Actively Exploited RCE in Entra, MLflow, TrueConf Anchor This Week's Risk

Remote code execution in Microsoft Entra ID lets an unauthenticated network attacker run arbitrary code by submitting maliciously crafted serialized data that the service deserializes without validation (CWE-502). The CVSS 3.1 base score is a maximum 10.0 with a scope change, reflecting unauthenticated network reach and full compromise of confidentiality, integrity, and availability. There is no public exploit identified at time of analysis, and the issue is not listed in CISA KEV, but the combination of a cloud identity platform and PR:N/UI:N makes this an urgent-patch candidate.

Remote code execution in TrueConf Server (versions 5.3.x through 5.3.9, 5.4.x through 5.4.9, 5.5.x through 5.5.5, and earlier) allows an unauthenticated network attacker reaching TCP port 4307 to submit a specially crafted script that escapes the product's isolated/sandboxed execution environment and runs arbitrary code on the underlying host. Reported by Kaspersky ICS-CERT and classified as CWE-94 code injection, the flaw carries a CVSS 4.0 base score of 9.5 driven by full confidentiality, integrity, and availability impact on both the vulnerable component and the host system it breaks out to. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the sandbox-escape-to-host primitive makes it a high-value target.

Server-side request forgery in MLflow before 3.15.0 lets remote unauthenticated attackers coerce the server into making outbound requests to internal or cloud metadata endpoints via the POST /api/2.0/mlflow/webhooks/{id}/test endpoint. Because URL validation and the actual delivery re-resolve the hostname independently and follow redirects, an attacker can bypass the public-IP check and receive the target's response_status and response_body, enabling exfiltration of cloud credentials (e.g. from 169.254.169.254). No public exploit identified at time of analysis; the CVSS 9.3 rating and scope-change flag reflect the credential-theft potential of reaching metadata services.

Remote unauthenticated code execution in TrueConf Server (versions through 5.3.9, 5.4.9, and 5.5.5) allows a network attacker reachable on port 4307/TCP to invoke an undocumented function and run an arbitrary script without any authentication. Rooted in a missing authentication check (CWE-306) on a critical function, this flaw was disclosed by Kaspersky ICS-CERT and carries a CVSS 4.0 base score of 9.3. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the trivial exploitation profile makes it a high remediation priority.

Sandbox escape to remote code execution in the vm2 Node.js sandbox library (versions <= 3.11.5) arises because handleException() in lib/setup-sandbox.js sanitizes SuppressedError and AggregateError sub-errors but never inspects the ES2022 Error.cause property. Untrusted code running inside the sandbox that catches a host-thrown error carrying a .cause (or other own property) pointing at a host object such as process can dereference it to reach child_process and run arbitrary host commands. A working proof-of-concept demonstrating full RCE is published in the GitHub advisory, and the flaw is fixed in vm2 3.11.6; there is no CISA KEV listing indicating active exploitation.

Sandbox escape in the vm2 Node.js sandboxing library (npm, versions <= 3.11.5) lets code running inside the sandbox reach host prototype mutators and execute arbitrary OS commands on the host. It bypasses the earlier GHSA-v6mx-mf47-r5wg fix by stacking Function.prototype.call indirection so the dangerous __proto__ setter is no longer in the inspected position, then leaks a live host reference through a rejected WebAssembly.compileStreaming promise to pivot to child_process. A working proof-of-concept is published in the advisory, so publicly available exploit code exists; the flaw is not listed in CISA KEV.

SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privilege escalation because the `azuracast:restore` command runs the extracted `db.sql` file verbatim, with no content validation. The flaw carries a critical 9.8 CVSS from the reporter and has publicly available exploit code, though its EPSS probability is low (0.23%, 14th percentile) and it is not on CISA KEV. The real-world attack surface hinges on who can supply and trigger restoration of a crafted backup archive.

Full site takeover in the JSON Options WordPress plugin (versions through 0.0.4) is possible because one of its actions runs on every request without any capability check or nonce verification, exposing arbitrary WordPress option updates to unauthenticated users. An attacker can flip the users_can_register option on and set default_role to administrator, then self-register an admin account. Publicly available exploit code exists (reported by WPScan), and the flaw is rated CVSS 9.8 with SSVC technical impact assessed as total.