Red Hat
Monthly
Path traversal in the actix-files Rust crate (versions 0.6.9 and earlier) exposes arbitrary files from the application's working directory to unauthenticated remote attackers. When `Files::new()` receives a non-existent `serve_from` directory, the library silently substitutes an empty base path; subsequent requests join attacker-supplied filenames against this empty root, which Rust's `canonicalize()` resolves relative to the process working directory, enabling direct file disclosure. A publicly available proof-of-concept exploit exists; no confirmed active exploitation (CISA KEV) has been identified at time of analysis.
Remote process termination in actix-files 0.6.9 and earlier allows any unauthenticated network attacker to crash a Rust web server by sending a single GET request with an empty Range header, triggering a panic in the static file handler at named.rs:534. The vulnerability is only catastrophic when the application is compiled with `panic = "abort"` - the non-default Rust build profile - because in that mode the entire process terminates rather than unwinding the panicking thread. A publicly available proof-of-concept exists in the vendor advisory, and no public exploit identification beyond a netcat one-liner is required.
Open redirect in chi (go-chi/chi) versions before 5.2.2 allows Host header injection via the RedirectSlashes middleware, enabling attackers to redirect users to arbitrary external domains for phishing and credential theft. Applications using the RedirectSlashes middleware that expose their chi router to environments where the Host header can be forged are directly at risk. No public exploit is identified in CISA KEV; however, a functional proof-of-concept is documented in the GHSA advisory, and the GHSA itself characterizes real-world exploitability as lower-severity because standard browsers and email clients cannot be used to manipulate the Host header.
Stack exhaustion in libdm's LVM metadata configuration parser allows any LVM command processing attacker-crafted block device metadata to crash, resulting in denial of service on affected Linux systems. The flaw is exploitable in shared storage, SAN, or virtualization environments where an adversary can supply a maliciously structured block device to a target system running LVM2. No public exploit code has been identified at time of analysis, and the vulnerability is absent from CISA KEV; however, the provided CVSS vector is materially inconsistent with the described DoS impact and warrants independent verification.
Stored XSS in Trix editor (all versions prior to 2.1.18) allows an authenticated low-privilege user to persist a javascript: URI payload via the paste path, which executes in victim browsers when the rendered content is viewed and the injected link is clicked. The entry vector exploits HTMLParser's mishandling of a crafted <span data-trix-attachment="{}"> element, which bypasses attachment processing and routes unvalidated attributes - including a malicious href - into the document model through StringPiece.fromJSON. No public exploit has been identified and the vulnerability is absent from CISA KEV; a vendor-confirmed fix is available in version 2.1.18.
Terminal escape injection in dua-cli allows attackers who can place crafted filenames on a filesystem to manipulate the terminal emulator of any user who subsequently browses that directory with dua-cli and exits the TUI. File names containing OSC or CSI escape sequences are printed unsanitized to stdout after TUI exit, enabling terminal title spoofing, clipboard hijacking, or other escape-sequence attacks against the victim's terminal session. No public exploit code has been identified and this vulnerability is not in CISA KEV; the CVSS 4.0 score of 4.8 reflects the local attack vector and passive user interaction required, limiting realistic blast radius to shared-filesystem or multi-tenant scenarios.
Terminal injection in gdu, a Go-based disk usage analyzer, allows ANSI escape sequences embedded in crafted filenames or directory names to reach the terminal emulator unfiltered after the TUI exits. Any operator who runs gdu against attacker-controlled filesystem paths — shared mounts, downloaded archives, or untrusted repositories — may have their terminal manipulated through clipboard hijacking (OSC 52), window title spoofing, or other escape-sequence-dependent effects. No public exploit code has been identified at time of analysis, and the vulnerability is absent from the CISA KEV catalog.
Cross-site scripting in rails-html-sanitizer 1.0.3-1.7.0 allows external SVG references to bypass sanitization when applications use non-default allowed tags including SVG reference elements such as 'use' or 'feImage'. The PermitScrubber correctly blocked external hrefs via the legacy 'xlink:href' attribute but failed to apply the same restriction to the SVG 2 plain 'href' attribute, which modern browsers also honor. Exploitation via 'use' requires the external SVG to be same-origin for script execution; 'feImage' enables cross-origin image loading for user tracking. No public exploit or CISA KEV listing exists at time of analysis.
Silent incomplete replacement of Quadlet unit files in Podman 5.8.x causes stale security-sensitive directives to persist after a `podman quadlet install --replace` operation on non-reflink filesystems. The missing O_TRUNC flag in the file-open call, combined with a non-truncating `io.Copy` fallback when reflink fails, means that if the replacement Quadlet is shorter than the original, trailing content from the old file survives undetected. A local low-privileged user who uses this command to remove a capability grant (e.g., AddCapability) or an extra volume mount may unknowingly leave those directives active, resulting in containers running with unintended elevated privileges or unauthorized data exposure. No public exploit has been identified at time of analysis.
Template-literal code injection in TypeORM's migration:generate command allows an attacker with database schema write access to achieve arbitrary JavaScript execution on any host that loads the generated migration file. Affected are TypeORM npm versions prior to 0.3.31 (0.x branch) and versions 1.0.0 through 1.0.x (fixed in 1.1.0), spanning PostgreSQL, MySQL, MariaDB, and CockroachDB drivers. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis; however, the GHSA advisory provides sufficient technical detail to reproduce the attack.
OAuth authorization code theft in @backstage/plugin-auth-backend prior to 0.29.2 is possible when experimental dynamic client registration or CIMD features are enabled and configured with wildcard-hostname or protocol-less redirect URI allowlist patterns. Full-string glob matching allows a crafted attacker-controlled URI embedding a trusted hostname suffix in its path component to pass the allowlist, delivering authorization codes to the attacker after a victim completes an OAuth flow. No public exploit has been identified and this CVE does not appear in the CISA KEV catalog; real-world impact is sharply bounded by the experimental, disabled-by-default nature of the affected features.
Incorrect regex match results in Perl 5.9.4 through 5.41.8 allow remote unauthenticated attackers to bypass security filters or access controls that depend on regex alternation patterns. The Aho-Corasick prescan in S_find_byclass carries a stale failure flag that causes it to terminate before recording an earlier valid match candidate, so an alternation like /ABCF|BCDE|C/ against 'ABCDE' may match the wrong branch or return no match at all. Although the official CVSS scores only Availability:Low, the description explicitly states that 'an access or filtering decision made from the result can be wrong,' indicating real Integrity impact not captured in the vendor-assigned vector. No public exploit identified at time of analysis and no CISA KEV listing.
Remote unauthenticated crash of the rsync daemon affects all versions from 3.0.0 through 3.4.x. The daemon child process dereferences the first file list entry as a directory structure pointer without verifying its type, so a dot entry not typed as a directory triggers a null or uninitialized pointer dereference (CWE-908) that terminates the connection. Impact is constrained to availability - a denial-of-service against individual daemon connections - with no confidentiality or integrity exposure. No CISA KEV listing and no confirmed public exploit code exist at time of analysis.
Symlink race condition in rsync before 3.5.0 allows local attackers with symlink creation privileges to cause arbitrary file deletion via the --remove-source-files feature. By atomically substituting a symlink for a source file in the narrow TOCTOU window between transfer completion and the unlink() call, an attacker redirects deletion to any file the rsync process can reach. No public exploit has been identified at time of analysis, and active exploitation has not been confirmed by CISA KEV.
File content disclosure in rsync before 3.5.0 allows a local attacker with write access to a parent directory of the rsync source tree to redirect file reads to arbitrary paths outside the intended transfer root. By atomically replacing a directory component with a symlink between path resolution and file open operations - a classic TOCTOU race condition - the attacker causes the rsync sender to traverse outside its intended scope, exposing sensitive file contents. No public exploit code or active exploitation has been identified at time of analysis; the CVSS 4.0 score of 5.7 (local vector, high complexity) reflects the constrained but meaningful real-world impact.
TOCTOU race condition in rsync before 3.5.0 allows a local attacker who controls parent directory components of the destination path to redirect file writes to arbitrary filesystem locations outside the intended destination tree. Exploitation targets the non-daemon receiver code path, where a symlink can be substituted for a path component between rsync's path resolution step and its chdir() call. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-released fix is rsync v3.5.0.
Newline injection in rsync's name-converter uid/gid mapping interface (all versions before 3.5.0) allows local attackers to forge protocol messages by embedding newline characters in OS-level user or group names. Because the rsync daemon communicates with the name-converter over a pipe-based, line-oriented protocol, injected newlines create false protocol boundaries, causing the daemon to parse attacker-controlled strings as legitimate protocol directives and corrupting uid/gid mapping logic. No public exploit code and no CISA KEV listing are identified at time of analysis; rsync 3.5.0 was designated a major security release to address this issue.
File ownership privilege confusion in rsync before 3.5.0 allows local attackers to cause transferred files to be assigned root (uid/gid 0) ownership by manipulating the name-converter subprocess into returning empty uid/gid lookup responses. The flaw stems from rsync misinterpreting an empty name-converter response as a valid resolution to uid/gid 0 rather than rejecting it as a lookup failure. No public exploit or CISA KEV listing has been identified at time of analysis; the vendor-released fix is rsync v3.5.0, designated a major security release.
Filter rule bypass in rsync before 3.5.0 allows remote clients connecting to an rsync daemon to override module-level filter restrictions by injecting malicious --filter merge file directives during filter evaluation. The daemon's intended access controls - designed to restrict which files a module exposes - can be circumvented, granting the attacker read and limited write access to files the module filter was meant to exclude. No public exploit has been identified at time of analysis, and the vendor has released a fix in v3.5.0 designated as a major security release.
Denial of service against PostgreSQL DDL operations is achievable by any authenticated database user who creates a custom type, exploiting missing authorization checks in two specific code paths - range subtype assignment and SQL expression type references. By manufacturing an artificial type dependency through these unguarded paths, a low-privileged user can permanently block administrators from executing ALTER TYPE or DROP TYPE on the affected object, disrupting schema maintenance across PostgreSQL versions 14 through 18 prior to their respective patched releases (14.24, 15.19, 16.15, 17.11, 18.5). No public exploit code exists and active exploitation has not been confirmed by CISA KEV at time of analysis.
Buffer over-read in PostgreSQL's ascii() SQL function exposes up to 3 bytes of heap memory beyond a specific allocation boundary when processing a crafted text value. Authenticated database users on affected versions - PostgreSQL 14.x before 14.24, 15.x before 15.19, 16.x before 16.15, 17.x before 17.11, and 18.x before 18.5 - can trigger this condition via a malicious SQL query. The vulnerability is a partial information disclosure with limited impact; no public exploit code has been identified at time of analysis.
PostgreSQL's GSSAPI authentication enforcement can be bypassed in versions 17.x and 18.x, allowing an authenticated database user to establish a connection protected only by TLS despite pg_hba.conf explicitly requiring GSSAPI. The bypass is achieved by initiating a direct TLS connection rather than a GSSAPI handshake, causing the server to accept the weaker protection profile when TLS settings are more permissive than GSS settings. No public exploit code and no CISA KEV listing have been identified at time of analysis; the EPSS score was not provided in source data.
Buffer over-read in PostgreSQL's pg_trgm extension exposes limited heap memory values to authenticated low-privileged users through the side-channel of GiST index picksplit decisions. All four active major release branches are affected - versions before 18.5, 17.11, 16.15, 15.19, and 14.24. No public exploit has been identified and active exploitation has not been confirmed; the practical impact is constrained by the indirect, lossy nature of the information disclosure mechanism.
User enumeration via SCRAM authentication in PostgreSQL 16-18 exposes whether a given username exists by observing differences in the reported SCRAM iteration count during the authentication handshake. An unauthenticated remote attacker can distinguish real accounts from nonexistent ones when the target account uses a non-default scram_iterations value, since the server returns a custom count for real users but the global default for fabricated usernames. No public exploit has been identified at time of analysis, and exploitation is gated on a non-default server configuration.
Stale row-level security policy execution in PostgreSQL 14 through 18 permits authenticated database users to read or modify rows they are no longer authorized to access after role membership, role attributes, or database ownership are changed. The flaw lies in PostgreSQL's plan cache, which does not invalidate cached RLS policies when such privilege changes occur, meaning a revoked permission continues to be honored until the session ends or an unrelated cache invalidation event fires. No public exploit code has been identified and the vulnerability is absent from the CISA Known Exploited Vulnerabilities catalog, but the partial data access bypass represents a real confidentiality and integrity risk for applications relying on RLS as a security boundary.
Cleartext storage in PostgreSQL's pgcrypto extension silently exposes PGP-encrypted data as recoverable plaintext when OpenSSL disables the requested cipher, affecting all eight PGP encryption and decryption functions (pgp_sym_encrypt/decrypt, pgp_pub_encrypt/decrypt, and their bytea variants) across PostgreSQL 14 through 18. Beyond confidentiality loss, the same code path defeats the Modification Detection Code (MDC) integrity check, allowing decryption to succeed with an incorrect key - enabling an attacker to inject attacker-controlled plaintext through applications that accept encrypted data as input. No active exploitation is confirmed (not in CISA KEV) and no public exploit has been identified; fix versions are clearly defined as 18.5, 17.11, 16.15, 15.19, and 14.24.
Denial of service in remotetrx's NetUplink component via a connection object leak that exhausts server-side resources. Reported under GHSA-5xr9-fmm8-7p8x and tracked by Ubuntu as CVE-2026-73142, the flaw allows network-reachable attackers to degrade or halt the remotetrx service by triggering repeated connections that are never fully released. No public exploit has been identified at time of analysis, and no CVSS score has been published.
Stack VLA (Variable-Length Array) exhaustion in audio decoders, as tracked under GHSA-xmcv-mjpv-x46q, allows an attacker to trigger unbounded stack allocation by supplying a crafted audio stream or file. Successful exploitation likely results in a stack overflow, causing process crash and denial of service. This vulnerability was reported via Ubuntu's vendor channel; no CVSS score, CWE classification, or KEV status is available at time of analysis.
Unbounded request accumulation in an HTTP server component affects a package distributed via Ubuntu, enabling remote attackers to exhaust server resources by sending requests faster than they are processed or discarded. The vulnerability is tracked under GHSA-58ph-q79f-7x9x and reported through Ubuntu's vendor security channel. No CVSS score, KEV listing, or public exploit has been confirmed at time of analysis, but the network-exploitable DoS class is typically low-complexity to trigger.
Denial of service in the rtl_tcp SDR network daemon allows an unauthenticated remote attacker to crash the daemon by sending a malformed greeting during the TCP handshake phase, causing an unhandled exit. The affected software is the rtl_tcp server component, which exposes RTL-SDR radio hardware over a network socket. No public exploit code or active exploitation has been identified at time of analysis, and the vulnerability was reported via the Ubuntu vendor channel with a corresponding GitHub Security Advisory (GHSA-38fq-mrrg-8rmr).
Use-after-free via reentrant client deletion in svxreflector (SvxLink) allows a network-connected client to trigger memory corruption by initiating a disconnect sequence during an already-in-progress client deletion callback. The affected component is the SvxLink conference reflector server used in amateur radio linking systems. If exploitable beyond a crash, this could result in denial of service or arbitrary code execution within the reflector process.
TCL command injection in a reflector client component, reported via Ubuntu's vendor security channel (GHSA-pc2g-2p95-4cr5), allows an attacker to inject arbitrary TCL commands through unsanitized input processed by the client. The specific impact scope - including whether this enables OS-level command execution or is confined to the TCL interpreter - cannot be confirmed from available data, as no CVSS vector, CWE, or patch advisory has been published. No public exploit or CISA KEV listing has been identified at the time of analysis.
remotetrx, a network-accessible remote transceiver control daemon (part of the SvxLink amateur radio suite), exposes two compounding weaknesses: unvalidated audio payload length processing and insufficiently restricted transceiver control interfaces. An attacker with network access to the remotetrx service can exploit the unvalidated audio length to trigger memory-safety violations, and separately interact with exposed transceiver control functions without expected authorization barriers. No CVSS score, CWE classification, or KEV status is present in the source data; no public exploit has been identified at time of analysis.
Out-of-bounds read in EchoLink's RTCP/SDES packet processing exposes the application to potential memory disclosure or crash when handling malformed RTCP Source Description (SDES) packets over a network connection. EchoLink, a VoIP-over-internet system for licensed amateur radio operators, processes RTCP control packets as part of its real-time communication protocol stack. No public exploit code has been identified at time of analysis, and exploitation conditions beyond network reachability are not confirmed from available data.
Buffer overflow in APRS (Automatic Packet Reporting System) message construction affects software tracked under GHSA-4f8x-49pf-3x5v, reported via the Ubuntu vendor channel. The flaw occurs during the construction of APRS protocol messages, where insufficient bounds checking may allow memory corruption. No CVSS score, vector, or CWE has been assigned at time of analysis, leaving severity and exploitability unconfirmed.
Integer truncation of a message length field in the EchoLink proxy component may allow an attacker to trigger memory-safety issues by supplying a crafted message whose length, when truncated to a narrower integer type, produces an incorrect boundary calculation. The affected software is EchoLink, a VoIP system used by amateur radio operators to relay audio over the internet via proxy nodes. Ubuntu has reported this issue under GHSA-4g8q-rgxf-fmgf; no public exploit has been identified at time of analysis.
Out-of-bounds read in NetRx's audio message handling exposes memory contents and may cause service disruption when processing crafted MsgAudio payloads with unvalidated length fields. The affected component fails to validate the length field of incoming MsgAudio messages before using it to index or copy memory, a classic CWE-125-class flaw. Reported via Ubuntu's vendor channel; no public exploit or CISA KEV listing has been identified at time of analysis.
Stack overflow in StationData::setData exposes affected systems to potential memory corruption. The vulnerability is identified via GHSA-5g48-xjmf-7p4q and reported through Ubuntu's vendor channel, suggesting it affects a library or component present in Ubuntu-distributed packages. Specific impact scope is limited by the near-total absence of structured metadata in available intelligence sources.
Use-after-free write in svxreflector, the reflector server component of the SvxLink amateur radio internet linking system, occurs when a dangling JSON reference is dereferenced after the underlying object has been freed. The vulnerability was disclosed via GitHub Security Advisory GHSA-6wgq-wg3w-jgvx and is tracked in Ubuntu's package ecosystem. Depending on attacker-controlled input over the network, exploitation could lead to memory corruption with potential for code execution or service disruption.
Unbounded memory growth in the FRN module (GHSA-qccg-7pw6-787v) can lead to resource exhaustion in affected deployments. The vulnerability was reported via Ubuntu's vendor channel and is associated with a GitHub Security Advisory, suggesting it is a library or kernel module-level issue. No CVSS score, CWE classification, or version details have been published at time of analysis, making precise impact assessment limited.
Use-After-Free vulnerabilities in the GNU linker (ld) component of binutils crash the linker process when processing crafted object or archive files during LTO-enabled linking on Red Hat Enterprise Linux systems. The flaws exist at three distinct dereference points in add_archive_element() in ld/ldmain.c, where plugin_maybe_claim() frees the BFD object but the caller retains dangling pointers that are subsequently accessed. The attack surface is confined to build-time environments, with the primary realistic threat being a supply chain attack introducing a malicious object file into CI/CD pipelines or developer build systems; no public exploit code or active exploitation has been confirmed at time of analysis.
Heap corruption via double-free in 389-ds-base's LDAP control parsing allows an unauthenticated remote attacker to crash the directory service with a single crafted BIND request. The flaw resides in `get_ldapmessage_controls_ext()`, which frees a parsed controls array when rejecting an unknown critical Session Tracking control but fails to clear the corresponding SLAPI_REQCONTROLS pblock slot - causing operation teardown to free the same pointer a second time. Affected deployments include Red Hat Directory Server 11 through 13 and the 389-ds-base package across all supported RHEL versions (6-10). No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog; the CVSS AC:H rating reflects that reliable heap exploitation requires specific memory layout conditions rather than a trivially repeatable one-shot crash.
Stored XSS in tablib's HTML export path before version 3.10.0 allows an authenticated attacker to inject arbitrary JavaScript via maliciously named worksheet titles sourced from imported XLSX, ODS, XLS, or YAML files. The export_book method in _html.py previously interpolated dataset titles directly into HTML h3 tags using an f-string, bypassing all escaping; script payloads assigned to the Dataset title attribute execute in a victim's browser when the exported HTML is rendered. No active exploitation confirmed in CISA KEV; vendor-released patch is available as v3.10.0.
Path traversal in Red Hat insights-client allows a compromised spoke (managed cluster) to inject unencoded sequences into the Insights API URL path by manipulating the ClusterID value it controls, redirecting authenticated hub-side requests to unintended API endpoints. Affected deployments include any multi-cluster Red Hat Insights configuration where a spoke cluster could be under adversary control. No public exploit code has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog.
Denial of service in Nmap versions through 7.99 allows a remote party to crash the application by returning a crafted TCP packet containing a zero-length option to a host actively scanning their infrastructure. The vulnerable code path is in the NSE library packet.lua, where the Packet:parse_options() function allocates objects indefinitely when it encounters a zero-length TCP option, exhausting memory and terminating the process. No active exploitation has been confirmed and no formal patched release version has been identified, though an upstream source-level fix is available via GitHub commit.
Information disclosure in Microsoft Word via an off-by-one out-of-bounds read (CWE-125) exposes high-confidentiality data to a local attacker when a user opens a crafted document. Affected products span Microsoft Word 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise. No active exploitation is confirmed in CISA KEV and no public exploit code has been identified at time of analysis, but the high confidentiality impact and wide deployment footprint make patching a clear priority.
Information disclosure in Windows Presentation Foundation (WPF) within .NET 8, 9, and 10 allows an unauthenticated network attacker to exfiltrate sensitive data when a target user opens a specially crafted document. The WPF document parser resolves external references from attacker-controlled URIs - an SSRF-adjacent primitive (CWE-829, CWE-918) - causing outbound network requests that can expose authentication tokens or internal metadata to the attacker's infrastructure. No public exploit code or CISA KEV listing exists at time of analysis; vendor-released patches are available for all affected .NET and Visual Studio versions.
Information disclosure in Microsoft .NET (versions 8.0.0-8.0.29, 9.0.0-9.0.18, and 10.0.0-10.0.10) and Visual Studio 2022/2026 exposes sensitive data over the network due to improper sanitization of information prior to network transfer, classified under CWE-212. The CVSS vector (AV:N/AC:H/PR:N/UI:N) indicates unauthenticated network exploitation gated by high attack complexity, yielding full confidentiality compromise (C:H) with no integrity or availability impact. No public exploit code has been identified at time of analysis, CISA SSVC confirms no known exploitation, and Microsoft has released patches across all affected product lines.
HTTP request smuggling in System.Net.HttpListener across .NET 8.0, 9.0, and 10.0 enables unauthenticated remote attackers to bypass security features on Linux and macOS deployments. The flaw stems from inconsistent HTTP request interpretation (CWE-444), allowing crafted requests to circumvent authentication or access controls with high confidentiality impact. Exploitation carries high attack complexity (AC:H), no public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV, placing this in a monitored-but-not-emergency posture for most organizations.
Privilege escalation in Intel Processors operating within Ring 0 environments - kernel, hypervisor, and bare-metal OS - allows an authorized attacker already holding high-privilege access to cross isolation boundaries and achieve high confidentiality and integrity impact on subsequent systems such as hypervisors or co-located virtual machines. The CVSS 4.0 vector (AV:L/AC:H/AT:P/PR:H/SC:H/SI:H) confirms the attack is local, high-complexity, and gated behind existing privileged access plus special internal knowledge of processor internals, significantly limiting the exploitable population. No public exploit code and no CISA KEV listing exist at time of analysis, making current real-world risk primarily theoretical but relevant to hardened multi-tenant and virtualized datacenter environments.
Privilege escalation in Intel Performance Counter Monitor (PCM) before version tag 202604 allows a local authenticated attacker to gain elevated privileges via an untrusted search path (CWE-426) within Ring 3 user-space applications. The attack requires high complexity and passive interaction from a privileged user, producing full high-impact confidentiality, integrity, and availability compromise of the vulnerable system. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis.
Privilege escalation in Intel Xeon 6 processors arises from improper handling of overlapping protected memory ranges when Intel Trust Domain Extensions (TDX) operate within System Management Mode (SMM). An adversary who has already achieved SMM-level access and combines that foothold with a high-complexity, knowledge-intensive attack can break the isolation guarantees that TDX is designed to enforce, achieving unauthorized reads and writes of confidential memory. No public exploit code and no CISA KEV listing are associated with this issue at time of analysis, but the high confidentiality and integrity impact to the vulnerable system makes it significant for confidential-computing deployments.
Heap-based buffer overflow in Intel Open Volume Kernel Library (Open VKL) before version 2.0.2 allows a local authenticated attacker with low privileges to cause denial of service against applications consuming the library. Operating entirely in Ring 3 (user space), the flaw requires no user interaction and carries low attack complexity, making it straightforward to trigger for any local account on an affected system. No public exploit code and no active exploitation have been identified; Intel has released version 2.0.2 as the corrective fix per advisory INTEL-SA-01459.
Denial of service via a TOCTOU race condition in the Intel NPU Driver for Windows affects all current versions operating at Ring 1 (device driver layer). An authenticated local attacker with low privileges can exploit a window between the driver's resource state check and its use, resulting in high availability impact and low integrity impact to the vulnerable system. No active exploitation has been confirmed, and the high attack complexity plus specific attack prerequisites substantially limit opportunistic exploitation.
Out-of-bounds read in the Intel Neural Processing Unit (NPU) Driver across all versions exposes systems to local denial of service via a low-privilege authenticated attacker operating in Ring 3 (user application space). The CVSS 4.0 score of 6.9 reflects high availability impact with a local, low-complexity, no-interaction attack path, alongside minor integrity degradation. No public exploit code and no active exploitation (CISA KEV) have been identified at time of analysis.
Open redirect in the oauth-server component of Red Hat OpenShift Container Platform 4 allows a remote attacker to craft a malicious OAuth grant URL that, upon interaction by an authenticated user, silently redirects that user to an attacker-controlled site. The root cause is the absence of server-side validation on the 'then' parameter in the grant approval handler (CWE-601), making every OpenShift OAuth endpoint a potential phishing launcher. No public exploit code or CISA KEV listing has been identified at time of analysis; the CVSS 4.3 Medium score reflects the required user interaction as the primary limiting factor.
HTTP request smuggling in Undertow's ChunkReader component enables unauthenticated remote attackers to inject out-of-sync requests, bypassing upstream security controls such as authentication layers or reverse-proxy ACLs. Affected deployments include JBoss EAP 7, WildFly, Red Hat Enterprise Linux 8/9/10, Red Hat Data Grid 8, Red Hat Fuse 7, Red Hat Single Sign-On 7, and several Apache Camel-based Red Hat products. No confirmed active exploitation or public proof-of-concept has been identified at time of analysis; the CVSS 5.3 Medium score reflects limited direct impact, though real-world risk in proxy-fronted architectures is meaningfully higher than the score alone suggests.
Uncontrolled memory allocation in iperf3's JSON_read() function exposes any network-reachable iperf3 server to remote unauthenticated denial of service. The function accepts a peer-supplied message length and allocates memory against that value without imposing an upper bound, enabling an attacker to exhaust host memory and cause the iperf3 process to hang, slow severely, or terminate. No active exploitation has been confirmed via CISA KEV, and no public exploit code has been identified at time of analysis.
Denial of service in claircore's RPM package scanner allows an authenticated attacker to crash the Clair indexer process by submitting a container image with crafted RPM header data. The malformed header triggers an unchecked Go type assertion panic that is never recovered, terminating the entire indexer process and disrupting container vulnerability scanning for all users of the affected instance. No public exploit identified at time of analysis; CVSS scores this at 4.3 (Medium), reflecting the low-privilege access requirement and bounded availability impact.
Cleartext credential exposure in Red Hat insights-core allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included unredacted in diagnostic archives uploaded to console.redhat.com. The redaction layer uses a naive string-match on the literal key name 'password', leaving non-standard credential field names - such as those used by SSSD and Pacemaker - completely unprotected before archive upload. With CVSS PR:L, a threat actor with authenticated access to an organization's Red Hat Insights console can retrieve these cleartext credentials from stored archives. No public exploit identified at time of analysis and not confirmed in CISA KEV.
Unrestricted archive upload in WildFly Core enables authenticated 'deployer' role users to deploy malicious Java archives via HTTP POST requests, potentially achieving arbitrary file reads and further system compromise. Affected products span multiple Red Hat enterprise offerings including JBoss EAP 7 and 8, Red Hat Fuse 7, Process Automation 7, and Single Sign-On 7, all of which embed wildfly-core as a foundational dependency. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.
Denial of service in WildFly Core (and downstream Red Hat middleware products) allows a remote administrative user to render a server permanently unrecoverable by injecting a malformed payload into the Inet Address field of the Management Model. The injected payload is persisted to standalone.xml, corrupting the configuration file and preventing normal server restart without manual intervention. No public exploit code has been identified at time of analysis, and the vulnerability is limited to users with administrative credentials, reducing its real-world blast radius despite the high availability impact.
Sensitive credential disclosure in Red Hat OpenShift AI's odh-model-controller component exposes Kubernetes Secrets - including cloud provider credentials and API keys - across namespace boundaries to any authenticated user holding custom resource creation permissions. The root cause is a confused deputy flaw (CWE-441) in the loadSecret function, which accepts user-controlled namespace input without validation, allowing the controller's elevated cluster-wide RBAC permissions to be turned against secrets in namespaces the attacker could not directly access. No public exploit code or CISA KEV listing is identified at time of analysis.
Red Hat multicluster-global-hub misconfigures topic-level access controls during ManagedClusterMigration, exposing bootstrap kubeconfigs - containing API server tokens - to any managed hub that reads the shared communication topic. A compromised managed hub can silently harvest these credentials, which carry an approximately 9.86-year validity window, enabling long-lived unauthorized access to other managed clusters well beyond the migration event itself. No public exploit has been identified at time of analysis, but the extended token lifetime dramatically amplifies post-compromise dwell risk.
Sensitive guest disk contents are exposed to any local user on Red Hat Enterprise Linux KVM hosts due to `qemu-img` creating new volume image files with world-readable permissions during libvirt storage clone or convert operations. Affected platforms span RHEL 6 through 10 and RHEL for Nvidia 26. No public exploit code has been identified and this vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog at time of analysis, but the CVSS C:H rating reflects full guest disk exposure to a low-privileged local attacker.
Local privilege escalation in systemd-homed enables a low-privileged, locally logged-in user whose account is managed by homed to be arbitrarily added to system groups they are not authorized to join. Successful exploitation, constrained by high attack complexity and a required user interaction step per the CVSS vector, can yield full confidentiality, integrity, and availability compromise of the local system. No public exploit code has been identified at time of analysis, and this vulnerability does not appear in the CISA KEV catalog.
systemd-oomd exposes an IPC API that local unprivileged users can abuse to terminate arbitrary processes on the host due to a missing path traversal validation (CWE-22). Any user holding a local shell account can craft IPC requests with traversal sequences to reference processes outside the intended cgroup scope, enabling targeted denial-of-service against critical system services. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Privilege escalation in Red Hat Advanced Cluster Security 4 (StackRox Central) allows authenticated OIDC token holders to gain unauthorized role assignments through unanchored regular expression matching in the Machine-to-Machine token exchange subsystem. When administrators configure M2M role mappings, RHACS matches incoming OIDC claim values against configured patterns without regex anchors, meaning an attacker whose claim value is a superstring of a mapped pattern - for example, 'superadmin' matching a pattern intended only for 'admin' - receives elevated roles unintentionally. No public exploit code or active exploitation has been identified at this time; the CVSS AC:H rating reflects a genuine complexity barrier requiring attacker knowledge of the target's role mapping configuration.
Grafana through 13.2.0 contains an incomplete fix for CVE-2026-21724 that leaves protected alert contact point (receiver) deletion unguarded: an authenticated Editor-role user can DELETE any protected receiver without the required `alert.notifications.receivers.protected:write` permission. The prior fix patched only the UPDATE code path in `contactpoints.go` and `receiver_svc.go`, leaving the DELETE handler exposed in both files. With CVSS 6.5 (AV:N/AC:L/PR:L) and no public exploit identified at time of analysis, the immediate risk is moderate but operationally significant - silent deletion of protected notification channels can blind alerting pipelines and disrupt incident response.
Missing authorization on CleanAllRUV and Abort CleanAllRUV LDAP extended operations in 389 Directory Server (Red Hat Directory Server 11-13) allows unauthenticated remote attackers - when the default anonymous access setting is active - to manipulate replication metadata, purge changelog records, and abort administrator-initiated cleanup tasks. The affected operations are replication-maintenance primitives that bypass the authorization layer entirely (CWE-862), meaning no account or session is required under default configuration. No public exploit code or active exploitation in CISA KEV has been identified at time of analysis, but the network-accessible, zero-authentication attack surface in a widely deployed enterprise directory server makes this a notable availability and integrity risk.
Heap out-of-bounds reads and writes in Perl's regular expression engine through version 5.45.1 arise from a signed 32-bit integer overflow when computing the superlinear cache size in S_regmatch. When a subject string of approximately 286,331,153 bytes is matched against a pattern containing 15 or more WHILEM-participating nodes, the bit-count product overflows to 14, producing a two-byte cache allocation that is then indexed far beyond its bounds. A caller passing attacker-controlled input of this size to such a pattern can crash the Perl process or corrupt heap memory; no public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Uninitialized GPU memory in Google Chrome on Android prior to 151.0.7922.109 exposes sensitive process memory contents to a remote attacker who has already achieved renderer process compromise. The CWE-457 flaw allows the GPU component to read and return uninitialized memory regions when processing attacker-controlled HTML, resulting in confidentiality impact bounded to the compromised process scope. No public exploit code exists and CISA SSVC rates exploitation as none at time of analysis, making this a second-stage information disclosure component rather than a standalone critical threat.
Request smuggling primitive in h2 (pip/h2) versions 4.4.0 and below enables network-accessible attackers to craft HTTP/2 header blocks containing duplicate Host headers that the library forwards verbatim to consuming applications. When a consumer downgrades the HTTP/2 request to HTTP/1.1 - a common pattern in reverse proxy and gateway architectures - the resulting HTTP/1.1 request carries two Host header lines, violating RFC 7230 and creating an ambiguity that downstream servers may interpret differently, enabling cache poisoning, security control bypass, or session hijacking. No active exploitation confirmed (not in CISA KEV); no public exploit code identified at time of analysis; fix is available in v4.4.1.
Timing side-channel exposure in Apache Portable Runtime Utility (APR-util) versions 1.2.0 through 1.6.3 allows network-accessible attackers to statistically recover passwords or hashes by measuring response-time variance in the `apr_password_validate()` function, which performs non-constant-time comparisons. The risk is materially elevated on platforms lacking native `crypt()` support - specifically Windows, Android, BeOS, and NetWare - where the non-constant-time code path is always exercised rather than conditionally. No public exploit has been identified at time of analysis, though the SSVC framework assesses the attack as automatable with partial technical impact.
Header injection in openshift/oauth-proxy allows unauthenticated network attackers to impersonate arbitrary users on upstream applications by exploiting authentication-bypass paths. When skip-auth-regex rules are configured, the proxy forwards client-controlled identity headers (X-Forwarded-User, X-Forwarded-Email, X-Forwarded-Access-Token) to upstream services without stripping them, enabling forged identity claims. Affecting Red Hat OpenShift Container Platform 4, this vulnerability is classified under CWE-345 (Insufficient Verification of Data Authenticity) with a CVSS 6.5 base score; no public exploit code or CISA KEV listing has been identified at time of analysis.
Resource exhaustion in Apache Qpid Proton-J through 0.34.1 allows authenticated AMQP clients to trigger unbounded server-side resource consumption by sending a delivery composed of an arbitrarily large number of transfer frames - a limit the library fails to enforce. The root cause (CWE-770) is an absent cap on per-delivery transfer frame counts during message ingestion, not a memory corruption or code execution class flaw. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; the primary risk is targeted denial of service against messaging infrastructure by any authenticated AMQP peer.
Denial of service in Apache Qpid Proton-J through 0.34.1 allows authenticated AMQP clients to exhaust server CPU by sending a crafted disposition frame carrying large or illegal delivery ranges. The library's naive range handling iterates without bounds validation, causing unbounded CPU consumption that can starve legitimate connections. No public exploit identified at time of analysis; vendor-released fix is available in version 0.35.0.
Denial of service in Apache Qpid Proton-J through 0.34.1 allows authenticated remote attackers to render the messaging endpoint unresponsive by deliberately exceeding the AMQP session flow control incoming window, triggering unbounded resource consumption. The root cause is CWE-770 - insufficient throttling of resource allocation - a well-understood class of flaw in protocol session management. No active exploitation has been confirmed and no public exploit code is known at time of analysis; the vendor has released a fix in version 0.35.0.
Persistent denial of service in dhcp-server (dhcpd) on Red Hat Enterprise Linux 6 through 9 is triggered via a crafted OMAPI lease creation request containing an overly long InfiniBand MAC address, overflowing a buffer in `print_hw_addr()` and crashing the dhcpd daemon in a way that prevents automatic recovery. The official CVSS score of 4.9 with PR:H reflects the assumption that TSIG authentication guards the OMAPI port; however, the description explicitly highlights that TSIG is optional and often absent, reducing the realistic exploitation barrier to unauthenticated network access. No confirmed active exploitation (KEV) or public proof-of-concept exists at time of analysis.
Session flow control enforcement in Apache Qpid ProtonJ2 (versions through 1.1.0) can be bypassed by an authenticated attacker who sends data exceeding the negotiated incoming flow control window, potentially causing denial of service on the receiving side. The AMQP session-level window is a back-pressure mechanism; failure to enforce it can lead to unbounded memory consumption or processing overload in the message broker or client. No public exploit code and no CISA KEV listing have been identified at time of analysis. The vendor-released fix is version 1.2.0.
Stack-based out-of-bounds read in stunnel's s_vlog logging function allows remote unauthenticated attackers to crash the service by sending protocol inputs that generate log messages exceeding 1024 bytes via vsnprintf. The primary impact is service disruption (availability), with a limited integrity impact in corner cases where trailing newline characters in the stack buffer can be overwritten with null bytes. No public exploit code has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog.
SSRF bypass in stunnel 5.79 and earlier allows authenticated SOCKS proxy clients to circumvent intended localhost access restrictions by supplying IPv4-mapped IPv6 addresses (e.g., ::ffff:127.0.0.1) or unspecified addresses (0.0.0.0, ::) in proxy requests. Exploitation reaches loopback-bound services on the stunnel host - services deliberately isolated from external network access - potentially exposing internal APIs, administrative interfaces, or other localhost-only endpoints. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Forced logout via unsigned backchannel requests affects Red Hat Build of Keycloak when an OIDC identity provider is configured to skip signature validation. Under this non-default configuration, the backchannel logout endpoint in keycloak-services improperly accepts logout requests lacking any cryptographic signature (CWE-347), violating the OIDC backchannel logout specification. An unauthenticated network attacker who possesses knowledge of a target user's session identifiers can submit a forged unsigned logout request, terminating that session without the user's consent. No public exploit or active exploitation (CISA KEV) has been identified; with CVSS 3.7 and EPSS data absent from the input, this is a low-priority availability-only issue gated by a specific non-default configuration.
Path traversal in WildFly's domain mode LocalFileRepository exposes arbitrary files readable by the Domain Controller process to attackers who have already obtained or compromised a slave host controller. The flaw resides in the wildfly-core/deployment-repository component, where getFile() and getConfigurationFile() fail to canonicalize or bound-check caller-supplied paths before resolving them on disk, enabling directory traversal sequences to escape the configured repository root. No active exploitation is confirmed (not listed in CISA KEV) and no public exploit code has been identified, but successful exploitation yields high-confidence access to sensitive artifacts including keystores, credentials, and configuration files.
Man-in-the-middle interception of SSH sessions and file transfers is possible through the EMR SSH helper commands in Amazon AWS CLI v1 before 1.45.28 and v2 before 2.35.3 due to missing entity authentication during the SSH key exchange. Network-positioned attackers - requiring no privileges or user interaction - can substitute their own key material during the handshake and silently relay or inspect the session. No active exploitation is confirmed by CISA KEV, and no public proof-of-concept has been identified at time of analysis; however, the impact on downstream EMR cluster confidentiality is rated high (SC:H in the CVSS 4.0 vector).
Unbounded PKCS#12 KDF iteration counts in Bouncy Castle for Java allow remote, unauthenticated attackers to cause denial of service by supplying a crafted PKCS#12 file with an arbitrarily large iteration count in MAC or bag-decryption KDF parameters. Any Java application that processes PKCS#12 keystores using bc-java before 1.85, bc-lts-java before 2.73.12, or bc-fja (FIPS) before 1.0.2.7/2.0.2/2.1.3 is affected. No public exploit is identified at time of analysis, but the attack surface is broad given how widely PKCS#12 files are accepted across Java enterprise stacks.
CPU and memory exhaustion in Bouncy Castle Java's BCFKS keystore loader exposes applications to pre-integrity-verification denial of service when processing a crafted keystore file. Any of the three affected library variants - bc-java (before 1.85), bc-lts-java (before 2.73.12), and BC-FJA (before 1.0.2.7, 2.0.2, or 2.1.3 depending on series) - will blindly honour attacker-supplied PBKDF2 iteration counts or scrypt cost parameters read from an untrusted file before the keystore MAC is verified, allowing an adversary to trigger arbitrary CPU or memory consumption at load time. No public exploit code has been identified and the vulnerability is absent from CISA KEV; urgency is rated Amber by the upstream reporter.
CPU-exhaustion denial of service in Bouncy Castle for Java affects any server that verifies CMP (Certificate Management Protocol) password-MAC protected messages using PKMACBuilder without an explicit iteration ceiling. The library's PKMACBuilder accepted the iteration count directly from the unauthenticated PBMParameter field in an incoming CMP message with no upper bound, allowing a remote unauthenticated attacker to supply a count near 2^31 and force billions of hash iterations on the target. No active exploitation is confirmed (not in CISA KEV), but the attack is unauthenticated, requires no special configuration beyond standard CMP usage, and a patch is available upstream.
Heap and CPU exhaustion in Bouncy Castle for Java's OpenPGP implementation allows remote unauthenticated attackers to cause denial of service by crafting OpenPGP messages with extreme Argon2 S2K cost parameters. The library honoured attacker-controlled memory, passes (iterations), and parallelism fields embedded in unauthenticated OpenPGP packets before any message authentication could occur, meaning a single crafted packet could instruct the JVM to allocate up to 2^30 KiB (approximately 1 TiB) of heap. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the vulnerability is straightforward to exploit given that the cost parameters are trivially crafted and processed unconditionally.
Denial-of-service via unbounded KDF cost in Bouncy Castle for Java's PKCS#8 / PBES2 decryptors allows remote attackers to exhaust CPU or memory by supplying crafted encrypted key material with extreme KDF parameters. The vulnerability affects bc-java before 1.85, bc-lts-java before 2.73.12, and BC-FJA (bcpkix-fips) across all supported 1.0.X, 2.0.X, and 2.1.X series. No public exploit has been identified at time of analysis, and active exploitation has not been confirmed by CISA KEV.
Path traversal in the actix-files Rust crate (versions 0.6.9 and earlier) exposes arbitrary files from the application's working directory to unauthenticated remote attackers. When `Files::new()` receives a non-existent `serve_from` directory, the library silently substitutes an empty base path; subsequent requests join attacker-supplied filenames against this empty root, which Rust's `canonicalize()` resolves relative to the process working directory, enabling direct file disclosure. A publicly available proof-of-concept exploit exists; no confirmed active exploitation (CISA KEV) has been identified at time of analysis.
Remote process termination in actix-files 0.6.9 and earlier allows any unauthenticated network attacker to crash a Rust web server by sending a single GET request with an empty Range header, triggering a panic in the static file handler at named.rs:534. The vulnerability is only catastrophic when the application is compiled with `panic = "abort"` - the non-default Rust build profile - because in that mode the entire process terminates rather than unwinding the panicking thread. A publicly available proof-of-concept exists in the vendor advisory, and no public exploit identification beyond a netcat one-liner is required.
Open redirect in chi (go-chi/chi) versions before 5.2.2 allows Host header injection via the RedirectSlashes middleware, enabling attackers to redirect users to arbitrary external domains for phishing and credential theft. Applications using the RedirectSlashes middleware that expose their chi router to environments where the Host header can be forged are directly at risk. No public exploit is identified in CISA KEV; however, a functional proof-of-concept is documented in the GHSA advisory, and the GHSA itself characterizes real-world exploitability as lower-severity because standard browsers and email clients cannot be used to manipulate the Host header.
Stack exhaustion in libdm's LVM metadata configuration parser allows any LVM command processing attacker-crafted block device metadata to crash, resulting in denial of service on affected Linux systems. The flaw is exploitable in shared storage, SAN, or virtualization environments where an adversary can supply a maliciously structured block device to a target system running LVM2. No public exploit code has been identified at time of analysis, and the vulnerability is absent from CISA KEV; however, the provided CVSS vector is materially inconsistent with the described DoS impact and warrants independent verification.
Stored XSS in Trix editor (all versions prior to 2.1.18) allows an authenticated low-privilege user to persist a javascript: URI payload via the paste path, which executes in victim browsers when the rendered content is viewed and the injected link is clicked. The entry vector exploits HTMLParser's mishandling of a crafted <span data-trix-attachment="{}"> element, which bypasses attachment processing and routes unvalidated attributes - including a malicious href - into the document model through StringPiece.fromJSON. No public exploit has been identified and the vulnerability is absent from CISA KEV; a vendor-confirmed fix is available in version 2.1.18.
Terminal escape injection in dua-cli allows attackers who can place crafted filenames on a filesystem to manipulate the terminal emulator of any user who subsequently browses that directory with dua-cli and exits the TUI. File names containing OSC or CSI escape sequences are printed unsanitized to stdout after TUI exit, enabling terminal title spoofing, clipboard hijacking, or other escape-sequence attacks against the victim's terminal session. No public exploit code has been identified and this vulnerability is not in CISA KEV; the CVSS 4.0 score of 4.8 reflects the local attack vector and passive user interaction required, limiting realistic blast radius to shared-filesystem or multi-tenant scenarios.
Terminal injection in gdu, a Go-based disk usage analyzer, allows ANSI escape sequences embedded in crafted filenames or directory names to reach the terminal emulator unfiltered after the TUI exits. Any operator who runs gdu against attacker-controlled filesystem paths — shared mounts, downloaded archives, or untrusted repositories — may have their terminal manipulated through clipboard hijacking (OSC 52), window title spoofing, or other escape-sequence-dependent effects. No public exploit code has been identified at time of analysis, and the vulnerability is absent from the CISA KEV catalog.
Cross-site scripting in rails-html-sanitizer 1.0.3-1.7.0 allows external SVG references to bypass sanitization when applications use non-default allowed tags including SVG reference elements such as 'use' or 'feImage'. The PermitScrubber correctly blocked external hrefs via the legacy 'xlink:href' attribute but failed to apply the same restriction to the SVG 2 plain 'href' attribute, which modern browsers also honor. Exploitation via 'use' requires the external SVG to be same-origin for script execution; 'feImage' enables cross-origin image loading for user tracking. No public exploit or CISA KEV listing exists at time of analysis.
Silent incomplete replacement of Quadlet unit files in Podman 5.8.x causes stale security-sensitive directives to persist after a `podman quadlet install --replace` operation on non-reflink filesystems. The missing O_TRUNC flag in the file-open call, combined with a non-truncating `io.Copy` fallback when reflink fails, means that if the replacement Quadlet is shorter than the original, trailing content from the old file survives undetected. A local low-privileged user who uses this command to remove a capability grant (e.g., AddCapability) or an extra volume mount may unknowingly leave those directives active, resulting in containers running with unintended elevated privileges or unauthorized data exposure. No public exploit has been identified at time of analysis.
Template-literal code injection in TypeORM's migration:generate command allows an attacker with database schema write access to achieve arbitrary JavaScript execution on any host that loads the generated migration file. Affected are TypeORM npm versions prior to 0.3.31 (0.x branch) and versions 1.0.0 through 1.0.x (fixed in 1.1.0), spanning PostgreSQL, MySQL, MariaDB, and CockroachDB drivers. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis; however, the GHSA advisory provides sufficient technical detail to reproduce the attack.
OAuth authorization code theft in @backstage/plugin-auth-backend prior to 0.29.2 is possible when experimental dynamic client registration or CIMD features are enabled and configured with wildcard-hostname or protocol-less redirect URI allowlist patterns. Full-string glob matching allows a crafted attacker-controlled URI embedding a trusted hostname suffix in its path component to pass the allowlist, delivering authorization codes to the attacker after a victim completes an OAuth flow. No public exploit has been identified and this CVE does not appear in the CISA KEV catalog; real-world impact is sharply bounded by the experimental, disabled-by-default nature of the affected features.
Incorrect regex match results in Perl 5.9.4 through 5.41.8 allow remote unauthenticated attackers to bypass security filters or access controls that depend on regex alternation patterns. The Aho-Corasick prescan in S_find_byclass carries a stale failure flag that causes it to terminate before recording an earlier valid match candidate, so an alternation like /ABCF|BCDE|C/ against 'ABCDE' may match the wrong branch or return no match at all. Although the official CVSS scores only Availability:Low, the description explicitly states that 'an access or filtering decision made from the result can be wrong,' indicating real Integrity impact not captured in the vendor-assigned vector. No public exploit identified at time of analysis and no CISA KEV listing.
Remote unauthenticated crash of the rsync daemon affects all versions from 3.0.0 through 3.4.x. The daemon child process dereferences the first file list entry as a directory structure pointer without verifying its type, so a dot entry not typed as a directory triggers a null or uninitialized pointer dereference (CWE-908) that terminates the connection. Impact is constrained to availability - a denial-of-service against individual daemon connections - with no confidentiality or integrity exposure. No CISA KEV listing and no confirmed public exploit code exist at time of analysis.
Symlink race condition in rsync before 3.5.0 allows local attackers with symlink creation privileges to cause arbitrary file deletion via the --remove-source-files feature. By atomically substituting a symlink for a source file in the narrow TOCTOU window between transfer completion and the unlink() call, an attacker redirects deletion to any file the rsync process can reach. No public exploit has been identified at time of analysis, and active exploitation has not been confirmed by CISA KEV.
File content disclosure in rsync before 3.5.0 allows a local attacker with write access to a parent directory of the rsync source tree to redirect file reads to arbitrary paths outside the intended transfer root. By atomically replacing a directory component with a symlink between path resolution and file open operations - a classic TOCTOU race condition - the attacker causes the rsync sender to traverse outside its intended scope, exposing sensitive file contents. No public exploit code or active exploitation has been identified at time of analysis; the CVSS 4.0 score of 5.7 (local vector, high complexity) reflects the constrained but meaningful real-world impact.
TOCTOU race condition in rsync before 3.5.0 allows a local attacker who controls parent directory components of the destination path to redirect file writes to arbitrary filesystem locations outside the intended destination tree. Exploitation targets the non-daemon receiver code path, where a symlink can be substituted for a path component between rsync's path resolution step and its chdir() call. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-released fix is rsync v3.5.0.
Newline injection in rsync's name-converter uid/gid mapping interface (all versions before 3.5.0) allows local attackers to forge protocol messages by embedding newline characters in OS-level user or group names. Because the rsync daemon communicates with the name-converter over a pipe-based, line-oriented protocol, injected newlines create false protocol boundaries, causing the daemon to parse attacker-controlled strings as legitimate protocol directives and corrupting uid/gid mapping logic. No public exploit code and no CISA KEV listing are identified at time of analysis; rsync 3.5.0 was designated a major security release to address this issue.
File ownership privilege confusion in rsync before 3.5.0 allows local attackers to cause transferred files to be assigned root (uid/gid 0) ownership by manipulating the name-converter subprocess into returning empty uid/gid lookup responses. The flaw stems from rsync misinterpreting an empty name-converter response as a valid resolution to uid/gid 0 rather than rejecting it as a lookup failure. No public exploit or CISA KEV listing has been identified at time of analysis; the vendor-released fix is rsync v3.5.0, designated a major security release.
Filter rule bypass in rsync before 3.5.0 allows remote clients connecting to an rsync daemon to override module-level filter restrictions by injecting malicious --filter merge file directives during filter evaluation. The daemon's intended access controls - designed to restrict which files a module exposes - can be circumvented, granting the attacker read and limited write access to files the module filter was meant to exclude. No public exploit has been identified at time of analysis, and the vendor has released a fix in v3.5.0 designated as a major security release.
Denial of service against PostgreSQL DDL operations is achievable by any authenticated database user who creates a custom type, exploiting missing authorization checks in two specific code paths - range subtype assignment and SQL expression type references. By manufacturing an artificial type dependency through these unguarded paths, a low-privileged user can permanently block administrators from executing ALTER TYPE or DROP TYPE on the affected object, disrupting schema maintenance across PostgreSQL versions 14 through 18 prior to their respective patched releases (14.24, 15.19, 16.15, 17.11, 18.5). No public exploit code exists and active exploitation has not been confirmed by CISA KEV at time of analysis.
Buffer over-read in PostgreSQL's ascii() SQL function exposes up to 3 bytes of heap memory beyond a specific allocation boundary when processing a crafted text value. Authenticated database users on affected versions - PostgreSQL 14.x before 14.24, 15.x before 15.19, 16.x before 16.15, 17.x before 17.11, and 18.x before 18.5 - can trigger this condition via a malicious SQL query. The vulnerability is a partial information disclosure with limited impact; no public exploit code has been identified at time of analysis.
PostgreSQL's GSSAPI authentication enforcement can be bypassed in versions 17.x and 18.x, allowing an authenticated database user to establish a connection protected only by TLS despite pg_hba.conf explicitly requiring GSSAPI. The bypass is achieved by initiating a direct TLS connection rather than a GSSAPI handshake, causing the server to accept the weaker protection profile when TLS settings are more permissive than GSS settings. No public exploit code and no CISA KEV listing have been identified at time of analysis; the EPSS score was not provided in source data.
Buffer over-read in PostgreSQL's pg_trgm extension exposes limited heap memory values to authenticated low-privileged users through the side-channel of GiST index picksplit decisions. All four active major release branches are affected - versions before 18.5, 17.11, 16.15, 15.19, and 14.24. No public exploit has been identified and active exploitation has not been confirmed; the practical impact is constrained by the indirect, lossy nature of the information disclosure mechanism.
User enumeration via SCRAM authentication in PostgreSQL 16-18 exposes whether a given username exists by observing differences in the reported SCRAM iteration count during the authentication handshake. An unauthenticated remote attacker can distinguish real accounts from nonexistent ones when the target account uses a non-default scram_iterations value, since the server returns a custom count for real users but the global default for fabricated usernames. No public exploit has been identified at time of analysis, and exploitation is gated on a non-default server configuration.
Stale row-level security policy execution in PostgreSQL 14 through 18 permits authenticated database users to read or modify rows they are no longer authorized to access after role membership, role attributes, or database ownership are changed. The flaw lies in PostgreSQL's plan cache, which does not invalidate cached RLS policies when such privilege changes occur, meaning a revoked permission continues to be honored until the session ends or an unrelated cache invalidation event fires. No public exploit code has been identified and the vulnerability is absent from the CISA Known Exploited Vulnerabilities catalog, but the partial data access bypass represents a real confidentiality and integrity risk for applications relying on RLS as a security boundary.
Cleartext storage in PostgreSQL's pgcrypto extension silently exposes PGP-encrypted data as recoverable plaintext when OpenSSL disables the requested cipher, affecting all eight PGP encryption and decryption functions (pgp_sym_encrypt/decrypt, pgp_pub_encrypt/decrypt, and their bytea variants) across PostgreSQL 14 through 18. Beyond confidentiality loss, the same code path defeats the Modification Detection Code (MDC) integrity check, allowing decryption to succeed with an incorrect key - enabling an attacker to inject attacker-controlled plaintext through applications that accept encrypted data as input. No active exploitation is confirmed (not in CISA KEV) and no public exploit has been identified; fix versions are clearly defined as 18.5, 17.11, 16.15, 15.19, and 14.24.
Denial of service in remotetrx's NetUplink component via a connection object leak that exhausts server-side resources. Reported under GHSA-5xr9-fmm8-7p8x and tracked by Ubuntu as CVE-2026-73142, the flaw allows network-reachable attackers to degrade or halt the remotetrx service by triggering repeated connections that are never fully released. No public exploit has been identified at time of analysis, and no CVSS score has been published.
Stack VLA (Variable-Length Array) exhaustion in audio decoders, as tracked under GHSA-xmcv-mjpv-x46q, allows an attacker to trigger unbounded stack allocation by supplying a crafted audio stream or file. Successful exploitation likely results in a stack overflow, causing process crash and denial of service. This vulnerability was reported via Ubuntu's vendor channel; no CVSS score, CWE classification, or KEV status is available at time of analysis.
Unbounded request accumulation in an HTTP server component affects a package distributed via Ubuntu, enabling remote attackers to exhaust server resources by sending requests faster than they are processed or discarded. The vulnerability is tracked under GHSA-58ph-q79f-7x9x and reported through Ubuntu's vendor security channel. No CVSS score, KEV listing, or public exploit has been confirmed at time of analysis, but the network-exploitable DoS class is typically low-complexity to trigger.
Denial of service in the rtl_tcp SDR network daemon allows an unauthenticated remote attacker to crash the daemon by sending a malformed greeting during the TCP handshake phase, causing an unhandled exit. The affected software is the rtl_tcp server component, which exposes RTL-SDR radio hardware over a network socket. No public exploit code or active exploitation has been identified at time of analysis, and the vulnerability was reported via the Ubuntu vendor channel with a corresponding GitHub Security Advisory (GHSA-38fq-mrrg-8rmr).
Use-after-free via reentrant client deletion in svxreflector (SvxLink) allows a network-connected client to trigger memory corruption by initiating a disconnect sequence during an already-in-progress client deletion callback. The affected component is the SvxLink conference reflector server used in amateur radio linking systems. If exploitable beyond a crash, this could result in denial of service or arbitrary code execution within the reflector process.
TCL command injection in a reflector client component, reported via Ubuntu's vendor security channel (GHSA-pc2g-2p95-4cr5), allows an attacker to inject arbitrary TCL commands through unsanitized input processed by the client. The specific impact scope - including whether this enables OS-level command execution or is confined to the TCL interpreter - cannot be confirmed from available data, as no CVSS vector, CWE, or patch advisory has been published. No public exploit or CISA KEV listing has been identified at the time of analysis.
remotetrx, a network-accessible remote transceiver control daemon (part of the SvxLink amateur radio suite), exposes two compounding weaknesses: unvalidated audio payload length processing and insufficiently restricted transceiver control interfaces. An attacker with network access to the remotetrx service can exploit the unvalidated audio length to trigger memory-safety violations, and separately interact with exposed transceiver control functions without expected authorization barriers. No CVSS score, CWE classification, or KEV status is present in the source data; no public exploit has been identified at time of analysis.
Out-of-bounds read in EchoLink's RTCP/SDES packet processing exposes the application to potential memory disclosure or crash when handling malformed RTCP Source Description (SDES) packets over a network connection. EchoLink, a VoIP-over-internet system for licensed amateur radio operators, processes RTCP control packets as part of its real-time communication protocol stack. No public exploit code has been identified at time of analysis, and exploitation conditions beyond network reachability are not confirmed from available data.
Buffer overflow in APRS (Automatic Packet Reporting System) message construction affects software tracked under GHSA-4f8x-49pf-3x5v, reported via the Ubuntu vendor channel. The flaw occurs during the construction of APRS protocol messages, where insufficient bounds checking may allow memory corruption. No CVSS score, vector, or CWE has been assigned at time of analysis, leaving severity and exploitability unconfirmed.
Integer truncation of a message length field in the EchoLink proxy component may allow an attacker to trigger memory-safety issues by supplying a crafted message whose length, when truncated to a narrower integer type, produces an incorrect boundary calculation. The affected software is EchoLink, a VoIP system used by amateur radio operators to relay audio over the internet via proxy nodes. Ubuntu has reported this issue under GHSA-4g8q-rgxf-fmgf; no public exploit has been identified at time of analysis.
Out-of-bounds read in NetRx's audio message handling exposes memory contents and may cause service disruption when processing crafted MsgAudio payloads with unvalidated length fields. The affected component fails to validate the length field of incoming MsgAudio messages before using it to index or copy memory, a classic CWE-125-class flaw. Reported via Ubuntu's vendor channel; no public exploit or CISA KEV listing has been identified at time of analysis.
Stack overflow in StationData::setData exposes affected systems to potential memory corruption. The vulnerability is identified via GHSA-5g48-xjmf-7p4q and reported through Ubuntu's vendor channel, suggesting it affects a library or component present in Ubuntu-distributed packages. Specific impact scope is limited by the near-total absence of structured metadata in available intelligence sources.
Use-after-free write in svxreflector, the reflector server component of the SvxLink amateur radio internet linking system, occurs when a dangling JSON reference is dereferenced after the underlying object has been freed. The vulnerability was disclosed via GitHub Security Advisory GHSA-6wgq-wg3w-jgvx and is tracked in Ubuntu's package ecosystem. Depending on attacker-controlled input over the network, exploitation could lead to memory corruption with potential for code execution or service disruption.
Unbounded memory growth in the FRN module (GHSA-qccg-7pw6-787v) can lead to resource exhaustion in affected deployments. The vulnerability was reported via Ubuntu's vendor channel and is associated with a GitHub Security Advisory, suggesting it is a library or kernel module-level issue. No CVSS score, CWE classification, or version details have been published at time of analysis, making precise impact assessment limited.
Use-After-Free vulnerabilities in the GNU linker (ld) component of binutils crash the linker process when processing crafted object or archive files during LTO-enabled linking on Red Hat Enterprise Linux systems. The flaws exist at three distinct dereference points in add_archive_element() in ld/ldmain.c, where plugin_maybe_claim() frees the BFD object but the caller retains dangling pointers that are subsequently accessed. The attack surface is confined to build-time environments, with the primary realistic threat being a supply chain attack introducing a malicious object file into CI/CD pipelines or developer build systems; no public exploit code or active exploitation has been confirmed at time of analysis.
Heap corruption via double-free in 389-ds-base's LDAP control parsing allows an unauthenticated remote attacker to crash the directory service with a single crafted BIND request. The flaw resides in `get_ldapmessage_controls_ext()`, which frees a parsed controls array when rejecting an unknown critical Session Tracking control but fails to clear the corresponding SLAPI_REQCONTROLS pblock slot - causing operation teardown to free the same pointer a second time. Affected deployments include Red Hat Directory Server 11 through 13 and the 389-ds-base package across all supported RHEL versions (6-10). No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog; the CVSS AC:H rating reflects that reliable heap exploitation requires specific memory layout conditions rather than a trivially repeatable one-shot crash.
Stored XSS in tablib's HTML export path before version 3.10.0 allows an authenticated attacker to inject arbitrary JavaScript via maliciously named worksheet titles sourced from imported XLSX, ODS, XLS, or YAML files. The export_book method in _html.py previously interpolated dataset titles directly into HTML h3 tags using an f-string, bypassing all escaping; script payloads assigned to the Dataset title attribute execute in a victim's browser when the exported HTML is rendered. No active exploitation confirmed in CISA KEV; vendor-released patch is available as v3.10.0.
Path traversal in Red Hat insights-client allows a compromised spoke (managed cluster) to inject unencoded sequences into the Insights API URL path by manipulating the ClusterID value it controls, redirecting authenticated hub-side requests to unintended API endpoints. Affected deployments include any multi-cluster Red Hat Insights configuration where a spoke cluster could be under adversary control. No public exploit code has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog.
Denial of service in Nmap versions through 7.99 allows a remote party to crash the application by returning a crafted TCP packet containing a zero-length option to a host actively scanning their infrastructure. The vulnerable code path is in the NSE library packet.lua, where the Packet:parse_options() function allocates objects indefinitely when it encounters a zero-length TCP option, exhausting memory and terminating the process. No active exploitation has been confirmed and no formal patched release version has been identified, though an upstream source-level fix is available via GitHub commit.
Information disclosure in Microsoft Word via an off-by-one out-of-bounds read (CWE-125) exposes high-confidentiality data to a local attacker when a user opens a crafted document. Affected products span Microsoft Word 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise. No active exploitation is confirmed in CISA KEV and no public exploit code has been identified at time of analysis, but the high confidentiality impact and wide deployment footprint make patching a clear priority.
Information disclosure in Windows Presentation Foundation (WPF) within .NET 8, 9, and 10 allows an unauthenticated network attacker to exfiltrate sensitive data when a target user opens a specially crafted document. The WPF document parser resolves external references from attacker-controlled URIs - an SSRF-adjacent primitive (CWE-829, CWE-918) - causing outbound network requests that can expose authentication tokens or internal metadata to the attacker's infrastructure. No public exploit code or CISA KEV listing exists at time of analysis; vendor-released patches are available for all affected .NET and Visual Studio versions.
Information disclosure in Microsoft .NET (versions 8.0.0-8.0.29, 9.0.0-9.0.18, and 10.0.0-10.0.10) and Visual Studio 2022/2026 exposes sensitive data over the network due to improper sanitization of information prior to network transfer, classified under CWE-212. The CVSS vector (AV:N/AC:H/PR:N/UI:N) indicates unauthenticated network exploitation gated by high attack complexity, yielding full confidentiality compromise (C:H) with no integrity or availability impact. No public exploit code has been identified at time of analysis, CISA SSVC confirms no known exploitation, and Microsoft has released patches across all affected product lines.
HTTP request smuggling in System.Net.HttpListener across .NET 8.0, 9.0, and 10.0 enables unauthenticated remote attackers to bypass security features on Linux and macOS deployments. The flaw stems from inconsistent HTTP request interpretation (CWE-444), allowing crafted requests to circumvent authentication or access controls with high confidentiality impact. Exploitation carries high attack complexity (AC:H), no public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV, placing this in a monitored-but-not-emergency posture for most organizations.
Privilege escalation in Intel Processors operating within Ring 0 environments - kernel, hypervisor, and bare-metal OS - allows an authorized attacker already holding high-privilege access to cross isolation boundaries and achieve high confidentiality and integrity impact on subsequent systems such as hypervisors or co-located virtual machines. The CVSS 4.0 vector (AV:L/AC:H/AT:P/PR:H/SC:H/SI:H) confirms the attack is local, high-complexity, and gated behind existing privileged access plus special internal knowledge of processor internals, significantly limiting the exploitable population. No public exploit code and no CISA KEV listing exist at time of analysis, making current real-world risk primarily theoretical but relevant to hardened multi-tenant and virtualized datacenter environments.
Privilege escalation in Intel Performance Counter Monitor (PCM) before version tag 202604 allows a local authenticated attacker to gain elevated privileges via an untrusted search path (CWE-426) within Ring 3 user-space applications. The attack requires high complexity and passive interaction from a privileged user, producing full high-impact confidentiality, integrity, and availability compromise of the vulnerable system. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis.
Privilege escalation in Intel Xeon 6 processors arises from improper handling of overlapping protected memory ranges when Intel Trust Domain Extensions (TDX) operate within System Management Mode (SMM). An adversary who has already achieved SMM-level access and combines that foothold with a high-complexity, knowledge-intensive attack can break the isolation guarantees that TDX is designed to enforce, achieving unauthorized reads and writes of confidential memory. No public exploit code and no CISA KEV listing are associated with this issue at time of analysis, but the high confidentiality and integrity impact to the vulnerable system makes it significant for confidential-computing deployments.
Heap-based buffer overflow in Intel Open Volume Kernel Library (Open VKL) before version 2.0.2 allows a local authenticated attacker with low privileges to cause denial of service against applications consuming the library. Operating entirely in Ring 3 (user space), the flaw requires no user interaction and carries low attack complexity, making it straightforward to trigger for any local account on an affected system. No public exploit code and no active exploitation have been identified; Intel has released version 2.0.2 as the corrective fix per advisory INTEL-SA-01459.
Denial of service via a TOCTOU race condition in the Intel NPU Driver for Windows affects all current versions operating at Ring 1 (device driver layer). An authenticated local attacker with low privileges can exploit a window between the driver's resource state check and its use, resulting in high availability impact and low integrity impact to the vulnerable system. No active exploitation has been confirmed, and the high attack complexity plus specific attack prerequisites substantially limit opportunistic exploitation.
Out-of-bounds read in the Intel Neural Processing Unit (NPU) Driver across all versions exposes systems to local denial of service via a low-privilege authenticated attacker operating in Ring 3 (user application space). The CVSS 4.0 score of 6.9 reflects high availability impact with a local, low-complexity, no-interaction attack path, alongside minor integrity degradation. No public exploit code and no active exploitation (CISA KEV) have been identified at time of analysis.
Open redirect in the oauth-server component of Red Hat OpenShift Container Platform 4 allows a remote attacker to craft a malicious OAuth grant URL that, upon interaction by an authenticated user, silently redirects that user to an attacker-controlled site. The root cause is the absence of server-side validation on the 'then' parameter in the grant approval handler (CWE-601), making every OpenShift OAuth endpoint a potential phishing launcher. No public exploit code or CISA KEV listing has been identified at time of analysis; the CVSS 4.3 Medium score reflects the required user interaction as the primary limiting factor.
HTTP request smuggling in Undertow's ChunkReader component enables unauthenticated remote attackers to inject out-of-sync requests, bypassing upstream security controls such as authentication layers or reverse-proxy ACLs. Affected deployments include JBoss EAP 7, WildFly, Red Hat Enterprise Linux 8/9/10, Red Hat Data Grid 8, Red Hat Fuse 7, Red Hat Single Sign-On 7, and several Apache Camel-based Red Hat products. No confirmed active exploitation or public proof-of-concept has been identified at time of analysis; the CVSS 5.3 Medium score reflects limited direct impact, though real-world risk in proxy-fronted architectures is meaningfully higher than the score alone suggests.
Uncontrolled memory allocation in iperf3's JSON_read() function exposes any network-reachable iperf3 server to remote unauthenticated denial of service. The function accepts a peer-supplied message length and allocates memory against that value without imposing an upper bound, enabling an attacker to exhaust host memory and cause the iperf3 process to hang, slow severely, or terminate. No active exploitation has been confirmed via CISA KEV, and no public exploit code has been identified at time of analysis.
Denial of service in claircore's RPM package scanner allows an authenticated attacker to crash the Clair indexer process by submitting a container image with crafted RPM header data. The malformed header triggers an unchecked Go type assertion panic that is never recovered, terminating the entire indexer process and disrupting container vulnerability scanning for all users of the affected instance. No public exploit identified at time of analysis; CVSS scores this at 4.3 (Medium), reflecting the low-privilege access requirement and bounded availability impact.
Cleartext credential exposure in Red Hat insights-core allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included unredacted in diagnostic archives uploaded to console.redhat.com. The redaction layer uses a naive string-match on the literal key name 'password', leaving non-standard credential field names - such as those used by SSSD and Pacemaker - completely unprotected before archive upload. With CVSS PR:L, a threat actor with authenticated access to an organization's Red Hat Insights console can retrieve these cleartext credentials from stored archives. No public exploit identified at time of analysis and not confirmed in CISA KEV.
Unrestricted archive upload in WildFly Core enables authenticated 'deployer' role users to deploy malicious Java archives via HTTP POST requests, potentially achieving arbitrary file reads and further system compromise. Affected products span multiple Red Hat enterprise offerings including JBoss EAP 7 and 8, Red Hat Fuse 7, Process Automation 7, and Single Sign-On 7, all of which embed wildfly-core as a foundational dependency. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.
Denial of service in WildFly Core (and downstream Red Hat middleware products) allows a remote administrative user to render a server permanently unrecoverable by injecting a malformed payload into the Inet Address field of the Management Model. The injected payload is persisted to standalone.xml, corrupting the configuration file and preventing normal server restart without manual intervention. No public exploit code has been identified at time of analysis, and the vulnerability is limited to users with administrative credentials, reducing its real-world blast radius despite the high availability impact.
Sensitive credential disclosure in Red Hat OpenShift AI's odh-model-controller component exposes Kubernetes Secrets - including cloud provider credentials and API keys - across namespace boundaries to any authenticated user holding custom resource creation permissions. The root cause is a confused deputy flaw (CWE-441) in the loadSecret function, which accepts user-controlled namespace input without validation, allowing the controller's elevated cluster-wide RBAC permissions to be turned against secrets in namespaces the attacker could not directly access. No public exploit code or CISA KEV listing is identified at time of analysis.
Red Hat multicluster-global-hub misconfigures topic-level access controls during ManagedClusterMigration, exposing bootstrap kubeconfigs - containing API server tokens - to any managed hub that reads the shared communication topic. A compromised managed hub can silently harvest these credentials, which carry an approximately 9.86-year validity window, enabling long-lived unauthorized access to other managed clusters well beyond the migration event itself. No public exploit has been identified at time of analysis, but the extended token lifetime dramatically amplifies post-compromise dwell risk.
Sensitive guest disk contents are exposed to any local user on Red Hat Enterprise Linux KVM hosts due to `qemu-img` creating new volume image files with world-readable permissions during libvirt storage clone or convert operations. Affected platforms span RHEL 6 through 10 and RHEL for Nvidia 26. No public exploit code has been identified and this vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog at time of analysis, but the CVSS C:H rating reflects full guest disk exposure to a low-privileged local attacker.
Local privilege escalation in systemd-homed enables a low-privileged, locally logged-in user whose account is managed by homed to be arbitrarily added to system groups they are not authorized to join. Successful exploitation, constrained by high attack complexity and a required user interaction step per the CVSS vector, can yield full confidentiality, integrity, and availability compromise of the local system. No public exploit code has been identified at time of analysis, and this vulnerability does not appear in the CISA KEV catalog.
systemd-oomd exposes an IPC API that local unprivileged users can abuse to terminate arbitrary processes on the host due to a missing path traversal validation (CWE-22). Any user holding a local shell account can craft IPC requests with traversal sequences to reference processes outside the intended cgroup scope, enabling targeted denial-of-service against critical system services. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Privilege escalation in Red Hat Advanced Cluster Security 4 (StackRox Central) allows authenticated OIDC token holders to gain unauthorized role assignments through unanchored regular expression matching in the Machine-to-Machine token exchange subsystem. When administrators configure M2M role mappings, RHACS matches incoming OIDC claim values against configured patterns without regex anchors, meaning an attacker whose claim value is a superstring of a mapped pattern - for example, 'superadmin' matching a pattern intended only for 'admin' - receives elevated roles unintentionally. No public exploit code or active exploitation has been identified at this time; the CVSS AC:H rating reflects a genuine complexity barrier requiring attacker knowledge of the target's role mapping configuration.
Grafana through 13.2.0 contains an incomplete fix for CVE-2026-21724 that leaves protected alert contact point (receiver) deletion unguarded: an authenticated Editor-role user can DELETE any protected receiver without the required `alert.notifications.receivers.protected:write` permission. The prior fix patched only the UPDATE code path in `contactpoints.go` and `receiver_svc.go`, leaving the DELETE handler exposed in both files. With CVSS 6.5 (AV:N/AC:L/PR:L) and no public exploit identified at time of analysis, the immediate risk is moderate but operationally significant - silent deletion of protected notification channels can blind alerting pipelines and disrupt incident response.
Missing authorization on CleanAllRUV and Abort CleanAllRUV LDAP extended operations in 389 Directory Server (Red Hat Directory Server 11-13) allows unauthenticated remote attackers - when the default anonymous access setting is active - to manipulate replication metadata, purge changelog records, and abort administrator-initiated cleanup tasks. The affected operations are replication-maintenance primitives that bypass the authorization layer entirely (CWE-862), meaning no account or session is required under default configuration. No public exploit code or active exploitation in CISA KEV has been identified at time of analysis, but the network-accessible, zero-authentication attack surface in a widely deployed enterprise directory server makes this a notable availability and integrity risk.
Heap out-of-bounds reads and writes in Perl's regular expression engine through version 5.45.1 arise from a signed 32-bit integer overflow when computing the superlinear cache size in S_regmatch. When a subject string of approximately 286,331,153 bytes is matched against a pattern containing 15 or more WHILEM-participating nodes, the bit-count product overflows to 14, producing a two-byte cache allocation that is then indexed far beyond its bounds. A caller passing attacker-controlled input of this size to such a pattern can crash the Perl process or corrupt heap memory; no public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Uninitialized GPU memory in Google Chrome on Android prior to 151.0.7922.109 exposes sensitive process memory contents to a remote attacker who has already achieved renderer process compromise. The CWE-457 flaw allows the GPU component to read and return uninitialized memory regions when processing attacker-controlled HTML, resulting in confidentiality impact bounded to the compromised process scope. No public exploit code exists and CISA SSVC rates exploitation as none at time of analysis, making this a second-stage information disclosure component rather than a standalone critical threat.
Request smuggling primitive in h2 (pip/h2) versions 4.4.0 and below enables network-accessible attackers to craft HTTP/2 header blocks containing duplicate Host headers that the library forwards verbatim to consuming applications. When a consumer downgrades the HTTP/2 request to HTTP/1.1 - a common pattern in reverse proxy and gateway architectures - the resulting HTTP/1.1 request carries two Host header lines, violating RFC 7230 and creating an ambiguity that downstream servers may interpret differently, enabling cache poisoning, security control bypass, or session hijacking. No active exploitation confirmed (not in CISA KEV); no public exploit code identified at time of analysis; fix is available in v4.4.1.
Timing side-channel exposure in Apache Portable Runtime Utility (APR-util) versions 1.2.0 through 1.6.3 allows network-accessible attackers to statistically recover passwords or hashes by measuring response-time variance in the `apr_password_validate()` function, which performs non-constant-time comparisons. The risk is materially elevated on platforms lacking native `crypt()` support - specifically Windows, Android, BeOS, and NetWare - where the non-constant-time code path is always exercised rather than conditionally. No public exploit has been identified at time of analysis, though the SSVC framework assesses the attack as automatable with partial technical impact.
Header injection in openshift/oauth-proxy allows unauthenticated network attackers to impersonate arbitrary users on upstream applications by exploiting authentication-bypass paths. When skip-auth-regex rules are configured, the proxy forwards client-controlled identity headers (X-Forwarded-User, X-Forwarded-Email, X-Forwarded-Access-Token) to upstream services without stripping them, enabling forged identity claims. Affecting Red Hat OpenShift Container Platform 4, this vulnerability is classified under CWE-345 (Insufficient Verification of Data Authenticity) with a CVSS 6.5 base score; no public exploit code or CISA KEV listing has been identified at time of analysis.
Resource exhaustion in Apache Qpid Proton-J through 0.34.1 allows authenticated AMQP clients to trigger unbounded server-side resource consumption by sending a delivery composed of an arbitrarily large number of transfer frames - a limit the library fails to enforce. The root cause (CWE-770) is an absent cap on per-delivery transfer frame counts during message ingestion, not a memory corruption or code execution class flaw. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; the primary risk is targeted denial of service against messaging infrastructure by any authenticated AMQP peer.
Denial of service in Apache Qpid Proton-J through 0.34.1 allows authenticated AMQP clients to exhaust server CPU by sending a crafted disposition frame carrying large or illegal delivery ranges. The library's naive range handling iterates without bounds validation, causing unbounded CPU consumption that can starve legitimate connections. No public exploit identified at time of analysis; vendor-released fix is available in version 0.35.0.
Denial of service in Apache Qpid Proton-J through 0.34.1 allows authenticated remote attackers to render the messaging endpoint unresponsive by deliberately exceeding the AMQP session flow control incoming window, triggering unbounded resource consumption. The root cause is CWE-770 - insufficient throttling of resource allocation - a well-understood class of flaw in protocol session management. No active exploitation has been confirmed and no public exploit code is known at time of analysis; the vendor has released a fix in version 0.35.0.
Persistent denial of service in dhcp-server (dhcpd) on Red Hat Enterprise Linux 6 through 9 is triggered via a crafted OMAPI lease creation request containing an overly long InfiniBand MAC address, overflowing a buffer in `print_hw_addr()` and crashing the dhcpd daemon in a way that prevents automatic recovery. The official CVSS score of 4.9 with PR:H reflects the assumption that TSIG authentication guards the OMAPI port; however, the description explicitly highlights that TSIG is optional and often absent, reducing the realistic exploitation barrier to unauthenticated network access. No confirmed active exploitation (KEV) or public proof-of-concept exists at time of analysis.
Session flow control enforcement in Apache Qpid ProtonJ2 (versions through 1.1.0) can be bypassed by an authenticated attacker who sends data exceeding the negotiated incoming flow control window, potentially causing denial of service on the receiving side. The AMQP session-level window is a back-pressure mechanism; failure to enforce it can lead to unbounded memory consumption or processing overload in the message broker or client. No public exploit code and no CISA KEV listing have been identified at time of analysis. The vendor-released fix is version 1.2.0.
Stack-based out-of-bounds read in stunnel's s_vlog logging function allows remote unauthenticated attackers to crash the service by sending protocol inputs that generate log messages exceeding 1024 bytes via vsnprintf. The primary impact is service disruption (availability), with a limited integrity impact in corner cases where trailing newline characters in the stack buffer can be overwritten with null bytes. No public exploit code has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog.
SSRF bypass in stunnel 5.79 and earlier allows authenticated SOCKS proxy clients to circumvent intended localhost access restrictions by supplying IPv4-mapped IPv6 addresses (e.g., ::ffff:127.0.0.1) or unspecified addresses (0.0.0.0, ::) in proxy requests. Exploitation reaches loopback-bound services on the stunnel host - services deliberately isolated from external network access - potentially exposing internal APIs, administrative interfaces, or other localhost-only endpoints. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Forced logout via unsigned backchannel requests affects Red Hat Build of Keycloak when an OIDC identity provider is configured to skip signature validation. Under this non-default configuration, the backchannel logout endpoint in keycloak-services improperly accepts logout requests lacking any cryptographic signature (CWE-347), violating the OIDC backchannel logout specification. An unauthenticated network attacker who possesses knowledge of a target user's session identifiers can submit a forged unsigned logout request, terminating that session without the user's consent. No public exploit or active exploitation (CISA KEV) has been identified; with CVSS 3.7 and EPSS data absent from the input, this is a low-priority availability-only issue gated by a specific non-default configuration.
Path traversal in WildFly's domain mode LocalFileRepository exposes arbitrary files readable by the Domain Controller process to attackers who have already obtained or compromised a slave host controller. The flaw resides in the wildfly-core/deployment-repository component, where getFile() and getConfigurationFile() fail to canonicalize or bound-check caller-supplied paths before resolving them on disk, enabling directory traversal sequences to escape the configured repository root. No active exploitation is confirmed (not listed in CISA KEV) and no public exploit code has been identified, but successful exploitation yields high-confidence access to sensitive artifacts including keystores, credentials, and configuration files.
Man-in-the-middle interception of SSH sessions and file transfers is possible through the EMR SSH helper commands in Amazon AWS CLI v1 before 1.45.28 and v2 before 2.35.3 due to missing entity authentication during the SSH key exchange. Network-positioned attackers - requiring no privileges or user interaction - can substitute their own key material during the handshake and silently relay or inspect the session. No active exploitation is confirmed by CISA KEV, and no public proof-of-concept has been identified at time of analysis; however, the impact on downstream EMR cluster confidentiality is rated high (SC:H in the CVSS 4.0 vector).
Unbounded PKCS#12 KDF iteration counts in Bouncy Castle for Java allow remote, unauthenticated attackers to cause denial of service by supplying a crafted PKCS#12 file with an arbitrarily large iteration count in MAC or bag-decryption KDF parameters. Any Java application that processes PKCS#12 keystores using bc-java before 1.85, bc-lts-java before 2.73.12, or bc-fja (FIPS) before 1.0.2.7/2.0.2/2.1.3 is affected. No public exploit is identified at time of analysis, but the attack surface is broad given how widely PKCS#12 files are accepted across Java enterprise stacks.
CPU and memory exhaustion in Bouncy Castle Java's BCFKS keystore loader exposes applications to pre-integrity-verification denial of service when processing a crafted keystore file. Any of the three affected library variants - bc-java (before 1.85), bc-lts-java (before 2.73.12), and BC-FJA (before 1.0.2.7, 2.0.2, or 2.1.3 depending on series) - will blindly honour attacker-supplied PBKDF2 iteration counts or scrypt cost parameters read from an untrusted file before the keystore MAC is verified, allowing an adversary to trigger arbitrary CPU or memory consumption at load time. No public exploit code has been identified and the vulnerability is absent from CISA KEV; urgency is rated Amber by the upstream reporter.
CPU-exhaustion denial of service in Bouncy Castle for Java affects any server that verifies CMP (Certificate Management Protocol) password-MAC protected messages using PKMACBuilder without an explicit iteration ceiling. The library's PKMACBuilder accepted the iteration count directly from the unauthenticated PBMParameter field in an incoming CMP message with no upper bound, allowing a remote unauthenticated attacker to supply a count near 2^31 and force billions of hash iterations on the target. No active exploitation is confirmed (not in CISA KEV), but the attack is unauthenticated, requires no special configuration beyond standard CMP usage, and a patch is available upstream.
Heap and CPU exhaustion in Bouncy Castle for Java's OpenPGP implementation allows remote unauthenticated attackers to cause denial of service by crafting OpenPGP messages with extreme Argon2 S2K cost parameters. The library honoured attacker-controlled memory, passes (iterations), and parallelism fields embedded in unauthenticated OpenPGP packets before any message authentication could occur, meaning a single crafted packet could instruct the JVM to allocate up to 2^30 KiB (approximately 1 TiB) of heap. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the vulnerability is straightforward to exploit given that the cost parameters are trivially crafted and processed unconditionally.
Denial-of-service via unbounded KDF cost in Bouncy Castle for Java's PKCS#8 / PBES2 decryptors allows remote attackers to exhaust CPU or memory by supplying crafted encrypted key material with extreme KDF parameters. The vulnerability affects bc-java before 1.85, bc-lts-java before 2.73.12, and BC-FJA (bcpkix-fips) across all supported 1.0.X, 2.0.X, and 2.1.X series. No public exploit has been identified at time of analysis, and active exploitation has not been confirmed by CISA KEV.