Monthly
Authenticated non-administrative users in IBM Langflow OSS 1.0.0-1.11.5 can execute arbitrary OS commands at the application process privilege level by constructing a flow that uses an MCP Tools component configured with a local stdio subprocess transport. This attack path explicitly circumvents both the LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY and LANGFLOW_BLOCK_CODE_INTERPRETER_COMPONENTS server-side enforcement controls - meaning deployments that relied on these flags for protection are not protected against this specific vector. Full exploitation enables credential theft from the process environment, file system tampering, and lateral movement to backend services reachable from the server. No public exploit or CISA KEV listing has been identified at time of analysis, but the low entry bar (any authenticated account) makes this a high-priority patch for multi-tenant or shared Langflow deployments.
Arbitrary code execution in Dell ThinOS 10 (all builds prior to 2605_10.2616) allows a remote, unauthenticated attacker to run code within the application context of the affected thin client, per Dell advisory DSA-2026-389. The root cause is a protection mechanism failure (CWE-284) that bypasses an intended security control rather than exploiting a memory-corruption bug directly. No public exploit is identified at time of analysis and the CVE is not in CISA KEV, but the network-reachable, no-authentication attack profile makes it high priority.
Improper access control in Capgo (capgo.app) lets any holder of an ordinary full API key forge a trusted SSO provider by writing directly to the public.sso_providers table exposed via Supabase PostgREST, setting status='active' and enforce_sso=true without passing the backend provisioning route. This sidesteps the Enterprise-plan gate, Supabase Management API provider creation, DNS TXT domain-ownership verification, and the pending_verification→verified→active workflow, so an attacker can assert SSO enforcement for arbitrary unverified domains and disrupt normal login. All versions are affected, no patch was available at advisory time, and there is no public exploit identified at time of analysis beyond the VulnCheck write-up.
Improper authorization in Hikvision HikCentral Access Control V2.5.0 and below allows authenticated low-privilege users to invoke API endpoints restricted to higher-privileged roles, resulting in unauthorized access to sensitive data and limited system modification. The CVSS vector (PR:L, C:H, I:L) confirms the attacker requires only a valid low-privilege account but can achieve high confidentiality impact and limited integrity compromise across the network. No public exploit code or CISA KEV listing has been identified at time of analysis, though the straightforward nature of the authorization flaw (unenforced role checks on API routes) makes it readily exploitable by any insider or attacker who obtains basic credentials.
Price reconciliation failure in the Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 allows unauthenticated users to obtain gift card coupons worth more than they actually paid at checkout. The plugin issues coupon codes without verifying that the face value matches the payment amount collected by WooCommerce, creating a directly monetizable fraud vector against any store running the affected plugin. A publicly available exploit exists per WPScan, lowering the bar for financial abuse of vulnerable storefronts.
Improper access control in alf.io's organization/event-scoped 'single configuration' endpoints allows authenticated organization owners to exfiltrate system-level secrets-including the administrator system API key-by supplying arbitrary configuration key names to endpoints that perform a cross-scope lookup without restricting results to the caller's authorization tier. All alf.io deployments running versions prior to 2.0-M5-2605 where organization-owner accounts are held by partially trusted or untrusted parties are affected. No public exploit is identified at time of analysis and the vulnerability is not listed in CISA KEV, but successful retrieval of the system API key enables a secondary full administrative escalation.
Arbitrary file system read in Adobe ColdFusion 2023 (Update ≤23) and ColdFusion 2025 (Update ≤12) exposes sensitive files and directories outside the intended access scope to unauthenticated remote attackers. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms network-reachable exploitation requiring no credentials and no user interaction, with high confidentiality impact. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity raises concern for rapid weaponization.
Multi-user isolation breaks in Android's ClipboardService framework layer (CWE-284 Improper Access Control) across Android 14 through 17, enabling a locally-executed low-privileged process to cross user-profile boundaries and escalate privileges with full confidentiality, integrity, and availability impact. The logic error in setClipboardAccessNotificationsEnabledForUser fails to correctly enforce per-user access checks, allowing one user context to manipulate clipboard access notification state for other user profiles on the same device. No public exploit has been identified at time of analysis, and EPSS of 0.12% places this at the 2nd percentile for near-term exploitation probability.
Privilege escalation in Microsoft SQL Server (2017 through 2025) allows a low-privileged authenticated network attacker to gain full administrative control via improper access control enforcement. The vulnerability spans four major SQL Server release trains - 2017, 2019, 2022, and 2025 - including both Cumulative Update (CU) and General Distribution Release (GDR) servicing branches. No public exploit code has been identified at time of analysis, but the low attack complexity and broad affected surface across enterprise SQL Server deployments make this a meaningful priority for patching.
Privilege escalation in Microsoft SQL Server 2017 through 2025 allows a low-privileged authenticated attacker to elevate to higher database or system-level permissions over a standard network connection. The flaw, rooted in CWE-284 (Improper Access Control), requires only a valid low-privilege SQL Server login and network reachability to the instance - no special configuration or user interaction is needed. Microsoft has released patches across all affected cumulative update and GDR servicing branches; no public exploit code or active exploitation has been identified at time of analysis.
Authenticated non-administrative users in IBM Langflow OSS 1.0.0-1.11.5 can execute arbitrary OS commands at the application process privilege level by constructing a flow that uses an MCP Tools component configured with a local stdio subprocess transport. This attack path explicitly circumvents both the LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY and LANGFLOW_BLOCK_CODE_INTERPRETER_COMPONENTS server-side enforcement controls - meaning deployments that relied on these flags for protection are not protected against this specific vector. Full exploitation enables credential theft from the process environment, file system tampering, and lateral movement to backend services reachable from the server. No public exploit or CISA KEV listing has been identified at time of analysis, but the low entry bar (any authenticated account) makes this a high-priority patch for multi-tenant or shared Langflow deployments.
Arbitrary code execution in Dell ThinOS 10 (all builds prior to 2605_10.2616) allows a remote, unauthenticated attacker to run code within the application context of the affected thin client, per Dell advisory DSA-2026-389. The root cause is a protection mechanism failure (CWE-284) that bypasses an intended security control rather than exploiting a memory-corruption bug directly. No public exploit is identified at time of analysis and the CVE is not in CISA KEV, but the network-reachable, no-authentication attack profile makes it high priority.
Improper access control in Capgo (capgo.app) lets any holder of an ordinary full API key forge a trusted SSO provider by writing directly to the public.sso_providers table exposed via Supabase PostgREST, setting status='active' and enforce_sso=true without passing the backend provisioning route. This sidesteps the Enterprise-plan gate, Supabase Management API provider creation, DNS TXT domain-ownership verification, and the pending_verification→verified→active workflow, so an attacker can assert SSO enforcement for arbitrary unverified domains and disrupt normal login. All versions are affected, no patch was available at advisory time, and there is no public exploit identified at time of analysis beyond the VulnCheck write-up.
Improper authorization in Hikvision HikCentral Access Control V2.5.0 and below allows authenticated low-privilege users to invoke API endpoints restricted to higher-privileged roles, resulting in unauthorized access to sensitive data and limited system modification. The CVSS vector (PR:L, C:H, I:L) confirms the attacker requires only a valid low-privilege account but can achieve high confidentiality impact and limited integrity compromise across the network. No public exploit code or CISA KEV listing has been identified at time of analysis, though the straightforward nature of the authorization flaw (unenforced role checks on API routes) makes it readily exploitable by any insider or attacker who obtains basic credentials.
Price reconciliation failure in the Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 allows unauthenticated users to obtain gift card coupons worth more than they actually paid at checkout. The plugin issues coupon codes without verifying that the face value matches the payment amount collected by WooCommerce, creating a directly monetizable fraud vector against any store running the affected plugin. A publicly available exploit exists per WPScan, lowering the bar for financial abuse of vulnerable storefronts.
Improper access control in alf.io's organization/event-scoped 'single configuration' endpoints allows authenticated organization owners to exfiltrate system-level secrets-including the administrator system API key-by supplying arbitrary configuration key names to endpoints that perform a cross-scope lookup without restricting results to the caller's authorization tier. All alf.io deployments running versions prior to 2.0-M5-2605 where organization-owner accounts are held by partially trusted or untrusted parties are affected. No public exploit is identified at time of analysis and the vulnerability is not listed in CISA KEV, but successful retrieval of the system API key enables a secondary full administrative escalation.
Arbitrary file system read in Adobe ColdFusion 2023 (Update ≤23) and ColdFusion 2025 (Update ≤12) exposes sensitive files and directories outside the intended access scope to unauthenticated remote attackers. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms network-reachable exploitation requiring no credentials and no user interaction, with high confidentiality impact. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity raises concern for rapid weaponization.
Multi-user isolation breaks in Android's ClipboardService framework layer (CWE-284 Improper Access Control) across Android 14 through 17, enabling a locally-executed low-privileged process to cross user-profile boundaries and escalate privileges with full confidentiality, integrity, and availability impact. The logic error in setClipboardAccessNotificationsEnabledForUser fails to correctly enforce per-user access checks, allowing one user context to manipulate clipboard access notification state for other user profiles on the same device. No public exploit has been identified at time of analysis, and EPSS of 0.12% places this at the 2nd percentile for near-term exploitation probability.
Privilege escalation in Microsoft SQL Server (2017 through 2025) allows a low-privileged authenticated network attacker to gain full administrative control via improper access control enforcement. The vulnerability spans four major SQL Server release trains - 2017, 2019, 2022, and 2025 - including both Cumulative Update (CU) and General Distribution Release (GDR) servicing branches. No public exploit code has been identified at time of analysis, but the low attack complexity and broad affected surface across enterprise SQL Server deployments make this a meaningful priority for patching.
Privilege escalation in Microsoft SQL Server 2017 through 2025 allows a low-privileged authenticated attacker to elevate to higher database or system-level permissions over a standard network connection. The flaw, rooted in CWE-284 (Improper Access Control), requires only a valid low-privilege SQL Server login and network reachability to the instance - no special configuration or user interaction is needed. Microsoft has released patches across all affected cumulative update and GDR servicing branches; no public exploit code or active exploitation has been identified at time of analysis.