Trust Protection Foundation EUVD-2026-30094

Exploitation requires two concurrent conditions: (1) the attacker must hold at least low-privilege authenticated credentials to Trust Protection Foundation (PR:L in the CVSS 4.0 vector - unauthenticated access is insufficient), and (2) the attacker must be positioned on an adjacent network segment to the Trust Protection Foundation host (AV:A - internet-based remote exploitation is not possible without additional network access). Both conditions must be satisfied simultaneously. Exploitation is not automatable at scale per SSVC, consistent with the credential and adjacency prerequisites. What limits exploitation: the adjacency constraint excludes purely remote threat actors; the authentication requirement excludes anonymous/external attackers; and the SSVC 'Exploitation: none' status confirms no observed active exploitation. What does not limit exploitation once prerequisites are met: no user interaction is required (UI:N) and attack complexity is low (AC:L) with no special attack requirements (AT:N), meaning an attacker satisfying the entry conditions faces no additional technical barriers.

The CVSS 4.0 base score of 6.1 (Medium) reflects two meaningful friction points: the Adjacent attack vector (AV:A) and the Low privilege requirement (PR:L), both of which constrain exploitability relative to a fully remote, unauthenticated attack. However, the vulnerable-component impact triad is High across confidentiality, integrity, and availability (VC:H/VI:H/VA:H), and SSVC rates technical impact as 'total', meaning a successful attacker achieves complete database compromise and administrative takeover. The CVSS 4.0 supplemental metric AU:Y (Automatable: Yes) is in mild tension with the SSVC 'Automatable: no' judgment - this discrepancy should be verified with the vendor, though the adjacency and credential prerequisites make mass automated exploitation unlikely in practice. EPSS at 0.01% (0th percentile) and exploit maturity E:U ('Unreported') in the CVSS 4.0 vector confirm no observed exploitation or publicly circulating exploit at time of analysis. The overall priority profile is: patch urgently in environments where low-privilege users share network adjacency with the platform, but the real-world blast radius is bounded by the access prerequisites.

An attacker with low-privilege credentials to Trust Protection Foundation - such as a certificate requestor or read-only auditor account - positioned on the same internal network segment as the platform submits a crafted request to a vulnerable endpoint with injected SQL syntax in a user-controlled parameter. The injected query dumps sensitive certificate metadata, private key references, or credential stores from the database, and a follow-on injection modifies role assignment records to grant the attacker full administrative privileges over the platform. No public proof-of-concept exists at time of analysis, but the low attack complexity (AC:L, AT:N) means a moderately skilled attacker with standard SQL injection tooling could develop a working exploit independently.