Authentication Bypass
Monthly
Privilege escalation in SolarWinds Serv-U allows an authenticated member of a domain user group to be elevated into an administrator group, granting full administrative control over the managed file transfer server. The flaw stems from improper access control (CWE-284) and carries a vendor CVSS of 9.1 due to a scope change and full confidentiality, integrity, and availability impact, though SolarWinds notes the impact is lower on Windows deployments. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Privilege escalation in SolarWinds Serv-U allows a domain administrator to elevate to a full Serv-U system administrator, granting complete control over the managed file transfer server and its data (CVSS 9.1, CWE-284 improper access control). Exploitation requires existing domain-administrator privileges (PR:H) but no user interaction, and the vendor notes the impact is reduced on Windows deployments, implying non-Windows (Linux) installs are more severely affected. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so this is a defense-in-depth priority rather than a confirmed active threat.
Privilege-to-root remote code execution in SolarWinds Serv-U managed file transfer server stems from an insecure direct object reference (CWE-639) that an authenticated domain administrator with read/write access to the home directory can abuse to execute code as root on the underlying host. The CVSS 3.1 score of 9.1 reflects a scope change from application-admin context to full OS compromise, with the impact explicitly noted as lower on Windows deployments. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, so this is a high-severity but authentication-gated flaw rather than a mass-exploitable unauthenticated bug.
Remote code execution in SolarWinds Serv-U managed file transfer/FTP server allows an attacker to run arbitrary code remotely, executing as root on Unix/Linux deployments while impact is reduced on Windows. The flaw stems from an access-control weakness (CWE-284) and is corroborated by a vendor 'Authentication Bypass' tag, carrying a CVSS 9.1 (scope-changed) rating. No public exploit identified at time of analysis and it is not listed in CISA KEV, so exploitation is currently theoretical rather than confirmed.
Privilege escalation to remote code execution as root in SolarWinds Serv-U stems from an insecure direct object reference (IDOR) that lets an authenticated group administrator manipulate object references beyond their authority. The flaw carries a CVSS 9.1 rating because a scope change allows a lower-tier admin to fully compromise the underlying host on Linux/Unix, though impact is reduced on Windows deployments. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the high privilege prerequisite (group admin) is realistic in multi-tenant MFT environments.
Payment and calculation total tampering in the Ninja Forms WordPress plugin (versions 3.14.8 and prior) allows unauthenticated attackers to submit crafted values that match no configured option in ListSelect or ListRadio fields, causing the get_calc_value() method to fail open and return attacker-supplied numbers. This lets an attacker rewrite form calculation results and payment amounts - including setting order totals to zero - bypassing admin-defined pricing logic. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis, and this is not listed in CISA KEV.
Broken authorization in the Ninja Forms WordPress plugin (versions 3.14.8 and prior) lets an authenticated Author-level user expose stored form submissions to any unauthenticated site visitor by embedding the `ninja-forms/submissions-table` Gutenberg block with an arbitrary formID on a published post. Because the block's render callback performs no capability check and injects a signed bearer token into every visitor's browser via `wp_localize_script`, anyone loading the page can replay that token against the REST submissions endpoint and read all saved field values, including PII such as names, emails, and phone numbers. Reported by VulnCheck; a vendor patch is available, but no public exploit code was identified at time of analysis and the flaw is not in CISA KEV - no public exploit identified at time of analysis.
Network-wide data destruction in the Ninja Forms WordPress plugin (versions 3.14.8 and prior) lets a low-privilege subsite Administrator wipe all Ninja Forms data across an entire Multisite network. By abusing a site-scoped capability check paired with unsafe multisite migration defaults, an actor who reaches the nf_delete_all_data admin-ajax action with a valid per-site nonce triggers migration routines that iterate every blog and drop all nf3_* tables plus related options and transients - no super-admin or network-admin rights needed. Reported by VulnCheck with a vendor patch available; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Privilege escalation via authentication bypass in libssh affects servers that enable GSSAPIKeyExchange, where the gssapi-keyex authentication path fails to confirm that the authenticated Kerberos principal is actually authorized for the local user account being requested. An already-authenticated client holding any valid Kerberos principal in the realm can therefore log in as an arbitrary user, including potentially privileged accounts, on Red Hat Enterprise Linux 8, 9, and 10 and Red Hat Hardened Images. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV, but the CVSS of 8.8 reflects a straightforward, low-complexity abuse once a valid Kerberos credential is held.
Access-control mitigation bypass in the DOM Service Workers component of Mozilla Firefox before version 153 allows remote content to circumvent a browser security mitigation, undermining protections intended to isolate web origins. Mozilla self-reported the flaw (MFSA2026-68/71) and shipped a fix in Firefox 153; there is no public exploit identified at time of analysis and EPSS is low (0.14%, 4th percentile). The NVD-assigned CVSS of 9.8 (full CIA impact, no user interaction) is notably higher than typical for a browser mitigation bypass, which warrants scrutiny.
Security mitigation bypass in the Networking component of Mozilla Firefox before version 153 lets remote attackers defeat a built-in protection mechanism, carrying high confidentiality and integrity impact per the CVSS 9.1 rating. The flaw was reported and fixed by Mozilla in Firefox 153 (advisory MFSA2026-68) and is classified under CWE-693 (Protection Mechanism Failure), with tags indicating an authentication/authorization bypass. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
UI/content spoofing in Mozilla Firefox for Android (fixed in version 153) lets a remote attacker who lures a user to attacker-controlled content misrepresent trusted interface elements, undermining the integrity of what the user believes they are viewing or interacting with. The flaw is classified as an authentication-bypass-by-spoofing weakness (CWE-290) and requires user interaction. There is no public exploit identified at time of analysis, and EPSS exploitation probability is low (0.13%, 3rd percentile).
Protection mechanism failure in the DOM: Security component of Mozilla Firefox lets remote attackers bypass a browser security mitigation, undermining defenses that isolate web content and enforce origin/policy boundaries. Mozilla rates this Critical (CVSS 9.1) with high confidentiality and integrity impact and no authentication or user interaction required per the assigned vector; it is corrected in Firefox 153 (MFSA 2026-68). There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Protection-mechanism bypass in Mozilla Firefox's Enterprise Policies component allows attackers to circumvent security restrictions that administrators enforce through managed policy, undermining controls an organization relies on to lock down the browser. Mozilla rates the flaw CVSS 9.1 (network vector, low complexity, no privileges or user interaction) affecting Firefox before 153 and Firefox ESR before 140.13. There is no public exploit identified at time of analysis and EPSS exploitation probability is low (0.16%, 6th percentile).
Security-mitigation bypass in Mozilla Firefox's DOM: Networking component undermines a built-in protection mechanism (CWE-693), potentially allowing crafted web content to defeat network-layer defenses in versions prior to Firefox 153 and ESR 140.13. The issue was reported and patched by Mozilla with no public exploit identified at time of analysis; EPSS is very low (0.16%, 6th percentile) and it is not listed in CISA KEV. The NVD-assigned CVSS of 9.8 (network, no auth, no user interaction) sits in tension with the sparse 'mitigation bypass' description, which typically describes a defense-defeating enabler rather than direct code execution.
Protection-mechanism bypass in Mozilla Firefox's DOM Service Workers component allows remote web content to circumvent a browser security mitigation, weakening defenses that normally contain untrusted script. The flaw affects Firefox versions prior to 153 and was reported and patched by Mozilla (MFSA2026-68). No public exploit has been identified at time of analysis, and EPSS estimates exploitation probability at only 0.15% (5th percentile), indicating no observed weaponization despite the high nominal CVSS score.
Same-origin policy bypass in Mozilla Firefox's Networking DNS component allows remote attackers to circumvent origin isolation and read or manipulate data belonging to other web origins. Affects Firefox before 153 and Firefox ESR before 140.13, exploitable over the network without authentication or user interaction (CVSS 9.1). No public exploit identified at time of analysis; EPSS is low (0.16%, 6th percentile).
Protection mechanism bypass in the Networking component of Mozilla Firefox (versions prior to 153) allows remote attackers to circumvent a built-in security mitigation over the network without authentication or user interaction, per the CVSS vector (AV:N/AC:L/PR:N/UI:N). Mozilla (MFSA2026-68) tags this as an authentication/mitigation bypass with high confidentiality and integrity impact but no availability impact. No public exploit identified at time of analysis, and EPSS exploitation probability is low at 0.15% (5th percentile).
Mitigation bypass in the Mozilla Firefox PDF Viewer component undermines a built-in security control (CWE-693 Protection Mechanism Failure), weakening a defense-in-depth barrier that would otherwise contain malicious PDF content. Mozilla self-reported the issue and shipped fixes in Firefox 153 and Firefox ESR 140.13 via advisories MFSA2026-68 and MFSA2026-70. There is no public exploit identified at time of analysis, and EPSS is very low (0.16%, 6th percentile), so the headline CVSS 9.8 reflects worst-case potential rather than demonstrated mass exploitation.
Protection-mechanism bypass in the DOM: Networking component of Mozilla Firefox lets a remote, unauthenticated attacker circumvent a browser security mitigation, exposing confidential data and enabling integrity compromise (CVSS 9.1) without user interaction. Reported by Mozilla and fixed in Firefox 153, the flaw affects users browsing to attacker-controlled web content. No public exploit identified at time of analysis, and the low EPSS score (0.15%) suggests exploitation is not yet widespread.
Same-origin policy bypass in Mozilla Firefox's DOM: Navigation component allows a malicious web page to read or manipulate content belonging to another origin, defeating the browser's core cross-origin isolation boundary. All Firefox users on affected pre-153 releases and unpatched ESR branches are exposed, and while Mozilla's vector maps to CVSS 9.8, EPSS estimates only a 0.16% exploitation probability (6th percentile). There is no public exploit identified at time of analysis and it is not in CISA KEV.
Broken authorization in the Grav api plugin (grav-plugin-api) before 1.0.8 lets any authenticated panel user holding the baseline admin.login permission forge persistent API keys bound to arbitrary accounts, resulting in impersonation and privilege escalation up to account takeover. The plugin intercepts the apiKeyGenerate/apiKeyRevoke admin tasks ahead of the account-management ACL, so a low-privilege operator can mint a key that inherits a higher-privileged account's API permissions. Reported by VulnCheck with a fix in 1.0.8; no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Multi-factor authentication bypass in Zohocorp ManageEngine ADSelfService Plus (all versions before build 6524) allows an actor holding valid first-factor credentials to circumvent the second authentication factor, per the vendor advisory CVE-2026-3183. The flaw (CWE-290, authentication bypass by spoofing) is network-reachable and low-complexity but requires low-level privileges (PR:L), and there is no public exploit identified at time of analysis. Because ADSelfService Plus governs self-service password reset and account management across Active Directory, a bypass here undermines a core identity-security control.
Missing authentication in exo-explore's exo 1.0.69 distributed AI inference framework lets remote unauthenticated attackers reach the GET /state and DELETE /instance/{instance_id} management endpoints, exposing cluster state and destroying running inference instances. Classified CWE-306 with CVSS 7.5 (availability-focused), it carries a low EPSS of 0.27% and is not on CISA KEV; a third-party writeup exists but no public exploit is confirmed. The practical effect is denial of service and unauthorized administrative control over the AI node cluster.
Sensitive information disclosure in DayuanJiang next-ai-draw-io 0.4.13 lets a remote attacker spoof the X-Forwarded-For HTTP header to impersonate a trusted client address and bypass IP-based access controls, exposing protected data. The flaw is classified as authentication bypass by spoofing (CWE-290) and, per the CVSS vector, requires no authentication or user interaction. There is no public exploit identified at time of analysis and it is not in CISA KEV; EPSS probability is low at 0.22%.
Argument injection in FreeRDP before 3.28.0 lets a malicious .rdp connection file smuggle arbitrary command-line options into the client, because any line beginning with a forward slash is passed straight to the CLI parser rather than treated as an RDP setting. An attacker who convinces a victim to open a crafted RDP file can invoke options such as /rdp2tcp (command execution), /cert:ignore (certificate-validation bypass), or /drive (local filesystem exposure) the moment the file is opened. There is no public exploit identified at time of analysis, but the fix is published (3.28.0) alongside a coordinated VulnCheck and GitHub security advisory.
Indirect prompt injection in AgenticMail's inbound-mail bridge lets any external, unauthenticated email hijack the operator's Claude Code session, which resumes with permissionMode 'bypassPermissions' and full tooling (Bash/Write/Edit/WebFetch plus the agenticmail MCP toolbelt) under the operator's OAuth identity. Affected are @agenticmail/core < 0.9.43, @agenticmail/claudecode < 0.2.39, @agenticmail/codex < 0.1.33, and @agenticmail/openclaw < 0.5.71, where the bridge-wake handler embeds attacker-controlled from/subject/preview verbatim into the agent prompt with no sender verification - despite a sibling handler correctly gating on isOperatorReplySender. There is no public exploit identified at time of analysis and it is not on CISA KEV, but the GitHub Security Advisory (GHSA-fq4x-789w-jg5h) documents the exact vulnerable code paths, and EPSS was not supplied.
Cross-agent authorization bypass in AgenticMail's @agenticmail/api (prior to 0.9.64) lets any low-privileged authenticated agent read and hijack tasks belonging to other agents. By calling GET /api/agenticmail/tasks/pending?assignee=<victim>, an attacker enumerates a target agent's pending/claimed tasks - including task IDs and sensitive payloads - then reuses those IDs against the /tasks/:id/claim, /result, /complete, and /fail endpoints, which never verify the caller is the assignee. Fixed in 0.9.64; no public exploit identified at time of analysis, though the GitHub advisory (GHSA-hjwc-26pj-v3pm) includes a working local reproduction, and no EPSS or KEV signal is present in the input.
Broken access control in NextCRM 0.12.1 lets a low-privileged authenticated user with a valid MCP Bearer API token (`nxtc__...`) read, modify, and delete campaigns belonging to other users. Because multiple MCP campaign handlers query and mutate objects by ID alone while ignoring the authenticated user ID, an attacker can enumerate all campaigns, alter templates and steps, and trigger or pause delivery across tenant boundaries. No public exploit identified at time of analysis; the issue is fixed in version 0.12.2.
Cross-tenant data tampering in NextCRM (open-source CRM) before version 0.12.0 lets any authenticated user - including low-privilege 'member' accounts - modify CRM contacts and targets owned by other users or organizations. The contact and target update endpoints trust a client-supplied resource identifier without checking ownership, so an attacker who is a legitimate tenant on the instance can overwrite records outside their scope. No public exploit is identified at time of analysis, and the flaw is not listed in CISA KEV.
Privilege escalation via broken access control in NextCRM (open-source CRM by pdovhomilja) before version 0.12.0 lets any authenticated low-privilege user (member or viewer) call the activateUser and deactivateUser Next.js Server Actions, which never verify the caller holds the admin role. An attacker can therefore toggle any account's active state - including deactivating the main administrator to lock legitimate admins out, or reactivating disabled accounts. No public exploit identified at time of analysis, but the fix is confirmed in release v0.12.0 and the root cause is well documented in the vendor security advisory.
Insecure Direct Object Reference in VSee Clinic 7.1.26 (API 1.3.0) lets an authenticated user tamper with the 'remark' parameter on the /v1.3.0/api/files endpoint to enumerate, download, and delete files owned by other users of the telehealth platform. Because a single low-privileged account yields full read and destructive access to every user's files, the flaw combines confidentiality with integrity and availability loss. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the technique is trivial and self-evident from the SRA Labs disclosure.
Message injection in FreeScout self-hosted help desk (all versions prior to 1.8.223) lets a remote unauthenticated attacker forge customer replies inside any existing support conversation. By emailing the helpdesk's public intake address with a crafted In-Reply-To header that references a target thread, the attacker's message renders in the agent UI as a legitimate customer reply, silently reopens the conversation, and overwrites last_reply_from with the attacker's identity. No credentials, tokens, or prior access are required (CVSS 8.6); no public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated information disclosure in FileCodeBox before 2.4 lets remote attackers defeat the IPRateLimit anti-bruteforce control by spoofing X-Real-IP and X-Forwarded-For headers, which the application trusted without verifying the request originated from a configured reverse proxy. By rotating a unique fake IP on every request, an attacker resets their throttling counter indefinitely and can brute-force the short share codes to download other users' files. CVSS 4.0 is 8.7 (high), the fix shipped in release V2.4, and no public exploit or CISA KEV listing was identified at time of analysis.
Brute-force protection bypass in Glance (glanceapp/glance) 0.8.5 lets remote unauthenticated attackers defeat the per-IP failed-login lockout by rotating the leftmost value of the X-Forwarded-For header, but only when the server 'proxied' option is enabled. Because the authentication handler trusted the client-supplied leftmost XFF value instead of the trusted reverse proxy's rightmost value, each guess appears to come from a new IP and the lockout counter never trips, enabling unlimited credential guessing against the login endpoint. No public exploit identified at time of analysis and it is not in CISA KEV, though the upstream fix (PR #1033) and VulnCheck advisory make the technique trivially reproducible.
Improper access control in the Page Builder CK extension for Joomla (versions 1.0.0 through 3.6.1) allows remote unauthenticated attackers to enumerate and view frontend page list views that should be restricted, effectively bypassing intended authentication on that view. The CVSS 9.1 rating reflects high confidentiality and integrity exposure over the network with no privileges or user interaction, though CISA's SSVC assessment rates the technical impact as only 'partial' and no public exploit has been identified. EPSS is very low (0.13%, 3rd percentile), indicating no observed exploitation activity to date.
Authentication/authorization bypass in the Balbooa Gridbox extension for Joomla allows an already-authenticated user to escalate to full administrative control of the CMS. CWE-288 indicates the flaw stems from an alternate-path or channel that skips proper authorization checks; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. The vendor-assigned CVSS 4.0 score of 9.4 reflects the total compromise of confidentiality, integrity, and availability that admin takeover implies.
Authentication bypass in SailPoint IdentityIQ lets an unauthenticated remote attacker reach protected APIs and data because OAuth bearer tokens are improperly validated. The flaw (CWE-287) affects all IdentityIQ versions up to the patched releases 8.5p1, 8.4p4, and 8.3p5, and carries a critical CVSS of 9.8. No public exploit identified at time of analysis and EPSS is low (0.22%), but the total technical impact against an identity-governance platform makes it a high-priority patch.
Improper access control in the Quix Page Builder Pro extension for Joomla (by ThemeXpert) lets authenticated users upload media files even when they lack the media-management permission normally required for that action. The flaw is a permission-enforcement gap on the media upload function rather than a full unauthenticated compromise; no public exploit identified at time of analysis and it is not listed in CISA KEV. The vendor-assigned CVSS 4.0 base score is 8.7 (High), though the supplied vector conflicts with the 'authenticated users' language in the description.
Broken authentication in FreeScout (a PHP/Laravel self-hosted help desk and shared inbox) prior to version 1.8.221 lets an unauthenticated remote attacker download arbitrary attachments whose token_type is set to 1 (TOKEN_TYPE_LEGACY). The download route bypasses token verification for these legacy attachments, and because file paths are deterministic, any attachment created by an older FreeScout instance can be retrieved without a valid token or session. There is no public exploit identified at time of analysis, but the upstream commit disclosing the exact flawed conditional is public.
Remote code execution in Chamilo LMS 1.11.40 and earlier allows any user enrolled in a course to run arbitrary PHP through the main/inc/ajax/lang.ajax.php endpoint, which is guarded only by api_protect_course_script(true) and is therefore reachable by students, teachers, and DRH (HR) roles rather than administrators. The root cause is an improper-authorization defect (CWE-285) that exposes a dangerous language-editing endpoint to low-privilege course members. No public exploit code is identified at time of analysis and it is not listed in CISA KEV, but a vendor security advisory (GHSA-4hwq-pv7c-3928) has been published.
Payment validation bypass in Frappe LMS 2.51.0 and earlier lets an authenticated user enroll in paid courses for free by supplying an unrelated batch that was never linked to the target course, granting access to premium content without completing payment. The flaw is an authorization/business-logic weakness (CWE-288) fixed in version 2.52.0, which now verifies the batch belongs to the course before enrollment. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Broken object-level authorization in dataCycle-CORE (versions up to and including 25.07.3) lets any authenticated API user with a valid access token impersonate another user by passing a `user_email` parameter to the collection API, causing permissions to be evaluated as the victim and exposing that user's collections. In the V4 code path the same controller further exposes `add_item` and `remove_item` routes lacking object-level `authorize!` checks, enabling a likely cross-user modification path once a collection ID is known. No public exploit is identified at time of analysis, and the flaw is fixed in version 26.06.08.
Broken authorization in dataCycle-CORE (versions up to and including 25.07.3) lets any authenticated low-privileged user reach server-side rendered admin content via the /remote_render endpoint, which renders arbitrary partials and helper-backed views without enforcing controller-specific authorization. On a test instance a Standard user retrieved the PostgreSQL admin dashboard statistics even though direct access to /admin redirected the user away, confirming an information-disclosure impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the issue is fixed in 26.06.08.
Missing authentication in HeyForm's POST /api/upload endpoint lets any anonymous internet user upload files up to 10 MB (PDF, Office docs, CSV, MP4, images, etc.) and receive a permanent, public URL hosted on the HeyForm domain. The endpoint is shared by authenticated form creators and unauthenticated submitters but performs no auth guard, no form-context binding, no openToken check, and no session validation, so every request is accepted anonymously in all deployments prior to 3.0.0-rc.9. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; abuse is trivial but limited to unauthorized file hosting rather than server compromise.
Broken authorization in dataCycle-CORE (versions up to and including 25.07.3) lets any remote, unauthenticated caller download a DataLink text attachment directly by supplying its DataLink UUID, bypassing expiration checks and the access controls enforced by the normal show flow. Because the file-serving route is public and dataCycle's mailer embeds the direct file URL, any leaked, forwarded, logged, or stale email link permanently exposes the attachment. No public exploit identified at time of analysis and it is not listed in CISA KEV, but SSVC rates the flaw automatable with partial technical impact.
Groovy sandbox escape in Apache Syncope's Implementations feature lets an administrator holding Implementation entitlements author a malicious Groovy class that runs untrusted code outside the intended security sandbox, effectively achieving arbitrary code execution on the identity-management server. It affects Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.6, and 4.1.0-M0 through 4.1.1. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the published CVSS of 9.8 overstates real-world exposure because the flaw requires a privileged administrator account.
Unauthenticated information disclosure in the Network-AI (npm: network-ai) package versions 5.12.2 through 5.13.3 lets remote actors read the ApprovalInbox even when an operator has configured a checkAuth/secret, because the authorization check was never wired into the GET read routes. Exploitation exposes full approval-request content - including pending shell-command strings, file paths, justifications, and risk levels - and a hardcoded Access-Control-Allow-Origin:* header allows any website an operator visits to exfiltrate the same data cross-origin. This is an incomplete fix for GHSA-mxjx-28vx-xjjj; no public exploit is identified at time of analysis and the package is not listed in CISA KEV.
Confused-deputy privilege escalation in SurrealDB before 2.5.0 and before 3.0.0-beta.3 lets a low-privileged user (e.g. the database editor role) plant futures, functions, or closures inside record fields that later execute in the security context of whoever reads or writes the record. When a root owner or namespace admin touches the poisoned field, the attacker's logic runs with elevated permissions, enabling creation of a root owner and full server takeover. There is no public exploit identified at time of analysis, no KEV listing, and no EPSS score supplied, so risk assessment rests on the vendor advisory and CVSS 4.0 signals rather than observed exploitation.
Session hijacking in SurrealDB before 3.1.0 lets unauthenticated attackers enumerate attached session UUIDs through the HTTP /rpc 'sessions' method and then impersonate any authenticated session by supplying an arbitrary 'session' field that the /rpc handler never ownership-checks. Because impersonation inherits the victim session's authorization, an anonymous caller can read, write, and delete data and escalate to that session's level, up to root. There is no public exploit identified at time of analysis, but the vendor GHSA advisory documents the mechanism in full detail, making reproduction straightforward.
Broken authorization in SurrealDB before 3.1.0 lets any authenticated principal - including low-privilege Record and Scope users - read the full contents of every table in their current database, bypassing PERMISSIONS FOR SELECT WHERE controls. The flaw stems from the engine evaluating user-supplied WHERE (and SET/MERGE/CONTENT/PATCH) expressions against complete record data before running the table-level SELECT permission check, so side-effecting expressions exfiltrate data the caller should never see. No public exploit identified at time of analysis, and the issue is not in CISA KEV, but the GHSA advisory documents multiple practical exfiltration primitives (scripting functions, THROW, and timing side channels).
Broken authorization in SurrealDB before 3.1.4 allows record-scoped (authenticated) users to read array elements that field-level SELECT permissions are supposed to hide. When permissions are evaluated against array fields using the `field.*` wildcard, denied elements are leaked back to the caller instead of being filtered out, because the engine mishandles element indexing during permission filtering (CWE-863). No public exploit has been identified at time of analysis and it is not in CISA KEV, but the flaw is a straightforward authorization bypass reachable by any user with record scope access.
Cross-tenant authorization bypass in SurrealDB before 3.2.0 lets any authenticated user reach custom API endpoints belonging to other namespaces and databases by manipulating the scope in the URL path. Because the server fails to validate namespace/database scope on custom API routes, an attacker holding valid credentials for one tenant can read sensitive data or trigger unintended operations in unrelated tenants. No public exploit identified at time of analysis, and it is not listed in CISA KEV, but the multi-tenant data-exposure impact is significant (CVSS 4.0 8.6).
Authentication bypass in Red Hat OpenShift HyperShift (hosted control planes) lets a network-reachable attacker impersonate a Konnectivity agent because the proxy-server's agent-facing listener was configured without --cluster-ca-cert and without token-based agent authentication, so client certificates go unvalidated. Any remote party who can reach the Konnectivity cluster endpoint can register as an unauthenticated agent, join the routing pool, and then proxy, inspect, modify, or drop control-plane-to-node traffic. No public exploit identified at time of analysis; the issue is corrected upstream in openshift/hypershift PR #9031 by adding the missing --cluster-ca-cert flag.
Use-after-free in the Linux kernel's ksmbd (in-kernel SMB3 server) durable-handle scavenger allows a remote client interacting with SMB2 durable handles to corrupt kernel memory and free a file object still referenced by concurrent m_fp_list walkers. The flaw stems from two related races in ksmbd_durable_scavenger() - a list_head reuse that corrupts f_ci->m_fp_list and a refcount/unlink race that leaves a freed handle reachable by rename and share-mode lookups. There is no public exploit identified at time of analysis, EPSS is low (0.18%, 7th percentile), and it is not in CISA KEV, so exploitation is unproven despite the NVD 9.8 rating.
Use-after-free in the Linux kernel's in-kernel OpenVPN data-channel module (ovpn) lets a local operator who can create VPN peers over TCP trigger memory corruption when the CMD_NEW_PEER netlink command hits its error path. The flaw affects kernels from 6.16 onward and stems from the error path calling the peer destructor directly instead of dropping the kref, so a concurrent TCP syscall caller (e.g. a recvmsg blocked on the peer's queue) can operate on freed memory. No public exploit identified at time of analysis; EPSS is low (0.21%) and it is not in CISA KEV, but the CVSS 7.8 reflects high confidentiality/integrity/availability impact from local memory corruption.
Kernel memory corruption in the Linux MANA (Microsoft Azure Network Adapter) driver lets a malicious or compromised hypervisor bypass a bounds check via a time-of-check/time-of-use double-fetch of hwc_msg_id from a shared DMA buffer. In a Confidential VM (SEV-SNP/TDX), DMA-coherent memory is unencrypted and host-visible, so the host can alter the message ID after mana_hwc_rx_event_handler() validates it but before mana_hwc_handle_resp() re-reads it for test_bit() and pointer arithmetic, driving an out-of-bounds access in guest kernel memory. No public exploit identified at time of analysis; EPSS is low (0.18%, 8th percentile) and it is not in CISA KEV.
AppArmor connect mediation bypass in the Linux kernel lets a confined task open outbound TCP or MPTCP connections using TCP Fast Open (MSG_FASTOPEN on sendmsg()/sendto()) even when its profile grants send but denies connect. Because apparmor_socket_sendmsg() only checked AA_MAY_SEND, the implicit connect embedded in the SYN packet escaped policy enforcement, effectively an authentication/authorization bypass of the profile. No public exploit identified at time of analysis; EPSS is low (0.17%, 7th percentile) and this is not in CISA KEV, so risk is a targeted policy-enforcement gap rather than mass exploitation.
Improper inode validation in the Linux kernel's F2FS filesystem allows a crafted or corrupted f2fs image to smuggle a directory entry referencing the synthetic compressed-cache inode number (max_nid), bypassing f2fs_check_nid_range() when the compress_cache mount option is disabled. Because is_meta_ino() unconditionally treats F2FS_COMPRESS_INO() as a meta inode, f2fs_iget() skips do_read_inode() and instantiates a fake internal inode instead of rejecting the out-of-range nid, enabling local memory-safety abuse. No public exploit identified at time of analysis; EPSS probability is low (0.17%, 7th percentile) and it is not on CISA KEV.
Guest-to-host denial of service in the Linux kernel's x86 KVM ioeventfd datamatch handling allows a malicious VM to crash the hypervisor host via a reachable BUG_ON(). A guest that issues an unaligned store spanning a page boundary and hitting a datamatch-enabled ioeventfd at offset 0 of the second page triggers an alignment assertion in ioeventfd_write(), panicking the host kernel. The defect has existed since 2009 (kernel 2.6.32); EPSS is low (0.18%, 7th percentile) and there is no public exploit identified at time of analysis, though the commit message includes a working reproducer trace.
Integrity-check bypass in the Linux kernel's UDF filesystem driver allows a crafted disk image to defeat descriptor CRC validation, leaving only a trivially-forgeable 8-bit tag checksum guarding descriptor parsing. Affecting the udf_read_tagged() path across kernels from 2.6.12 through 7.1 pre-patch, an attacker who can get a malicious UDF image mounted can smuggle corrupted on-disk descriptors past validation, enabling downstream memory corruption with high confidentiality, integrity, and availability impact (CVSS 8.4). No public exploit is identified at time of analysis, and EPSS is low (0.19%), consistent with a local-only, media-dependent attack surface.
Authentication bypass in FalkorDB QueryWeaver lets unauthenticated attackers hijack any existing account by submitting a signup request containing the victim's email address, whereupon the server issues a valid session token bound to the victim's identity. No credentials, prior access, or user interaction are required, making this a pre-auth account takeover. No public exploit identified at time of analysis, though the flaw was reported by VulnCheck and a vendor patch is available.
Authorization bypass in VMware Avi Load Balancer (branches 22.1.x, 30.x, 31.x, and 32.1.1) allows a network-based actor holding low-privilege credentials to reach a limited subset of the Avi Control Plane without proper authorization. Rated CVSS 8.3 by VMware/Broadcom with CWE-863 (Incorrect Authorization), the flaw exposes control-plane functionality that should be gated behind higher authorization. There is no public exploit identified at time of analysis and no CISA KEV listing, so exploitation is currently theoretical rather than observed.
Authentication bypass in VMware Avi Load Balancer (versions 22.1.1-22.1.7, 30.1.1-30.2.6, and 31.1.1-31.2.2) lets a network-adjacent attacker circumvent the login mechanism and reach the Avi Controller control plane. Reported by VMware/Broadcom, it carries a CVSS 9.8 (AV:N/AC:L/PR:N/UI:N) reflecting full unauthenticated compromise of confidentiality, integrity and availability. No public exploit is identified at time of analysis and it is not on the CISA KEV list, but the flaw class (CWE-287) and network-reachable admin plane make it a high-priority patch.
Cross-user file access in IBM Langflow OSS (1.0.0 through 1.10.1) lets an authenticated user abuse the SaveToFile component to read and modify files uploaded by other users by supplying absolute paths that point into victim storage locations. Append mode enables exfiltration of victim data into the attacker's namespace (confidentiality), while overwrite mode allows replacing victim content with arbitrary data (integrity), collapsing the per-user storage ownership boundary. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV; a vendor patch is available.
Authentication bypass and full data compromise affects IBM Langflow OSS 1.0.0 through 1.10.1, which ships hard-coded credentials (a static password or cryptographic key) embedded in the application. Because the same secret is present in every deployment, remote attackers who read it from the public source or a binary can authenticate to inbound interfaces, impersonate the app to external components, or decrypt internal data on any affected instance. No public exploit identified at time of analysis, but the shared-secret nature makes exploitation trivial once the value is known.
IBM PowerVM Novalink API misconfiguration (CWE-16) expands the attack surface and enables unauthorized virtualization management operations under non-default configurations. Versions 2.2.0 through 2.2.1.1 and 2.3.0 through 2.3.2 are confirmed affected via NVD CPE data, with a low-privileged local attacker potentially achieving full confidentiality, integrity, and availability impact. No public exploit has been identified at time of analysis, and an EPSS score of 0.10% at the 1st percentile signals negligible exploitation activity - real-world risk is constrained by the non-default configuration prerequisite and local-only attack vector.
Unauthenticated remote code execution in IBM Langflow OSS 1.0.0 through 1.10.0 stems from broken webhook authentication that skips API key validation whenever WEBHOOK_AUTH_ENABLE is False - which is the shipped default. Any remote attacker who learns a flow's UUID can invoke that flow's webhook endpoint as though they were its owner, running arbitrary flow logic and reaching RCE. No public exploit identified at time of analysis, but the CVSS 9.8 rating and default-vulnerable configuration make this a high-priority patch.
Authentication bypass in IBM Langflow OSS 1.0.0 through 1.10.0 lets an unauthenticated remote attacker retrieve a long-lived superuser bearer token from the /api/v1/login/auto_login endpoint whenever the AUTO_LOGIN setting is on - which is the default. Because the endpoint mints full-admin tokens with no credentials, any network-reachable attacker gains complete administrative control, and overly permissive CORS can leak those tokens to unintended origins. A vendor patch is available; no public exploit or CISA KEV listing has been identified at time of analysis.
Authentication bypass in meta-ads-mcp (< 1.0.115) lets an unauthenticated network caller send an arbitrary X-Pipeboard-Token header to slip past AuthInjectionMiddleware and execute every MCP tool using the server operator's Meta Ads credentials. The guard only rejects requests when BOTH an auth token and a pipeboard token are absent, but X-Pipeboard-Token satisfies the pipeboard branch without setting any auth context, causing the token getter to fall back to the operator's META_ACCESS_TOKEN environment variable. A publicly available exploit code exists (detailed PoC with Dockerfile and poc.py), enabling full read and write access to the operator's Meta Ads data; it affects only streamable-http deployments with META_ACCESS_TOKEN configured.
Missing authentication in IBM Langflow OSS 1.0.0 through 1.10.0 lets unauthenticated remote attackers register unlimited user accounts against any exposed instance. When the documented NEW_USER_IS_ACTIVE=true option is set, those accounts become immediately active and can log in to reach known remote-code-execution endpoints, providing a full authentication foothold without relying on AUTO_LOGIN. No public exploit identified at time of analysis, but the CVSS 9.8 rating and unauthenticated network vector make internet-facing deployments a high priority.
Improper access control in Vimesoft Enterprise Video Platform (versions 3.11.0.0 up to but not including 3.25.0) allows remote unauthenticated attackers to invoke privileged functionality that is not properly constrained by access control lists. Because the missing authorization check exposes state-changing operations, an attacker can modify or disrupt platform data and availability without credentials. This was reported by Turkey's national CSIRT (USOM); no public exploit has been identified at time of analysis and no EPSS or CISA KEV data is available.
Authorization bypass in Vimesoft Enterprise Video Platform (versions 3.11.0.0 up to but not including 3.25.0) lets remote unauthenticated attackers manipulate a user-controlled key (an IDOR-style reference) to reach functionality that should be restricted by access-control lists. Reported to Turkey's national CSIRT (USOM) with a CVSS 9.4, it enables reading and altering other tenants'/users' resources; no public exploit identified at time of analysis and the flaw is not in CISA KEV.
Authentication bypass in Vimesoft Enterprise Video Platform (versions 3.11.0.0 up to but not including 3.25.0) lets a remote, unauthenticated attacker change a victim's password without verifying the existing credential (CWE-620), enabling full account takeover. Reported by Turkey's national CERT (TR-CERT/USOM) and rated CVSS 9.8, the flaw grants complete control over targeted accounts. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass in Vimesoft Enterprise Video Platform (versions 3.11.0.0 up to but not including 3.25.0) allows remote unauthenticated attackers to reach a critical function that lacks any authentication check, exposing confidential data. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H) indicates trivial network exploitation with high confidentiality impact but no integrity or availability effect. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the flaw was reported by Turkey's national CERT (TR-CERT / USOM).
Insecure direct object reference in Chat2DB before 5.3.0 lets any authenticated non-admin user read the decrypted database credentials of datasources belonging to other users by enumerating IDs against GET /api/connection/datasource/{id}. Because the handler returns the plaintext password field and omits an ownership check, a single low-privileged account can harvest every other tenant's stored connection secrets. No public exploit has been identified at time of analysis, but exploitation is trivial and the EPSS/KEV signals were not supplied in the input.
Sensitive information disclosure in FOSSASIA Open Event Server through 1.19.1 lets unauthenticated remote attackers export the full member roster of any group - email addresses, names, join dates, and roles - because the group followers CSV export endpoint carries no authentication decorator. Publicly available exploit code exists; the flaw is trivially automatable by enumerating sequential group IDs, triggering an export, and polling the unauthenticated task-status endpoint for the download URL. No public exploit has been added to CISA KEV, but the CVSS 4.0 base score of 8.7 (High) and confirmed PoC make it a credible mass-scraping risk.
Broken access control in Maybe Finance (self-hosted personal finance app) through 0.6.0 lets any authenticated low-privilege member-role user read and rewrite instance-wide hosting settings because Settings::HostingsController applies the ensure_admin before_action only to clear_cache, leaving show and update exposed. A member can exfiltrate the operator's Synth API key rendered in plaintext in a form field, replace it with an attacker-controlled value, enable open public registration, and disable email-confirmation enforcement to disrupt the instance. Publicly available exploit code exists (reported by VulnCheck); this is not listed in CISA KEV, so there is no public exploit identified beyond the released POC.
Cross-organization data disclosure in TheHive through 4.1.24 allows any authenticated user to download attachments belonging to other organizations by supplying a known content-hash identifier. The flaw is a broken object-level authorization (BOLA/IDOR) in the attachment download endpoints, where AttachmentSrv.visible acts as a pass-through datastore traversal without enforcing organization scoping. Publicly available exploit code exists (published by VulnCheck / geo-chen), though there is no public exploit identified as actively exploited in the wild (not in CISA KEV).
Improper authorization in Dendrite (the Go-based Matrix homeserver) through version 0.13.8 lets any authenticated local user delete another user's third-party identifier (3PID) bindings via the POST /account/3pid/delete endpoint, because the Forget3PID handler removes the supplied address/medium without verifying ownership. By stripping a victim's email or MSISDN binding and rebinding it through an identity server, an attacker can hijack the victim's account-recovery/password-reset flow. Publicly available exploit code exists; there is no CISA KEV listing, so this is not confirmed as actively exploited.
Cross-tenant data disclosure in Google Cloud Firebase Studio (versions prior to the 2026-04-15 fix) let an authenticated user retrieve other tenants' deployed source code and sensitive data by issuing unauthorized GCS signed-URL requests. The flaw stems from a missing authorization check (CWE-862) on the object-signing path rather than a code-execution bug, so impact is confidentiality-centric. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Unauthorized ticket data disclosure in osTicket v1.18.3 and v1.17.7 allows an authenticated low-privilege user to access tickets belonging to other users by manipulating object identifiers in the AJAX ticket-management endpoints. The flaw stems from missing per-object authorization checks (BOLA/IDOR) rather than a coding error in the request handler. It was reported by Fluid Attacks and fixed in v1.18.4/v1.17.8; no public exploit code is identified at time of analysis, though a Medium write-up and vendor advisory describe the issue.
Broken object-level authorization in the Hashtopolis server web-interface chunk activity component lets any authenticated low-privilege account read all cracked hashes across the entire server, regardless of access-group membership. Affecting all versions prior to 0.14.8, the flaw exposes recovered plaintext credentials - the core sensitive output of the platform - to users who should only see their own group's data. No public exploit is identified at time of analysis, but the vendor confirmed the issue and shipped a fix in v0.14.8.
Payment authentication bypass in the PhonePe Payment Solutions WordPress/WooCommerce plugin before 3.1.0 lets unauthenticated attackers forge payment-success callbacks and mark unpaid orders as paid. Because sites set up through the current onboarding flow have an empty callback-validation secret, the expected signature collapses to an unkeyed hash of the request body that anyone can reproduce. Publicly available exploit code exists (reported by WPScan), though EPSS is low (0.14%) and there is no public exploit identified as being used in the wild.
Sensitive information exposure in the LearnPress LMS plugin for WordPress (versions up to and including 4.4.1) lets unauthenticated attackers pull correct-answer markers, complete option lists, explanations, and full question content for any quiz on the site through the check_answer logic in its frontend REST API. This exposes graded assessment material for paid courses the attacker never enrolled in or paid for, defeating the plugin's course-access model. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but the network-facing, no-authentication nature makes it trivially reproducible against affected sites.
Session forgery in the clawvet self-hosted API server (apps/api) before 0.7.5 lets a remote unauthenticated attacker fully impersonate any user and steal their secret apiKey. The server ships a hard-coded fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and .env.example, while an unauthenticated GET /api/v1/scans endpoint leaks victim userId values; combining these, an attacker forges a valid HS256 cg_session cookie offline and calls GET /api/v1/auth/me to exfiltrate the victim's email, subscription plan, and API key. There is no public exploit identified at time of analysis and the flaw is not in CISA KEV, but the technique is fully described and trivially reproducible; only the self-hosted API is affected, not the published clawvet npm CLI package.
Privilege escalation in the getgrav grav-plugin-api before 1.0.6 allows a low-privileged manager holding the api.users.write permission to become a super-admin. The createApiKey, generate2fa, and disable2fa endpoints never re-check super-admin status, so an attacker can mint API keys bound to super-admin accounts or strip 2FA from super-admin users and take over the entire Grav instance. No public exploit identified at time of analysis, but the vendor GHSA advisory and VulnCheck confirm the flaw.
Two-factor authentication bypass in Grav CMS before 2.0.4 lets an attacker who already knows a victim's password overwrite that user's TOTP secret and log in with full 2FA protection stripped away. During the pending TOTP challenge window the login plugin's regenerate2FASecret task verifies only that the user exists — not that the caller is authorized — and requires no CSRF nonce, so the attacker sets an attacker-chosen secret, computes a valid code, and completes login. VulnCheck-reported and CVSS 4.0 scored 9.1; no public exploit identified at time of analysis.
Authorization bypass in the Grav API plugin (getgrav/grav-plugin-api) before 1.0.6 lets any valid API key perform actions far beyond its intended scope. Although keys can be provisioned with a restricted scopes array (e.g. read-only), the ApiKeyAuthenticator class never reads or enforces those scopes and instead returns the owning user's full account object, so a limited key can execute any write, delete, or administrative operation the owner is entitled to. Reported by VulnCheck with no public exploit identified at time of analysis, but the flaw is trivially exploitable by any key holder against default configurations.
Authorization bypass in OpenClaw before 2026.6.5 lets a low-trust, authenticated caller execute node exec actions beyond their approved permissions by exploiting mismatched gateway and node environment configurations. The flaw (CWE-863, Incorrect Authorization) enables privilege escalation within the approval workflow and can be used to persist or run unauthorized actions. Reported by VulnCheck with a CVSS 4.0 base of 7.7; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Privilege escalation in SolarWinds Serv-U allows an authenticated member of a domain user group to be elevated into an administrator group, granting full administrative control over the managed file transfer server. The flaw stems from improper access control (CWE-284) and carries a vendor CVSS of 9.1 due to a scope change and full confidentiality, integrity, and availability impact, though SolarWinds notes the impact is lower on Windows deployments. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Privilege escalation in SolarWinds Serv-U allows a domain administrator to elevate to a full Serv-U system administrator, granting complete control over the managed file transfer server and its data (CVSS 9.1, CWE-284 improper access control). Exploitation requires existing domain-administrator privileges (PR:H) but no user interaction, and the vendor notes the impact is reduced on Windows deployments, implying non-Windows (Linux) installs are more severely affected. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so this is a defense-in-depth priority rather than a confirmed active threat.
Privilege-to-root remote code execution in SolarWinds Serv-U managed file transfer server stems from an insecure direct object reference (CWE-639) that an authenticated domain administrator with read/write access to the home directory can abuse to execute code as root on the underlying host. The CVSS 3.1 score of 9.1 reflects a scope change from application-admin context to full OS compromise, with the impact explicitly noted as lower on Windows deployments. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, so this is a high-severity but authentication-gated flaw rather than a mass-exploitable unauthenticated bug.
Remote code execution in SolarWinds Serv-U managed file transfer/FTP server allows an attacker to run arbitrary code remotely, executing as root on Unix/Linux deployments while impact is reduced on Windows. The flaw stems from an access-control weakness (CWE-284) and is corroborated by a vendor 'Authentication Bypass' tag, carrying a CVSS 9.1 (scope-changed) rating. No public exploit identified at time of analysis and it is not listed in CISA KEV, so exploitation is currently theoretical rather than confirmed.
Privilege escalation to remote code execution as root in SolarWinds Serv-U stems from an insecure direct object reference (IDOR) that lets an authenticated group administrator manipulate object references beyond their authority. The flaw carries a CVSS 9.1 rating because a scope change allows a lower-tier admin to fully compromise the underlying host on Linux/Unix, though impact is reduced on Windows deployments. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the high privilege prerequisite (group admin) is realistic in multi-tenant MFT environments.
Payment and calculation total tampering in the Ninja Forms WordPress plugin (versions 3.14.8 and prior) allows unauthenticated attackers to submit crafted values that match no configured option in ListSelect or ListRadio fields, causing the get_calc_value() method to fail open and return attacker-supplied numbers. This lets an attacker rewrite form calculation results and payment amounts - including setting order totals to zero - bypassing admin-defined pricing logic. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis, and this is not listed in CISA KEV.
Broken authorization in the Ninja Forms WordPress plugin (versions 3.14.8 and prior) lets an authenticated Author-level user expose stored form submissions to any unauthenticated site visitor by embedding the `ninja-forms/submissions-table` Gutenberg block with an arbitrary formID on a published post. Because the block's render callback performs no capability check and injects a signed bearer token into every visitor's browser via `wp_localize_script`, anyone loading the page can replay that token against the REST submissions endpoint and read all saved field values, including PII such as names, emails, and phone numbers. Reported by VulnCheck; a vendor patch is available, but no public exploit code was identified at time of analysis and the flaw is not in CISA KEV - no public exploit identified at time of analysis.
Network-wide data destruction in the Ninja Forms WordPress plugin (versions 3.14.8 and prior) lets a low-privilege subsite Administrator wipe all Ninja Forms data across an entire Multisite network. By abusing a site-scoped capability check paired with unsafe multisite migration defaults, an actor who reaches the nf_delete_all_data admin-ajax action with a valid per-site nonce triggers migration routines that iterate every blog and drop all nf3_* tables plus related options and transients - no super-admin or network-admin rights needed. Reported by VulnCheck with a vendor patch available; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Privilege escalation via authentication bypass in libssh affects servers that enable GSSAPIKeyExchange, where the gssapi-keyex authentication path fails to confirm that the authenticated Kerberos principal is actually authorized for the local user account being requested. An already-authenticated client holding any valid Kerberos principal in the realm can therefore log in as an arbitrary user, including potentially privileged accounts, on Red Hat Enterprise Linux 8, 9, and 10 and Red Hat Hardened Images. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV, but the CVSS of 8.8 reflects a straightforward, low-complexity abuse once a valid Kerberos credential is held.
Access-control mitigation bypass in the DOM Service Workers component of Mozilla Firefox before version 153 allows remote content to circumvent a browser security mitigation, undermining protections intended to isolate web origins. Mozilla self-reported the flaw (MFSA2026-68/71) and shipped a fix in Firefox 153; there is no public exploit identified at time of analysis and EPSS is low (0.14%, 4th percentile). The NVD-assigned CVSS of 9.8 (full CIA impact, no user interaction) is notably higher than typical for a browser mitigation bypass, which warrants scrutiny.
Security mitigation bypass in the Networking component of Mozilla Firefox before version 153 lets remote attackers defeat a built-in protection mechanism, carrying high confidentiality and integrity impact per the CVSS 9.1 rating. The flaw was reported and fixed by Mozilla in Firefox 153 (advisory MFSA2026-68) and is classified under CWE-693 (Protection Mechanism Failure), with tags indicating an authentication/authorization bypass. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
UI/content spoofing in Mozilla Firefox for Android (fixed in version 153) lets a remote attacker who lures a user to attacker-controlled content misrepresent trusted interface elements, undermining the integrity of what the user believes they are viewing or interacting with. The flaw is classified as an authentication-bypass-by-spoofing weakness (CWE-290) and requires user interaction. There is no public exploit identified at time of analysis, and EPSS exploitation probability is low (0.13%, 3rd percentile).
Protection mechanism failure in the DOM: Security component of Mozilla Firefox lets remote attackers bypass a browser security mitigation, undermining defenses that isolate web content and enforce origin/policy boundaries. Mozilla rates this Critical (CVSS 9.1) with high confidentiality and integrity impact and no authentication or user interaction required per the assigned vector; it is corrected in Firefox 153 (MFSA 2026-68). There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Protection-mechanism bypass in Mozilla Firefox's Enterprise Policies component allows attackers to circumvent security restrictions that administrators enforce through managed policy, undermining controls an organization relies on to lock down the browser. Mozilla rates the flaw CVSS 9.1 (network vector, low complexity, no privileges or user interaction) affecting Firefox before 153 and Firefox ESR before 140.13. There is no public exploit identified at time of analysis and EPSS exploitation probability is low (0.16%, 6th percentile).
Security-mitigation bypass in Mozilla Firefox's DOM: Networking component undermines a built-in protection mechanism (CWE-693), potentially allowing crafted web content to defeat network-layer defenses in versions prior to Firefox 153 and ESR 140.13. The issue was reported and patched by Mozilla with no public exploit identified at time of analysis; EPSS is very low (0.16%, 6th percentile) and it is not listed in CISA KEV. The NVD-assigned CVSS of 9.8 (network, no auth, no user interaction) sits in tension with the sparse 'mitigation bypass' description, which typically describes a defense-defeating enabler rather than direct code execution.
Protection-mechanism bypass in Mozilla Firefox's DOM Service Workers component allows remote web content to circumvent a browser security mitigation, weakening defenses that normally contain untrusted script. The flaw affects Firefox versions prior to 153 and was reported and patched by Mozilla (MFSA2026-68). No public exploit has been identified at time of analysis, and EPSS estimates exploitation probability at only 0.15% (5th percentile), indicating no observed weaponization despite the high nominal CVSS score.
Same-origin policy bypass in Mozilla Firefox's Networking DNS component allows remote attackers to circumvent origin isolation and read or manipulate data belonging to other web origins. Affects Firefox before 153 and Firefox ESR before 140.13, exploitable over the network without authentication or user interaction (CVSS 9.1). No public exploit identified at time of analysis; EPSS is low (0.16%, 6th percentile).
Protection mechanism bypass in the Networking component of Mozilla Firefox (versions prior to 153) allows remote attackers to circumvent a built-in security mitigation over the network without authentication or user interaction, per the CVSS vector (AV:N/AC:L/PR:N/UI:N). Mozilla (MFSA2026-68) tags this as an authentication/mitigation bypass with high confidentiality and integrity impact but no availability impact. No public exploit identified at time of analysis, and EPSS exploitation probability is low at 0.15% (5th percentile).
Mitigation bypass in the Mozilla Firefox PDF Viewer component undermines a built-in security control (CWE-693 Protection Mechanism Failure), weakening a defense-in-depth barrier that would otherwise contain malicious PDF content. Mozilla self-reported the issue and shipped fixes in Firefox 153 and Firefox ESR 140.13 via advisories MFSA2026-68 and MFSA2026-70. There is no public exploit identified at time of analysis, and EPSS is very low (0.16%, 6th percentile), so the headline CVSS 9.8 reflects worst-case potential rather than demonstrated mass exploitation.
Protection-mechanism bypass in the DOM: Networking component of Mozilla Firefox lets a remote, unauthenticated attacker circumvent a browser security mitigation, exposing confidential data and enabling integrity compromise (CVSS 9.1) without user interaction. Reported by Mozilla and fixed in Firefox 153, the flaw affects users browsing to attacker-controlled web content. No public exploit identified at time of analysis, and the low EPSS score (0.15%) suggests exploitation is not yet widespread.
Same-origin policy bypass in Mozilla Firefox's DOM: Navigation component allows a malicious web page to read or manipulate content belonging to another origin, defeating the browser's core cross-origin isolation boundary. All Firefox users on affected pre-153 releases and unpatched ESR branches are exposed, and while Mozilla's vector maps to CVSS 9.8, EPSS estimates only a 0.16% exploitation probability (6th percentile). There is no public exploit identified at time of analysis and it is not in CISA KEV.
Broken authorization in the Grav api plugin (grav-plugin-api) before 1.0.8 lets any authenticated panel user holding the baseline admin.login permission forge persistent API keys bound to arbitrary accounts, resulting in impersonation and privilege escalation up to account takeover. The plugin intercepts the apiKeyGenerate/apiKeyRevoke admin tasks ahead of the account-management ACL, so a low-privilege operator can mint a key that inherits a higher-privileged account's API permissions. Reported by VulnCheck with a fix in 1.0.8; no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Multi-factor authentication bypass in Zohocorp ManageEngine ADSelfService Plus (all versions before build 6524) allows an actor holding valid first-factor credentials to circumvent the second authentication factor, per the vendor advisory CVE-2026-3183. The flaw (CWE-290, authentication bypass by spoofing) is network-reachable and low-complexity but requires low-level privileges (PR:L), and there is no public exploit identified at time of analysis. Because ADSelfService Plus governs self-service password reset and account management across Active Directory, a bypass here undermines a core identity-security control.
Missing authentication in exo-explore's exo 1.0.69 distributed AI inference framework lets remote unauthenticated attackers reach the GET /state and DELETE /instance/{instance_id} management endpoints, exposing cluster state and destroying running inference instances. Classified CWE-306 with CVSS 7.5 (availability-focused), it carries a low EPSS of 0.27% and is not on CISA KEV; a third-party writeup exists but no public exploit is confirmed. The practical effect is denial of service and unauthorized administrative control over the AI node cluster.
Sensitive information disclosure in DayuanJiang next-ai-draw-io 0.4.13 lets a remote attacker spoof the X-Forwarded-For HTTP header to impersonate a trusted client address and bypass IP-based access controls, exposing protected data. The flaw is classified as authentication bypass by spoofing (CWE-290) and, per the CVSS vector, requires no authentication or user interaction. There is no public exploit identified at time of analysis and it is not in CISA KEV; EPSS probability is low at 0.22%.
Argument injection in FreeRDP before 3.28.0 lets a malicious .rdp connection file smuggle arbitrary command-line options into the client, because any line beginning with a forward slash is passed straight to the CLI parser rather than treated as an RDP setting. An attacker who convinces a victim to open a crafted RDP file can invoke options such as /rdp2tcp (command execution), /cert:ignore (certificate-validation bypass), or /drive (local filesystem exposure) the moment the file is opened. There is no public exploit identified at time of analysis, but the fix is published (3.28.0) alongside a coordinated VulnCheck and GitHub security advisory.
Indirect prompt injection in AgenticMail's inbound-mail bridge lets any external, unauthenticated email hijack the operator's Claude Code session, which resumes with permissionMode 'bypassPermissions' and full tooling (Bash/Write/Edit/WebFetch plus the agenticmail MCP toolbelt) under the operator's OAuth identity. Affected are @agenticmail/core < 0.9.43, @agenticmail/claudecode < 0.2.39, @agenticmail/codex < 0.1.33, and @agenticmail/openclaw < 0.5.71, where the bridge-wake handler embeds attacker-controlled from/subject/preview verbatim into the agent prompt with no sender verification - despite a sibling handler correctly gating on isOperatorReplySender. There is no public exploit identified at time of analysis and it is not on CISA KEV, but the GitHub Security Advisory (GHSA-fq4x-789w-jg5h) documents the exact vulnerable code paths, and EPSS was not supplied.
Cross-agent authorization bypass in AgenticMail's @agenticmail/api (prior to 0.9.64) lets any low-privileged authenticated agent read and hijack tasks belonging to other agents. By calling GET /api/agenticmail/tasks/pending?assignee=<victim>, an attacker enumerates a target agent's pending/claimed tasks - including task IDs and sensitive payloads - then reuses those IDs against the /tasks/:id/claim, /result, /complete, and /fail endpoints, which never verify the caller is the assignee. Fixed in 0.9.64; no public exploit identified at time of analysis, though the GitHub advisory (GHSA-hjwc-26pj-v3pm) includes a working local reproduction, and no EPSS or KEV signal is present in the input.
Broken access control in NextCRM 0.12.1 lets a low-privileged authenticated user with a valid MCP Bearer API token (`nxtc__...`) read, modify, and delete campaigns belonging to other users. Because multiple MCP campaign handlers query and mutate objects by ID alone while ignoring the authenticated user ID, an attacker can enumerate all campaigns, alter templates and steps, and trigger or pause delivery across tenant boundaries. No public exploit identified at time of analysis; the issue is fixed in version 0.12.2.
Cross-tenant data tampering in NextCRM (open-source CRM) before version 0.12.0 lets any authenticated user - including low-privilege 'member' accounts - modify CRM contacts and targets owned by other users or organizations. The contact and target update endpoints trust a client-supplied resource identifier without checking ownership, so an attacker who is a legitimate tenant on the instance can overwrite records outside their scope. No public exploit is identified at time of analysis, and the flaw is not listed in CISA KEV.
Privilege escalation via broken access control in NextCRM (open-source CRM by pdovhomilja) before version 0.12.0 lets any authenticated low-privilege user (member or viewer) call the activateUser and deactivateUser Next.js Server Actions, which never verify the caller holds the admin role. An attacker can therefore toggle any account's active state - including deactivating the main administrator to lock legitimate admins out, or reactivating disabled accounts. No public exploit identified at time of analysis, but the fix is confirmed in release v0.12.0 and the root cause is well documented in the vendor security advisory.
Insecure Direct Object Reference in VSee Clinic 7.1.26 (API 1.3.0) lets an authenticated user tamper with the 'remark' parameter on the /v1.3.0/api/files endpoint to enumerate, download, and delete files owned by other users of the telehealth platform. Because a single low-privileged account yields full read and destructive access to every user's files, the flaw combines confidentiality with integrity and availability loss. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the technique is trivial and self-evident from the SRA Labs disclosure.
Message injection in FreeScout self-hosted help desk (all versions prior to 1.8.223) lets a remote unauthenticated attacker forge customer replies inside any existing support conversation. By emailing the helpdesk's public intake address with a crafted In-Reply-To header that references a target thread, the attacker's message renders in the agent UI as a legitimate customer reply, silently reopens the conversation, and overwrites last_reply_from with the attacker's identity. No credentials, tokens, or prior access are required (CVSS 8.6); no public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated information disclosure in FileCodeBox before 2.4 lets remote attackers defeat the IPRateLimit anti-bruteforce control by spoofing X-Real-IP and X-Forwarded-For headers, which the application trusted without verifying the request originated from a configured reverse proxy. By rotating a unique fake IP on every request, an attacker resets their throttling counter indefinitely and can brute-force the short share codes to download other users' files. CVSS 4.0 is 8.7 (high), the fix shipped in release V2.4, and no public exploit or CISA KEV listing was identified at time of analysis.
Brute-force protection bypass in Glance (glanceapp/glance) 0.8.5 lets remote unauthenticated attackers defeat the per-IP failed-login lockout by rotating the leftmost value of the X-Forwarded-For header, but only when the server 'proxied' option is enabled. Because the authentication handler trusted the client-supplied leftmost XFF value instead of the trusted reverse proxy's rightmost value, each guess appears to come from a new IP and the lockout counter never trips, enabling unlimited credential guessing against the login endpoint. No public exploit identified at time of analysis and it is not in CISA KEV, though the upstream fix (PR #1033) and VulnCheck advisory make the technique trivially reproducible.
Improper access control in the Page Builder CK extension for Joomla (versions 1.0.0 through 3.6.1) allows remote unauthenticated attackers to enumerate and view frontend page list views that should be restricted, effectively bypassing intended authentication on that view. The CVSS 9.1 rating reflects high confidentiality and integrity exposure over the network with no privileges or user interaction, though CISA's SSVC assessment rates the technical impact as only 'partial' and no public exploit has been identified. EPSS is very low (0.13%, 3rd percentile), indicating no observed exploitation activity to date.
Authentication/authorization bypass in the Balbooa Gridbox extension for Joomla allows an already-authenticated user to escalate to full administrative control of the CMS. CWE-288 indicates the flaw stems from an alternate-path or channel that skips proper authorization checks; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. The vendor-assigned CVSS 4.0 score of 9.4 reflects the total compromise of confidentiality, integrity, and availability that admin takeover implies.
Authentication bypass in SailPoint IdentityIQ lets an unauthenticated remote attacker reach protected APIs and data because OAuth bearer tokens are improperly validated. The flaw (CWE-287) affects all IdentityIQ versions up to the patched releases 8.5p1, 8.4p4, and 8.3p5, and carries a critical CVSS of 9.8. No public exploit identified at time of analysis and EPSS is low (0.22%), but the total technical impact against an identity-governance platform makes it a high-priority patch.
Improper access control in the Quix Page Builder Pro extension for Joomla (by ThemeXpert) lets authenticated users upload media files even when they lack the media-management permission normally required for that action. The flaw is a permission-enforcement gap on the media upload function rather than a full unauthenticated compromise; no public exploit identified at time of analysis and it is not listed in CISA KEV. The vendor-assigned CVSS 4.0 base score is 8.7 (High), though the supplied vector conflicts with the 'authenticated users' language in the description.
Broken authentication in FreeScout (a PHP/Laravel self-hosted help desk and shared inbox) prior to version 1.8.221 lets an unauthenticated remote attacker download arbitrary attachments whose token_type is set to 1 (TOKEN_TYPE_LEGACY). The download route bypasses token verification for these legacy attachments, and because file paths are deterministic, any attachment created by an older FreeScout instance can be retrieved without a valid token or session. There is no public exploit identified at time of analysis, but the upstream commit disclosing the exact flawed conditional is public.
Remote code execution in Chamilo LMS 1.11.40 and earlier allows any user enrolled in a course to run arbitrary PHP through the main/inc/ajax/lang.ajax.php endpoint, which is guarded only by api_protect_course_script(true) and is therefore reachable by students, teachers, and DRH (HR) roles rather than administrators. The root cause is an improper-authorization defect (CWE-285) that exposes a dangerous language-editing endpoint to low-privilege course members. No public exploit code is identified at time of analysis and it is not listed in CISA KEV, but a vendor security advisory (GHSA-4hwq-pv7c-3928) has been published.
Payment validation bypass in Frappe LMS 2.51.0 and earlier lets an authenticated user enroll in paid courses for free by supplying an unrelated batch that was never linked to the target course, granting access to premium content without completing payment. The flaw is an authorization/business-logic weakness (CWE-288) fixed in version 2.52.0, which now verifies the batch belongs to the course before enrollment. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Broken object-level authorization in dataCycle-CORE (versions up to and including 25.07.3) lets any authenticated API user with a valid access token impersonate another user by passing a `user_email` parameter to the collection API, causing permissions to be evaluated as the victim and exposing that user's collections. In the V4 code path the same controller further exposes `add_item` and `remove_item` routes lacking object-level `authorize!` checks, enabling a likely cross-user modification path once a collection ID is known. No public exploit is identified at time of analysis, and the flaw is fixed in version 26.06.08.
Broken authorization in dataCycle-CORE (versions up to and including 25.07.3) lets any authenticated low-privileged user reach server-side rendered admin content via the /remote_render endpoint, which renders arbitrary partials and helper-backed views without enforcing controller-specific authorization. On a test instance a Standard user retrieved the PostgreSQL admin dashboard statistics even though direct access to /admin redirected the user away, confirming an information-disclosure impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the issue is fixed in 26.06.08.
Missing authentication in HeyForm's POST /api/upload endpoint lets any anonymous internet user upload files up to 10 MB (PDF, Office docs, CSV, MP4, images, etc.) and receive a permanent, public URL hosted on the HeyForm domain. The endpoint is shared by authenticated form creators and unauthenticated submitters but performs no auth guard, no form-context binding, no openToken check, and no session validation, so every request is accepted anonymously in all deployments prior to 3.0.0-rc.9. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; abuse is trivial but limited to unauthorized file hosting rather than server compromise.
Broken authorization in dataCycle-CORE (versions up to and including 25.07.3) lets any remote, unauthenticated caller download a DataLink text attachment directly by supplying its DataLink UUID, bypassing expiration checks and the access controls enforced by the normal show flow. Because the file-serving route is public and dataCycle's mailer embeds the direct file URL, any leaked, forwarded, logged, or stale email link permanently exposes the attachment. No public exploit identified at time of analysis and it is not listed in CISA KEV, but SSVC rates the flaw automatable with partial technical impact.
Groovy sandbox escape in Apache Syncope's Implementations feature lets an administrator holding Implementation entitlements author a malicious Groovy class that runs untrusted code outside the intended security sandbox, effectively achieving arbitrary code execution on the identity-management server. It affects Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.6, and 4.1.0-M0 through 4.1.1. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the published CVSS of 9.8 overstates real-world exposure because the flaw requires a privileged administrator account.
Unauthenticated information disclosure in the Network-AI (npm: network-ai) package versions 5.12.2 through 5.13.3 lets remote actors read the ApprovalInbox even when an operator has configured a checkAuth/secret, because the authorization check was never wired into the GET read routes. Exploitation exposes full approval-request content - including pending shell-command strings, file paths, justifications, and risk levels - and a hardcoded Access-Control-Allow-Origin:* header allows any website an operator visits to exfiltrate the same data cross-origin. This is an incomplete fix for GHSA-mxjx-28vx-xjjj; no public exploit is identified at time of analysis and the package is not listed in CISA KEV.
Confused-deputy privilege escalation in SurrealDB before 2.5.0 and before 3.0.0-beta.3 lets a low-privileged user (e.g. the database editor role) plant futures, functions, or closures inside record fields that later execute in the security context of whoever reads or writes the record. When a root owner or namespace admin touches the poisoned field, the attacker's logic runs with elevated permissions, enabling creation of a root owner and full server takeover. There is no public exploit identified at time of analysis, no KEV listing, and no EPSS score supplied, so risk assessment rests on the vendor advisory and CVSS 4.0 signals rather than observed exploitation.
Session hijacking in SurrealDB before 3.1.0 lets unauthenticated attackers enumerate attached session UUIDs through the HTTP /rpc 'sessions' method and then impersonate any authenticated session by supplying an arbitrary 'session' field that the /rpc handler never ownership-checks. Because impersonation inherits the victim session's authorization, an anonymous caller can read, write, and delete data and escalate to that session's level, up to root. There is no public exploit identified at time of analysis, but the vendor GHSA advisory documents the mechanism in full detail, making reproduction straightforward.
Broken authorization in SurrealDB before 3.1.0 lets any authenticated principal - including low-privilege Record and Scope users - read the full contents of every table in their current database, bypassing PERMISSIONS FOR SELECT WHERE controls. The flaw stems from the engine evaluating user-supplied WHERE (and SET/MERGE/CONTENT/PATCH) expressions against complete record data before running the table-level SELECT permission check, so side-effecting expressions exfiltrate data the caller should never see. No public exploit identified at time of analysis, and the issue is not in CISA KEV, but the GHSA advisory documents multiple practical exfiltration primitives (scripting functions, THROW, and timing side channels).
Broken authorization in SurrealDB before 3.1.4 allows record-scoped (authenticated) users to read array elements that field-level SELECT permissions are supposed to hide. When permissions are evaluated against array fields using the `field.*` wildcard, denied elements are leaked back to the caller instead of being filtered out, because the engine mishandles element indexing during permission filtering (CWE-863). No public exploit has been identified at time of analysis and it is not in CISA KEV, but the flaw is a straightforward authorization bypass reachable by any user with record scope access.
Cross-tenant authorization bypass in SurrealDB before 3.2.0 lets any authenticated user reach custom API endpoints belonging to other namespaces and databases by manipulating the scope in the URL path. Because the server fails to validate namespace/database scope on custom API routes, an attacker holding valid credentials for one tenant can read sensitive data or trigger unintended operations in unrelated tenants. No public exploit identified at time of analysis, and it is not listed in CISA KEV, but the multi-tenant data-exposure impact is significant (CVSS 4.0 8.6).
Authentication bypass in Red Hat OpenShift HyperShift (hosted control planes) lets a network-reachable attacker impersonate a Konnectivity agent because the proxy-server's agent-facing listener was configured without --cluster-ca-cert and without token-based agent authentication, so client certificates go unvalidated. Any remote party who can reach the Konnectivity cluster endpoint can register as an unauthenticated agent, join the routing pool, and then proxy, inspect, modify, or drop control-plane-to-node traffic. No public exploit identified at time of analysis; the issue is corrected upstream in openshift/hypershift PR #9031 by adding the missing --cluster-ca-cert flag.
Use-after-free in the Linux kernel's ksmbd (in-kernel SMB3 server) durable-handle scavenger allows a remote client interacting with SMB2 durable handles to corrupt kernel memory and free a file object still referenced by concurrent m_fp_list walkers. The flaw stems from two related races in ksmbd_durable_scavenger() - a list_head reuse that corrupts f_ci->m_fp_list and a refcount/unlink race that leaves a freed handle reachable by rename and share-mode lookups. There is no public exploit identified at time of analysis, EPSS is low (0.18%, 7th percentile), and it is not in CISA KEV, so exploitation is unproven despite the NVD 9.8 rating.
Use-after-free in the Linux kernel's in-kernel OpenVPN data-channel module (ovpn) lets a local operator who can create VPN peers over TCP trigger memory corruption when the CMD_NEW_PEER netlink command hits its error path. The flaw affects kernels from 6.16 onward and stems from the error path calling the peer destructor directly instead of dropping the kref, so a concurrent TCP syscall caller (e.g. a recvmsg blocked on the peer's queue) can operate on freed memory. No public exploit identified at time of analysis; EPSS is low (0.21%) and it is not in CISA KEV, but the CVSS 7.8 reflects high confidentiality/integrity/availability impact from local memory corruption.
Kernel memory corruption in the Linux MANA (Microsoft Azure Network Adapter) driver lets a malicious or compromised hypervisor bypass a bounds check via a time-of-check/time-of-use double-fetch of hwc_msg_id from a shared DMA buffer. In a Confidential VM (SEV-SNP/TDX), DMA-coherent memory is unencrypted and host-visible, so the host can alter the message ID after mana_hwc_rx_event_handler() validates it but before mana_hwc_handle_resp() re-reads it for test_bit() and pointer arithmetic, driving an out-of-bounds access in guest kernel memory. No public exploit identified at time of analysis; EPSS is low (0.18%, 8th percentile) and it is not in CISA KEV.
AppArmor connect mediation bypass in the Linux kernel lets a confined task open outbound TCP or MPTCP connections using TCP Fast Open (MSG_FASTOPEN on sendmsg()/sendto()) even when its profile grants send but denies connect. Because apparmor_socket_sendmsg() only checked AA_MAY_SEND, the implicit connect embedded in the SYN packet escaped policy enforcement, effectively an authentication/authorization bypass of the profile. No public exploit identified at time of analysis; EPSS is low (0.17%, 7th percentile) and this is not in CISA KEV, so risk is a targeted policy-enforcement gap rather than mass exploitation.
Improper inode validation in the Linux kernel's F2FS filesystem allows a crafted or corrupted f2fs image to smuggle a directory entry referencing the synthetic compressed-cache inode number (max_nid), bypassing f2fs_check_nid_range() when the compress_cache mount option is disabled. Because is_meta_ino() unconditionally treats F2FS_COMPRESS_INO() as a meta inode, f2fs_iget() skips do_read_inode() and instantiates a fake internal inode instead of rejecting the out-of-range nid, enabling local memory-safety abuse. No public exploit identified at time of analysis; EPSS probability is low (0.17%, 7th percentile) and it is not on CISA KEV.
Guest-to-host denial of service in the Linux kernel's x86 KVM ioeventfd datamatch handling allows a malicious VM to crash the hypervisor host via a reachable BUG_ON(). A guest that issues an unaligned store spanning a page boundary and hitting a datamatch-enabled ioeventfd at offset 0 of the second page triggers an alignment assertion in ioeventfd_write(), panicking the host kernel. The defect has existed since 2009 (kernel 2.6.32); EPSS is low (0.18%, 7th percentile) and there is no public exploit identified at time of analysis, though the commit message includes a working reproducer trace.
Integrity-check bypass in the Linux kernel's UDF filesystem driver allows a crafted disk image to defeat descriptor CRC validation, leaving only a trivially-forgeable 8-bit tag checksum guarding descriptor parsing. Affecting the udf_read_tagged() path across kernels from 2.6.12 through 7.1 pre-patch, an attacker who can get a malicious UDF image mounted can smuggle corrupted on-disk descriptors past validation, enabling downstream memory corruption with high confidentiality, integrity, and availability impact (CVSS 8.4). No public exploit is identified at time of analysis, and EPSS is low (0.19%), consistent with a local-only, media-dependent attack surface.
Authentication bypass in FalkorDB QueryWeaver lets unauthenticated attackers hijack any existing account by submitting a signup request containing the victim's email address, whereupon the server issues a valid session token bound to the victim's identity. No credentials, prior access, or user interaction are required, making this a pre-auth account takeover. No public exploit identified at time of analysis, though the flaw was reported by VulnCheck and a vendor patch is available.
Authorization bypass in VMware Avi Load Balancer (branches 22.1.x, 30.x, 31.x, and 32.1.1) allows a network-based actor holding low-privilege credentials to reach a limited subset of the Avi Control Plane without proper authorization. Rated CVSS 8.3 by VMware/Broadcom with CWE-863 (Incorrect Authorization), the flaw exposes control-plane functionality that should be gated behind higher authorization. There is no public exploit identified at time of analysis and no CISA KEV listing, so exploitation is currently theoretical rather than observed.
Authentication bypass in VMware Avi Load Balancer (versions 22.1.1-22.1.7, 30.1.1-30.2.6, and 31.1.1-31.2.2) lets a network-adjacent attacker circumvent the login mechanism and reach the Avi Controller control plane. Reported by VMware/Broadcom, it carries a CVSS 9.8 (AV:N/AC:L/PR:N/UI:N) reflecting full unauthenticated compromise of confidentiality, integrity and availability. No public exploit is identified at time of analysis and it is not on the CISA KEV list, but the flaw class (CWE-287) and network-reachable admin plane make it a high-priority patch.
Cross-user file access in IBM Langflow OSS (1.0.0 through 1.10.1) lets an authenticated user abuse the SaveToFile component to read and modify files uploaded by other users by supplying absolute paths that point into victim storage locations. Append mode enables exfiltration of victim data into the attacker's namespace (confidentiality), while overwrite mode allows replacing victim content with arbitrary data (integrity), collapsing the per-user storage ownership boundary. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV; a vendor patch is available.
Authentication bypass and full data compromise affects IBM Langflow OSS 1.0.0 through 1.10.1, which ships hard-coded credentials (a static password or cryptographic key) embedded in the application. Because the same secret is present in every deployment, remote attackers who read it from the public source or a binary can authenticate to inbound interfaces, impersonate the app to external components, or decrypt internal data on any affected instance. No public exploit identified at time of analysis, but the shared-secret nature makes exploitation trivial once the value is known.
IBM PowerVM Novalink API misconfiguration (CWE-16) expands the attack surface and enables unauthorized virtualization management operations under non-default configurations. Versions 2.2.0 through 2.2.1.1 and 2.3.0 through 2.3.2 are confirmed affected via NVD CPE data, with a low-privileged local attacker potentially achieving full confidentiality, integrity, and availability impact. No public exploit has been identified at time of analysis, and an EPSS score of 0.10% at the 1st percentile signals negligible exploitation activity - real-world risk is constrained by the non-default configuration prerequisite and local-only attack vector.
Unauthenticated remote code execution in IBM Langflow OSS 1.0.0 through 1.10.0 stems from broken webhook authentication that skips API key validation whenever WEBHOOK_AUTH_ENABLE is False - which is the shipped default. Any remote attacker who learns a flow's UUID can invoke that flow's webhook endpoint as though they were its owner, running arbitrary flow logic and reaching RCE. No public exploit identified at time of analysis, but the CVSS 9.8 rating and default-vulnerable configuration make this a high-priority patch.
Authentication bypass in IBM Langflow OSS 1.0.0 through 1.10.0 lets an unauthenticated remote attacker retrieve a long-lived superuser bearer token from the /api/v1/login/auto_login endpoint whenever the AUTO_LOGIN setting is on - which is the default. Because the endpoint mints full-admin tokens with no credentials, any network-reachable attacker gains complete administrative control, and overly permissive CORS can leak those tokens to unintended origins. A vendor patch is available; no public exploit or CISA KEV listing has been identified at time of analysis.
Authentication bypass in meta-ads-mcp (< 1.0.115) lets an unauthenticated network caller send an arbitrary X-Pipeboard-Token header to slip past AuthInjectionMiddleware and execute every MCP tool using the server operator's Meta Ads credentials. The guard only rejects requests when BOTH an auth token and a pipeboard token are absent, but X-Pipeboard-Token satisfies the pipeboard branch without setting any auth context, causing the token getter to fall back to the operator's META_ACCESS_TOKEN environment variable. A publicly available exploit code exists (detailed PoC with Dockerfile and poc.py), enabling full read and write access to the operator's Meta Ads data; it affects only streamable-http deployments with META_ACCESS_TOKEN configured.
Missing authentication in IBM Langflow OSS 1.0.0 through 1.10.0 lets unauthenticated remote attackers register unlimited user accounts against any exposed instance. When the documented NEW_USER_IS_ACTIVE=true option is set, those accounts become immediately active and can log in to reach known remote-code-execution endpoints, providing a full authentication foothold without relying on AUTO_LOGIN. No public exploit identified at time of analysis, but the CVSS 9.8 rating and unauthenticated network vector make internet-facing deployments a high priority.
Improper access control in Vimesoft Enterprise Video Platform (versions 3.11.0.0 up to but not including 3.25.0) allows remote unauthenticated attackers to invoke privileged functionality that is not properly constrained by access control lists. Because the missing authorization check exposes state-changing operations, an attacker can modify or disrupt platform data and availability without credentials. This was reported by Turkey's national CSIRT (USOM); no public exploit has been identified at time of analysis and no EPSS or CISA KEV data is available.
Authorization bypass in Vimesoft Enterprise Video Platform (versions 3.11.0.0 up to but not including 3.25.0) lets remote unauthenticated attackers manipulate a user-controlled key (an IDOR-style reference) to reach functionality that should be restricted by access-control lists. Reported to Turkey's national CSIRT (USOM) with a CVSS 9.4, it enables reading and altering other tenants'/users' resources; no public exploit identified at time of analysis and the flaw is not in CISA KEV.
Authentication bypass in Vimesoft Enterprise Video Platform (versions 3.11.0.0 up to but not including 3.25.0) lets a remote, unauthenticated attacker change a victim's password without verifying the existing credential (CWE-620), enabling full account takeover. Reported by Turkey's national CERT (TR-CERT/USOM) and rated CVSS 9.8, the flaw grants complete control over targeted accounts. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass in Vimesoft Enterprise Video Platform (versions 3.11.0.0 up to but not including 3.25.0) allows remote unauthenticated attackers to reach a critical function that lacks any authentication check, exposing confidential data. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H) indicates trivial network exploitation with high confidentiality impact but no integrity or availability effect. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the flaw was reported by Turkey's national CERT (TR-CERT / USOM).
Insecure direct object reference in Chat2DB before 5.3.0 lets any authenticated non-admin user read the decrypted database credentials of datasources belonging to other users by enumerating IDs against GET /api/connection/datasource/{id}. Because the handler returns the plaintext password field and omits an ownership check, a single low-privileged account can harvest every other tenant's stored connection secrets. No public exploit has been identified at time of analysis, but exploitation is trivial and the EPSS/KEV signals were not supplied in the input.
Sensitive information disclosure in FOSSASIA Open Event Server through 1.19.1 lets unauthenticated remote attackers export the full member roster of any group - email addresses, names, join dates, and roles - because the group followers CSV export endpoint carries no authentication decorator. Publicly available exploit code exists; the flaw is trivially automatable by enumerating sequential group IDs, triggering an export, and polling the unauthenticated task-status endpoint for the download URL. No public exploit has been added to CISA KEV, but the CVSS 4.0 base score of 8.7 (High) and confirmed PoC make it a credible mass-scraping risk.
Broken access control in Maybe Finance (self-hosted personal finance app) through 0.6.0 lets any authenticated low-privilege member-role user read and rewrite instance-wide hosting settings because Settings::HostingsController applies the ensure_admin before_action only to clear_cache, leaving show and update exposed. A member can exfiltrate the operator's Synth API key rendered in plaintext in a form field, replace it with an attacker-controlled value, enable open public registration, and disable email-confirmation enforcement to disrupt the instance. Publicly available exploit code exists (reported by VulnCheck); this is not listed in CISA KEV, so there is no public exploit identified beyond the released POC.
Cross-organization data disclosure in TheHive through 4.1.24 allows any authenticated user to download attachments belonging to other organizations by supplying a known content-hash identifier. The flaw is a broken object-level authorization (BOLA/IDOR) in the attachment download endpoints, where AttachmentSrv.visible acts as a pass-through datastore traversal without enforcing organization scoping. Publicly available exploit code exists (published by VulnCheck / geo-chen), though there is no public exploit identified as actively exploited in the wild (not in CISA KEV).
Improper authorization in Dendrite (the Go-based Matrix homeserver) through version 0.13.8 lets any authenticated local user delete another user's third-party identifier (3PID) bindings via the POST /account/3pid/delete endpoint, because the Forget3PID handler removes the supplied address/medium without verifying ownership. By stripping a victim's email or MSISDN binding and rebinding it through an identity server, an attacker can hijack the victim's account-recovery/password-reset flow. Publicly available exploit code exists; there is no CISA KEV listing, so this is not confirmed as actively exploited.
Cross-tenant data disclosure in Google Cloud Firebase Studio (versions prior to the 2026-04-15 fix) let an authenticated user retrieve other tenants' deployed source code and sensitive data by issuing unauthorized GCS signed-URL requests. The flaw stems from a missing authorization check (CWE-862) on the object-signing path rather than a code-execution bug, so impact is confidentiality-centric. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Unauthorized ticket data disclosure in osTicket v1.18.3 and v1.17.7 allows an authenticated low-privilege user to access tickets belonging to other users by manipulating object identifiers in the AJAX ticket-management endpoints. The flaw stems from missing per-object authorization checks (BOLA/IDOR) rather than a coding error in the request handler. It was reported by Fluid Attacks and fixed in v1.18.4/v1.17.8; no public exploit code is identified at time of analysis, though a Medium write-up and vendor advisory describe the issue.
Broken object-level authorization in the Hashtopolis server web-interface chunk activity component lets any authenticated low-privilege account read all cracked hashes across the entire server, regardless of access-group membership. Affecting all versions prior to 0.14.8, the flaw exposes recovered plaintext credentials - the core sensitive output of the platform - to users who should only see their own group's data. No public exploit is identified at time of analysis, but the vendor confirmed the issue and shipped a fix in v0.14.8.
Payment authentication bypass in the PhonePe Payment Solutions WordPress/WooCommerce plugin before 3.1.0 lets unauthenticated attackers forge payment-success callbacks and mark unpaid orders as paid. Because sites set up through the current onboarding flow have an empty callback-validation secret, the expected signature collapses to an unkeyed hash of the request body that anyone can reproduce. Publicly available exploit code exists (reported by WPScan), though EPSS is low (0.14%) and there is no public exploit identified as being used in the wild.
Sensitive information exposure in the LearnPress LMS plugin for WordPress (versions up to and including 4.4.1) lets unauthenticated attackers pull correct-answer markers, complete option lists, explanations, and full question content for any quiz on the site through the check_answer logic in its frontend REST API. This exposes graded assessment material for paid courses the attacker never enrolled in or paid for, defeating the plugin's course-access model. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but the network-facing, no-authentication nature makes it trivially reproducible against affected sites.
Session forgery in the clawvet self-hosted API server (apps/api) before 0.7.5 lets a remote unauthenticated attacker fully impersonate any user and steal their secret apiKey. The server ships a hard-coded fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and .env.example, while an unauthenticated GET /api/v1/scans endpoint leaks victim userId values; combining these, an attacker forges a valid HS256 cg_session cookie offline and calls GET /api/v1/auth/me to exfiltrate the victim's email, subscription plan, and API key. There is no public exploit identified at time of analysis and the flaw is not in CISA KEV, but the technique is fully described and trivially reproducible; only the self-hosted API is affected, not the published clawvet npm CLI package.
Privilege escalation in the getgrav grav-plugin-api before 1.0.6 allows a low-privileged manager holding the api.users.write permission to become a super-admin. The createApiKey, generate2fa, and disable2fa endpoints never re-check super-admin status, so an attacker can mint API keys bound to super-admin accounts or strip 2FA from super-admin users and take over the entire Grav instance. No public exploit identified at time of analysis, but the vendor GHSA advisory and VulnCheck confirm the flaw.
Two-factor authentication bypass in Grav CMS before 2.0.4 lets an attacker who already knows a victim's password overwrite that user's TOTP secret and log in with full 2FA protection stripped away. During the pending TOTP challenge window the login plugin's regenerate2FASecret task verifies only that the user exists — not that the caller is authorized — and requires no CSRF nonce, so the attacker sets an attacker-chosen secret, computes a valid code, and completes login. VulnCheck-reported and CVSS 4.0 scored 9.1; no public exploit identified at time of analysis.
Authorization bypass in the Grav API plugin (getgrav/grav-plugin-api) before 1.0.6 lets any valid API key perform actions far beyond its intended scope. Although keys can be provisioned with a restricted scopes array (e.g. read-only), the ApiKeyAuthenticator class never reads or enforces those scopes and instead returns the owning user's full account object, so a limited key can execute any write, delete, or administrative operation the owner is entitled to. Reported by VulnCheck with no public exploit identified at time of analysis, but the flaw is trivially exploitable by any key holder against default configurations.
Authorization bypass in OpenClaw before 2026.6.5 lets a low-trust, authenticated caller execute node exec actions beyond their approved permissions by exploiting mismatched gateway and node environment configurations. The flaw (CWE-863, Incorrect Authorization) enables privilege escalation within the approval workflow and can be used to persist or run unauthorized actions. Reported by VulnCheck with a CVSS 4.0 base of 7.7; no public exploit identified at time of analysis and it is not listed in CISA KEV.