Authentication Bypass
Monthly
Payment verification bypass in the FlxWoo WordPress plugin before 3.1.1 allows unauthenticated attackers to complete WooCommerce orders without paying, because the plugin marks orders as paid without confirming the checkout session was actually settled with the payment processor. Publicly available exploit code exists, and a vendor patch is released; no active exploitation is confirmed in CISA KEV. The flaw enables fraudulent free acquisition of goods or services from any store running the plugin.
Full device takeover in Rich Source DMS+ (Non-Mobile) is possible because the product ships with a hard-coded API key that is identical across all deployments. Unauthenticated remote attackers who obtain or extract this fixed key can authenticate to the management interface and seize control of every installed DMS+ device, with maximal confidentiality, integrity, and availability impact (CVSS 4.0 base 10.0). There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
Arbitrary file upload in the Realtyna Organic IDX (WPL Real Estate) plugin for WordPress affects all versions up to and including 5.3.0, allowing authenticated attackers with subscriber-level access to write attacker-controlled files to the server and potentially achieve remote code execution. The flaw chains missing extension/content validation in saveLiveImages() with a weak authorization check on the get_keys() AJAX handler and a missing authentication check on the REST API import endpoint. Reported by Wordfence and scored CVSS 8.8; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass via OAuth audience confusion in Google mcp-toolbox 1.4.0 lets any holder of a valid Google OAuth access token reach protected tools and backend data. The flaw triggers when a Google authService is configured with mcpEnabled: true but no audience or clientId, causing the opaque-token path in ValidateMCPAuth to skip audience validation, so tokens minted for entirely unrelated Google ecosystem apps are accepted. Reported by Google itself; no public exploit identified at time of analysis and the CVSS 4.0 vector carries E:U (exploit unproven).
Authorization bypass in Google mcp-toolbox v1.3.0 and v1.4.0 lets an unauthenticated remote attacker invoke tools that were meant to be protected by the scopeRequired MCP-auth feature by routing tool-invocation requests through the legacy direct HTTP API endpoints, which do not honor those scope checks. Exploitation requires the server to be started with the --enable-api flag alongside scope-protected tools. There is no public exploit identified at time of analysis (CVSS 4.0 exploit maturity is Unproven), but the flaw carries high confidentiality, integrity, and availability impact because the exposed tools can act on backend data sources.
Authentication bypass in libiec61850 v1.6's GOOSE receiver (parseGoosePayload() in goose_receiver.c) lets an attacker on the substation network replay a captured GOOSE frame to be accepted as authentic, defeating the intended message authentication. The library implements IEC 61850 protocols used in electrical-grid protection and automation, so spoofed GOOSE traffic can drive false relay/breaker actions. Publicly available exploit code exists (PoC repo and SSVC-rated PoC), but there is no CISA KEV listing and EPSS is low at 0.26%, indicating no confirmed widespread exploitation.
Cross-site WebSocket hijacking in MeshCentral 1.1.21 lets unauthenticated remote attackers steal the server sessionKey and forge session cookies for any user, including administrators, ultimately gaining full remote control of every device managed by the instance. The flaw stems from an origin-validation bypass that only manifests on deployments using self-signed certificates, and it requires an authenticated admin to be lured into visiting attacker-controlled content (CVSS 4.0 8.6, UI:A). A vendor fix exists (PR #7882 / commit f04c9f4); there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full root compromise of Toptech Systems RCU II+ and Multiload II+ terminal automation controllers is possible because they expose an unauthenticated Target Communications Framework (TCF) debug service on a network-reachable port. Any attacker on the adjacent network segment can connect and gain complete control of the underlying embedded Linux system without credentials. Reported via CISA ICS-CERT (ICSA-26-211-03); no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Cross-tenant data compromise in Clastix Kamaji (Hosted Control Plane Manager for Kubernetes) before 26.7.4-edge lets one tenant read, modify, or destroy another tenant's control-plane state. Kamaji's defaulting webhook derived each TenantControlPlane's datastore schema, database user, and etcd key prefix from a lossy namespace-and-name normalization that replaced dashes with underscores, so two tenants whose names normalize to the same string (e.g. 'a-b' vs 'a_b') were assigned identical datastore identifiers and silently shared backing storage. No public exploit identified at time of analysis and it is not in CISA KEV, but the root cause is confirmed by the vendor advisory (GHSA-4f3f-65vx-r34f) and the fixing commit, which now uses the immutable resource UID.
Remote code execution in LazyOwn RedTeam/APT Framework (grisuno/lazyown) before 0.2.154 allows unauthenticated attackers to run arbitrary OS commands on the C2 server. The lazyc2.py component registers a Socket.IO input event handler with no authentication that passes attacker-supplied data.get('value') through LazyOwnShell.one_cmd into subprocess.call(command, shell=True), yielding full command execution in the C2 process. CVSS 9.8 (AV:N/AC:L/PR:N/UI:N) reflects unauthenticated network-reachable execution; no public exploit identified at time of analysis, though the vulnerable code path and its fix are fully disclosed in the vendor commit.
Denial of service in GoAccess before version 1.11 allows an unauthenticated remote client to crash the built-in real-time WebSocket server by sending a crafted frame whose 64-bit extended payload length is truncated into a signed 32-bit field before the maximum-frame-size guard runs. The truncation lets the length check be bypassed, triggering an approximately 18-exabyte memory allocation request that fails and terminates the process. No public exploit identified at time of analysis, but the upstream fix commit and GitHub Security Advisory GHSA-5gm5-pvh2-wg46 confirm the root cause and remediation.
Remote code execution in Microsoft Azure Cosmos DB allows an unauthorized, unauthenticated attacker to execute code over a network by abusing an improper access control (authentication bypass) flaw. Microsoft rates it CVSS 10.0 with a scope change, meaning a successful attack against the managed database service can impact resources beyond the initially vulnerable component. No public exploit has been identified at time of analysis (CVSS exploit maturity is Unproven), and it is not on the CISA KEV list, but the maximum severity and network-reachable, no-privilege profile make it a top-priority fix.
Payment-authorization bypass in the Sylius Mollie Plugin (versions before 2.2.8, 3.2.4, and 3.3.1) lets an unauthenticated attacker mark any victim order as paid without transferring funds. The plugin's POST /{_locale}/update-payment webhook trusts attacker-supplied id and orderId parameters and never verifies that the referenced Mollie payment belongs to the referenced Sylius order, so possession of any single valid paid Mollie payment ID is enough to forge a paid status on arbitrary orders. There is no public exploit identified at time of analysis and the flaw is not in CISA KEV, but the root cause is straightforward and the impact is a direct financial-fraud primitive against the shop.
Privilege escalation via authorization bypass in Wolf CMS (through 0.8.3.1) lets any authenticated non-administrative user reach the BackupRestoreController and create, download, and restore site backups that should be admin-only. The root cause is a PHP operator-precedence mistake in the permission-check expression, so the access control evaluates incorrectly and grants low-privileged accounts admin-tier backup functionality. Publicly available exploit code exists (published by VulnCheck), but there is no public exploit identified in CISA KEV, so active exploitation is not confirmed.
Broken authorization in OpenProject before 17.6.0 lets authenticated users holding only the edit_work_packages permission manipulate file-storage links they should not control. By submitting _links.fileLinks to PATCH /api/v3/work_packages/{id}, an attacker lacking manage_file_links can resolve Storages::FileLink records by raw id to detach or hard-delete them, re-parent FileLinks from other projects onto their own work package, and read origin filename, origin id, and MIME-type metadata. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is remotely reachable by any low-privileged project editor.
Remote code execution in Somta Juggle through version 1.6.0 lets unauthenticated network attackers run arbitrary OS commands by reaching the bundled H2 database web console, which ships exposed at /h2-console with default credentials. Because the stock Docker image runs as root, successful exploitation via the classic H2 CREATE ALIAS Runtime.exec() technique yields root-level code execution on the host container. No public exploit identified at time of analysis, though the VulnCheck advisory provides a detailed exploitation path.
Unauthenticated API access in Spikster (all versions through commit e1cdf8c) lets remote attackers reach roughly 50 backend endpoints because the CipiAuth middleware is registered but never bound to any route group, leaving the entire API open. Attackers can provision and enumerate servers, reset root passwords, read and write arbitrary files on the host, and create database users without any credentials. No public exploit identified at time of analysis, though a public GitHub issue and a VulnCheck advisory document the flaw in detail.
SGLang versions up to and including v0.5.15 expose unauthenticated network endpoints that allow complete model weight exfiltration when the server is deployed without API key authentication. Attackers can abuse distributed weight broadcasting via NCCL - the same mechanism used for legitimate inter-GPU weight distribution - to redirect all model weights to an attacker-controlled destination, resulting in total confidentiality loss of what may be highly valuable proprietary ML assets. No public exploit code or CISA KEV listing is confirmed at time of analysis; EPSS at 0.19% (9th percentile) reflects low observed exploitation activity, consistent with this being a targeted threat against specialized ML infrastructure rather than opportunistic mass exploitation.
Broken object-level authorization in IBM Langflow OSS 1.0.0 through 1.10.1 lets an authenticated low-privileged user read and tamper with build jobs belonging to other users by abusing improper access control on log-retrieval and unauthenticated build endpoints. Because Langflow orchestrates LLM/agent workflow builds, a cross-tenant attacker can view sensitive build logs (high confidentiality impact) and interfere with others' jobs (limited availability impact). A vendor patch is available; there is no public exploit identified at time of analysis and the flaw is not on CISA KEV.
Security constraint bypass in IBM WebSphere Application Server 8.5/9.0 (Traditional) and WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.7 allows a remote, unauthenticated attacker to circumvent access controls and reach protected resources, resulting in disclosure of confidential information (CVSS 3.1 base 7.5, C:H). The flaw stems from an authentication-bypass-by-alternate-name weakness (CWE-289) in how the server evaluates security constraints. IBM has released a fix; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass in SolarWinds Web Help Desk (WHD) allows remote unauthenticated attackers to circumvent SAML 2.0 single sign-on and gain access to the application when the SAML 2.0 authentication method is enabled. The flaw (CWE-287, Improper Authentication) is rated CVSS 9.8 with full confidentiality, integrity, and availability impact, meaning a successful bypass yields authenticated-level access to help desk data and administrative functions. No public exploit identified at time of analysis and it is not listed in CISA KEV; the high score reflects the pre-authentication network reachability of the SAML endpoint rather than confirmed in-the-wild activity.
Insecure Direct Object Reference (IDOR) in the foreUP customer REST API exposes records belonging to arbitrary users to any authenticated, low-privilege customer account. The endpoint returns user records based on a caller-supplied identifier without verifying that the requesting customer owns or is authorized to access the requested record. No active exploitation has been confirmed (not listed in CISA KEV), and EPSS places real-world exploitation probability at 0.13% - well below the 3rd percentile - though the high CVSS score of 8.1 reflects the potential confidentiality and integrity impact if an adversary with a valid account begins enumerating records.
Credential disclosure and admin authentication bypass in OpenCost before 1.121.0 lets remote unauthenticated attackers read cloud provider secrets and tamper with billing configuration. The GET /helmValues endpoint ships with no authentication and returns the base64-decoded HELM_VALUES environment variable containing cloud credentials, while adminAuthMiddleware fails open when ADMIN_TOKEN is unset, allowing POST /serviceKey to overwrite GCP service account keys and redirect billing calls. Publicly available exploit code exists and a vendor patch (v1.121.0) is released; no public active-exploitation record (not in CISA KEV) at time of analysis.
Cross-tenant data disclosure in Julep's get_execution_details endpoint allows any authenticated tenant to read other tenants' execution records by supplying arbitrary execution_id values. Exposed data includes task inputs, outputs, metadata, and temporal task tokens, breaking multi-tenant isolation. Publicly available exploit code exists (VulnCheck-reported), though the flaw is not listed in CISA KEV - no public exploit identified as actively exploited at time of analysis.
Authentication bypass via JWT assertion replay in malach-it Boruta (an Elixir OAuth 2.0/OpenID Connect provider) from 2.3.0 before 2.3.7 lets an attacker who captures any previously valid client assertion re-authenticate as that OAuth client indefinitely, because the token endpoint never checks the assertion's expiry. An attacker who harvests a signed client_secret_jwt or private_key_jwt assertion from logs, proxies, or browser tooling can mint access tokens carrying the victim client's privileges. No public exploit identified at time of analysis, though the fix commits and regression tests publicly demonstrate both the flawed and corrected behavior.
Unauthenticated Wiki Markup rendering in Apache JSPWiki up to 2.12.3 exposes sensitive data stored in internal JSPWiki variables to remote attackers. The flaw stems from a missing authentication check (CWE-306) on the markup rendering endpoint, allowing any network-reachable attacker to trigger rendering and extract variable contents without credentials. No public exploit has been identified and EPSS sits at a low 0.21% (12th percentile), but the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms trivially easy remote unauthenticated exploitation against default deployments. Vendor patches are available.
Privilege escalation via user impersonation affects Apache JSPWiki through version 2.12.3, where the UserManager component fails to properly validate identity checks, letting attackers assume other users' identities and elevate their privileges. The flaw is classified as an authentication bypass (CWE-290) and carries a CVSS 9.8, though its EPSS score is low (0.16%, 6th percentile) and no public exploit has been identified at time of analysis. A vendor patch is available in version 2.12.4.
Authentication bypass in FTC Software IT Services' FTC E-Commerce Management Panel before 1.0.2 lets remote unauthenticated attackers reach a critical function that is missing access controls (CWE-306), exposing sensitive data and permitting limited unauthorized modification. The CVSS 3.1 base score is 8.2 (AV:N/AC:L/PR:N/UI:N, C:H/I:L/A:N), reflecting easy network exploitation with high confidentiality impact. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Authentication bypass to root in Bosch BSH ELP (Electronic Platform) modules stems from a hardcoded, non-revocable SSH public key baked into the firmware's authorized_keys file for the root user. Any attacker holding the matching private key can SSH in and obtain full root-level control of the appliance over the network with no legitimate credentials. There is no public exploit identified at time of analysis and the issue is not in CISA KEV, but the shared static-key design means a single leak of the private key would compromise every affected device at once.
Authentication bypass in Gladinet CentreStack before 17.2 lets unauthenticated remote attackers read, write, and delete arbitrary account settings by hitting API endpoints that lack authorization checks (CWE-306). Because a static shared encryption key is used to generate valid encrypted EntAcctId values, an attacker can forge identifiers for any user GUID - including the system-wide cluster settings account - to enumerate hosted tenant domains and administrator identities. There is no public exploit identified at time of analysis, but the flaw was surfaced by VulnCheck and requires no authentication.
Unauthenticated OS user-account creation in Gladinet CentreStack before 17.3 lets remote attackers abuse an insecure deserialization path in GSNamespace.dll to add arbitrary local Windows accounts. By posting a crafted base64-encoded XML StorageConfigure value to the exposed jsonimportuserbyupn/jsonimportuserbyupnex/japiimportuserbyupn endpoints, an attacker (no credentials, per CVSS PR:N) drives InternalImportAdUserByUPN() to call NetUserAdd with attacker-chosen credentials and to create arbitrary server directories. No public exploit identified at time of analysis and it is not in CISA KEV, but the same product family has a prior history of actively exploited flaws, so weight this accordingly.
Authentication bypass in VMware vCenter's Directory Service (vmdir) lets an attacker with network reachability to vCenter defeat the authentication algorithm and obtain unauthorized access without valid credentials. Because vCenter is the central management plane for vSphere environments, this exposes control over the entire virtual estate; the flaw is remotely exploitable with no privileges or user interaction (CVSS 9.8). At time of analysis there is no public exploit identified and it is not listed in CISA KEV, but the reporting vendor (VMware/Broadcom) rates it critical.
Arbitrary plugin installation in the WP Swings Subscriptions for WooCommerce plugin (versions up to and including 2.0.0) lets authenticated users with shop manager privileges or higher install and activate any plugin from the WordPress.org repository through the wps_sfw_install_plugin_configuration AJAX handler, which performs no capability check (CWE-862). Because a shop manager is normally barred from managing plugins, this grants an unauthorized privileged capability that can be chained to full site compromise by installing a separately vulnerable plugin. Reported by Wordfence with a CVSS 7.2; no public exploit is identified at time of analysis and it is not on CISA KEV.
Account takeover in osTicket (the open-source support ticketing system) before v1.17.8 and v1.18.4 stems from an inverted logic check (CWE-640) in the password-reset token validation routine, where the expiry check runs only when the token's timestamp lookup fails - so any token with a valid timestamp bypasses expiration entirely. An attacker who obtains a valid reset token can replay it after it should have expired to hijack the associated account. Rated CVSS 4.0 9.1 (Critical); no public exploit identified at time of analysis and not listed in CISA KEV.
Backend reconfiguration in Phoenix Contact CHARX SEC EV charging controllers is possible without any authentication because the CHARX OCPP Agent service exposes management functionality to unauthenticated remote callers (CWE-306). Any network-adjacent attacker can repoint the charger's OCPP backend connection, causing denial-of-service and disclosure of confidential data routed to an attacker-controlled backend. No public exploit is identified at time of analysis, but the CVSS 4.0 base score of 9.3 and full unauthenticated network reach make this a high priority for operators of affected charge controllers (firmware below 1.9.1).
Unauthenticated reconfiguration of Phoenix Contact CHARX SEC EV charging controllers is possible through the JupiCore service, which exposes charging-point management functions without any authentication (CWE-306). Remote attackers reachable on the network can rewrite charging-point configuration to disclose charging-point UIDs, tamper with files, and cause a Denial-of-Service against affected SEC-3000/3050/3100/3150 units running firmware 1.0.0 up to (but not including) 1.9.1. No public exploit identified at time of analysis, but the vendor (via CERT@VDE) has released a fixed firmware and the flaw is trivially exploitable given the missing authentication.
Missing authentication on the MQTT broker embedded in Phoenix Contact CHARX SEC electric-vehicle charging controllers allows a remote attacker who can reach the broker to take full control of the device. Because the broker enforces no authentication and relies solely on an external firewall for protection, any actor able to route to the MQTT service can issue broker commands leading to complete compromise. Rated CVSS 4.0 9.3 (critical); no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass in Rocket.Chat's SAML SSO before 8.7.0 (and the 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, 7.10.14 branch fixes) lets a remote unauthenticated attacker log in as any user, including administrators, via an XML Signature Wrapping attack. The parser validated that a signature was cryptographically correct against the trusted IdP certificate but never bound that signature to the samlp:Response/saml:Assertion actually processed, so forged identity attributes wrapped alongside a genuine signature were accepted. There is no public exploit identified at time of analysis, but a HackerOne report and an upstream patch with signature-scope regression tests exist; EPSS/KEV data was not provided.
Broken authorization in the Eventin WordPress plugin before 4.1.16 lets unauthenticated visitors create orders and supply their own order status, marking those orders as paid without ever completing payment. Because the order-creation endpoint neither authorizes the requester nor validates the payment state, remote attackers can forge fully-paid transactions, undermining ticket/event revenue integrity. Publicly available exploit code exists (reported by WPScan), though EPSS remains low at 0.15% and it is not listed in CISA KEV.
Unauthenticated option overwrite in the WP Travel Engine WordPress plugin before 6.8.2 lets any anonymous visitor tamper with a site-wide plugin setting because an AJAX action lacks a capability check and the nonce that gates it is served to logged-out users. Attackers do not need credentials; publicly available exploit code exists, though EPSS remains low (0.15%, 4th percentile) and the flaw is not on CISA KEV. Impact is integrity-only, with no direct data disclosure or denial of service.
Full account takeover in the Customer Switching WordPress plugin before 2.1.3 allows a low-privileged user, while an operator is actively switched into their account, to be resolved as that operator and switch into any permitted account including an administrator. Publicly available exploit code exists (reported by WPScan), though EPSS remains low at 0.14% (4th percentile) and it is not in CISA KEV; no public exploit identified as actively used at time of analysis.
Remote unauthenticated access-control bypass in the Performance Co-Pilot (PCP) pmproxy component lets attackers reach the /store endpoint and overwrite arbitrary PMDA (Performance Metrics Domain Agent) metric values, which the reporter (Red Hat) states can escalate to arbitrary code execution and full system takeover. The flaw affects PCP as shipped across Red Hat Enterprise Linux 6 through 10 and OpenShift Container Platform 4. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-reachable, no-authentication attack surface makes exposed pmproxy instances a meaningful risk.
Remote code execution in the Spring Tools IDE extensions (Spring Tools for Eclipse ≤5.2.0 and for VSCode/Cursor/Theia ≤2.2.0) occurs when a developer launches a Spring Boot application with the 'live information' mode enabled, which exposes an unprotected JMX endpoint that an adjacent-network attacker can abuse to execute arbitrary code on the developer's host. The flaw carries a CVSS 8.0 (High) rating and requires the developer to actively start the app in live mode (UI:R). There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Full account takeover in the FleekDash V2 WordPress plugin (versions ≤ 2.6.2.2) lets a low-privileged Subscriber overwrite the email address and password of any user, including administrators, via a missing authorization check (CWE-862). The impact is amplified because the public /wp-json/fleekdash/v1/register REST endpoint auto-provisions a Subscriber account and returns a valid REST nonce regardless of the site's users_can_register setting, so an attacker needs no pre-existing credentials - one prior request bootstraps everything needed for the takeover. Reported by Wordfence with a CVSS of 8.8; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Arbitrary code execution in Adobe Campaign Classic (ACC) versions 7.4.3 build 9397 and earlier stems from an incorrect authorization flaw (CWE-863) that lets remote attackers run code in the context of the current user without any user interaction. Adobe's PSIRT reported the issue and rates it CVSS 9.8; it is tagged as an authentication-bypass-to-RCE chain. There is no public exploit identified at time of analysis, and it is not on CISA KEV, but SSVC flags the technical impact as total and the attack as automatable.
Site isolation bypass in Google Chrome prior to 151.0.7922.72 lets a remote attacker who has already compromised the renderer process read or tamper with data belonging to other origins by serving a crafted HTML page, defeating one of Chrome's core sandbox boundaries. Chromium rates the severity High and a fixed Stable-channel build has shipped; there is no public exploit identified at time of analysis and EPSS is low at 0.30% (23rd percentile). The flaw is an input-validation weakness (CWE-20) in the Passwords component that undermines the per-site process separation guarantee.
Discretionary access control bypass in Google Chrome desktop before 151.0.7922.72 lets an adversary in a privileged network position defeat a cryptographic protection and manipulate protected traffic. The flaw stems from a cryptographic weakness (CWE-325) rather than a memory-safety bug, and Google rates the Chromium severity High. No public exploit has been identified, EPSS is low (0.19%), and it is not on CISA KEV, but SSVC scores Technical Impact as total and Automatable as yes.
Authentication bypass in Outstatic CMS versions 2.1.9 and earlier lets an unauthenticated remote attacker forge valid administrative session tokens because the application ships a hardcoded JWT signing secret that is used whenever the OST_TOKEN_SECRET environment variable is left unset. Since the fallback secret is published in the project's public source repository, any attacker can self-sign a JWT granting arbitrary identity and full admin permissions with no credentials. There is no public exploit identified at time of analysis, but the technique is trivial and requires only the publicly-visible secret.
Embedded malicious JavaScript (a supply-chain backdoor) in VaahCMS 2.0.0-2.3.4 executes attacker-controlled code in any browser that renders the security-OTP Blade email template with JavaScript enabled, reported by VulnCheck and rated CVSS 4.0 9.2. The obfuscated payload opens a WebSocket to a hardcoded command-and-control endpoint, keylogs password fields via a MutationObserver, scrapes WhatsApp Web DOM content, and accepts remote commands to redirect or overwrite the rendered page. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the malicious code ships in the product itself, so exposure is inherent to running an affected version.
Session hijacking in the MCP Ruby SDK (mcp gem) before 0.23.0 lets an attacker who obtains a valid session ID issue tools/call requests that execute inside the victim's session, because StreamableHTTPTransport validates only session existence and idle timeout without binding a session to its owner. Affected deployments are those exposing the streamable HTTP transport; the flaw enables cross-session action execution and in-flight request tampering (e.g. notifications/cancelled). No public exploit identified at time of analysis and the issue is not in CISA KEV; the vendor CVSS 4.0 score is 8.3 (integrity-focused).
Remote unauthenticated denial-of-service in ATEN Unizon lets attackers crash or hang the service by reaching the RpcProvider class, which exposes functionality without any authentication check (CWE-306). Any network-reachable attacker can send requests that trigger the availability impact without credentials or user interaction. No public exploit identified at time of analysis and the flaw is not in CISA KEV, but it was discovered and reported through Trend Micro's Zero Day Initiative (ZDI-CAN-29041 / ZDI-26-272).
Secret exfiltration in Flyto Core (flytohub/flyto-core) before 2.26.6 arises because the workflow-engine variable resolver expands ${env.VAR} for any host environment variable with no allowlist or capability-policy check. Because interpolation runs in the engine before the module chokepoint, an attacker who can influence a workflow parameter can read arbitrary host secrets even when the env.get and env.load_dotenv modules are explicitly denylisted, then leak them through modules that are still allowed. No public exploit identified at time of analysis; the vendor commit and GHSA advisory confirm the flaw and its fix in 2.26.6. CVSS 8.6 with a scope change (CVSS:3.1/S:C/C:H) reflects that impact crosses the intended sandbox boundary into the host credential store.
Unauthenticated SSRF and secret exfiltration in Flyto Core (flytohub/flyto-core) prior to 2.26.7 lets remote attackers coerce the standalone flyto-verification service into making attacker-directed outbound requests. The service listens on 0.0.0.0:8344 with no authentication and accepts a client-supplied callback_url, then issues an outbound POST carrying the X-Internal-Key: $FLYTO_RUNNER_SECRET header while skipping the target_allowed allowlist, so an attacker can both reach internal-only endpoints and steal the runner secret. Rated CVSS 9.3 (scope-changed). No public exploit identified at time of analysis and it is not listed in CISA KEV, but the fix and root cause are fully documented in the vendor GHSA advisory and patch commit.
Server-side request forgery in IBM WebSphere Application Server (traditional 9.0 and 8.5) and WebSphere Application Server Liberty (17.0.0.3 through 26.0.0.8) lets remote unauthenticated attackers coerce the server into issuing arbitrary requests when the SIP container feature (sipServlet-1.1) is enabled. The flaw carries a CVSS 9.8 rating with total technical impact, and IBM has released a fix (advisory node/7281721); no public exploit is identified at time of analysis and EPSS exploitation probability is low at 0.33%.
Authorization bypass in Google's Agent Development Kit (adk-python) lets an actor who can inject or manipulate events in an agent's session history forge a tool-confirmation response and force execution of tools that were never approved. The human-in-the-loop confirmation gate is defeated because the framework never verified that the confirmed tool was registered to the executing agent, that the tool actually required confirmation, or that the confirmation arguments matched the original tool-call event. No CISA KEV listing and no standalone public exploit were provided, though the CVSS 4.0 vector carries E:P (proof-of-concept exploit maturity); remediation is an upstream commit rather than a tagged release.
Authentication and authorization bypass in Synopsys/Black Duck Coverity Connect (versions 2023.6.0 through 2026.3.0) allows an unauthenticated attacker to reach certain protected API endpoints by sending a specially crafted HTTP request, exposing data held within Coverity. The flaw stems from a Spring Security misconfiguration classified as CWE-288 (authentication bypass using an alternate path or channel). It carries a CVSS 4.0 score of 9.2 (Critical); no public exploit has been identified at time of analysis, and the AC:H/AT:P metrics indicate exploitation is non-trivial despite requiring no authentication.
Improper authorization in Zitadel's user self-management API lets any authenticated user obtain the plaintext email/phone verification code for their own account and mark those contact details as verified without ever proving control of them. This is an incomplete-fix follow-up to CVE-2026-27946 (GHSA-282g-fhmx-xf54): that advisory blocked setting email.is_verified:true via UpdateHumanUser, but additional code paths still returned the verification code to the self-managing user. It affects Zitadel 2.43.0-2.71.19, 3.0.0-3.4.10, and 4.0.0-4.15.0, letting attackers claim ownership of emails/phones they do not control and bypass email-based security policies. No public exploit identified at time of analysis.
Robot account token disclosure in Red Hat Quay 3 allows a user assigned to the GLOBAL_READONLY_SUPER_USERS role to read the tokens of robot accounts belonging to repositories they are not a member of. Because these tokens are long-lived registry credentials, the read-only superuser can escalate a view-only role into full impersonation of any robot account, gaining whatever push/pull and repository permissions that robot holds. No public exploit identified at time of analysis; not listed in CISA KEV.
Hardcoded static credentials in Cisco Secure Firewall Management Center (FMC) Software allow an unauthenticated remote attacker to log in to the web interface using a built-in low-privileged account and access sensitive data. The flaw affects an extensive range of FMC versions from 7.0.0 through 10.0.1 and is rooted in CWE-259 (Use of Hard-coded Password). Cisco has self-elevated the Security Impact Rating to High - despite a CVSS 5.3 Medium score - explicitly because this credential foothold can be chained with other FMC vulnerabilities to escalate privileges, making the real-world risk materially higher than the base score implies. No public exploit or CISA KEV listing has been confirmed at time of analysis.
Server-side request forgery in Prebid Server (Go) versions before 4.4.0 lets remote unauthenticated attackers coerce the ad server into making HTTP requests to attacker-chosen destinations. Multiple bidder adapters (e.g. acuityads, adhese, bidmachine) interpolate an unvalidated user-supplied 'host'/'account' bid-request parameter directly into outbound URLs, enabling extraction of host-environment data and access to internal network services. No public exploit identified at time of analysis, but the fix commit and GHSA advisory are public; EPSS was not provided.
Unauthenticated API access in NASA AMMOS Instrument Toolkit (AIT) Deep Space Network Interface before 2.2.2 lets remote attackers control spacecraft communication sessions with no credentials. Seven Space Link Extension (SLE) interface-manager routes are exposed without any authentication, allowing an attacker to start or stop Deep Space Network sessions, read telemetry frame data, and inject arbitrary frames into active spacecraft links. Reported by VulnCheck and rated CVSS 4.0 9.3; no public exploit is identified at time of analysis, but the missing-auth flaw is trivially reachable over the network.
Missing authentication in NASA-AMMOS AIT-GUI before 2.5.1 lets any unauthenticated network attacker mint a valid session via Sessions.create() and then push arbitrary commands onto the spacecraft command bus through handle_cmd(). Because no credential check gates session creation and no authorization gate sits between session issuance and command dispatch, a remote attacker can issue arbitrary spacecraft commands. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Cluster-wide ingress denial of service in Kong Operator's embedded Kong Kubernetes Ingress Controller (KIC) lets a tenant holding only namespace-scoped Secret creation rights halt all ingress configuration changes across the entire cluster. Because the embedded KIC gathers CA-certificate Secrets from every watched namespace using only a label selector - with no ingress-class or namespace scoping - an attacker can plant a Secret whose user-controlled CA-certificate ID collides with an existing one, causing Kong Gateway to reject the whole configuration document. This is a missing-authorization (CWE-862) flaw reported by Kong; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Cluster-wide ingress denial of service in Kong Kubernetes Ingress Controller (KIC) allows a tenant holding only namespace-scoped Secret creation rights to halt all ingress configuration changes across every watched namespace. Because KIC gathers CA-certificate Secrets by label selector alone - ignoring ingress-class and namespace boundaries - and derives the CA-certificate primary key from a user-supplied Secret field, a low-privileged user can create a duplicate CA-certificate ID that forces Kong Gateway to reject the entire configuration document. Reported by Kong; no public exploit identified at time of analysis and not listed in CISA KEV.
Cross-project subnet mutation in OpenStack Neutron's subnetpool onboarding feature allows an authenticated tenant to modify subnets belonging to other projects, breaking multi-tenancy isolation. Affected releases span 2025.1/epoxy through the in-development 2026.2/hibiscus branch. No public exploit code has been identified at time of analysis, and CISA KEV listing is absent, but the multi-tenant nature of the affected deployments elevates real-world impact for shared cloud environments.
Two-factor authentication bypass in TeamViewer Full Client and Host for macOS before 15.80 lets an already-authenticated, high-privileged attacker circumvent the configured 2FA 'Connections approval' control on the Unattended Access feature and establish a full remote session to the target Mac. The flaw is a business-logic error in the connection-approval flow (CWE-288) rather than a memory-safety issue, and successful exploitation yields interactive control of the host. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV.
Missing authorization in MWDB Core's Remote Instances proxy API (versions >=2.2.0 to <2.19.0) lets an unauthenticated remote attacker relay arbitrary requests to a linked remote MWDB instance, executing them with the identity and permissions of the API key configured for that remote link. This effectively impersonates the API-key owner on the remote instance and enables unauthorized actions there. No public exploit identified at time of analysis; the flaw was reported by CERT-PL and is fixed in 2.19.0.
Node.js's Permission Model - enabled via the --permission flag - incorrectly grants access rights when an internal radix tree node is split during path resolution, allowing a locally executing low-privileged process to escape its configured filesystem access policy on versions 22.x through 22.23.1, 24.x through 24.18.0, and 26.x through 26.5.0. The scope change in the CVSS vector (S:C, C:H, I:H) reflects that a successfully exploiting process can read and write files on the host filesystem beyond what its permission policy permits - effectively defeating the sandbox. No public exploit code exists and CISA KEV listing is absent; EPSS at 0.14% (3rd percentile) reflects that real-world exploitation is currently minimal, consistent with the non-default nature of the affected feature.
Authentication bypass in the Gridbox page-builder extension for Joomla (versions before 2.20.2) lets remote unauthenticated attackers take over any account on the target site. The flaw resides in the extension's socialLogin method, which fails to properly verify identity and allows an actor to authenticate as any chosen user - including administrators. Rated CVSS 4.0 10.0 (CWE-284 Improper Access Control); no public exploit is identified at time of analysis, though the vendor product page and a third-party research blog document Gridbox critical issues.
Unauthenticated account takeover in the Gridbox page-builder extension for Joomla (versions before 2.20.2) allows any remote attacker to reset the password of arbitrary user accounts through the exposed resetPassword method, then log in and act as those users. Super administrator accounts are explicitly out of scope, but all other roles - including regular administrators, editors, and managers - can be seized. The maximum CVSS 4.0 base score of 10.0 reflects unauthenticated, low-complexity, network-reachable exploitation; no public exploit has been identified at time of analysis, though the CVSS threat metrics flag automatability and exploitation evidence.
Arbitrary recursive directory deletion in the Gridbox extension for Joomla (versions before 2.20.2) lets remote unauthenticated attackers destroy directory trees on the server through the exposed generateNewApp method, which fails to enforce access control (authentication bypass). Rated CVSS 4.0 9.2 (Critical) with a high availability impact on both the vulnerable component and subsequent systems, this is a data-destruction / denial-of-service flaw rather than a code-execution or data-theft one. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated directory creation in the RO CSVI (CSV Improved) import/export extension for Joomla affects all versions from 1.0.0 through 9.11.0, allowing remote attackers with no authentication to create arbitrary directories on the server. The flaw is an access-control failure (CWE-284) tagged by the reporter as an authentication bypass, carrying a CVSS 7.5. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Local privilege escalation in open-iscsi's iscsiuio component lets any unprivileged local user connect to the iscsiuio control socket and issue commands normally restricted to root, because the daemon validated peer credentials against the wrong file descriptor. The flaw (CWE-863 Incorrect Authorization) was reported by SUSE and fixed upstream in commit 668ca1df; there is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Privilege escalation in the balbooa Gridbox extension for Joomla (versions before 2.20.2) lets unauthenticated actors self-register accounts while supplying arbitrary Joomla usergroup IDs, so an attacker can create an account placed directly into an administrative usergroup. Because the registration handler trusts client-supplied group assignments, exploitation grants full site takeover with no prior credentials. No public exploit has been identified at time of analysis, but the trivial network-based nature makes it high priority.
Local privilege escalation and authentication bypass in Schneider Electric EcoStruxure Cybersecurity Admin Expert allows a local, high-privileged attacker to abuse weak protection of stored credentials (CWE-522) to modify credentials without authorization and bypass authentication, potentially pivoting to compromise the OT/industrial devices the tool manages. Schneider Electric published security notice SEVD-2026-195-02, and the CVSS 4.0 base score is 8.7 (High) with a scope change into subsequent systems. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Arbitrary post and page deletion in the Meta Box AIO plugin for WordPress (versions up to and including 3.8.0) allows unauthenticated attackers to destroy any content on the site. The MB Frontend Submission extension's template_redirect dispatcher routes the mbfs_delete action without any capability or ownership check, and its nonce protection is unreachable on non-AJAX requests, so any page hosting a frontend submission form becomes a deletion endpoint. No public exploit identified at time of analysis, but the trivial GET-based vector and 9.1 CVSS make this a high-priority integrity/availability threat.
Access control bypass in Apache Traffic Server (8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3) allows remote attackers to defeat IP-based access restrictions, both on Unix Domain Socket (UDS) listeners and through faulty ACL matching logic. Because ATS commonly fronts internal origin servers and management endpoints, bypassing these IP allow/deny lists can expose protected backend resources that operators believed were network-restricted. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but the fix is vendor-confirmed in the Apache advisory.
Request smuggling and policy bypass in Apache Traffic Server (branches 8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3) arises because the proxy silently truncates over-long HTTP header names, causing two distinct header names to alias to the same value. A network attacker can exploit this desynchronization to smuggle requests past the proxy and bypass security or routing policy. No public exploit has been identified at time of analysis, but the CVSS 9.3 rating and CWE-444 classification mark this as a high-priority proxy integrity flaw affecting a core CDN/caching component.
Access control bypass in Apache Traffic Server versions 9.0.0 through 9.1.14 and 10.0.0 through 10.1.3 lets remote unauthenticated attackers subvert authorization enforcement at the proxy, tagged by Apache as an authentication bypass (CWE-284). Because Traffic Server acts as a caching/reverse proxy, the flaw's impact lands on backend systems it fronts rather than on the proxy process itself. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the CVSS 4.0 base score is 7.0 (High).
Missing authorization on admin REST endpoints in Apache Atlas 0.8.0 through 2.5.0 allows any authenticated user - regardless of assigned role - to perform privileged administrative operations that should be restricted to administrators. The flaw spans 15 release versions across a multi-year window, affecting all standard deployments of the atlas-webapp component. No public exploit has been identified at time of analysis and the CVE is not listed in CISA KEV, but the low exploitation complexity (any valid credential suffices) makes this a meaningful insider and credential-compromise threat in enterprise data governance environments.
Account takeover in the miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) WordPress plugin before 7.8.0 lets unauthenticated attackers hijack any account, including administrators. The optional email-verification one-time code is not bound to the account it was issued for, so an attacker requests a code for an email they control and replays it against a victim's email to obtain a valid session. Publicly available exploit code exists (WPScan) and a vendor patch is available, though EPSS remains low at 0.14%.
Two-factor authentication bypass in the UsersWP WordPress plugin before 1.2.67 lets an attacker who already possesses a victim's username and password skip the second authentication factor and fully log in as that user. The two-factor login handler fails to validate the selected authentication provider (CWE-287), so the 2FA step can be circumvented. Publicly available exploit code exists and a vendor patch is released, but there is no public exploit identified as actively exploited in the wild.
Authentication bypass in the Advanced Responsive Video Embedder (ARVE) WordPress plugin version 10.8.7 lets unauthenticated attackers log in as any existing administrator by supplying a known hardcoded token. Because the token is a static SHA-256 hash embedded in the publicly readable plugin source, anyone can extract it and gain full administrative control of an affected site. Wordfence attributes this to a likely supply-chain compromise of the developer's account, and while no public exploit is identified at time of analysis, the EPSS score is modest (0.59%, 45th percentile) despite the maximal 9.8 CVSS.
Improper enforcement of the `--no-delete` flag in goshs WebDAV server allows unauthorized file deletion or overwrite. The `MOVE` handler incorrectly treats the verb as write-only without checking the delete restriction, permitting remote attackers using WebDAV clients to bypass the `--no-delete` boundary via a `MOVE` request with `Overwrite: T`. A public proof-of-concept exists, and the vendor has patched this in version 2.1.4.
An authorization bypass in goshs’s bulk zip-download route allows unauthenticated attackers to read any file protected solely by a per-folder .goshs ACL, circumventing both folder-based authentication and per-file block lists. The vulnerability affects goshs v2.x up to 2.1.0 and all v1.x versions. A proof-of-concept is publicly available, demonstrating the bypass against a patched version that had addressed a related ACL gap on write/delete routes but left the read path unprotected.
An incomplete fix for CVE-2026-40884 in goshs v2.1.3 allows unauthenticated attackers to bypass SFTP authentication and gain full file read, write, and delete access when the server is started with `-b 'user:' -sftp` and without the `-fkf` flag. Publicly available exploit code exists, and the root cause is a logic flaw in the password handler registration that was not fully addressed in the prior patch.
A DNS rebinding flaw in datamodel-code-generator's SSRF guard allows unauthenticated remote attackers to bypass the default `allow_private_network=False` restriction and reach internal services. The vulnerability affects versions prior to 0.63.0, where a time-of-check/time-of-use gap between URL validation and connection enables rebinding to private IPs. A public proof-of-concept exists, though no active exploitation in the wild is reported at this time.
Sensitive information disclosure in IBM Cloud Pak System 2.3.5.0 allows local attackers to obtain credentials from log files. The CVSS score is 7.5 with a network vector, but the description explicitly states local access, creating ambiguity. No public exploit or active exploitation has been identified at the time of analysis.
Unauthenticated administrative access in IBM WebSphere Application Server 9.0 and 8.5 due to broken access control allows remote attackers to gain full control of the server. The vulnerability resides in the administrative console and requires no credentials or user interaction, leading to complete confidentiality, integrity, and availability impact. No public exploit code is known, but a vendor patch is available to remediate this critical risk.
Remote code execution in IBM WebSphere Application Server Liberty (versions 17.0.0.3 through 26.0.0.8) allows unauthenticated network attackers to execute arbitrary code when the collectiveController-1.0 feature is enabled. Rooted in a missing-authentication weakness (CWE-306) on collective controller management functions, the flaw carries a 9.8 CVSS score and total technical impact per CISA's SSVC framework. There is no public exploit identified at time of analysis and EPSS is low (0.19%, 9th percentile), but the network-reachable, unauthenticated nature makes it a high-priority patch where the collective feature is in use.
Payment verification bypass in the FlxWoo WordPress plugin before 3.1.1 allows unauthenticated attackers to complete WooCommerce orders without paying, because the plugin marks orders as paid without confirming the checkout session was actually settled with the payment processor. Publicly available exploit code exists, and a vendor patch is released; no active exploitation is confirmed in CISA KEV. The flaw enables fraudulent free acquisition of goods or services from any store running the plugin.
Full device takeover in Rich Source DMS+ (Non-Mobile) is possible because the product ships with a hard-coded API key that is identical across all deployments. Unauthenticated remote attackers who obtain or extract this fixed key can authenticate to the management interface and seize control of every installed DMS+ device, with maximal confidentiality, integrity, and availability impact (CVSS 4.0 base 10.0). There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
Arbitrary file upload in the Realtyna Organic IDX (WPL Real Estate) plugin for WordPress affects all versions up to and including 5.3.0, allowing authenticated attackers with subscriber-level access to write attacker-controlled files to the server and potentially achieve remote code execution. The flaw chains missing extension/content validation in saveLiveImages() with a weak authorization check on the get_keys() AJAX handler and a missing authentication check on the REST API import endpoint. Reported by Wordfence and scored CVSS 8.8; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass via OAuth audience confusion in Google mcp-toolbox 1.4.0 lets any holder of a valid Google OAuth access token reach protected tools and backend data. The flaw triggers when a Google authService is configured with mcpEnabled: true but no audience or clientId, causing the opaque-token path in ValidateMCPAuth to skip audience validation, so tokens minted for entirely unrelated Google ecosystem apps are accepted. Reported by Google itself; no public exploit identified at time of analysis and the CVSS 4.0 vector carries E:U (exploit unproven).
Authorization bypass in Google mcp-toolbox v1.3.0 and v1.4.0 lets an unauthenticated remote attacker invoke tools that were meant to be protected by the scopeRequired MCP-auth feature by routing tool-invocation requests through the legacy direct HTTP API endpoints, which do not honor those scope checks. Exploitation requires the server to be started with the --enable-api flag alongside scope-protected tools. There is no public exploit identified at time of analysis (CVSS 4.0 exploit maturity is Unproven), but the flaw carries high confidentiality, integrity, and availability impact because the exposed tools can act on backend data sources.
Authentication bypass in libiec61850 v1.6's GOOSE receiver (parseGoosePayload() in goose_receiver.c) lets an attacker on the substation network replay a captured GOOSE frame to be accepted as authentic, defeating the intended message authentication. The library implements IEC 61850 protocols used in electrical-grid protection and automation, so spoofed GOOSE traffic can drive false relay/breaker actions. Publicly available exploit code exists (PoC repo and SSVC-rated PoC), but there is no CISA KEV listing and EPSS is low at 0.26%, indicating no confirmed widespread exploitation.
Cross-site WebSocket hijacking in MeshCentral 1.1.21 lets unauthenticated remote attackers steal the server sessionKey and forge session cookies for any user, including administrators, ultimately gaining full remote control of every device managed by the instance. The flaw stems from an origin-validation bypass that only manifests on deployments using self-signed certificates, and it requires an authenticated admin to be lured into visiting attacker-controlled content (CVSS 4.0 8.6, UI:A). A vendor fix exists (PR #7882 / commit f04c9f4); there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full root compromise of Toptech Systems RCU II+ and Multiload II+ terminal automation controllers is possible because they expose an unauthenticated Target Communications Framework (TCF) debug service on a network-reachable port. Any attacker on the adjacent network segment can connect and gain complete control of the underlying embedded Linux system without credentials. Reported via CISA ICS-CERT (ICSA-26-211-03); no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Cross-tenant data compromise in Clastix Kamaji (Hosted Control Plane Manager for Kubernetes) before 26.7.4-edge lets one tenant read, modify, or destroy another tenant's control-plane state. Kamaji's defaulting webhook derived each TenantControlPlane's datastore schema, database user, and etcd key prefix from a lossy namespace-and-name normalization that replaced dashes with underscores, so two tenants whose names normalize to the same string (e.g. 'a-b' vs 'a_b') were assigned identical datastore identifiers and silently shared backing storage. No public exploit identified at time of analysis and it is not in CISA KEV, but the root cause is confirmed by the vendor advisory (GHSA-4f3f-65vx-r34f) and the fixing commit, which now uses the immutable resource UID.
Remote code execution in LazyOwn RedTeam/APT Framework (grisuno/lazyown) before 0.2.154 allows unauthenticated attackers to run arbitrary OS commands on the C2 server. The lazyc2.py component registers a Socket.IO input event handler with no authentication that passes attacker-supplied data.get('value') through LazyOwnShell.one_cmd into subprocess.call(command, shell=True), yielding full command execution in the C2 process. CVSS 9.8 (AV:N/AC:L/PR:N/UI:N) reflects unauthenticated network-reachable execution; no public exploit identified at time of analysis, though the vulnerable code path and its fix are fully disclosed in the vendor commit.
Denial of service in GoAccess before version 1.11 allows an unauthenticated remote client to crash the built-in real-time WebSocket server by sending a crafted frame whose 64-bit extended payload length is truncated into a signed 32-bit field before the maximum-frame-size guard runs. The truncation lets the length check be bypassed, triggering an approximately 18-exabyte memory allocation request that fails and terminates the process. No public exploit identified at time of analysis, but the upstream fix commit and GitHub Security Advisory GHSA-5gm5-pvh2-wg46 confirm the root cause and remediation.
Remote code execution in Microsoft Azure Cosmos DB allows an unauthorized, unauthenticated attacker to execute code over a network by abusing an improper access control (authentication bypass) flaw. Microsoft rates it CVSS 10.0 with a scope change, meaning a successful attack against the managed database service can impact resources beyond the initially vulnerable component. No public exploit has been identified at time of analysis (CVSS exploit maturity is Unproven), and it is not on the CISA KEV list, but the maximum severity and network-reachable, no-privilege profile make it a top-priority fix.
Payment-authorization bypass in the Sylius Mollie Plugin (versions before 2.2.8, 3.2.4, and 3.3.1) lets an unauthenticated attacker mark any victim order as paid without transferring funds. The plugin's POST /{_locale}/update-payment webhook trusts attacker-supplied id and orderId parameters and never verifies that the referenced Mollie payment belongs to the referenced Sylius order, so possession of any single valid paid Mollie payment ID is enough to forge a paid status on arbitrary orders. There is no public exploit identified at time of analysis and the flaw is not in CISA KEV, but the root cause is straightforward and the impact is a direct financial-fraud primitive against the shop.
Privilege escalation via authorization bypass in Wolf CMS (through 0.8.3.1) lets any authenticated non-administrative user reach the BackupRestoreController and create, download, and restore site backups that should be admin-only. The root cause is a PHP operator-precedence mistake in the permission-check expression, so the access control evaluates incorrectly and grants low-privileged accounts admin-tier backup functionality. Publicly available exploit code exists (published by VulnCheck), but there is no public exploit identified in CISA KEV, so active exploitation is not confirmed.
Broken authorization in OpenProject before 17.6.0 lets authenticated users holding only the edit_work_packages permission manipulate file-storage links they should not control. By submitting _links.fileLinks to PATCH /api/v3/work_packages/{id}, an attacker lacking manage_file_links can resolve Storages::FileLink records by raw id to detach or hard-delete them, re-parent FileLinks from other projects onto their own work package, and read origin filename, origin id, and MIME-type metadata. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is remotely reachable by any low-privileged project editor.
Remote code execution in Somta Juggle through version 1.6.0 lets unauthenticated network attackers run arbitrary OS commands by reaching the bundled H2 database web console, which ships exposed at /h2-console with default credentials. Because the stock Docker image runs as root, successful exploitation via the classic H2 CREATE ALIAS Runtime.exec() technique yields root-level code execution on the host container. No public exploit identified at time of analysis, though the VulnCheck advisory provides a detailed exploitation path.
Unauthenticated API access in Spikster (all versions through commit e1cdf8c) lets remote attackers reach roughly 50 backend endpoints because the CipiAuth middleware is registered but never bound to any route group, leaving the entire API open. Attackers can provision and enumerate servers, reset root passwords, read and write arbitrary files on the host, and create database users without any credentials. No public exploit identified at time of analysis, though a public GitHub issue and a VulnCheck advisory document the flaw in detail.
SGLang versions up to and including v0.5.15 expose unauthenticated network endpoints that allow complete model weight exfiltration when the server is deployed without API key authentication. Attackers can abuse distributed weight broadcasting via NCCL - the same mechanism used for legitimate inter-GPU weight distribution - to redirect all model weights to an attacker-controlled destination, resulting in total confidentiality loss of what may be highly valuable proprietary ML assets. No public exploit code or CISA KEV listing is confirmed at time of analysis; EPSS at 0.19% (9th percentile) reflects low observed exploitation activity, consistent with this being a targeted threat against specialized ML infrastructure rather than opportunistic mass exploitation.
Broken object-level authorization in IBM Langflow OSS 1.0.0 through 1.10.1 lets an authenticated low-privileged user read and tamper with build jobs belonging to other users by abusing improper access control on log-retrieval and unauthenticated build endpoints. Because Langflow orchestrates LLM/agent workflow builds, a cross-tenant attacker can view sensitive build logs (high confidentiality impact) and interfere with others' jobs (limited availability impact). A vendor patch is available; there is no public exploit identified at time of analysis and the flaw is not on CISA KEV.
Security constraint bypass in IBM WebSphere Application Server 8.5/9.0 (Traditional) and WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.7 allows a remote, unauthenticated attacker to circumvent access controls and reach protected resources, resulting in disclosure of confidential information (CVSS 3.1 base 7.5, C:H). The flaw stems from an authentication-bypass-by-alternate-name weakness (CWE-289) in how the server evaluates security constraints. IBM has released a fix; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass in SolarWinds Web Help Desk (WHD) allows remote unauthenticated attackers to circumvent SAML 2.0 single sign-on and gain access to the application when the SAML 2.0 authentication method is enabled. The flaw (CWE-287, Improper Authentication) is rated CVSS 9.8 with full confidentiality, integrity, and availability impact, meaning a successful bypass yields authenticated-level access to help desk data and administrative functions. No public exploit identified at time of analysis and it is not listed in CISA KEV; the high score reflects the pre-authentication network reachability of the SAML endpoint rather than confirmed in-the-wild activity.
Insecure Direct Object Reference (IDOR) in the foreUP customer REST API exposes records belonging to arbitrary users to any authenticated, low-privilege customer account. The endpoint returns user records based on a caller-supplied identifier without verifying that the requesting customer owns or is authorized to access the requested record. No active exploitation has been confirmed (not listed in CISA KEV), and EPSS places real-world exploitation probability at 0.13% - well below the 3rd percentile - though the high CVSS score of 8.1 reflects the potential confidentiality and integrity impact if an adversary with a valid account begins enumerating records.
Credential disclosure and admin authentication bypass in OpenCost before 1.121.0 lets remote unauthenticated attackers read cloud provider secrets and tamper with billing configuration. The GET /helmValues endpoint ships with no authentication and returns the base64-decoded HELM_VALUES environment variable containing cloud credentials, while adminAuthMiddleware fails open when ADMIN_TOKEN is unset, allowing POST /serviceKey to overwrite GCP service account keys and redirect billing calls. Publicly available exploit code exists and a vendor patch (v1.121.0) is released; no public active-exploitation record (not in CISA KEV) at time of analysis.
Cross-tenant data disclosure in Julep's get_execution_details endpoint allows any authenticated tenant to read other tenants' execution records by supplying arbitrary execution_id values. Exposed data includes task inputs, outputs, metadata, and temporal task tokens, breaking multi-tenant isolation. Publicly available exploit code exists (VulnCheck-reported), though the flaw is not listed in CISA KEV - no public exploit identified as actively exploited at time of analysis.
Authentication bypass via JWT assertion replay in malach-it Boruta (an Elixir OAuth 2.0/OpenID Connect provider) from 2.3.0 before 2.3.7 lets an attacker who captures any previously valid client assertion re-authenticate as that OAuth client indefinitely, because the token endpoint never checks the assertion's expiry. An attacker who harvests a signed client_secret_jwt or private_key_jwt assertion from logs, proxies, or browser tooling can mint access tokens carrying the victim client's privileges. No public exploit identified at time of analysis, though the fix commits and regression tests publicly demonstrate both the flawed and corrected behavior.
Unauthenticated Wiki Markup rendering in Apache JSPWiki up to 2.12.3 exposes sensitive data stored in internal JSPWiki variables to remote attackers. The flaw stems from a missing authentication check (CWE-306) on the markup rendering endpoint, allowing any network-reachable attacker to trigger rendering and extract variable contents without credentials. No public exploit has been identified and EPSS sits at a low 0.21% (12th percentile), but the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms trivially easy remote unauthenticated exploitation against default deployments. Vendor patches are available.
Privilege escalation via user impersonation affects Apache JSPWiki through version 2.12.3, where the UserManager component fails to properly validate identity checks, letting attackers assume other users' identities and elevate their privileges. The flaw is classified as an authentication bypass (CWE-290) and carries a CVSS 9.8, though its EPSS score is low (0.16%, 6th percentile) and no public exploit has been identified at time of analysis. A vendor patch is available in version 2.12.4.
Authentication bypass in FTC Software IT Services' FTC E-Commerce Management Panel before 1.0.2 lets remote unauthenticated attackers reach a critical function that is missing access controls (CWE-306), exposing sensitive data and permitting limited unauthorized modification. The CVSS 3.1 base score is 8.2 (AV:N/AC:L/PR:N/UI:N, C:H/I:L/A:N), reflecting easy network exploitation with high confidentiality impact. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Authentication bypass to root in Bosch BSH ELP (Electronic Platform) modules stems from a hardcoded, non-revocable SSH public key baked into the firmware's authorized_keys file for the root user. Any attacker holding the matching private key can SSH in and obtain full root-level control of the appliance over the network with no legitimate credentials. There is no public exploit identified at time of analysis and the issue is not in CISA KEV, but the shared static-key design means a single leak of the private key would compromise every affected device at once.
Authentication bypass in Gladinet CentreStack before 17.2 lets unauthenticated remote attackers read, write, and delete arbitrary account settings by hitting API endpoints that lack authorization checks (CWE-306). Because a static shared encryption key is used to generate valid encrypted EntAcctId values, an attacker can forge identifiers for any user GUID - including the system-wide cluster settings account - to enumerate hosted tenant domains and administrator identities. There is no public exploit identified at time of analysis, but the flaw was surfaced by VulnCheck and requires no authentication.
Unauthenticated OS user-account creation in Gladinet CentreStack before 17.3 lets remote attackers abuse an insecure deserialization path in GSNamespace.dll to add arbitrary local Windows accounts. By posting a crafted base64-encoded XML StorageConfigure value to the exposed jsonimportuserbyupn/jsonimportuserbyupnex/japiimportuserbyupn endpoints, an attacker (no credentials, per CVSS PR:N) drives InternalImportAdUserByUPN() to call NetUserAdd with attacker-chosen credentials and to create arbitrary server directories. No public exploit identified at time of analysis and it is not in CISA KEV, but the same product family has a prior history of actively exploited flaws, so weight this accordingly.
Authentication bypass in VMware vCenter's Directory Service (vmdir) lets an attacker with network reachability to vCenter defeat the authentication algorithm and obtain unauthorized access without valid credentials. Because vCenter is the central management plane for vSphere environments, this exposes control over the entire virtual estate; the flaw is remotely exploitable with no privileges or user interaction (CVSS 9.8). At time of analysis there is no public exploit identified and it is not listed in CISA KEV, but the reporting vendor (VMware/Broadcom) rates it critical.
Arbitrary plugin installation in the WP Swings Subscriptions for WooCommerce plugin (versions up to and including 2.0.0) lets authenticated users with shop manager privileges or higher install and activate any plugin from the WordPress.org repository through the wps_sfw_install_plugin_configuration AJAX handler, which performs no capability check (CWE-862). Because a shop manager is normally barred from managing plugins, this grants an unauthorized privileged capability that can be chained to full site compromise by installing a separately vulnerable plugin. Reported by Wordfence with a CVSS 7.2; no public exploit is identified at time of analysis and it is not on CISA KEV.
Account takeover in osTicket (the open-source support ticketing system) before v1.17.8 and v1.18.4 stems from an inverted logic check (CWE-640) in the password-reset token validation routine, where the expiry check runs only when the token's timestamp lookup fails - so any token with a valid timestamp bypasses expiration entirely. An attacker who obtains a valid reset token can replay it after it should have expired to hijack the associated account. Rated CVSS 4.0 9.1 (Critical); no public exploit identified at time of analysis and not listed in CISA KEV.
Backend reconfiguration in Phoenix Contact CHARX SEC EV charging controllers is possible without any authentication because the CHARX OCPP Agent service exposes management functionality to unauthenticated remote callers (CWE-306). Any network-adjacent attacker can repoint the charger's OCPP backend connection, causing denial-of-service and disclosure of confidential data routed to an attacker-controlled backend. No public exploit is identified at time of analysis, but the CVSS 4.0 base score of 9.3 and full unauthenticated network reach make this a high priority for operators of affected charge controllers (firmware below 1.9.1).
Unauthenticated reconfiguration of Phoenix Contact CHARX SEC EV charging controllers is possible through the JupiCore service, which exposes charging-point management functions without any authentication (CWE-306). Remote attackers reachable on the network can rewrite charging-point configuration to disclose charging-point UIDs, tamper with files, and cause a Denial-of-Service against affected SEC-3000/3050/3100/3150 units running firmware 1.0.0 up to (but not including) 1.9.1. No public exploit identified at time of analysis, but the vendor (via CERT@VDE) has released a fixed firmware and the flaw is trivially exploitable given the missing authentication.
Missing authentication on the MQTT broker embedded in Phoenix Contact CHARX SEC electric-vehicle charging controllers allows a remote attacker who can reach the broker to take full control of the device. Because the broker enforces no authentication and relies solely on an external firewall for protection, any actor able to route to the MQTT service can issue broker commands leading to complete compromise. Rated CVSS 4.0 9.3 (critical); no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass in Rocket.Chat's SAML SSO before 8.7.0 (and the 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, 7.10.14 branch fixes) lets a remote unauthenticated attacker log in as any user, including administrators, via an XML Signature Wrapping attack. The parser validated that a signature was cryptographically correct against the trusted IdP certificate but never bound that signature to the samlp:Response/saml:Assertion actually processed, so forged identity attributes wrapped alongside a genuine signature were accepted. There is no public exploit identified at time of analysis, but a HackerOne report and an upstream patch with signature-scope regression tests exist; EPSS/KEV data was not provided.
Broken authorization in the Eventin WordPress plugin before 4.1.16 lets unauthenticated visitors create orders and supply their own order status, marking those orders as paid without ever completing payment. Because the order-creation endpoint neither authorizes the requester nor validates the payment state, remote attackers can forge fully-paid transactions, undermining ticket/event revenue integrity. Publicly available exploit code exists (reported by WPScan), though EPSS remains low at 0.15% and it is not listed in CISA KEV.
Unauthenticated option overwrite in the WP Travel Engine WordPress plugin before 6.8.2 lets any anonymous visitor tamper with a site-wide plugin setting because an AJAX action lacks a capability check and the nonce that gates it is served to logged-out users. Attackers do not need credentials; publicly available exploit code exists, though EPSS remains low (0.15%, 4th percentile) and the flaw is not on CISA KEV. Impact is integrity-only, with no direct data disclosure or denial of service.
Full account takeover in the Customer Switching WordPress plugin before 2.1.3 allows a low-privileged user, while an operator is actively switched into their account, to be resolved as that operator and switch into any permitted account including an administrator. Publicly available exploit code exists (reported by WPScan), though EPSS remains low at 0.14% (4th percentile) and it is not in CISA KEV; no public exploit identified as actively used at time of analysis.
Remote unauthenticated access-control bypass in the Performance Co-Pilot (PCP) pmproxy component lets attackers reach the /store endpoint and overwrite arbitrary PMDA (Performance Metrics Domain Agent) metric values, which the reporter (Red Hat) states can escalate to arbitrary code execution and full system takeover. The flaw affects PCP as shipped across Red Hat Enterprise Linux 6 through 10 and OpenShift Container Platform 4. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-reachable, no-authentication attack surface makes exposed pmproxy instances a meaningful risk.
Remote code execution in the Spring Tools IDE extensions (Spring Tools for Eclipse ≤5.2.0 and for VSCode/Cursor/Theia ≤2.2.0) occurs when a developer launches a Spring Boot application with the 'live information' mode enabled, which exposes an unprotected JMX endpoint that an adjacent-network attacker can abuse to execute arbitrary code on the developer's host. The flaw carries a CVSS 8.0 (High) rating and requires the developer to actively start the app in live mode (UI:R). There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Full account takeover in the FleekDash V2 WordPress plugin (versions ≤ 2.6.2.2) lets a low-privileged Subscriber overwrite the email address and password of any user, including administrators, via a missing authorization check (CWE-862). The impact is amplified because the public /wp-json/fleekdash/v1/register REST endpoint auto-provisions a Subscriber account and returns a valid REST nonce regardless of the site's users_can_register setting, so an attacker needs no pre-existing credentials - one prior request bootstraps everything needed for the takeover. Reported by Wordfence with a CVSS of 8.8; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Arbitrary code execution in Adobe Campaign Classic (ACC) versions 7.4.3 build 9397 and earlier stems from an incorrect authorization flaw (CWE-863) that lets remote attackers run code in the context of the current user without any user interaction. Adobe's PSIRT reported the issue and rates it CVSS 9.8; it is tagged as an authentication-bypass-to-RCE chain. There is no public exploit identified at time of analysis, and it is not on CISA KEV, but SSVC flags the technical impact as total and the attack as automatable.
Site isolation bypass in Google Chrome prior to 151.0.7922.72 lets a remote attacker who has already compromised the renderer process read or tamper with data belonging to other origins by serving a crafted HTML page, defeating one of Chrome's core sandbox boundaries. Chromium rates the severity High and a fixed Stable-channel build has shipped; there is no public exploit identified at time of analysis and EPSS is low at 0.30% (23rd percentile). The flaw is an input-validation weakness (CWE-20) in the Passwords component that undermines the per-site process separation guarantee.
Discretionary access control bypass in Google Chrome desktop before 151.0.7922.72 lets an adversary in a privileged network position defeat a cryptographic protection and manipulate protected traffic. The flaw stems from a cryptographic weakness (CWE-325) rather than a memory-safety bug, and Google rates the Chromium severity High. No public exploit has been identified, EPSS is low (0.19%), and it is not on CISA KEV, but SSVC scores Technical Impact as total and Automatable as yes.
Authentication bypass in Outstatic CMS versions 2.1.9 and earlier lets an unauthenticated remote attacker forge valid administrative session tokens because the application ships a hardcoded JWT signing secret that is used whenever the OST_TOKEN_SECRET environment variable is left unset. Since the fallback secret is published in the project's public source repository, any attacker can self-sign a JWT granting arbitrary identity and full admin permissions with no credentials. There is no public exploit identified at time of analysis, but the technique is trivial and requires only the publicly-visible secret.
Embedded malicious JavaScript (a supply-chain backdoor) in VaahCMS 2.0.0-2.3.4 executes attacker-controlled code in any browser that renders the security-OTP Blade email template with JavaScript enabled, reported by VulnCheck and rated CVSS 4.0 9.2. The obfuscated payload opens a WebSocket to a hardcoded command-and-control endpoint, keylogs password fields via a MutationObserver, scrapes WhatsApp Web DOM content, and accepts remote commands to redirect or overwrite the rendered page. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the malicious code ships in the product itself, so exposure is inherent to running an affected version.
Session hijacking in the MCP Ruby SDK (mcp gem) before 0.23.0 lets an attacker who obtains a valid session ID issue tools/call requests that execute inside the victim's session, because StreamableHTTPTransport validates only session existence and idle timeout without binding a session to its owner. Affected deployments are those exposing the streamable HTTP transport; the flaw enables cross-session action execution and in-flight request tampering (e.g. notifications/cancelled). No public exploit identified at time of analysis and the issue is not in CISA KEV; the vendor CVSS 4.0 score is 8.3 (integrity-focused).
Remote unauthenticated denial-of-service in ATEN Unizon lets attackers crash or hang the service by reaching the RpcProvider class, which exposes functionality without any authentication check (CWE-306). Any network-reachable attacker can send requests that trigger the availability impact without credentials or user interaction. No public exploit identified at time of analysis and the flaw is not in CISA KEV, but it was discovered and reported through Trend Micro's Zero Day Initiative (ZDI-CAN-29041 / ZDI-26-272).
Secret exfiltration in Flyto Core (flytohub/flyto-core) before 2.26.6 arises because the workflow-engine variable resolver expands ${env.VAR} for any host environment variable with no allowlist or capability-policy check. Because interpolation runs in the engine before the module chokepoint, an attacker who can influence a workflow parameter can read arbitrary host secrets even when the env.get and env.load_dotenv modules are explicitly denylisted, then leak them through modules that are still allowed. No public exploit identified at time of analysis; the vendor commit and GHSA advisory confirm the flaw and its fix in 2.26.6. CVSS 8.6 with a scope change (CVSS:3.1/S:C/C:H) reflects that impact crosses the intended sandbox boundary into the host credential store.
Unauthenticated SSRF and secret exfiltration in Flyto Core (flytohub/flyto-core) prior to 2.26.7 lets remote attackers coerce the standalone flyto-verification service into making attacker-directed outbound requests. The service listens on 0.0.0.0:8344 with no authentication and accepts a client-supplied callback_url, then issues an outbound POST carrying the X-Internal-Key: $FLYTO_RUNNER_SECRET header while skipping the target_allowed allowlist, so an attacker can both reach internal-only endpoints and steal the runner secret. Rated CVSS 9.3 (scope-changed). No public exploit identified at time of analysis and it is not listed in CISA KEV, but the fix and root cause are fully documented in the vendor GHSA advisory and patch commit.
Server-side request forgery in IBM WebSphere Application Server (traditional 9.0 and 8.5) and WebSphere Application Server Liberty (17.0.0.3 through 26.0.0.8) lets remote unauthenticated attackers coerce the server into issuing arbitrary requests when the SIP container feature (sipServlet-1.1) is enabled. The flaw carries a CVSS 9.8 rating with total technical impact, and IBM has released a fix (advisory node/7281721); no public exploit is identified at time of analysis and EPSS exploitation probability is low at 0.33%.
Authorization bypass in Google's Agent Development Kit (adk-python) lets an actor who can inject or manipulate events in an agent's session history forge a tool-confirmation response and force execution of tools that were never approved. The human-in-the-loop confirmation gate is defeated because the framework never verified that the confirmed tool was registered to the executing agent, that the tool actually required confirmation, or that the confirmation arguments matched the original tool-call event. No CISA KEV listing and no standalone public exploit were provided, though the CVSS 4.0 vector carries E:P (proof-of-concept exploit maturity); remediation is an upstream commit rather than a tagged release.
Authentication and authorization bypass in Synopsys/Black Duck Coverity Connect (versions 2023.6.0 through 2026.3.0) allows an unauthenticated attacker to reach certain protected API endpoints by sending a specially crafted HTTP request, exposing data held within Coverity. The flaw stems from a Spring Security misconfiguration classified as CWE-288 (authentication bypass using an alternate path or channel). It carries a CVSS 4.0 score of 9.2 (Critical); no public exploit has been identified at time of analysis, and the AC:H/AT:P metrics indicate exploitation is non-trivial despite requiring no authentication.
Improper authorization in Zitadel's user self-management API lets any authenticated user obtain the plaintext email/phone verification code for their own account and mark those contact details as verified without ever proving control of them. This is an incomplete-fix follow-up to CVE-2026-27946 (GHSA-282g-fhmx-xf54): that advisory blocked setting email.is_verified:true via UpdateHumanUser, but additional code paths still returned the verification code to the self-managing user. It affects Zitadel 2.43.0-2.71.19, 3.0.0-3.4.10, and 4.0.0-4.15.0, letting attackers claim ownership of emails/phones they do not control and bypass email-based security policies. No public exploit identified at time of analysis.
Robot account token disclosure in Red Hat Quay 3 allows a user assigned to the GLOBAL_READONLY_SUPER_USERS role to read the tokens of robot accounts belonging to repositories they are not a member of. Because these tokens are long-lived registry credentials, the read-only superuser can escalate a view-only role into full impersonation of any robot account, gaining whatever push/pull and repository permissions that robot holds. No public exploit identified at time of analysis; not listed in CISA KEV.
Hardcoded static credentials in Cisco Secure Firewall Management Center (FMC) Software allow an unauthenticated remote attacker to log in to the web interface using a built-in low-privileged account and access sensitive data. The flaw affects an extensive range of FMC versions from 7.0.0 through 10.0.1 and is rooted in CWE-259 (Use of Hard-coded Password). Cisco has self-elevated the Security Impact Rating to High - despite a CVSS 5.3 Medium score - explicitly because this credential foothold can be chained with other FMC vulnerabilities to escalate privileges, making the real-world risk materially higher than the base score implies. No public exploit or CISA KEV listing has been confirmed at time of analysis.
Server-side request forgery in Prebid Server (Go) versions before 4.4.0 lets remote unauthenticated attackers coerce the ad server into making HTTP requests to attacker-chosen destinations. Multiple bidder adapters (e.g. acuityads, adhese, bidmachine) interpolate an unvalidated user-supplied 'host'/'account' bid-request parameter directly into outbound URLs, enabling extraction of host-environment data and access to internal network services. No public exploit identified at time of analysis, but the fix commit and GHSA advisory are public; EPSS was not provided.
Unauthenticated API access in NASA AMMOS Instrument Toolkit (AIT) Deep Space Network Interface before 2.2.2 lets remote attackers control spacecraft communication sessions with no credentials. Seven Space Link Extension (SLE) interface-manager routes are exposed without any authentication, allowing an attacker to start or stop Deep Space Network sessions, read telemetry frame data, and inject arbitrary frames into active spacecraft links. Reported by VulnCheck and rated CVSS 4.0 9.3; no public exploit is identified at time of analysis, but the missing-auth flaw is trivially reachable over the network.
Missing authentication in NASA-AMMOS AIT-GUI before 2.5.1 lets any unauthenticated network attacker mint a valid session via Sessions.create() and then push arbitrary commands onto the spacecraft command bus through handle_cmd(). Because no credential check gates session creation and no authorization gate sits between session issuance and command dispatch, a remote attacker can issue arbitrary spacecraft commands. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Cluster-wide ingress denial of service in Kong Operator's embedded Kong Kubernetes Ingress Controller (KIC) lets a tenant holding only namespace-scoped Secret creation rights halt all ingress configuration changes across the entire cluster. Because the embedded KIC gathers CA-certificate Secrets from every watched namespace using only a label selector - with no ingress-class or namespace scoping - an attacker can plant a Secret whose user-controlled CA-certificate ID collides with an existing one, causing Kong Gateway to reject the whole configuration document. This is a missing-authorization (CWE-862) flaw reported by Kong; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Cluster-wide ingress denial of service in Kong Kubernetes Ingress Controller (KIC) allows a tenant holding only namespace-scoped Secret creation rights to halt all ingress configuration changes across every watched namespace. Because KIC gathers CA-certificate Secrets by label selector alone - ignoring ingress-class and namespace boundaries - and derives the CA-certificate primary key from a user-supplied Secret field, a low-privileged user can create a duplicate CA-certificate ID that forces Kong Gateway to reject the entire configuration document. Reported by Kong; no public exploit identified at time of analysis and not listed in CISA KEV.
Cross-project subnet mutation in OpenStack Neutron's subnetpool onboarding feature allows an authenticated tenant to modify subnets belonging to other projects, breaking multi-tenancy isolation. Affected releases span 2025.1/epoxy through the in-development 2026.2/hibiscus branch. No public exploit code has been identified at time of analysis, and CISA KEV listing is absent, but the multi-tenant nature of the affected deployments elevates real-world impact for shared cloud environments.
Two-factor authentication bypass in TeamViewer Full Client and Host for macOS before 15.80 lets an already-authenticated, high-privileged attacker circumvent the configured 2FA 'Connections approval' control on the Unattended Access feature and establish a full remote session to the target Mac. The flaw is a business-logic error in the connection-approval flow (CWE-288) rather than a memory-safety issue, and successful exploitation yields interactive control of the host. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV.
Missing authorization in MWDB Core's Remote Instances proxy API (versions >=2.2.0 to <2.19.0) lets an unauthenticated remote attacker relay arbitrary requests to a linked remote MWDB instance, executing them with the identity and permissions of the API key configured for that remote link. This effectively impersonates the API-key owner on the remote instance and enables unauthorized actions there. No public exploit identified at time of analysis; the flaw was reported by CERT-PL and is fixed in 2.19.0.
Node.js's Permission Model - enabled via the --permission flag - incorrectly grants access rights when an internal radix tree node is split during path resolution, allowing a locally executing low-privileged process to escape its configured filesystem access policy on versions 22.x through 22.23.1, 24.x through 24.18.0, and 26.x through 26.5.0. The scope change in the CVSS vector (S:C, C:H, I:H) reflects that a successfully exploiting process can read and write files on the host filesystem beyond what its permission policy permits - effectively defeating the sandbox. No public exploit code exists and CISA KEV listing is absent; EPSS at 0.14% (3rd percentile) reflects that real-world exploitation is currently minimal, consistent with the non-default nature of the affected feature.
Authentication bypass in the Gridbox page-builder extension for Joomla (versions before 2.20.2) lets remote unauthenticated attackers take over any account on the target site. The flaw resides in the extension's socialLogin method, which fails to properly verify identity and allows an actor to authenticate as any chosen user - including administrators. Rated CVSS 4.0 10.0 (CWE-284 Improper Access Control); no public exploit is identified at time of analysis, though the vendor product page and a third-party research blog document Gridbox critical issues.
Unauthenticated account takeover in the Gridbox page-builder extension for Joomla (versions before 2.20.2) allows any remote attacker to reset the password of arbitrary user accounts through the exposed resetPassword method, then log in and act as those users. Super administrator accounts are explicitly out of scope, but all other roles - including regular administrators, editors, and managers - can be seized. The maximum CVSS 4.0 base score of 10.0 reflects unauthenticated, low-complexity, network-reachable exploitation; no public exploit has been identified at time of analysis, though the CVSS threat metrics flag automatability and exploitation evidence.
Arbitrary recursive directory deletion in the Gridbox extension for Joomla (versions before 2.20.2) lets remote unauthenticated attackers destroy directory trees on the server through the exposed generateNewApp method, which fails to enforce access control (authentication bypass). Rated CVSS 4.0 9.2 (Critical) with a high availability impact on both the vulnerable component and subsequent systems, this is a data-destruction / denial-of-service flaw rather than a code-execution or data-theft one. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated directory creation in the RO CSVI (CSV Improved) import/export extension for Joomla affects all versions from 1.0.0 through 9.11.0, allowing remote attackers with no authentication to create arbitrary directories on the server. The flaw is an access-control failure (CWE-284) tagged by the reporter as an authentication bypass, carrying a CVSS 7.5. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Local privilege escalation in open-iscsi's iscsiuio component lets any unprivileged local user connect to the iscsiuio control socket and issue commands normally restricted to root, because the daemon validated peer credentials against the wrong file descriptor. The flaw (CWE-863 Incorrect Authorization) was reported by SUSE and fixed upstream in commit 668ca1df; there is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Privilege escalation in the balbooa Gridbox extension for Joomla (versions before 2.20.2) lets unauthenticated actors self-register accounts while supplying arbitrary Joomla usergroup IDs, so an attacker can create an account placed directly into an administrative usergroup. Because the registration handler trusts client-supplied group assignments, exploitation grants full site takeover with no prior credentials. No public exploit has been identified at time of analysis, but the trivial network-based nature makes it high priority.
Local privilege escalation and authentication bypass in Schneider Electric EcoStruxure Cybersecurity Admin Expert allows a local, high-privileged attacker to abuse weak protection of stored credentials (CWE-522) to modify credentials without authorization and bypass authentication, potentially pivoting to compromise the OT/industrial devices the tool manages. Schneider Electric published security notice SEVD-2026-195-02, and the CVSS 4.0 base score is 8.7 (High) with a scope change into subsequent systems. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Arbitrary post and page deletion in the Meta Box AIO plugin for WordPress (versions up to and including 3.8.0) allows unauthenticated attackers to destroy any content on the site. The MB Frontend Submission extension's template_redirect dispatcher routes the mbfs_delete action without any capability or ownership check, and its nonce protection is unreachable on non-AJAX requests, so any page hosting a frontend submission form becomes a deletion endpoint. No public exploit identified at time of analysis, but the trivial GET-based vector and 9.1 CVSS make this a high-priority integrity/availability threat.
Access control bypass in Apache Traffic Server (8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3) allows remote attackers to defeat IP-based access restrictions, both on Unix Domain Socket (UDS) listeners and through faulty ACL matching logic. Because ATS commonly fronts internal origin servers and management endpoints, bypassing these IP allow/deny lists can expose protected backend resources that operators believed were network-restricted. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but the fix is vendor-confirmed in the Apache advisory.
Request smuggling and policy bypass in Apache Traffic Server (branches 8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3) arises because the proxy silently truncates over-long HTTP header names, causing two distinct header names to alias to the same value. A network attacker can exploit this desynchronization to smuggle requests past the proxy and bypass security or routing policy. No public exploit has been identified at time of analysis, but the CVSS 9.3 rating and CWE-444 classification mark this as a high-priority proxy integrity flaw affecting a core CDN/caching component.
Access control bypass in Apache Traffic Server versions 9.0.0 through 9.1.14 and 10.0.0 through 10.1.3 lets remote unauthenticated attackers subvert authorization enforcement at the proxy, tagged by Apache as an authentication bypass (CWE-284). Because Traffic Server acts as a caching/reverse proxy, the flaw's impact lands on backend systems it fronts rather than on the proxy process itself. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the CVSS 4.0 base score is 7.0 (High).
Missing authorization on admin REST endpoints in Apache Atlas 0.8.0 through 2.5.0 allows any authenticated user - regardless of assigned role - to perform privileged administrative operations that should be restricted to administrators. The flaw spans 15 release versions across a multi-year window, affecting all standard deployments of the atlas-webapp component. No public exploit has been identified at time of analysis and the CVE is not listed in CISA KEV, but the low exploitation complexity (any valid credential suffices) makes this a meaningful insider and credential-compromise threat in enterprise data governance environments.
Account takeover in the miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) WordPress plugin before 7.8.0 lets unauthenticated attackers hijack any account, including administrators. The optional email-verification one-time code is not bound to the account it was issued for, so an attacker requests a code for an email they control and replays it against a victim's email to obtain a valid session. Publicly available exploit code exists (WPScan) and a vendor patch is available, though EPSS remains low at 0.14%.
Two-factor authentication bypass in the UsersWP WordPress plugin before 1.2.67 lets an attacker who already possesses a victim's username and password skip the second authentication factor and fully log in as that user. The two-factor login handler fails to validate the selected authentication provider (CWE-287), so the 2FA step can be circumvented. Publicly available exploit code exists and a vendor patch is released, but there is no public exploit identified as actively exploited in the wild.
Authentication bypass in the Advanced Responsive Video Embedder (ARVE) WordPress plugin version 10.8.7 lets unauthenticated attackers log in as any existing administrator by supplying a known hardcoded token. Because the token is a static SHA-256 hash embedded in the publicly readable plugin source, anyone can extract it and gain full administrative control of an affected site. Wordfence attributes this to a likely supply-chain compromise of the developer's account, and while no public exploit is identified at time of analysis, the EPSS score is modest (0.59%, 45th percentile) despite the maximal 9.8 CVSS.
Improper enforcement of the `--no-delete` flag in goshs WebDAV server allows unauthorized file deletion or overwrite. The `MOVE` handler incorrectly treats the verb as write-only without checking the delete restriction, permitting remote attackers using WebDAV clients to bypass the `--no-delete` boundary via a `MOVE` request with `Overwrite: T`. A public proof-of-concept exists, and the vendor has patched this in version 2.1.4.
An authorization bypass in goshs’s bulk zip-download route allows unauthenticated attackers to read any file protected solely by a per-folder .goshs ACL, circumventing both folder-based authentication and per-file block lists. The vulnerability affects goshs v2.x up to 2.1.0 and all v1.x versions. A proof-of-concept is publicly available, demonstrating the bypass against a patched version that had addressed a related ACL gap on write/delete routes but left the read path unprotected.
An incomplete fix for CVE-2026-40884 in goshs v2.1.3 allows unauthenticated attackers to bypass SFTP authentication and gain full file read, write, and delete access when the server is started with `-b 'user:' -sftp` and without the `-fkf` flag. Publicly available exploit code exists, and the root cause is a logic flaw in the password handler registration that was not fully addressed in the prior patch.
A DNS rebinding flaw in datamodel-code-generator's SSRF guard allows unauthenticated remote attackers to bypass the default `allow_private_network=False` restriction and reach internal services. The vulnerability affects versions prior to 0.63.0, where a time-of-check/time-of-use gap between URL validation and connection enables rebinding to private IPs. A public proof-of-concept exists, though no active exploitation in the wild is reported at this time.
Sensitive information disclosure in IBM Cloud Pak System 2.3.5.0 allows local attackers to obtain credentials from log files. The CVSS score is 7.5 with a network vector, but the description explicitly states local access, creating ambiguity. No public exploit or active exploitation has been identified at the time of analysis.
Unauthenticated administrative access in IBM WebSphere Application Server 9.0 and 8.5 due to broken access control allows remote attackers to gain full control of the server. The vulnerability resides in the administrative console and requires no credentials or user interaction, leading to complete confidentiality, integrity, and availability impact. No public exploit code is known, but a vendor patch is available to remediate this critical risk.
Remote code execution in IBM WebSphere Application Server Liberty (versions 17.0.0.3 through 26.0.0.8) allows unauthenticated network attackers to execute arbitrary code when the collectiveController-1.0 feature is enabled. Rooted in a missing-authentication weakness (CWE-306) on collective controller management functions, the flaw carries a 9.8 CVSS score and total technical impact per CISA's SSVC framework. There is no public exploit identified at time of analysis and EPSS is low (0.19%, 9th percentile), but the network-reachable, unauthenticated nature makes it a high-priority patch where the collective feature is in use.