Authentication Bypass
Monthly
Unauthenticated file exfiltration in Flowise 2.2.4-3.1.4 is possible because the POST /api/v1/openai-assistants-file/download endpoint was incorrectly added to the application's global authentication whitelist, causing all session and API key verification to be skipped unconditionally. Any remote, unauthenticated attacker who can supply valid chatflowId, chatId, and fileName identifiers can retrieve private files from any chatflow on the instance, including those belonging to other workspaces or organizations in a multi-tenant deployment. A public proof-of-concept exploit is available via GitHub, and no KEV listing has been confirmed at time of analysis.
Full application database read in Metabase is achievable by any authenticated low-privileged user due to a missing authorization check (CWE-862). Any user with a valid account - regardless of their assigned role or permissions - can issue requests that return the entire contents of the Metabase backend database, potentially exposing database connection credentials, API keys, user account data, and sensitive query results. No public exploit has been identified at time of analysis, but the low exploitation complexity and broad attacker pool (any registered user) make this a high-priority remediation item.
Cross-tenant authorization bypass in Dokploy 0.29.8 and earlier lets an authenticated organization member with backup permissions reach another organization's S3 backup destinations by supplying a client-controlled destinationId that is never checked against their active organization. Because the referenced destination's S3 accessKey and secretAccessKey are materialized on the attacker's service host, the attacker can read a victim tenant's backup objects and redirect or poison backups across tenant boundaries. No public exploit identified at time of analysis, but the flaw is trivially reachable and breaks the core multi-tenant isolation of the platform (CVSS 9.6, scope-changed).
Cryptographic signature validation failure in Pega Platform (Pega Infinity) versions 8.5.0 through 25.1.2 enables low-privileged network attackers to forge or manipulate JWT tokens, bypassing authentication and authorization controls. The vulnerability maps to CWE-347 and is tagged as a JWT attack vector capable of authentication bypass, with high confidentiality and integrity impact confirmed in the vendor's own CVSS 4.0 assessment. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and network accessibility make this a meaningful risk for any organization running affected Pega Infinity deployments.
Cross-organization server deletion and SSH key disclosure in Dokploy affects all instances running versions 0.28.7 through 0.29.12. The server.remove tRPC mutation accepts a caller-supplied serverId without verifying organizational ownership, allowing an authenticated owner or administrator in one organization to delete server registrations and all associated deployment records belonging to a completely separate organization - and to receive that organization's plaintext SSH private key as a side effect. No public exploit code has been identified at time of analysis, but the fix is available in version 0.29.13 and the GitHub advisory (GHSA-3rpx-c3j9-q99x) and patch PR are public.
Cross-tenant IDOR in Prospero Flow CRM before 5.4.8 allows any authenticated user to blindly overwrite contact records belonging to other companies and exfiltrate their personal data as vCard files, simply by supplying an arbitrary numeric contact ID. The contact save and vCard export endpoints performed no company-scoping on their database queries, so a user authenticated to Company A could tamper with or harvest contacts owned by Company B without any special knowledge beyond a valid integer identifier. No public exploit or CISA KEV listing has been identified at time of analysis, but the vulnerability is trivially exploitable in any multi-tenant deployment and the full fix has been released as v5.4.8 (and later v5.5.3).
Hard-coded credentials embedded in the Zyxel WAH7601 mobile Wi-Fi hotspot firmware expose sensitive constants within the device executable, enabling adjacent-network attackers without any prior privileges to bypass authentication and achieve high-impact confidentiality and integrity compromise. All WAH7601 firmware versions through 20.07.2026 are confirmed affected per TR-CERT advisory TR-26-0799 and NVD. No public exploit code or active exploitation has been identified at time of analysis, but the low attack complexity characteristic of CWE-798 makes this a credible near-term risk in environments where adjacent access is not tightly controlled.
Privilege escalation in Roskus Prospero Flow CRM before version 5.2.1 permits any authenticated user - regardless of assigned role - to grant any application role the complete set of system permissions by sending a crafted POST request to the permission save endpoint. The vulnerable `PermissionSaveController` accepted a user-supplied `roles` array and invoked Spatie Permission's `syncPermissions()` with no prior authorization check, making low-trust authenticated accounts a direct path to full administrative control. No public exploit or CISA KEV listing has been identified at time of analysis, but the publicly accessible commit diff documents the exact endpoint and flaw mechanism, substantially lowering the exploitation barrier for any attacker holding CRM credentials.
Missing authorization in OpenSignLabs opensignserver through 2.37.0 lets unauthenticated remote attackers irreversibly decline any in-flight signing document and forge the decline attribution to an arbitrary user. The vulnerable declinedoc Parse cloud function writes the IsDeclined flag, DeclineReason text, and a caller-supplied DeclineBy pointer to the document record without verifying the caller's identity, enabling both workflow termination and evidentiary record falsification. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.
Authentication bypass in opensignserver through 2.37.0 exposes all stored files to unauthenticated remote attackers by allowing them to mint MASTER_KEY-signed file access tokens via the getsignedurl Parse cloud function. The bypass requires no credentials and no prior knowledge of valid document records - supplying any arbitrary string as the docId parameter causes the function to skip its isAuthenticated check entirely and issue a fully trusted signed token. No public exploit code or CISA KEV listing exists at time of analysis, but the bypass condition is trivially reproducible from the CVE description alone, making this a realistic and immediate threat to any internet-exposed instance storing sensitive signed documents.
Cross-tenant authorization bypass in Attendize through commit 9289acb permits an authenticated organizer to inject persistent, mandatory survey questions into a different organizer's events by supplying an arbitrary event_id to the POST /event/{event_id}/question/create endpoint. The postCreateEventQuestion method resolves the target event without applying tenant-isolation scoping, so the write succeeds across tenant boundaries; the injected question is then irremovable by the victim because the victim's account-scoped delete path cannot resolve a record owned by another tenant. No public exploit has been identified at time of analysis, and the vulnerability has not been listed in the CISA KEV catalog.
Broken object-level authorization in OpenSignLabs OpenSignServer through 2.37.0 exposes complete contract records - including sender and signer PII and pre-signed document download URLs - to unauthenticated remote attackers via the getDocument Parse cloud function. The function internally calls useMasterKey, bypassing Parse's ACL enforcement, and returns full records whenever the document's IsEnableOTP flag is false, which is the default configuration across all deployments. No public exploit has been identified at time of analysis, but the network-accessible, zero-authentication attack path against default configurations makes this a high-priority data protection issue, particularly for organizations subject to GDPR or similar data regulation.
Unauthenticated remote access to all stored contract documents is possible in OpenSignLabs opensignserver through version 2.37.0 due to a missing authentication check in the fileupload Parse cloud function. Any unauthenticated attacker who can reach the endpoint can supply an arbitrary URL and receive a MASTER_KEY-signed file access token, completely defeating the only access control layer protecting stored documents. No public exploit has been identified at time of analysis, but the zero-privilege, low-complexity attack vector makes this highly accessible to unsophisticated threat actors.
Use-after-free in the Linux kernel's TIPC (Transparent Inter-Process Communication) subsystem lets a local actor trigger a write to freed slab memory via the accept() error path of tipc_sk_create(). When socket insertion into the per-netns rhashtable fails, sock->sk is left dangling instead of NULLed, so tipc_release() bypasses its own NULL guard and calls lock_sock() on the freed sk. It affects kernels using the AF_TIPC protocol across many stable branches (fixes backported to 5.4.x through 6.18.x and mainline 7.x); there is no public exploit identified at time of analysis and it is not in CISA KEV, with a low EPSS of 0.18%.
Recursive locking deadlock in the Linux kernel audit subsystem causes a complete, unrecoverable kernel hang when a file matching an executable audit rule is renamed. Affected kernels from 4.3 through stable branches prior to 6.6.148, 6.12.101, 6.18.42, 7.1.6, and 7.2-rc1 are vulnerable. Any local user able to rename a file that matches an active exe= audit rule can trigger the deadlock, forcing a hard reboot; no public exploit exists and EPSS is 0.18%, consistent with the specific preconditions required.
Missing authentication in dulldusk/phpFM through version 1.8.0 exposes the complete file manager to unauthenticated remote attackers because the default configuration ships with an empty auth_pass value. The flawed check in index.php (line 637, 'if ($auth_pass == '' || $loggedon==$auth_pass)') short-circuits to true whenever the password is unset, granting anyone full read, write, delete, and upload access to the server filesystem. CVSS 9.8 (CWE-306); no public exploit identified at time of analysis, though the vulnerable logic is directly visible in the referenced public source and is trivially reproducible.
Unauthenticated access to complete historical sensor data is possible in FUXA through version 1.3.3 because the DAQ_QUERY Socket.IO event handler in server/runtime/index.js omits the isSocketAdminAuthorized() check that guards every other sensitive Socket.IO event. Remote attackers can exfiltrate all sensor history without credentials even on deployments where secureEnabled=true is configured, silently undermining an operator's assumption that authentication is fully enforced. No public exploit code or CISA KEV listing has been identified at time of analysis, but the CVSS AV:N/AC:L/PR:N vector confirms this is trivially exploitable by any network-reachable party.
Remote unauthenticated account takeover in fastschema through v0.15.1 is enabled by a TOCTOU race condition in the OTP-based account recovery flow. The verifyOTPSession function in pkg/auth/local.go reads and increments the attempt counter in separate non-atomic operations, allowing concurrent HTTP requests to race past the attempt limit before any counter update is committed. With no effective limit enforced on a 6-digit OTP (1,000,000 possible values), an attacker can brute-force valid codes; no public exploit is identified at time of analysis and this CVE is not in CISA KEV.
Remote code execution in NASA fprime-gds through version 3.4.3 lets an unauthenticated remote attacker fully compromise the ground data system and inject arbitrary commands to any connected spacecraft. The Flask ground station exposes every endpoint without authentication (CWE-306), while a path traversal in the upload/download handler permits reading and writing arbitrary files, and a hardcoded Flask secret key (CWE-321) enables session forgery; chained, they yield code execution on the ground station host. No public exploit is identified at time of analysis, but the CVSS 9.8 rating and unauthenticated network vector make this a high-priority, real-world risk for anyone running F Prime ground software.
Improper authorization in Daptin through v0.12.34 lets unauthenticated remote guests perform full CRUD (read, create, update, delete) on all usergroup records, effectively bypassing access control on the platform's group and permission objects. The flaw arises because permission checks treat a null/zero UserId as a valid ownership match, so a guest whose session UserId is null is granted owner-level rights over ownerless usergroup rows. No public exploit identified at time of analysis, but the CVSS of 9.1 (network, no auth, no interaction) reflects that manipulating usergroups can be leveraged to escalate privileges and corrupt the platform's authorization model.
Cross-tenant authorization bypass in fosrl Pangolin through v1.20.0 lets an authenticated user reuse an access token minted for one resource to authenticate against any other resource in any organization. Because the authWithAccessToken.ts handler validates the token without binding it to the requested resourceId, a token scoped to resource X in organization A is accepted for resource Y in organization B, collapsing multi-tenant isolation. Rated CVSS 9.6 (CWE-639); no public exploit identified at time of analysis, though the vulnerable code path is disclosed in the referenced source file.
Unauthenticated access to Apache Ranger Download APIs on versions 2.8.0 and earlier exposes sensitive authorization policy data to any remote attacker with network connectivity. The missing authentication check (CWE-306) means no credentials or privileges are required to invoke these endpoints and retrieve their output. No public exploit code has been identified at time of analysis, but the low complexity and zero-authentication nature of the CVSS vector (AV:N/AC:L/PR:N/UI:N) makes this trivially exploitable by any attacker who can reach the Ranger Admin interface.
Improper access control in the Weaver component of Samsung Mobile devices allows a local attacker without elevated privileges to render the device inoperable, achieving high integrity and availability impact. All Samsung Mobile devices running Weaver prior to the SMR Aug-2026 Release 1 security update are affected. No public exploit code or active exploitation has been confirmed at time of analysis, but the low attack complexity and absence of privilege requirements lower the bar for abuse by a local threat actor.
Privilege escalation via REST API authentication bypass in the CheckView WordPress plugin before 2.3.2 allows an unauthenticated attacker to perform any REST action available to a logged-in administrator - including creating a new administrator account - by tricking an admin into opening a crafted link. The plugin's authentication filter is applied globally to all REST routes rather than only to CheckView's own endpoints, and it unconditionally discards authentication errors for any request whose URI merely contains a CheckView-specific string, bypassing WordPress's nonce enforcement entirely. A publicly available exploit from WPScan demonstrates this path; no confirmed active exploitation (CISA KEV) has been recorded at time of analysis.
Authentication bypass in the AutoNetTV Relay WordPress plugin (all versions before 3.0.14) allows unauthenticated remote attackers to obtain a WordPress administrator session cookie by triggering the plugin's scheduled content-synchronization task under a specific server configuration. The plugin issues an admin authentication cookie during the sync task without performing any capability or authorization check, and on servers where the scheduled task completes before the HTTP response is committed, the cookie is returned to the triggering request. A public proof-of-concept exploit exists, reported by WPScan; no KEV listing has been identified at time of analysis.
Account takeover via broken password-reset rate limiting in the Login & Register Forms WordPress plugin (versions before 4.0.2) allows unauthenticated remote attackers to brute-force verification codes and seize any account, including administrator accounts. Both the verification code and the per-source attempt counter are keyed on client-controlled data, meaning an attacker can reset the rate limit at will by manipulating that value - rendering the lockout mechanism entirely ineffective. Exploitation requires the 'verification-code reset mode' to be enabled; a publicly available proof-of-concept from WPScan demonstrates the technique, though EPSS sits at only 0.15% (4th percentile), indicating limited observed exploitation activity to date.
Account takeover in the Login & Register Forms WordPress plugin (before 4.0.2) is enabled by a fundamentally broken password reset verification design: the plugin keys the 'verification completed' state to a client-controlled value rather than binding it server-side to the account under reset or to the authenticated session of the party completing verification. An unauthenticated attacker who can observe or manipulate this state during or after a legitimate reset flow can claim ownership of that completed verification and set a new password for any targeted account, including administrator accounts. A publicly available exploit has been published by WPScan, and no public exploit identified at time of analysis translates to KEV, though POC availability materially lowers the exploitation threshold.
Password reset abuse in the Single Sign On For TNG WordPress plugin (versions before 2.2.0) allows unauthenticated attackers to reset the password of any account, including administrators, resulting in full site takeover. The flaw stems from improper validation of the password reset request, and publicly available exploit code exists, though EPSS scores the exploitation probability at a low 0.15% (4th percentile). It is not listed in CISA KEV, so exploitation is currently proof-of-concept rather than confirmed active in-the-wild use.
Unauthenticated content injection in Arvow AI SEO Writer WordPress plugin (before 1.5.4) allows remote attackers to create arbitrary posts and pages and extract author account and taxonomy information by exploiting a PHP type juggling flaw in a REST endpoint. The bypass is effective exclusively when the plugin has not been configured post-installation, making freshly deployed or abandoned instances the primary target. A public proof-of-concept is available via WPScan; despite this, EPSS sits at 0.15% (5th percentile) and no CISA KEV listing exists, indicating no public exploit has driven mass exploitation at time of analysis.
Account takeover in the BricksForge WordPress plugin (versions before 3.1.8.8) is enabled by a missing server-side identity check during password change form submissions, allowing unauthenticated remote attackers to set arbitrary passwords for any WordPress user, including site administrators. The vulnerable state is effectively the default configuration for any site that has deployed BricksForge's password update form action, since current-password verification is disabled by default in that action. A publicly available exploit exists; active exploitation has not been confirmed by CISA KEV, but the direct path to admin-level account takeover makes this a critical remediation priority for affected deployments.
Missing authorization controls in the File Manager WordPress plugin before version 6.9.1 allow any authenticated user - including low-privilege subscribers - to read and delete arbitrary files under the WordPress installation directory. The weakness exposes sensitive configuration secrets such as database credentials stored in wp-config.php, and enables deliberate denial of service through file deletion. A publicly available exploit exists per WPScan reporting, though EPSS remains very low (0.14%, 4th percentile), suggesting targeted rather than broadly automated exploitation at time of analysis.
Full network takeover via authentication bypass in the InfiniteWP Client WordPress plugin before 1.13.6 affects WordPress Multisite installations, where the plugin fails to validate the site-connection state and the authenticity of requests to its remote-management endpoint. Unauthenticated remote attackers can bind their own management key, hijack an administrator session, and gain control of every site in the network, culminating in remote code execution. No public exploit identified at time of analysis; EPSS is low at 0.19% (9th percentile) despite the maximal 9.8 CVSS, and a vendor patch is available.
Privilege escalation in the Solace Extra WordPress plugin (versions before 1.6.1) allows any authenticated user with Subscriber-level access to modify site-wide presentation settings and permanently delete imported site-builder content by exploiting missing capability checks across multiple AJAX endpoints. The plugin incorrectly exposes nonce values on admin-accessible pages that low-privileged users can reach, collapsing the intended authorization boundary between Subscriber and Administrator roles. A publicly available proof-of-concept exists via WPScan; no public exploit identified at time of analysis has been confirmed by CISA KEV, and the EPSS score of 0.13% (3rd percentile) reflects low observed exploitation probability to date.
The Home Assistant iOS Companion app silently executes tag-triggered automations when any co-installed untrusted app forwards a crafted tag event via iOS universal links, bypassing physical scan validation entirely. Affected versions are all iOS Companion app releases prior to 2026.5.0; the underlying Home Assistant core CPE (cpe:2.3:a:home-assistant:core:*:*:*:*:*:*:*:*) is also cited. Because automations can control physical devices such as smart locks and alarms, the I:H CVSS metric reflects real-world consequences beyond software state. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Silent automation execution in the Home Assistant Android Companion App prior to 2026.8.1 allows any co-installed app on the device to trigger arbitrary HA automations by forwarding a crafted tag URL to an exported Activity without user confirmation. The flaw exists because TagReaderActivity accepted both physical NFC intents and OS-routed deep links identically, with no caller validation or approval prompt before dispatching the tag scan to the Home Assistant server. No public exploit has been identified at time of analysis, but the attack is unattended and can control physical actuators such as locks or alarms.
The `$import-pnp` operation in Pathling Server allows low-privileged callers to supply an arbitrary `exportUrl`, causing the server to forward its configured PNP credentials to an attacker-controlled FHIR endpoint and stage the returned files as trusted local sources - effectively bypassing the `allowableSources` allowlist that guards the standard `$import` operation. All Pathling Server deployments prior to version 2.0.0 with PNP credentials configured are affected, with high confidentiality and integrity impact (credential theft and unauthorized data import). No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though the attack requires only low-privilege API access and is low-complexity.
Pathling Server before version 2.0.0 permits authenticated callers holding only coarse operation-level authorities (e.g., `pathling:search`) to act on arbitrary FHIR resource families - including resource types they are not explicitly authorized to read or write - because typed search, update, and batch handlers enforce the operation-level authority check but skip the documented per-resource authority check (e.g., `pathling:read:Patient`). The flaw breaks the two-factor authorization model the product documents, exposing potentially all FHIR resource families to any valid operation-authority holder. No confirmed active exploitation (not in CISA KEV) and no public exploit code has been identified at time of analysis; the vulnerability is fixed in Pathling Server 2.0.0.
Missing authentication in the LightRAG API server (HKUDS/LightRAG) through version 1.5.4 exposes every management endpoint to unauthenticated network attackers, because the server binds to 0.0.0.0 by default while authentication is off unless explicitly configured. Any attacker with network reach can read indexed document content, upload or delete documents, rewrite the knowledge graph, cancel ingestion pipelines, clear caches, and consume LLM/API credits. No public exploit identified at time of analysis, but exploitation is trivial via a single unauthenticated HTTP request, and the fix in 1.5.5rc1 is largely a hardening/warning change rather than an enforced secure default, so operator action is still required.
Insecure direct object reference in TestLink 1.9.20 and earlier allows any authenticated user - including low-privilege guest accounts - to retrieve arbitrary file attachments from projects they have no membership in, by supplying sequential integer IDs to the attachmentdownload.php endpoint. The handler performs no project membership or role authorization check, enabling bulk enumeration of all attachments across the entire installation. No public exploit has been confirmed at time of analysis, though a researcher writeup exists; the attack is trivially automatable due to the sequential integer ID scheme.
Incorrect authorization in the Nexus Repository 3 CE/Pro repository-creation UI allows an authenticated user with a format-scoped delegated repository-admin privilege to create repositories in unauthorized formats - bypassing the intended scope boundary. Affected are all releases from 3.0.0 through 3.94.x; version 3.95.0 resolves the flaw. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog, but the integrity impact is high given that unauthorized repository types could be introduced into a managed artifact store, potentially tainting software supply chain pipelines.
Insufficient session expiration in Sonatype Nexus Repository 3 allows a previously-authenticated user to retain full repository access after their account is deleted, deactivated, or their password is changed. Any user holding an active session at the moment of an administrative revocation event can continue reading, modifying, or deleting repository content until that session naturally times out - bypassing the intended access control action. No public exploit has been identified and this is not listed in CISA KEV, but the CVSS 4.0 score of 8.7 reflects the high-impact triad of confidentiality, integrity, and availability against network-accessible repositories once the prerequisite session exists.
Privilege escalation in Sonatype Nexus Repository 3 allows an authenticated low-privileged user - who holds the 'update privilege definitions' permission - to silently elevate themselves to full administrative access by editing wildcard privilege definitions already scoped to their own role. No additional authorization check, role reassignment, or administrator approval is required for this escalation. No public exploit code has been identified at time of analysis, but the CVSS 4.0 score of 8.9 and the complete confidentiality, integrity, and availability impact - including lateral impact on downstream systems - indicate high real-world risk for any organization using Nexus Repository 3 as a software supply chain hub.
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a remote, unauthenticated attacker to bypass authentication controls and gain unauthorized access to the systems management interface across Windows, RHEL 8.10/9.4, and SLES 15 deployments. The CVSS 3.1 base score is 9.8 (network vector, no privileges, no user interaction) with total confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and CISA SSVC lists exploitation as none, but the trivial attack path makes prompt patching important.
Persistent denial of service in Tobit Laboratories AG's TeamDavid (David/Webbox groupware) allows any remote, unauthenticated attacker to shut down the server by requesting the exposed /internalRestart endpoint, which fully halts the service rather than restarting it. All releases through Rollout 524 are affected, and recovery requires manual administrator intervention to bring the server back online. No public exploit identified at time of analysis, though the trigger is trivial (a single HTTP request to a known path).
Hardcoded plaintext credentials embedded in ZTE device firmware expose the web management interface to unauthorized access. The initial login credentials for the device's web interface are stored unencrypted within the firmware image, allowing any party who obtains the firmware to authenticate to any affected device. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the trivial nature of credential extraction from downloadable firmware files significantly elevates practical risk beyond what EPSS alone may reflect.
Integrity bypass in MStore API WordPress plugin (versions before 4.21.0) enables unauthenticated remote attackers to create fraudulent WooCommerce product reviews with arbitrary reviewer names, email addresses, and star ratings, completely circumventing the store's verified-purchase-only review restriction. The plugin's REST API review creation route applies neither authorization nor purchase-ownership validation, rendering the WooCommerce protection setting ineffective when the plugin is active. A publicly available proof-of-concept exists and SSVC confirms the attack is automatable, though the EPSS exploitation probability sits at just 0.14% (3rd percentile), suggesting limited real-world exploitation activity despite ease of execution.
Authentication bypass in the MStore API WordPress plugin before 4.21.0 lets an unauthenticated remote attacker mark any order as fully paid without processing a real payment, because several payment-completion endpoints trust the client-supplied completion signal instead of verifying it against the payment gateway. Any store using this plugin can be defrauded of goods, services, or digital downloads. A public exploit exists (WPScan) and a vendor patch is available, though EPSS remains low at 0.14%.
Account takeover in MStore API WordPress plugin before 4.21.0 is achievable by unauthenticated remote attackers who know a target's registered phone number, by forging a cryptographically invalid login token that the plugin fails to properly verify. This yields full control over the targeted account, including administrator-level WordPress accounts. A publicly available proof-of-concept exists; however, no CISA KEV listing is present and EPSS at 0.14% (3rd percentile) indicates low observed exploitation to date, likely constrained by the phone-number reconnaissance prerequisite.
Payment bypass in the WP Events Manager WordPress plugin before 2.2.5 lets any authenticated user register for a paid event and receive a fully completed booking without paying, because the plugin trusts an attacker-controlled quantity value and derives the charge from it. WPScan reports publicly available exploit code exists, though there is no evidence of active exploitation and the EPSS score is very low (0.13%, 3rd percentile). The flaw is a business-logic/authorization defect rather than a memory-safety issue, so impact is financial fraud against event organizers rather than server compromise.
Improper access control in V-Secure Jingyun Antivirus 2.4.2.39 allows a local low-privileged user to interact with the ZyArk.sys kernel driver in ways that bypass intended access restrictions, yielding high-impact compromise of confidentiality, integrity, and availability on the affected host. A publicly available proof-of-concept exploit (E:P per the CVSS 4.0 vector) lowers the bar for exploitation, though the local-only attack vector limits the exposure to already-authenticated users or post-initial-access scenarios. The vendor was contacted prior to disclosure but did not respond, meaning no official patch exists at time of analysis.
Unauthenticated account takeover in the TrueBooker Appointment Booking and Scheduler System plugin for WordPress (all versions through 1.2.3) allows remote attackers to reset the password of any account, including administrators, because a password-change action fails to verify the requester's authorization. Successful exploitation yields full admin login and therefore complete control of the WordPress site. No public exploit identified at time of analysis; the flaw was reported by Wordfence and an upstream fix is present in the plugin repository.
Local privilege escalation in Jiangmin Antivirus 21 exploits improper access controls in the kernel-mode driver kvcore.sys, specifically within the MessageNotifyCallback function of the Minifilter Port component. A low-privileged local attacker can send crafted messages to this communication port to bypass access enforcement, achieving high impact across confidentiality, integrity, and availability on the affected system. No public exploit identified at time of analysis is incorrect here - a publicly available exploit exists on GitHub, and the vendor did not respond to responsible disclosure, leaving no patch available.
DeepCool DisplayService 1.2.12 on Windows exposes an unauthenticated LocalSystem-level named pipe control channel that any low-privileged local user can connect to and manipulate, enabling full privilege escalation to SYSTEM. The root cause is CWE-284 (Improper Access Control) - the service's IPC channel enforces no caller authentication or ACL verification. A public proof-of-concept is available per VulDB and a researcher's writeup; the vulnerability is not currently listed in CISA KEV, indicating no confirmed mass exploitation, though the low attack complexity and available POC materially elevate near-term risk.
Privilege escalation in Microsoft Purview eDiscovery enables an authenticated low-privileged attacker to gain elevated access over the network, with full confidentiality, integrity, and availability impact once exploited. The vulnerability stems from improper access control (CWE-284), meaning the service fails to enforce authorization boundaries between privilege levels for eDiscovery operations such as case management, legal holds, and content searches. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been identified at time of analysis, though the low attack complexity and network accessibility make this a credible threat in Microsoft 365 enterprise environments.
Privilege elevation in Microsoft Teams lets a remote, unauthenticated attacker gain unauthorized access across a network due to a missing authorization check (CWE-862). The maximum 10.0 CVSS rating stems from a changed scope with high confidentiality and integrity impact, meaning the flaw reaches resources beyond the initially vulnerable component. No public exploit identified at time of analysis and the issue is not listed in CISA KEV, but the perfect-score, no-precondition profile makes it a top-tier patch priority.
Privilege elevation in Microsoft Planetary Computer Pro allows a remote, unauthenticated attacker to gain elevated privileges over the network by invoking a critical function that lacks an authentication check (CWE-306). Scored CVSS 10.0 with a scope change, the flaw exposes confidential data and permits unauthorized modification against the affected Azure geospatial platform. No public exploit identified at time of analysis, and it is not listed in CISA KEV, but the maximal score reflects trivial exploitability against exposed instances.
Cryptographic signature spoofing in Microsoft Teams exposes enterprise collaboration environments to unauthenticated identity impersonation over the network. The flaw, tagged as a JWT attack enabling authentication bypass, allows a remote attacker with no prior credentials to forge or tamper with token-based identity claims that Teams fails to properly verify. No active exploitation has been confirmed by CISA KEV, and no public proof-of-concept has been identified at time of analysis, though the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates a low-barrier, remotely exploitable path with high integrity impact.
Privilege elevation in Microsoft Teams allows an authenticated attacker with low-level access to bypass authentication controls and gain higher privileges across a network boundary. The CVSS:3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H) shows the flaw is remotely reachable, requires only low existing privileges, needs no user interaction, and crosses a security scope to compromise confidentiality and integrity of resources beyond the initially authorized context. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV, but the 9.6 base score reflects the low barrier to abuse once an attacker holds any authenticated Teams foothold.
Privilege elevation in Microsoft 365 Admin Center allows a remote, unauthenticated attacker to gain elevated permissions by exploiting improper verification of a cryptographic signature (CWE-347), consistent with the vendor-supplied 'Authentication Bypass' and 'JWT Attack' tags. The maximal 9.8 CVSS with a fully network-reachable, no-privilege, no-interaction vector makes this a critical bypass of the admin portal's trust boundary. No public exploit identified at time of analysis, and it is not currently listed in CISA KEV.
Privilege elevation in Microsoft Azure SQL Managed Instance lets an unauthenticated network attacker cross the intended communication-channel boundary and gain elevated privileges, carrying a scope-changed CVSS of 10.0 that reflects likely cross-tenant or cross-service impact in this multi-tenant PaaS offering. Microsoft tags it as an authentication bypass exposing high-value confidentiality and integrity, with no availability loss. There is no public exploit identified at time of analysis and EPSS probability is low (0.36%, 29th percentile), consistent with a vendor-discovered, service-side issue rather than mass exploitation.
Privilege elevation in Microsoft's Azure SRE Agent lets an already-authorized, low-privilege network actor gain higher privileges by exploiting a missing authorization check (CWE-862). Rated CVSS 9.9 with a scope change, the flaw means an attacker holding only limited access to the service can cross a trust boundary and reach resources or actions reserved for higher-privilege identities. No public exploit has been identified at time of analysis and it is not on the CISA KEV list, but the near-maximum score and cloud-service exposure make it a high-priority patch item.
Privilege elevation in Microsoft Power Apps allows an unauthorized, network-based attacker to gain elevated permissions by abusing improper authorization checks, with a scope change (S:C) indicating the impact crosses a security boundary beyond the initially compromised component. Exploitation requires some user interaction (UI:R) but no prior authentication (PR:N), and results in high confidentiality and integrity impact. At time of analysis there is no public exploit identified and the issue is not listed in CISA KEV; the CVSS base score is 9.3 (Critical).
Elevation of privilege in Microsoft Azure SQL Database lets an unauthorized network attacker bypass authentication and gain higher privileges, with a maximum CVSS 10.0 and a scope change indicating the flaw extends impact beyond the initially vulnerable component. The CVSS vector (PR:N/UI:N) means no credentials or user interaction are required, making this a critical priority despite no public exploit being identified. As a managed cloud service, remediation is handled server-side by Microsoft rather than by customer patching.
Information disclosure in Microsoft Azure Logic Apps allows an authenticated, low-privileged attacker to read data they should not have access to across a network, with a scope-changed CVSS 3.1 score of 9.6 reflecting potential cross-boundary (multi-tenant) impact. The flaw stems from improper access control (CWE-284) in the cloud workflow-automation service; Microsoft is the reporter and remediation is delivered service-side. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, though the high score and scope change warrant prompt attention.
Local privilege escalation in udisks2 exploits insufficient polkit authorization on the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method, allowing a low-privileged user with an active console session to spoof the 'as-user' parameter and mount filesystems on behalf of arbitrary users, including root. The attack specifically leverages fstab entries carrying 'user' or 'users' mount options, which are common on desktop Linux installations, to bypass the authorization check entirely. A vendor-released patch exists in udisks 2.11.2; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated OAuth token rotation in Flowise through 3.1.4 allows any network-reachable attacker to force OAuth credential refresh against credentials belonging to any workspace by exploiting incomplete prefix-based whitelist matching in the authentication middleware. The authentication bypass targets the OAuth2 credential refresh endpoint, where appending a trailing credential identifier satisfies the prefix check without triggering authorization logic. This is a confirmed bypass of CVE-2026-41273, meaning a prior patch for the same middleware was incomplete. No public exploit identified at time of analysis from KEV, though a public advisory with technical detail exists via the Caycon GitHub repository, and the product has been announced as sunset.
Unauthenticated credential disclosure in Dinky v1.2.5 exposes the full live system configuration - including cleartext API tokens, LDAP passwords, and object storage keys - via a single parameterless GET request to /api/sysConfig/getAll. The root cause is a method-level @SaIgnore annotation that silently overrides the class-level @SaCheckLogin guard in the Sa-Token framework, leaving the endpoint fully unprotected on the default port 8888. Critically, the leaked dinkyToken directly unlocks a sibling arbitrary file write endpoint (POST /download/uploadFromRsByLocal), meaning this disclosure neutralises token rotation as a mitigation for that chained vulnerability; no public exploit has been identified at time of analysis.
Broken access control in diboot-core's POST /common/load-related-data endpoint allows any authenticated user - including accounts with zero roles - to exfiltrate @JsonIgnore-annotated secret fields (authSecret, secretSalt) for every account in the system. The sole security guard, relatedDataSecurityCheck(), returns true unconditionally, making authorization enforcement completely absent. Because diboot uses Apache Shiro's two-iteration MD5 with an 8-character salt for password storage, disclosed hashes are trivially cracked offline, converting this confidentiality flaw into a full administrative takeover path. No public exploit code or CISA KEV listing is confirmed at time of analysis, but the low exploitation complexity and the fact that the endpoint is required by the official diboot-admin-ui frontend means the attack surface is present in any standard deployment.
Privilege escalation in ICS-Park Smart Park Management System v2.0 allows any authenticated low-privilege user to assume higher roles by sending crafted requests directly to the /system/role/save and /system/user/update endpoints, bypassing server-side authorization checks. The flaw affects RoleController.java and UserController.java, which fail to enforce permission boundaries before persisting role or user modifications. No public exploitation confirmed in CISA KEV, but a proof-of-concept is publicly available on GitHub, concretely lowering the bar for abuse by any user with a valid session.
Cross-workspace credential theft in Flowise through 3.1.4 exploits a missing workspace-scoped authorization check in the OpenAI Assistants integration, enabling authenticated users to access credentials owned by unrelated workspaces by supplying arbitrary credential UUIDs. The flaw exposes multi-tenant deployments: an attacker with any valid account can enumerate assistant metadata, retrieve file and vector store listings, and write files into victim workspaces without owning or having delegated access to the target workspace. No KEV listing at time of analysis, but a public advisory exists; the product appears to have entered sunset, potentially leaving the vulnerability unpatched.
Flowise through version 3.1.4 exposes document store mutation endpoints without enforcing authorization, allowing authenticated workspace members holding only view-level permissions to directly invoke upsert and refresh routes that should be restricted to higher-privileged roles. The missing server-side authorization check (CWE-862) enables a malicious insider or compromised view-only account to inject or overwrite vector database contents, trigger costly embedding API credit consumption, and corrupt knowledge bases that power downstream AI chatflows - without any UI-layer interaction. No public exploit has been identified at time of analysis, though the exploitation path is low-complexity given direct HTTP access suffices, and a disclosure advisory is publicly available on GitHub.
Authentication bypass in Apple's macOS Screen Sharing service allows a network-adjacent attacker to establish a Screen Sharing session without supplying valid credentials, granting interactive remote control of the target Mac. The flaw affects macOS Sequoia before 15.7.9, macOS Sonoma before 14.8.9, and macOS Tahoe before 26.6.1, and was reported by Apple Product Security itself. There is no public exploit identified at time of analysis and it is not in CISA KEV, though the state-management defect underlying it can be reached over the network with low complexity.
Unauthenticated database destruction and arbitrary SQL injection in Ground Station's Socket.IO server allows any network peer to permanently wipe or replace the entire SQLite database without credentials. The `database_backup` event handler on port 7000 accepts a caller-supplied SQL blob and executes it via raw `exec_driver_sql`, enabling complete erasure of satellite records, orbital sources, hardware configurations, and observation schedules, or implantation of malicious orbital-source URLs that redirect the ground station to attacker-controlled infrastructure on the next scheduled sync. No public exploit has been identified at time of analysis, and CISA KEV status is not confirmed, but the attack requires no authentication and no special configuration, making exploitation trivial from any host with network reach to port 7000.
Broken end-to-end encryption in OpenReception's appointment booking software before 1.0.4 lets any unauthenticated network attacker register their own ML-KEM-768 public key as an encryption recipient for any tenant's staff via POST /api/tenants/{tenantId}/staff/{staffId}/crypto. Because the handler logs an 'Unauthorized crypto key storage attempt' warning but inserts the row anyway, the attacker silently becomes a co-recipient of every future patient appointment for that tenant and can decrypt all payloads, defeating the platform's claim that even administrators cannot read sensitive data. No public exploit identified at time of analysis, but the CVSS 9.4 rating and full technical detail in the GHSA advisory make this a high-priority patch.
Account takeover in OpenReception's end-to-end encrypted appointment booking platform prior to 1.0.2 lets an unauthenticated attacker bind their own WebAuthn passkey to a victim's account. The registration handler at POST /api/auth/register/{userId} confirms the WebAuthn challenge matches the registration cookie's email but never checks that the {userId} in the URL belongs to that email, so an attacker registers a passkey for their own email against any victim's userId and is issued a session as the victim on the next login. No public exploit is identified at time of analysis (a live PoC is still pending) and it is not in CISA KEV, but the fix is confirmed in version 1.0.2.
Missing authorization in OpenReception's appointment booking platform (before 1.0.1) lets any unauthenticated network attacker POST to `/setup/create-admin-account` and mint additional GLOBAL_ADMIN accounts on an already-claimed, fully configured instance. The created account is immediately active (`is_active=true`, `confirmation_state=ACCESS_GRANTED`) with no email confirmation, granting full platform-level administrative control and successful login and tenant enumeration. There is no public exploit identified at time of analysis and it is not on CISA KEV, but the root cause is confirmed by the vendor GHSA advisory and fix commit.
Unauthorized document restoration in Frappe Framework exposes a missing authorization flaw where any authenticated user can invoke the restore and bulk_restore API endpoints to recover soft-deleted documents without possessing the required document-level permissions. Affected releases span all versions prior to 15.110.0 (v15 branch) and 16.20.0 (v16 branch). No public exploit or CISA KEV listing is present, but the low attack complexity and broad authenticated-user scope make this a credible insider or compromised-account threat with high integrity impact per the CVSS 4.0 signal.
Site isolation bypass in Google Chrome Workers allows a remote attacker who has already compromised the renderer process to cross origin boundaries and access data from other sites via a crafted HTML page. All Chrome versions prior to 151.0.7922.109 are affected. EPSS sits at 0.26% (17th percentile) and SSVC confirms exploitation status as none, meaning no public exploit or active exploitation has been identified at time of analysis - the elevated CVSS of 8.1 reflects worst-case impact if this flaw is chained with a renderer exploit, rather than standalone exploitability.
Cross-tenant insecure direct object reference in Amazon Strands Agents Tools' memory backends exposes multi-tenant deployments to unauthorized read, write, and delete operations on other tenants' stored memories. Authenticated users of versions before 0.8.3 can influence the LLM intermediary to emit tool calls carrying a forged namespace parameter, bypassing tenant isolation in mongodb_memory, elasticsearch_memory, and mem0_memory. No public exploit code or CISA KEV listing exists at time of analysis; the vendor-released fix is version 0.8.3.
Local privilege escalation in Sophos Endpoint for macOS (before 2026.1.1) and Sophos Home for macOS (before 10.11.6) allows any local user to execute arbitrary code with root privileges. The flaw stems from improper authorization (CWE-285) in the security agent's privileged components, so a low-privileged or unprivileged local account can fully compromise the host. No public exploit identified at time of analysis, but the CVSS 9.3 rating and scope change to root make this a high-priority patch for macOS fleets.
Payment bypass in the Payment Plugins for PayPal WooCommerce WordPress plugin (versions before 2.0.20) allows unauthenticated attackers to complete purchases without initiating an actual PayPal payment transaction. A missing authorization check on a REST endpoint means any unauthenticated HTTP client can trigger order completion, resulting in goods or services being fulfilled with no payment collected. No public exploit has been identified at time of analysis, but the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms the attack is trivially automatable against any internet-facing WooCommerce store running the affected plugin.
Payment bypass in the 'Integrate PhonePe with WooCommerce' WordPress plugin (through version 1.2.1) allows unauthenticated remote attackers to mark arbitrary WooCommerce orders as paid without making actual payment. The plugin fails on two independent validation layers: it does not bind a verified PhonePe transaction ID to the specific order being settled, and it does not authenticate the origin of payment-completion requests. An attacker with one valid transaction ID - obtained from any legitimate purchase, even a minimal-value one - can replay it against any other order on the same store. No public exploit identified at time of analysis, and the vulnerability is not in the CISA KEV catalog.
Account takeover in Statamic CMS allows unauthenticated network attackers to authenticate as any existing user - including super admins - by exploiting email-based OAuth user matching against providers that do not guarantee verified email addresses. Affected are all Statamic 5.x releases before 5.74.1 and all 6.x releases before 6.24.0 when OAuth is explicitly enabled with an untrusted provider. No public exploit code has been identified at time of analysis, but the published patch diff (PR #14887) fully discloses the vulnerable code path, materially lowering the barrier for independent exploit development.
Unauthenticated denial-of-service in sgoudelis/Ground Station prior to 0.6.0 allows any network peer to forcibly terminate the application process by emitting a single Socket.IO event requiring no credentials. Authentication enforcement is disabled and a wildcard CORS policy is in place, exposing the service_control handler - which triggers process shutdown via a restart_service command - to any host with TCP access to port 7000. In Docker deployments, the attack can be repeated in a loop to sustain a persistent outage of all satellite-tracking sessions, SDR recording pipelines, demodulators, decoders, and rotator controllers. No public exploit or CISA KEV listing is identified at time of analysis.
Authorization bypass across multiple API endpoints in eScriptorium through version 26.04.1 allows any authenticated user to read, modify, and delete transcription content belonging to other users. The root cause is a CWE-639 Insecure Direct Object Reference: primary keys supplied by the client in request bodies are resolved against the global Django model manager rather than a queryset scoped to the requesting user's own objects, eliminating all per-user data isolation on the Line, LineTranscription, VirtualCollection, tag, and process endpoints. No public exploit or active exploitation has been confirmed at time of analysis, but the low attack complexity makes this straightforward to exploit with a standard user account.
Missing authorization in eScriptorium through version 26.04.1 allows any authenticated remote user to hijack access rights to another user's private OCR model or revoke any user's model access via direct POST requests. The ownership check is implemented exclusively in get_context_data(), a Django method that executes only during GET-based template rendering, leaving the POST-based create and delete operations for OcrModelRight views entirely unguarded. This is a privilege escalation affecting multi-tenant institutional instances where researchers share the platform; no public exploit has been identified at time of analysis and the CVE is not in CISA KEV.
Unauthenticated remote shutdown of OpenChamber 1.11.7 is possible by sending a single POST request to /api/system/shutdown, terminating the server process and instantly denying service to all active AI coding sessions. The flaw stems from the /api/system/shutdown route being registered before the authentication middleware in the Express handler chain within bootstrap-runtime.js, meaning authentication is never evaluated for that endpoint regardless of whether UI_PASSWORD is configured. No public exploit code or CISA KEV listing has been identified at time of analysis, though the attack requires no privileges or user interaction and is trivially reproducible against any network-exposed instance.
Unauthenticated broken access control in BoldGrid's Total Upkeep WordPress backup plugin (versions up to and including 1.17.2) permits remote unauthenticated attackers to invoke privileged backup management functions without any authentication. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms trivial remote exploitation with no prerequisites beyond network reachability. The high availability impact (A:H) alongside low integrity impact (I:L) suggests attackers can delete, overwrite, or disrupt backup data, eliminating an organization's ability to recover from other incidents. No public exploit code or CISA KEV listing has been identified at time of analysis.
Broken access control in Frontend Admin by DynamiApps (WordPress plugin, versions ≤ 3.29.10) allows subscriber-level authenticated users to perform unauthorized privileged operations, resulting in high availability impact and limited integrity compromise on affected WordPress installations. The flaw stems from missing authorization checks (CWE-862), permitting low-privilege users to invoke restricted plugin functionality without proper capability verification. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Authentication bypass in the Login with Phone Number WordPress plugin (≤1.8.70) allows remote, unauthenticated attackers to circumvent the login mechanism via an authentication capture-replay technique (CWE-290), achieving full account takeover with high confidentiality, integrity, and availability impact. Exploitation carries high attack complexity (CVSS AC:H), meaning a specific race condition, token-interception window, or knowledge of a registered phone number is likely required. No public exploit or CISA KEV listing has been identified at time of analysis, but the attack surface is any internet-accessible WordPress site running the affected plugin.
Unauthenticated file exfiltration in Flowise 2.2.4-3.1.4 is possible because the POST /api/v1/openai-assistants-file/download endpoint was incorrectly added to the application's global authentication whitelist, causing all session and API key verification to be skipped unconditionally. Any remote, unauthenticated attacker who can supply valid chatflowId, chatId, and fileName identifiers can retrieve private files from any chatflow on the instance, including those belonging to other workspaces or organizations in a multi-tenant deployment. A public proof-of-concept exploit is available via GitHub, and no KEV listing has been confirmed at time of analysis.
Full application database read in Metabase is achievable by any authenticated low-privileged user due to a missing authorization check (CWE-862). Any user with a valid account - regardless of their assigned role or permissions - can issue requests that return the entire contents of the Metabase backend database, potentially exposing database connection credentials, API keys, user account data, and sensitive query results. No public exploit has been identified at time of analysis, but the low exploitation complexity and broad attacker pool (any registered user) make this a high-priority remediation item.
Cross-tenant authorization bypass in Dokploy 0.29.8 and earlier lets an authenticated organization member with backup permissions reach another organization's S3 backup destinations by supplying a client-controlled destinationId that is never checked against their active organization. Because the referenced destination's S3 accessKey and secretAccessKey are materialized on the attacker's service host, the attacker can read a victim tenant's backup objects and redirect or poison backups across tenant boundaries. No public exploit identified at time of analysis, but the flaw is trivially reachable and breaks the core multi-tenant isolation of the platform (CVSS 9.6, scope-changed).
Cryptographic signature validation failure in Pega Platform (Pega Infinity) versions 8.5.0 through 25.1.2 enables low-privileged network attackers to forge or manipulate JWT tokens, bypassing authentication and authorization controls. The vulnerability maps to CWE-347 and is tagged as a JWT attack vector capable of authentication bypass, with high confidentiality and integrity impact confirmed in the vendor's own CVSS 4.0 assessment. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and network accessibility make this a meaningful risk for any organization running affected Pega Infinity deployments.
Cross-organization server deletion and SSH key disclosure in Dokploy affects all instances running versions 0.28.7 through 0.29.12. The server.remove tRPC mutation accepts a caller-supplied serverId without verifying organizational ownership, allowing an authenticated owner or administrator in one organization to delete server registrations and all associated deployment records belonging to a completely separate organization - and to receive that organization's plaintext SSH private key as a side effect. No public exploit code has been identified at time of analysis, but the fix is available in version 0.29.13 and the GitHub advisory (GHSA-3rpx-c3j9-q99x) and patch PR are public.
Cross-tenant IDOR in Prospero Flow CRM before 5.4.8 allows any authenticated user to blindly overwrite contact records belonging to other companies and exfiltrate their personal data as vCard files, simply by supplying an arbitrary numeric contact ID. The contact save and vCard export endpoints performed no company-scoping on their database queries, so a user authenticated to Company A could tamper with or harvest contacts owned by Company B without any special knowledge beyond a valid integer identifier. No public exploit or CISA KEV listing has been identified at time of analysis, but the vulnerability is trivially exploitable in any multi-tenant deployment and the full fix has been released as v5.4.8 (and later v5.5.3).
Hard-coded credentials embedded in the Zyxel WAH7601 mobile Wi-Fi hotspot firmware expose sensitive constants within the device executable, enabling adjacent-network attackers without any prior privileges to bypass authentication and achieve high-impact confidentiality and integrity compromise. All WAH7601 firmware versions through 20.07.2026 are confirmed affected per TR-CERT advisory TR-26-0799 and NVD. No public exploit code or active exploitation has been identified at time of analysis, but the low attack complexity characteristic of CWE-798 makes this a credible near-term risk in environments where adjacent access is not tightly controlled.
Privilege escalation in Roskus Prospero Flow CRM before version 5.2.1 permits any authenticated user - regardless of assigned role - to grant any application role the complete set of system permissions by sending a crafted POST request to the permission save endpoint. The vulnerable `PermissionSaveController` accepted a user-supplied `roles` array and invoked Spatie Permission's `syncPermissions()` with no prior authorization check, making low-trust authenticated accounts a direct path to full administrative control. No public exploit or CISA KEV listing has been identified at time of analysis, but the publicly accessible commit diff documents the exact endpoint and flaw mechanism, substantially lowering the exploitation barrier for any attacker holding CRM credentials.
Missing authorization in OpenSignLabs opensignserver through 2.37.0 lets unauthenticated remote attackers irreversibly decline any in-flight signing document and forge the decline attribution to an arbitrary user. The vulnerable declinedoc Parse cloud function writes the IsDeclined flag, DeclineReason text, and a caller-supplied DeclineBy pointer to the document record without verifying the caller's identity, enabling both workflow termination and evidentiary record falsification. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.
Authentication bypass in opensignserver through 2.37.0 exposes all stored files to unauthenticated remote attackers by allowing them to mint MASTER_KEY-signed file access tokens via the getsignedurl Parse cloud function. The bypass requires no credentials and no prior knowledge of valid document records - supplying any arbitrary string as the docId parameter causes the function to skip its isAuthenticated check entirely and issue a fully trusted signed token. No public exploit code or CISA KEV listing exists at time of analysis, but the bypass condition is trivially reproducible from the CVE description alone, making this a realistic and immediate threat to any internet-exposed instance storing sensitive signed documents.
Cross-tenant authorization bypass in Attendize through commit 9289acb permits an authenticated organizer to inject persistent, mandatory survey questions into a different organizer's events by supplying an arbitrary event_id to the POST /event/{event_id}/question/create endpoint. The postCreateEventQuestion method resolves the target event without applying tenant-isolation scoping, so the write succeeds across tenant boundaries; the injected question is then irremovable by the victim because the victim's account-scoped delete path cannot resolve a record owned by another tenant. No public exploit has been identified at time of analysis, and the vulnerability has not been listed in the CISA KEV catalog.
Broken object-level authorization in OpenSignLabs OpenSignServer through 2.37.0 exposes complete contract records - including sender and signer PII and pre-signed document download URLs - to unauthenticated remote attackers via the getDocument Parse cloud function. The function internally calls useMasterKey, bypassing Parse's ACL enforcement, and returns full records whenever the document's IsEnableOTP flag is false, which is the default configuration across all deployments. No public exploit has been identified at time of analysis, but the network-accessible, zero-authentication attack path against default configurations makes this a high-priority data protection issue, particularly for organizations subject to GDPR or similar data regulation.
Unauthenticated remote access to all stored contract documents is possible in OpenSignLabs opensignserver through version 2.37.0 due to a missing authentication check in the fileupload Parse cloud function. Any unauthenticated attacker who can reach the endpoint can supply an arbitrary URL and receive a MASTER_KEY-signed file access token, completely defeating the only access control layer protecting stored documents. No public exploit has been identified at time of analysis, but the zero-privilege, low-complexity attack vector makes this highly accessible to unsophisticated threat actors.
Use-after-free in the Linux kernel's TIPC (Transparent Inter-Process Communication) subsystem lets a local actor trigger a write to freed slab memory via the accept() error path of tipc_sk_create(). When socket insertion into the per-netns rhashtable fails, sock->sk is left dangling instead of NULLed, so tipc_release() bypasses its own NULL guard and calls lock_sock() on the freed sk. It affects kernels using the AF_TIPC protocol across many stable branches (fixes backported to 5.4.x through 6.18.x and mainline 7.x); there is no public exploit identified at time of analysis and it is not in CISA KEV, with a low EPSS of 0.18%.
Recursive locking deadlock in the Linux kernel audit subsystem causes a complete, unrecoverable kernel hang when a file matching an executable audit rule is renamed. Affected kernels from 4.3 through stable branches prior to 6.6.148, 6.12.101, 6.18.42, 7.1.6, and 7.2-rc1 are vulnerable. Any local user able to rename a file that matches an active exe= audit rule can trigger the deadlock, forcing a hard reboot; no public exploit exists and EPSS is 0.18%, consistent with the specific preconditions required.
Missing authentication in dulldusk/phpFM through version 1.8.0 exposes the complete file manager to unauthenticated remote attackers because the default configuration ships with an empty auth_pass value. The flawed check in index.php (line 637, 'if ($auth_pass == '' || $loggedon==$auth_pass)') short-circuits to true whenever the password is unset, granting anyone full read, write, delete, and upload access to the server filesystem. CVSS 9.8 (CWE-306); no public exploit identified at time of analysis, though the vulnerable logic is directly visible in the referenced public source and is trivially reproducible.
Unauthenticated access to complete historical sensor data is possible in FUXA through version 1.3.3 because the DAQ_QUERY Socket.IO event handler in server/runtime/index.js omits the isSocketAdminAuthorized() check that guards every other sensitive Socket.IO event. Remote attackers can exfiltrate all sensor history without credentials even on deployments where secureEnabled=true is configured, silently undermining an operator's assumption that authentication is fully enforced. No public exploit code or CISA KEV listing has been identified at time of analysis, but the CVSS AV:N/AC:L/PR:N vector confirms this is trivially exploitable by any network-reachable party.
Remote unauthenticated account takeover in fastschema through v0.15.1 is enabled by a TOCTOU race condition in the OTP-based account recovery flow. The verifyOTPSession function in pkg/auth/local.go reads and increments the attempt counter in separate non-atomic operations, allowing concurrent HTTP requests to race past the attempt limit before any counter update is committed. With no effective limit enforced on a 6-digit OTP (1,000,000 possible values), an attacker can brute-force valid codes; no public exploit is identified at time of analysis and this CVE is not in CISA KEV.
Remote code execution in NASA fprime-gds through version 3.4.3 lets an unauthenticated remote attacker fully compromise the ground data system and inject arbitrary commands to any connected spacecraft. The Flask ground station exposes every endpoint without authentication (CWE-306), while a path traversal in the upload/download handler permits reading and writing arbitrary files, and a hardcoded Flask secret key (CWE-321) enables session forgery; chained, they yield code execution on the ground station host. No public exploit is identified at time of analysis, but the CVSS 9.8 rating and unauthenticated network vector make this a high-priority, real-world risk for anyone running F Prime ground software.
Improper authorization in Daptin through v0.12.34 lets unauthenticated remote guests perform full CRUD (read, create, update, delete) on all usergroup records, effectively bypassing access control on the platform's group and permission objects. The flaw arises because permission checks treat a null/zero UserId as a valid ownership match, so a guest whose session UserId is null is granted owner-level rights over ownerless usergroup rows. No public exploit identified at time of analysis, but the CVSS of 9.1 (network, no auth, no interaction) reflects that manipulating usergroups can be leveraged to escalate privileges and corrupt the platform's authorization model.
Cross-tenant authorization bypass in fosrl Pangolin through v1.20.0 lets an authenticated user reuse an access token minted for one resource to authenticate against any other resource in any organization. Because the authWithAccessToken.ts handler validates the token without binding it to the requested resourceId, a token scoped to resource X in organization A is accepted for resource Y in organization B, collapsing multi-tenant isolation. Rated CVSS 9.6 (CWE-639); no public exploit identified at time of analysis, though the vulnerable code path is disclosed in the referenced source file.
Unauthenticated access to Apache Ranger Download APIs on versions 2.8.0 and earlier exposes sensitive authorization policy data to any remote attacker with network connectivity. The missing authentication check (CWE-306) means no credentials or privileges are required to invoke these endpoints and retrieve their output. No public exploit code has been identified at time of analysis, but the low complexity and zero-authentication nature of the CVSS vector (AV:N/AC:L/PR:N/UI:N) makes this trivially exploitable by any attacker who can reach the Ranger Admin interface.
Improper access control in the Weaver component of Samsung Mobile devices allows a local attacker without elevated privileges to render the device inoperable, achieving high integrity and availability impact. All Samsung Mobile devices running Weaver prior to the SMR Aug-2026 Release 1 security update are affected. No public exploit code or active exploitation has been confirmed at time of analysis, but the low attack complexity and absence of privilege requirements lower the bar for abuse by a local threat actor.
Privilege escalation via REST API authentication bypass in the CheckView WordPress plugin before 2.3.2 allows an unauthenticated attacker to perform any REST action available to a logged-in administrator - including creating a new administrator account - by tricking an admin into opening a crafted link. The plugin's authentication filter is applied globally to all REST routes rather than only to CheckView's own endpoints, and it unconditionally discards authentication errors for any request whose URI merely contains a CheckView-specific string, bypassing WordPress's nonce enforcement entirely. A publicly available exploit from WPScan demonstrates this path; no confirmed active exploitation (CISA KEV) has been recorded at time of analysis.
Authentication bypass in the AutoNetTV Relay WordPress plugin (all versions before 3.0.14) allows unauthenticated remote attackers to obtain a WordPress administrator session cookie by triggering the plugin's scheduled content-synchronization task under a specific server configuration. The plugin issues an admin authentication cookie during the sync task without performing any capability or authorization check, and on servers where the scheduled task completes before the HTTP response is committed, the cookie is returned to the triggering request. A public proof-of-concept exploit exists, reported by WPScan; no KEV listing has been identified at time of analysis.
Account takeover via broken password-reset rate limiting in the Login & Register Forms WordPress plugin (versions before 4.0.2) allows unauthenticated remote attackers to brute-force verification codes and seize any account, including administrator accounts. Both the verification code and the per-source attempt counter are keyed on client-controlled data, meaning an attacker can reset the rate limit at will by manipulating that value - rendering the lockout mechanism entirely ineffective. Exploitation requires the 'verification-code reset mode' to be enabled; a publicly available proof-of-concept from WPScan demonstrates the technique, though EPSS sits at only 0.15% (4th percentile), indicating limited observed exploitation activity to date.
Account takeover in the Login & Register Forms WordPress plugin (before 4.0.2) is enabled by a fundamentally broken password reset verification design: the plugin keys the 'verification completed' state to a client-controlled value rather than binding it server-side to the account under reset or to the authenticated session of the party completing verification. An unauthenticated attacker who can observe or manipulate this state during or after a legitimate reset flow can claim ownership of that completed verification and set a new password for any targeted account, including administrator accounts. A publicly available exploit has been published by WPScan, and no public exploit identified at time of analysis translates to KEV, though POC availability materially lowers the exploitation threshold.
Password reset abuse in the Single Sign On For TNG WordPress plugin (versions before 2.2.0) allows unauthenticated attackers to reset the password of any account, including administrators, resulting in full site takeover. The flaw stems from improper validation of the password reset request, and publicly available exploit code exists, though EPSS scores the exploitation probability at a low 0.15% (4th percentile). It is not listed in CISA KEV, so exploitation is currently proof-of-concept rather than confirmed active in-the-wild use.
Unauthenticated content injection in Arvow AI SEO Writer WordPress plugin (before 1.5.4) allows remote attackers to create arbitrary posts and pages and extract author account and taxonomy information by exploiting a PHP type juggling flaw in a REST endpoint. The bypass is effective exclusively when the plugin has not been configured post-installation, making freshly deployed or abandoned instances the primary target. A public proof-of-concept is available via WPScan; despite this, EPSS sits at 0.15% (5th percentile) and no CISA KEV listing exists, indicating no public exploit has driven mass exploitation at time of analysis.
Account takeover in the BricksForge WordPress plugin (versions before 3.1.8.8) is enabled by a missing server-side identity check during password change form submissions, allowing unauthenticated remote attackers to set arbitrary passwords for any WordPress user, including site administrators. The vulnerable state is effectively the default configuration for any site that has deployed BricksForge's password update form action, since current-password verification is disabled by default in that action. A publicly available exploit exists; active exploitation has not been confirmed by CISA KEV, but the direct path to admin-level account takeover makes this a critical remediation priority for affected deployments.
Missing authorization controls in the File Manager WordPress plugin before version 6.9.1 allow any authenticated user - including low-privilege subscribers - to read and delete arbitrary files under the WordPress installation directory. The weakness exposes sensitive configuration secrets such as database credentials stored in wp-config.php, and enables deliberate denial of service through file deletion. A publicly available exploit exists per WPScan reporting, though EPSS remains very low (0.14%, 4th percentile), suggesting targeted rather than broadly automated exploitation at time of analysis.
Full network takeover via authentication bypass in the InfiniteWP Client WordPress plugin before 1.13.6 affects WordPress Multisite installations, where the plugin fails to validate the site-connection state and the authenticity of requests to its remote-management endpoint. Unauthenticated remote attackers can bind their own management key, hijack an administrator session, and gain control of every site in the network, culminating in remote code execution. No public exploit identified at time of analysis; EPSS is low at 0.19% (9th percentile) despite the maximal 9.8 CVSS, and a vendor patch is available.
Privilege escalation in the Solace Extra WordPress plugin (versions before 1.6.1) allows any authenticated user with Subscriber-level access to modify site-wide presentation settings and permanently delete imported site-builder content by exploiting missing capability checks across multiple AJAX endpoints. The plugin incorrectly exposes nonce values on admin-accessible pages that low-privileged users can reach, collapsing the intended authorization boundary between Subscriber and Administrator roles. A publicly available proof-of-concept exists via WPScan; no public exploit identified at time of analysis has been confirmed by CISA KEV, and the EPSS score of 0.13% (3rd percentile) reflects low observed exploitation probability to date.
The Home Assistant iOS Companion app silently executes tag-triggered automations when any co-installed untrusted app forwards a crafted tag event via iOS universal links, bypassing physical scan validation entirely. Affected versions are all iOS Companion app releases prior to 2026.5.0; the underlying Home Assistant core CPE (cpe:2.3:a:home-assistant:core:*:*:*:*:*:*:*:*) is also cited. Because automations can control physical devices such as smart locks and alarms, the I:H CVSS metric reflects real-world consequences beyond software state. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Silent automation execution in the Home Assistant Android Companion App prior to 2026.8.1 allows any co-installed app on the device to trigger arbitrary HA automations by forwarding a crafted tag URL to an exported Activity without user confirmation. The flaw exists because TagReaderActivity accepted both physical NFC intents and OS-routed deep links identically, with no caller validation or approval prompt before dispatching the tag scan to the Home Assistant server. No public exploit has been identified at time of analysis, but the attack is unattended and can control physical actuators such as locks or alarms.
The `$import-pnp` operation in Pathling Server allows low-privileged callers to supply an arbitrary `exportUrl`, causing the server to forward its configured PNP credentials to an attacker-controlled FHIR endpoint and stage the returned files as trusted local sources - effectively bypassing the `allowableSources` allowlist that guards the standard `$import` operation. All Pathling Server deployments prior to version 2.0.0 with PNP credentials configured are affected, with high confidentiality and integrity impact (credential theft and unauthorized data import). No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though the attack requires only low-privilege API access and is low-complexity.
Pathling Server before version 2.0.0 permits authenticated callers holding only coarse operation-level authorities (e.g., `pathling:search`) to act on arbitrary FHIR resource families - including resource types they are not explicitly authorized to read or write - because typed search, update, and batch handlers enforce the operation-level authority check but skip the documented per-resource authority check (e.g., `pathling:read:Patient`). The flaw breaks the two-factor authorization model the product documents, exposing potentially all FHIR resource families to any valid operation-authority holder. No confirmed active exploitation (not in CISA KEV) and no public exploit code has been identified at time of analysis; the vulnerability is fixed in Pathling Server 2.0.0.
Missing authentication in the LightRAG API server (HKUDS/LightRAG) through version 1.5.4 exposes every management endpoint to unauthenticated network attackers, because the server binds to 0.0.0.0 by default while authentication is off unless explicitly configured. Any attacker with network reach can read indexed document content, upload or delete documents, rewrite the knowledge graph, cancel ingestion pipelines, clear caches, and consume LLM/API credits. No public exploit identified at time of analysis, but exploitation is trivial via a single unauthenticated HTTP request, and the fix in 1.5.5rc1 is largely a hardening/warning change rather than an enforced secure default, so operator action is still required.
Insecure direct object reference in TestLink 1.9.20 and earlier allows any authenticated user - including low-privilege guest accounts - to retrieve arbitrary file attachments from projects they have no membership in, by supplying sequential integer IDs to the attachmentdownload.php endpoint. The handler performs no project membership or role authorization check, enabling bulk enumeration of all attachments across the entire installation. No public exploit has been confirmed at time of analysis, though a researcher writeup exists; the attack is trivially automatable due to the sequential integer ID scheme.
Incorrect authorization in the Nexus Repository 3 CE/Pro repository-creation UI allows an authenticated user with a format-scoped delegated repository-admin privilege to create repositories in unauthorized formats - bypassing the intended scope boundary. Affected are all releases from 3.0.0 through 3.94.x; version 3.95.0 resolves the flaw. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog, but the integrity impact is high given that unauthorized repository types could be introduced into a managed artifact store, potentially tainting software supply chain pipelines.
Insufficient session expiration in Sonatype Nexus Repository 3 allows a previously-authenticated user to retain full repository access after their account is deleted, deactivated, or their password is changed. Any user holding an active session at the moment of an administrative revocation event can continue reading, modifying, or deleting repository content until that session naturally times out - bypassing the intended access control action. No public exploit has been identified and this is not listed in CISA KEV, but the CVSS 4.0 score of 8.7 reflects the high-impact triad of confidentiality, integrity, and availability against network-accessible repositories once the prerequisite session exists.
Privilege escalation in Sonatype Nexus Repository 3 allows an authenticated low-privileged user - who holds the 'update privilege definitions' permission - to silently elevate themselves to full administrative access by editing wildcard privilege definitions already scoped to their own role. No additional authorization check, role reassignment, or administrator approval is required for this escalation. No public exploit code has been identified at time of analysis, but the CVSS 4.0 score of 8.9 and the complete confidentiality, integrity, and availability impact - including lateral impact on downstream systems - indicate high real-world risk for any organization using Nexus Repository 3 as a software supply chain hub.
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a remote, unauthenticated attacker to bypass authentication controls and gain unauthorized access to the systems management interface across Windows, RHEL 8.10/9.4, and SLES 15 deployments. The CVSS 3.1 base score is 9.8 (network vector, no privileges, no user interaction) with total confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and CISA SSVC lists exploitation as none, but the trivial attack path makes prompt patching important.
Persistent denial of service in Tobit Laboratories AG's TeamDavid (David/Webbox groupware) allows any remote, unauthenticated attacker to shut down the server by requesting the exposed /internalRestart endpoint, which fully halts the service rather than restarting it. All releases through Rollout 524 are affected, and recovery requires manual administrator intervention to bring the server back online. No public exploit identified at time of analysis, though the trigger is trivial (a single HTTP request to a known path).
Hardcoded plaintext credentials embedded in ZTE device firmware expose the web management interface to unauthorized access. The initial login credentials for the device's web interface are stored unencrypted within the firmware image, allowing any party who obtains the firmware to authenticate to any affected device. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the trivial nature of credential extraction from downloadable firmware files significantly elevates practical risk beyond what EPSS alone may reflect.
Integrity bypass in MStore API WordPress plugin (versions before 4.21.0) enables unauthenticated remote attackers to create fraudulent WooCommerce product reviews with arbitrary reviewer names, email addresses, and star ratings, completely circumventing the store's verified-purchase-only review restriction. The plugin's REST API review creation route applies neither authorization nor purchase-ownership validation, rendering the WooCommerce protection setting ineffective when the plugin is active. A publicly available proof-of-concept exists and SSVC confirms the attack is automatable, though the EPSS exploitation probability sits at just 0.14% (3rd percentile), suggesting limited real-world exploitation activity despite ease of execution.
Authentication bypass in the MStore API WordPress plugin before 4.21.0 lets an unauthenticated remote attacker mark any order as fully paid without processing a real payment, because several payment-completion endpoints trust the client-supplied completion signal instead of verifying it against the payment gateway. Any store using this plugin can be defrauded of goods, services, or digital downloads. A public exploit exists (WPScan) and a vendor patch is available, though EPSS remains low at 0.14%.
Account takeover in MStore API WordPress plugin before 4.21.0 is achievable by unauthenticated remote attackers who know a target's registered phone number, by forging a cryptographically invalid login token that the plugin fails to properly verify. This yields full control over the targeted account, including administrator-level WordPress accounts. A publicly available proof-of-concept exists; however, no CISA KEV listing is present and EPSS at 0.14% (3rd percentile) indicates low observed exploitation to date, likely constrained by the phone-number reconnaissance prerequisite.
Payment bypass in the WP Events Manager WordPress plugin before 2.2.5 lets any authenticated user register for a paid event and receive a fully completed booking without paying, because the plugin trusts an attacker-controlled quantity value and derives the charge from it. WPScan reports publicly available exploit code exists, though there is no evidence of active exploitation and the EPSS score is very low (0.13%, 3rd percentile). The flaw is a business-logic/authorization defect rather than a memory-safety issue, so impact is financial fraud against event organizers rather than server compromise.
Improper access control in V-Secure Jingyun Antivirus 2.4.2.39 allows a local low-privileged user to interact with the ZyArk.sys kernel driver in ways that bypass intended access restrictions, yielding high-impact compromise of confidentiality, integrity, and availability on the affected host. A publicly available proof-of-concept exploit (E:P per the CVSS 4.0 vector) lowers the bar for exploitation, though the local-only attack vector limits the exposure to already-authenticated users or post-initial-access scenarios. The vendor was contacted prior to disclosure but did not respond, meaning no official patch exists at time of analysis.
Unauthenticated account takeover in the TrueBooker Appointment Booking and Scheduler System plugin for WordPress (all versions through 1.2.3) allows remote attackers to reset the password of any account, including administrators, because a password-change action fails to verify the requester's authorization. Successful exploitation yields full admin login and therefore complete control of the WordPress site. No public exploit identified at time of analysis; the flaw was reported by Wordfence and an upstream fix is present in the plugin repository.
Local privilege escalation in Jiangmin Antivirus 21 exploits improper access controls in the kernel-mode driver kvcore.sys, specifically within the MessageNotifyCallback function of the Minifilter Port component. A low-privileged local attacker can send crafted messages to this communication port to bypass access enforcement, achieving high impact across confidentiality, integrity, and availability on the affected system. No public exploit identified at time of analysis is incorrect here - a publicly available exploit exists on GitHub, and the vendor did not respond to responsible disclosure, leaving no patch available.
DeepCool DisplayService 1.2.12 on Windows exposes an unauthenticated LocalSystem-level named pipe control channel that any low-privileged local user can connect to and manipulate, enabling full privilege escalation to SYSTEM. The root cause is CWE-284 (Improper Access Control) - the service's IPC channel enforces no caller authentication or ACL verification. A public proof-of-concept is available per VulDB and a researcher's writeup; the vulnerability is not currently listed in CISA KEV, indicating no confirmed mass exploitation, though the low attack complexity and available POC materially elevate near-term risk.
Privilege escalation in Microsoft Purview eDiscovery enables an authenticated low-privileged attacker to gain elevated access over the network, with full confidentiality, integrity, and availability impact once exploited. The vulnerability stems from improper access control (CWE-284), meaning the service fails to enforce authorization boundaries between privilege levels for eDiscovery operations such as case management, legal holds, and content searches. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been identified at time of analysis, though the low attack complexity and network accessibility make this a credible threat in Microsoft 365 enterprise environments.
Privilege elevation in Microsoft Teams lets a remote, unauthenticated attacker gain unauthorized access across a network due to a missing authorization check (CWE-862). The maximum 10.0 CVSS rating stems from a changed scope with high confidentiality and integrity impact, meaning the flaw reaches resources beyond the initially vulnerable component. No public exploit identified at time of analysis and the issue is not listed in CISA KEV, but the perfect-score, no-precondition profile makes it a top-tier patch priority.
Privilege elevation in Microsoft Planetary Computer Pro allows a remote, unauthenticated attacker to gain elevated privileges over the network by invoking a critical function that lacks an authentication check (CWE-306). Scored CVSS 10.0 with a scope change, the flaw exposes confidential data and permits unauthorized modification against the affected Azure geospatial platform. No public exploit identified at time of analysis, and it is not listed in CISA KEV, but the maximal score reflects trivial exploitability against exposed instances.
Cryptographic signature spoofing in Microsoft Teams exposes enterprise collaboration environments to unauthenticated identity impersonation over the network. The flaw, tagged as a JWT attack enabling authentication bypass, allows a remote attacker with no prior credentials to forge or tamper with token-based identity claims that Teams fails to properly verify. No active exploitation has been confirmed by CISA KEV, and no public proof-of-concept has been identified at time of analysis, though the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates a low-barrier, remotely exploitable path with high integrity impact.
Privilege elevation in Microsoft Teams allows an authenticated attacker with low-level access to bypass authentication controls and gain higher privileges across a network boundary. The CVSS:3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H) shows the flaw is remotely reachable, requires only low existing privileges, needs no user interaction, and crosses a security scope to compromise confidentiality and integrity of resources beyond the initially authorized context. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV, but the 9.6 base score reflects the low barrier to abuse once an attacker holds any authenticated Teams foothold.
Privilege elevation in Microsoft 365 Admin Center allows a remote, unauthenticated attacker to gain elevated permissions by exploiting improper verification of a cryptographic signature (CWE-347), consistent with the vendor-supplied 'Authentication Bypass' and 'JWT Attack' tags. The maximal 9.8 CVSS with a fully network-reachable, no-privilege, no-interaction vector makes this a critical bypass of the admin portal's trust boundary. No public exploit identified at time of analysis, and it is not currently listed in CISA KEV.
Privilege elevation in Microsoft Azure SQL Managed Instance lets an unauthenticated network attacker cross the intended communication-channel boundary and gain elevated privileges, carrying a scope-changed CVSS of 10.0 that reflects likely cross-tenant or cross-service impact in this multi-tenant PaaS offering. Microsoft tags it as an authentication bypass exposing high-value confidentiality and integrity, with no availability loss. There is no public exploit identified at time of analysis and EPSS probability is low (0.36%, 29th percentile), consistent with a vendor-discovered, service-side issue rather than mass exploitation.
Privilege elevation in Microsoft's Azure SRE Agent lets an already-authorized, low-privilege network actor gain higher privileges by exploiting a missing authorization check (CWE-862). Rated CVSS 9.9 with a scope change, the flaw means an attacker holding only limited access to the service can cross a trust boundary and reach resources or actions reserved for higher-privilege identities. No public exploit has been identified at time of analysis and it is not on the CISA KEV list, but the near-maximum score and cloud-service exposure make it a high-priority patch item.
Privilege elevation in Microsoft Power Apps allows an unauthorized, network-based attacker to gain elevated permissions by abusing improper authorization checks, with a scope change (S:C) indicating the impact crosses a security boundary beyond the initially compromised component. Exploitation requires some user interaction (UI:R) but no prior authentication (PR:N), and results in high confidentiality and integrity impact. At time of analysis there is no public exploit identified and the issue is not listed in CISA KEV; the CVSS base score is 9.3 (Critical).
Elevation of privilege in Microsoft Azure SQL Database lets an unauthorized network attacker bypass authentication and gain higher privileges, with a maximum CVSS 10.0 and a scope change indicating the flaw extends impact beyond the initially vulnerable component. The CVSS vector (PR:N/UI:N) means no credentials or user interaction are required, making this a critical priority despite no public exploit being identified. As a managed cloud service, remediation is handled server-side by Microsoft rather than by customer patching.
Information disclosure in Microsoft Azure Logic Apps allows an authenticated, low-privileged attacker to read data they should not have access to across a network, with a scope-changed CVSS 3.1 score of 9.6 reflecting potential cross-boundary (multi-tenant) impact. The flaw stems from improper access control (CWE-284) in the cloud workflow-automation service; Microsoft is the reporter and remediation is delivered service-side. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, though the high score and scope change warrant prompt attention.
Local privilege escalation in udisks2 exploits insufficient polkit authorization on the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method, allowing a low-privileged user with an active console session to spoof the 'as-user' parameter and mount filesystems on behalf of arbitrary users, including root. The attack specifically leverages fstab entries carrying 'user' or 'users' mount options, which are common on desktop Linux installations, to bypass the authorization check entirely. A vendor-released patch exists in udisks 2.11.2; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated OAuth token rotation in Flowise through 3.1.4 allows any network-reachable attacker to force OAuth credential refresh against credentials belonging to any workspace by exploiting incomplete prefix-based whitelist matching in the authentication middleware. The authentication bypass targets the OAuth2 credential refresh endpoint, where appending a trailing credential identifier satisfies the prefix check without triggering authorization logic. This is a confirmed bypass of CVE-2026-41273, meaning a prior patch for the same middleware was incomplete. No public exploit identified at time of analysis from KEV, though a public advisory with technical detail exists via the Caycon GitHub repository, and the product has been announced as sunset.
Unauthenticated credential disclosure in Dinky v1.2.5 exposes the full live system configuration - including cleartext API tokens, LDAP passwords, and object storage keys - via a single parameterless GET request to /api/sysConfig/getAll. The root cause is a method-level @SaIgnore annotation that silently overrides the class-level @SaCheckLogin guard in the Sa-Token framework, leaving the endpoint fully unprotected on the default port 8888. Critically, the leaked dinkyToken directly unlocks a sibling arbitrary file write endpoint (POST /download/uploadFromRsByLocal), meaning this disclosure neutralises token rotation as a mitigation for that chained vulnerability; no public exploit has been identified at time of analysis.
Broken access control in diboot-core's POST /common/load-related-data endpoint allows any authenticated user - including accounts with zero roles - to exfiltrate @JsonIgnore-annotated secret fields (authSecret, secretSalt) for every account in the system. The sole security guard, relatedDataSecurityCheck(), returns true unconditionally, making authorization enforcement completely absent. Because diboot uses Apache Shiro's two-iteration MD5 with an 8-character salt for password storage, disclosed hashes are trivially cracked offline, converting this confidentiality flaw into a full administrative takeover path. No public exploit code or CISA KEV listing is confirmed at time of analysis, but the low exploitation complexity and the fact that the endpoint is required by the official diboot-admin-ui frontend means the attack surface is present in any standard deployment.
Privilege escalation in ICS-Park Smart Park Management System v2.0 allows any authenticated low-privilege user to assume higher roles by sending crafted requests directly to the /system/role/save and /system/user/update endpoints, bypassing server-side authorization checks. The flaw affects RoleController.java and UserController.java, which fail to enforce permission boundaries before persisting role or user modifications. No public exploitation confirmed in CISA KEV, but a proof-of-concept is publicly available on GitHub, concretely lowering the bar for abuse by any user with a valid session.
Cross-workspace credential theft in Flowise through 3.1.4 exploits a missing workspace-scoped authorization check in the OpenAI Assistants integration, enabling authenticated users to access credentials owned by unrelated workspaces by supplying arbitrary credential UUIDs. The flaw exposes multi-tenant deployments: an attacker with any valid account can enumerate assistant metadata, retrieve file and vector store listings, and write files into victim workspaces without owning or having delegated access to the target workspace. No KEV listing at time of analysis, but a public advisory exists; the product appears to have entered sunset, potentially leaving the vulnerability unpatched.
Flowise through version 3.1.4 exposes document store mutation endpoints without enforcing authorization, allowing authenticated workspace members holding only view-level permissions to directly invoke upsert and refresh routes that should be restricted to higher-privileged roles. The missing server-side authorization check (CWE-862) enables a malicious insider or compromised view-only account to inject or overwrite vector database contents, trigger costly embedding API credit consumption, and corrupt knowledge bases that power downstream AI chatflows - without any UI-layer interaction. No public exploit has been identified at time of analysis, though the exploitation path is low-complexity given direct HTTP access suffices, and a disclosure advisory is publicly available on GitHub.
Authentication bypass in Apple's macOS Screen Sharing service allows a network-adjacent attacker to establish a Screen Sharing session without supplying valid credentials, granting interactive remote control of the target Mac. The flaw affects macOS Sequoia before 15.7.9, macOS Sonoma before 14.8.9, and macOS Tahoe before 26.6.1, and was reported by Apple Product Security itself. There is no public exploit identified at time of analysis and it is not in CISA KEV, though the state-management defect underlying it can be reached over the network with low complexity.
Unauthenticated database destruction and arbitrary SQL injection in Ground Station's Socket.IO server allows any network peer to permanently wipe or replace the entire SQLite database without credentials. The `database_backup` event handler on port 7000 accepts a caller-supplied SQL blob and executes it via raw `exec_driver_sql`, enabling complete erasure of satellite records, orbital sources, hardware configurations, and observation schedules, or implantation of malicious orbital-source URLs that redirect the ground station to attacker-controlled infrastructure on the next scheduled sync. No public exploit has been identified at time of analysis, and CISA KEV status is not confirmed, but the attack requires no authentication and no special configuration, making exploitation trivial from any host with network reach to port 7000.
Broken end-to-end encryption in OpenReception's appointment booking software before 1.0.4 lets any unauthenticated network attacker register their own ML-KEM-768 public key as an encryption recipient for any tenant's staff via POST /api/tenants/{tenantId}/staff/{staffId}/crypto. Because the handler logs an 'Unauthorized crypto key storage attempt' warning but inserts the row anyway, the attacker silently becomes a co-recipient of every future patient appointment for that tenant and can decrypt all payloads, defeating the platform's claim that even administrators cannot read sensitive data. No public exploit identified at time of analysis, but the CVSS 9.4 rating and full technical detail in the GHSA advisory make this a high-priority patch.
Account takeover in OpenReception's end-to-end encrypted appointment booking platform prior to 1.0.2 lets an unauthenticated attacker bind their own WebAuthn passkey to a victim's account. The registration handler at POST /api/auth/register/{userId} confirms the WebAuthn challenge matches the registration cookie's email but never checks that the {userId} in the URL belongs to that email, so an attacker registers a passkey for their own email against any victim's userId and is issued a session as the victim on the next login. No public exploit is identified at time of analysis (a live PoC is still pending) and it is not in CISA KEV, but the fix is confirmed in version 1.0.2.
Missing authorization in OpenReception's appointment booking platform (before 1.0.1) lets any unauthenticated network attacker POST to `/setup/create-admin-account` and mint additional GLOBAL_ADMIN accounts on an already-claimed, fully configured instance. The created account is immediately active (`is_active=true`, `confirmation_state=ACCESS_GRANTED`) with no email confirmation, granting full platform-level administrative control and successful login and tenant enumeration. There is no public exploit identified at time of analysis and it is not on CISA KEV, but the root cause is confirmed by the vendor GHSA advisory and fix commit.
Unauthorized document restoration in Frappe Framework exposes a missing authorization flaw where any authenticated user can invoke the restore and bulk_restore API endpoints to recover soft-deleted documents without possessing the required document-level permissions. Affected releases span all versions prior to 15.110.0 (v15 branch) and 16.20.0 (v16 branch). No public exploit or CISA KEV listing is present, but the low attack complexity and broad authenticated-user scope make this a credible insider or compromised-account threat with high integrity impact per the CVSS 4.0 signal.
Site isolation bypass in Google Chrome Workers allows a remote attacker who has already compromised the renderer process to cross origin boundaries and access data from other sites via a crafted HTML page. All Chrome versions prior to 151.0.7922.109 are affected. EPSS sits at 0.26% (17th percentile) and SSVC confirms exploitation status as none, meaning no public exploit or active exploitation has been identified at time of analysis - the elevated CVSS of 8.1 reflects worst-case impact if this flaw is chained with a renderer exploit, rather than standalone exploitability.
Cross-tenant insecure direct object reference in Amazon Strands Agents Tools' memory backends exposes multi-tenant deployments to unauthorized read, write, and delete operations on other tenants' stored memories. Authenticated users of versions before 0.8.3 can influence the LLM intermediary to emit tool calls carrying a forged namespace parameter, bypassing tenant isolation in mongodb_memory, elasticsearch_memory, and mem0_memory. No public exploit code or CISA KEV listing exists at time of analysis; the vendor-released fix is version 0.8.3.
Local privilege escalation in Sophos Endpoint for macOS (before 2026.1.1) and Sophos Home for macOS (before 10.11.6) allows any local user to execute arbitrary code with root privileges. The flaw stems from improper authorization (CWE-285) in the security agent's privileged components, so a low-privileged or unprivileged local account can fully compromise the host. No public exploit identified at time of analysis, but the CVSS 9.3 rating and scope change to root make this a high-priority patch for macOS fleets.
Payment bypass in the Payment Plugins for PayPal WooCommerce WordPress plugin (versions before 2.0.20) allows unauthenticated attackers to complete purchases without initiating an actual PayPal payment transaction. A missing authorization check on a REST endpoint means any unauthenticated HTTP client can trigger order completion, resulting in goods or services being fulfilled with no payment collected. No public exploit has been identified at time of analysis, but the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms the attack is trivially automatable against any internet-facing WooCommerce store running the affected plugin.
Payment bypass in the 'Integrate PhonePe with WooCommerce' WordPress plugin (through version 1.2.1) allows unauthenticated remote attackers to mark arbitrary WooCommerce orders as paid without making actual payment. The plugin fails on two independent validation layers: it does not bind a verified PhonePe transaction ID to the specific order being settled, and it does not authenticate the origin of payment-completion requests. An attacker with one valid transaction ID - obtained from any legitimate purchase, even a minimal-value one - can replay it against any other order on the same store. No public exploit identified at time of analysis, and the vulnerability is not in the CISA KEV catalog.
Account takeover in Statamic CMS allows unauthenticated network attackers to authenticate as any existing user - including super admins - by exploiting email-based OAuth user matching against providers that do not guarantee verified email addresses. Affected are all Statamic 5.x releases before 5.74.1 and all 6.x releases before 6.24.0 when OAuth is explicitly enabled with an untrusted provider. No public exploit code has been identified at time of analysis, but the published patch diff (PR #14887) fully discloses the vulnerable code path, materially lowering the barrier for independent exploit development.
Unauthenticated denial-of-service in sgoudelis/Ground Station prior to 0.6.0 allows any network peer to forcibly terminate the application process by emitting a single Socket.IO event requiring no credentials. Authentication enforcement is disabled and a wildcard CORS policy is in place, exposing the service_control handler - which triggers process shutdown via a restart_service command - to any host with TCP access to port 7000. In Docker deployments, the attack can be repeated in a loop to sustain a persistent outage of all satellite-tracking sessions, SDR recording pipelines, demodulators, decoders, and rotator controllers. No public exploit or CISA KEV listing is identified at time of analysis.
Authorization bypass across multiple API endpoints in eScriptorium through version 26.04.1 allows any authenticated user to read, modify, and delete transcription content belonging to other users. The root cause is a CWE-639 Insecure Direct Object Reference: primary keys supplied by the client in request bodies are resolved against the global Django model manager rather than a queryset scoped to the requesting user's own objects, eliminating all per-user data isolation on the Line, LineTranscription, VirtualCollection, tag, and process endpoints. No public exploit or active exploitation has been confirmed at time of analysis, but the low attack complexity makes this straightforward to exploit with a standard user account.
Missing authorization in eScriptorium through version 26.04.1 allows any authenticated remote user to hijack access rights to another user's private OCR model or revoke any user's model access via direct POST requests. The ownership check is implemented exclusively in get_context_data(), a Django method that executes only during GET-based template rendering, leaving the POST-based create and delete operations for OcrModelRight views entirely unguarded. This is a privilege escalation affecting multi-tenant institutional instances where researchers share the platform; no public exploit has been identified at time of analysis and the CVE is not in CISA KEV.
Unauthenticated remote shutdown of OpenChamber 1.11.7 is possible by sending a single POST request to /api/system/shutdown, terminating the server process and instantly denying service to all active AI coding sessions. The flaw stems from the /api/system/shutdown route being registered before the authentication middleware in the Express handler chain within bootstrap-runtime.js, meaning authentication is never evaluated for that endpoint regardless of whether UI_PASSWORD is configured. No public exploit code or CISA KEV listing has been identified at time of analysis, though the attack requires no privileges or user interaction and is trivially reproducible against any network-exposed instance.
Unauthenticated broken access control in BoldGrid's Total Upkeep WordPress backup plugin (versions up to and including 1.17.2) permits remote unauthenticated attackers to invoke privileged backup management functions without any authentication. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms trivial remote exploitation with no prerequisites beyond network reachability. The high availability impact (A:H) alongside low integrity impact (I:L) suggests attackers can delete, overwrite, or disrupt backup data, eliminating an organization's ability to recover from other incidents. No public exploit code or CISA KEV listing has been identified at time of analysis.
Broken access control in Frontend Admin by DynamiApps (WordPress plugin, versions ≤ 3.29.10) allows subscriber-level authenticated users to perform unauthorized privileged operations, resulting in high availability impact and limited integrity compromise on affected WordPress installations. The flaw stems from missing authorization checks (CWE-862), permitting low-privilege users to invoke restricted plugin functionality without proper capability verification. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Authentication bypass in the Login with Phone Number WordPress plugin (≤1.8.70) allows remote, unauthenticated attackers to circumvent the login mechanism via an authentication capture-replay technique (CWE-290), achieving full account takeover with high confidentiality, integrity, and availability impact. Exploitation carries high attack complexity (CVSS AC:H), meaning a specific race condition, token-interception window, or knowledge of a registered phone number is likely required. No public exploit or CISA KEV listing has been identified at time of analysis, but the attack surface is any internet-accessible WordPress site running the affected plugin.