covering Windows 10, Windows 11 and Windows Server 2012 through 2025 builds, so risk is concentrated in fleets still running builds below the fixed levels listed in the EUVD record.
Privilege escalation in MariaDB Server (10.6.1 up to 10.6.28, 10.11.x before 10.11.19, 11.4.x before 11.4.13, 11.8.x before 11.8.9, 12.3.x before 12.3.3, and 13.0.x before 13.0.2) allows an authenticated database user holding the FILE privilege to plant a /run/mysqld/wsrep-new-cluster file when secure-file-priv permits writes into that runtime directory, which the packaged mariadb.service systemd unit subsequently consumes as an EnvironmentFile. On the next administrator-triggered restart of mariadb.service, attacker-controlled environment values are injected into the mariadbd process, escalating from the database user context onto the host/systemd layer (scope change) with full confidentiality, integrity, and availability impact. The vendor rates this 8.4 while our independent assessment uses CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H, reflecting that exploitation requires a high, non-default privilege and a restart gate; no public exploit code has been identified at time of analysis, and patched releases are already available.
Account takeover of Eclipse Ditto Explorer users is possible via a crafted link that injects an attacker-controlled OIDC authority or API URI when the autoSso feature is enabled (versions 3.6.0 through 3.9.7). The victim's OAuth authorization code and PKCE verifier are redirected to the attacker's token endpoint, enabling redemption for access and refresh tokens; alternatively, bearer tokens or Basic credentials are leaked to an attacker-controlled api_uri. Exploitation requires unauthenticated remote attackers to convince a victim to click the link and authenticate, but the configuration persists, causing repeated token theft on subsequent visits; no public exploit code has been identified at time of analysis, and the independent assessment deems this a credible but conditional account-takeover flaw rather than a mass-exploitation emergency.
Privilege escalation in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated CLI user or local process to bypass Role-Based Access Control (RBAC) validation by manipulating the process execution environment, resulting in root privileges. The flaw requires local access (AV:L), a low-privilege authenticated foothold (PR:L), and high attack complexity (AC:H) to control environment variables or settings, sharply narrowing exposure. No public exploit code or active exploitation has been identified at time of analysis.
Configuration injection in the Legcord Electron Discord client 1.1.0 through 1.3.0 lets JavaScript executing inside the loaded Discord page write arbitrary configuration keys through the exposed window.legcord settings.setConfig bridge, and the practical payload is the additionalArguments key - persistently adding the Chromium switches --proxy-server and --ignore-certificate-errors so that all client traffic is routed through an attacker-controlled interception proxy with TLS validation disabled. The flaw carries a Critical CVSS 4.0 score of 9.1, but exploitation is not self-contained: it is gated on a pre-existing, independent cross-site scripting flaw in the Discord web content the client renders (Attack Requirements: Present / AC:H), making it an impact-amplification and privilege-escalation primitive rather than a standalone remote compromise, and the attacker's writes are launch-time arguments that generally need a client restart before the proxy and certificate bypass take effect. There is no public exploit code identified at time of analysis and no CISA KEV listing, so the realistic risk is concentrated in users running the affected Legcord builds who are also exposed to a workable Discord-side XSS.
Code injection in the MediaWiki CentralAuth extension (versions 1.43, 1.45 and 1.46) lets an already highly privileged operator who controls a CentralAuth configuration or system setting push attacker-influenced values into executable code paths, with the impact crossing into other federated wikis because the vulnerable component changes scope. Exploitation is not reachable by anonymous users: the assessed vector requires high privileges (PR:H), high attack complexity (AC:H), a present attack requirement (AT:P) and a passive user-interaction step (UI:P), so a victim session or request must traverse the vulnerable code path. There is no CISA KEV listing confirming active exploitation, and the vendor's CVSS 4.0 vector carries only an E:P (proof-of-concept) exploit-maturity metric; the overall picture is a real but conditions-gated, lower-urgency issue affecting multi-wiki/wiki-farm SSO deployments rather than standalone MediaWiki installs.
Arbitrary code execution in Mistral Vibe (mistralai:mistral-vibe) lets an attacker defeat the agent's command-approval allowlist by prefixing an allowlisted command with shell environment-variable assignments (e.g. FOO=bar allowedcmd). The permission checker inspects only the command token and skips the leading assignments, so attacker-controlled variables such as LD_PRELOAD or PATH execute arbitrary code without user approval. Reported by HiddenLayer; no public exploit identified at time of analysis and not listed in CISA KEV.
Proxy settings hijack in Autodesk Fusion Desktop (versions 2705.0.0 through 2705.1.10) allows a maliciously crafted add-in to silently overwrite the application's persistent network proxy configuration without user notification or consent, redirecting all authenticated Fusion network traffic through an attacker-controlled intermediary. The root cause is CWE-15 (External Control of System or Configuration Setting) - Fusion's add-in API imposes no authorization check or user-consent requirement on proxy configuration writes, and the modified setting persists across sessions. No public exploit has been identified and the vulnerability is not listed in the CISA KEV catalog; Autodesk has released a fix in version 2705.1.11 under advisory ADSK-SA-2026-0016.
Authenticated code execution in n8n (before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1) is possible through the Git node's Log operation, which invokes the external git program without stripping the target repository's local git configuration first. A member-level authenticated user who can point that node - including the scenario where the Git node is exposed as an agent tool the attacker can steer - at a repository whose local config they control can smuggle configuration directives that cause git to launch arbitrary programs as the n8n process user. There is no public exploit identified at time of analysis and no confirmed active exploitation (CISA KEV); the CVSS 4.0 base score is 7.7, and the independent assessment rates it CVSS 3.1 8.8 (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H), with exploitation gated on valid n8n member credentials and attacker control of the repository's local configuration.
Local privilege escalation in Microsoft PowerToys allows an authenticated low-privileged attacker to tamper with an externally controllable PowerToys configuration setting and, once a legitimate or higher-privileged user or process consumes that tampered configuration, gain elevated privileges on the same host; the vendor-assigned CVSS is 7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H), with high confidentiality, integrity, and availability impact. Affected are PowerToys installations from 0.1 up to but not including 0.101.2632.0 on Windows. Exploitation requires authenticated local access plus user interaction, so it is not remotely triggerable and not an unauthenticated attack path; there is no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis.
Local privilege escalation in the Windows Setup Files Cleanup component allows an authenticated low-privileged local user to gain SYSTEM-level rights on unpatched hosts, with CVSS 3.1 score 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflecting total loss of confidentiality, integrity and availability within the affected machine. Exploitation is not remotely reachable - it requires an existing foothold on the host as an unprivileged user - and there is no public exploit code and no confirmed active exploitation (no CISA KEV listing; SSVC exploitation: none, automatable: no). Microsoft has released vendor patches covering Windows 10, Windows 11 and Windows Server 2012 through 2025 builds, so risk is concentrated in fleets still running builds below the fixed levels listed in the EUVD record.
Privilege escalation in MariaDB Server (10.6.1 up to 10.6.28, 10.11.x before 10.11.19, 11.4.x before 11.4.13, 11.8.x before 11.8.9, 12.3.x before 12.3.3, and 13.0.x before 13.0.2) allows an authenticated database user holding the FILE privilege to plant a /run/mysqld/wsrep-new-cluster file when secure-file-priv permits writes into that runtime directory, which the packaged mariadb.service systemd unit subsequently consumes as an EnvironmentFile. On the next administrator-triggered restart of mariadb.service, attacker-controlled environment values are injected into the mariadbd process, escalating from the database user context onto the host/systemd layer (scope change) with full confidentiality, integrity, and availability impact. The vendor rates this 8.4 while our independent assessment uses CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H, reflecting that exploitation requires a high, non-default privilege and a restart gate; no public exploit code has been identified at time of analysis, and patched releases are already available.
Account takeover of Eclipse Ditto Explorer users is possible via a crafted link that injects an attacker-controlled OIDC authority or API URI when the autoSso feature is enabled (versions 3.6.0 through 3.9.7). The victim's OAuth authorization code and PKCE verifier are redirected to the attacker's token endpoint, enabling redemption for access and refresh tokens; alternatively, bearer tokens or Basic credentials are leaked to an attacker-controlled api_uri. Exploitation requires unauthenticated remote attackers to convince a victim to click the link and authenticate, but the configuration persists, causing repeated token theft on subsequent visits; no public exploit code has been identified at time of analysis, and the independent assessment deems this a credible but conditional account-takeover flaw rather than a mass-exploitation emergency.
Privilege escalation in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated CLI user or local process to bypass Role-Based Access Control (RBAC) validation by manipulating the process execution environment, resulting in root privileges. The flaw requires local access (AV:L), a low-privilege authenticated foothold (PR:L), and high attack complexity (AC:H) to control environment variables or settings, sharply narrowing exposure. No public exploit code or active exploitation has been identified at time of analysis.
Configuration injection in the Legcord Electron Discord client 1.1.0 through 1.3.0 lets JavaScript executing inside the loaded Discord page write arbitrary configuration keys through the exposed window.legcord settings.setConfig bridge, and the practical payload is the additionalArguments key - persistently adding the Chromium switches --proxy-server and --ignore-certificate-errors so that all client traffic is routed through an attacker-controlled interception proxy with TLS validation disabled. The flaw carries a Critical CVSS 4.0 score of 9.1, but exploitation is not self-contained: it is gated on a pre-existing, independent cross-site scripting flaw in the Discord web content the client renders (Attack Requirements: Present / AC:H), making it an impact-amplification and privilege-escalation primitive rather than a standalone remote compromise, and the attacker's writes are launch-time arguments that generally need a client restart before the proxy and certificate bypass take effect. There is no public exploit code identified at time of analysis and no CISA KEV listing, so the realistic risk is concentrated in users running the affected Legcord builds who are also exposed to a workable Discord-side XSS.
Code injection in the MediaWiki CentralAuth extension (versions 1.43, 1.45 and 1.46) lets an already highly privileged operator who controls a CentralAuth configuration or system setting push attacker-influenced values into executable code paths, with the impact crossing into other federated wikis because the vulnerable component changes scope. Exploitation is not reachable by anonymous users: the assessed vector requires high privileges (PR:H), high attack complexity (AC:H), a present attack requirement (AT:P) and a passive user-interaction step (UI:P), so a victim session or request must traverse the vulnerable code path. There is no CISA KEV listing confirming active exploitation, and the vendor's CVSS 4.0 vector carries only an E:P (proof-of-concept) exploit-maturity metric; the overall picture is a real but conditions-gated, lower-urgency issue affecting multi-wiki/wiki-farm SSO deployments rather than standalone MediaWiki installs.
Arbitrary code execution in Mistral Vibe (mistralai:mistral-vibe) lets an attacker defeat the agent's command-approval allowlist by prefixing an allowlisted command with shell environment-variable assignments (e.g. FOO=bar allowedcmd). The permission checker inspects only the command token and skips the leading assignments, so attacker-controlled variables such as LD_PRELOAD or PATH execute arbitrary code without user approval. Reported by HiddenLayer; no public exploit identified at time of analysis and not listed in CISA KEV.
Proxy settings hijack in Autodesk Fusion Desktop (versions 2705.0.0 through 2705.1.10) allows a maliciously crafted add-in to silently overwrite the application's persistent network proxy configuration without user notification or consent, redirecting all authenticated Fusion network traffic through an attacker-controlled intermediary. The root cause is CWE-15 (External Control of System or Configuration Setting) - Fusion's add-in API imposes no authorization check or user-consent requirement on proxy configuration writes, and the modified setting persists across sessions. No public exploit has been identified and the vulnerability is not listed in the CISA KEV catalog; Autodesk has released a fix in version 2705.1.11 under advisory ADSK-SA-2026-0016.