Authentication Bypass

Access-control mitigation bypass in the Firefox Add-ons Manager component allows attackers to circumvent a security protection that Mozilla had previously put in place around add-on handling, affecting Firefox before 154 and Firefox ESR before 153.1. Mozilla assigned this a 9.8 CVSS score with a fully remote, unauthenticated, no-user-interaction vector, though the terse advisory text does not detail the exact protection defeated. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; EPSS data was not provided.

Same-origin policy enforcement in Firefox's DOM Service Workers component can be bypassed, allowing a malicious web page to access resources, responses, or cached content belonging to another origin. The flaw affects Firefox before version 154 and Firefox ESR before 153.1, and carries a CVSS 3.1 base score of 9.1 (high confidentiality and integrity impact, no availability impact). There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the network, no-authentication, no-interaction vector makes it attractive for drive-by attacks.

Protection-mechanism bypass in the Firefox JavaScript engine's garbage collector (JavaScript: GC) undermines a built-in exploit mitigation, weakening a defense that normally hinders memory-corruption exploitation. The flaw affects Mozilla Firefox and Firefox ESR and was addressed by the vendor in Firefox 154 and Firefox ESR 153.1. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV; it was reported internally by Mozilla.

Protection mechanism failure in Firefox's Data Loss Prevention (DLP) component allows remote attackers, with user interaction, to bypass DLP controls, resulting in high confidentiality and integrity impact. Affected versions span the standard Firefox release channel (prior to 154) and both active ESR branches (ESR 140.x prior to 140.14, ESR 153.x prior to 153.1). No public exploit exists and EPSS sits at 0.17% (7th percentile), indicating low observed exploitation probability despite the high CVSS score - no active exploitation is confirmed via CISA KEV.

Site isolation is broken in Firefox's WebExtensions component, allowing cross-origin access control boundaries to be violated. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) places this as network-exploitable with high confidentiality and integrity impact, requiring only that a user visit an attacker-controlled page. Vendor-released patches are confirmed across all active Firefox release channels; no public exploit has been identified at time of analysis and EPSS at 0.16% (5th percentile) reflects low current exploitation probability.

Protection-mechanism bypass in the Storage: Cache API of Mozilla Firefox lets remote web content defeat a built-in security mitigation, exposing sensitive data and allowing unauthorized modification (CVSS 9.1, C:H/I:H). All Firefox builds prior to Firefox 154, ESR 140.14, and ESR 153.1 are affected. Reported by Mozilla with no public exploit identified at time of analysis; EPSS is low at 0.16% (6th percentile).

Safe Browsing mitigation bypass in Mozilla Firefox allows a remote unauthenticated attacker (with user interaction) to circumvent Firefox's phishing and malware URL-blocking protections, classified under CWE-693 (Protection Mechanism Failure). Affected versions span all Firefox releases prior to 154 and all ESR branches prior to 140.14 and 153.1, giving this a broad blast radius across consumer and enterprise deployments. No public exploit code has been identified and EPSS sits at 0.16% (6th percentile), indicating low observed exploitation activity despite the high CVSS score of 8.1.

Session cookie forgery in Zabbix 7.4 is possible because the cryptographic key used to sign Frontend sessions is erroneously written to the database seed, making it readable by anyone with adjacent database access. The vendor-confirmed exploitation path is narrowly scoped: only deployments running both SAML authentication and guest users simultaneously are at known risk, where the extracted key can be used to forge valid session cookies and achieve unauthorized frontend access. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, and the vendor explicitly states no known impact for deployments outside the SAML-plus-guest-user configuration.

Unauthenticated data access and manipulation in ArcadeDB before 26.8.1 arises because the Redis wire-protocol plugin exposes no authentication gate, letting anyone who can reach the Redis port read, write, and delete records across any database on the server. VulnCheck reported the flaw (CWE-306, Missing Authentication) with a CVSS 4.0 base score of 9.3, reflecting network-reachable, no-privilege exploitation with high confidentiality, integrity, and availability impact. No public exploit is identified at time of analysis, and it is not listed in CISA KEV.

Cross-database authorization bypass in ArcadeDB's Gremlin wire-protocol plugin allows any authenticated server user to fully access all databases on the server, completely circumventing per-database and per-type ACLs. Versions 26.7.3 and below of com.arcadedb:arcadedb-gremlin are affected; the plugin enforces SASL PLAIN authentication but never invokes the database permission check (canAccessToDatabase) nor binds the authenticated principal into the execution engine. No public exploit code has been identified at time of analysis, but exploitation requires only a single valid server credential regardless of what database that credential was originally provisioned for.

Authentication bypass in ArcadeDB before 26.8.1 lets unauthenticated attackers run full CRUD operations against any database through the MongoDB wire-protocol plugin on TCP port 27017. The plugin negotiates a SASL handshake but never actually enforces it on data commands (insert, find, update, delete, create), so an attacker who can reach the port gains complete read/write access with no credentials. Reported by VulnCheck; no public exploit code has been identified at time of analysis, though the trivial reproduction path makes weaponization straightforward.

Missing authorization in ArcadeDB's DELETE FUNCTION SQL command allows any authenticated database user to permanently remove server-side functions regardless of their actual permission level. All releases up to and including 26.7.3 are affected; the issue is resolved in 26.8.1. No public exploit has been identified at time of analysis, but the low barrier - a valid database credential and a single API call - makes this easily reachable by insiders or compromised low-privilege accounts, particularly where server-side functions enforce security or business logic.

Missing authorization enforcement in the Grav API plugin before 1.0.14 allows any authenticated user holding the api.access permission to invoke privileged menubar actions - bypassing per-action authorize field evaluation in MenubarController::executeAction(). The POST /api/v1/menubar/actions/{plugin}/{action} endpoint checks only the baseline api.access gate while the parallel GET listing endpoint correctly calls userPassesAuthorize(), creating an asymmetric enforcement gap (CWE-862). On stock Grav installs the impact is currently latent because no bundled core plugin registers a privileged authorize handler, but any environment deploying third-party plugins that rely on the documented authorize contract is exposed to privilege escalation. No public exploit has been identified at time of analysis and no CISA KEV listing exists.

Broken API-key scope enforcement in the Grav CMS API plugin (getgrav/grav-plugin-api) before 1.0.14 lets an authenticated holder of a restricted, scoped API key read authorize-gated administrative UI metadata that their scope should forbid. Because userPassesAuthorize() checks the underlying account's super-admin flag and ACL grants instead of the presenting key's declared scopes, a low-privilege key minted on a privileged account inherits the account's full authorization, exposing sidebar/menubar/widget item definitions and users-list columns, row-actions, and filter-tabs. No public exploit identified at time of analysis; impact is information disclosure only, and the published CVSS 4.0 9.3 appears materially overstated versus the described effect.

Authorization bypass in the Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0) before 1.0.15 lets a holder of a narrowly-scoped API key act outside its granted scope. Because BlueprintPathResolver::resolveUserScope() checks the underlying account's raw super-admin ACL flag (access.api.super) rather than the scope actually minted into the presented key, an attacker with a key limited to api.media.write on a super-admin account can write files into other users' account directories and enumerate their file listings without holding api.users.write. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.

Publish-mode endpoint misconfiguration in SiYuan before v3.7.4 exposes operator-forbidden documents to anonymous remote visitors. Eight reader-facing API endpoints - covering search, backlinks, asset content, saved criteria, recent documents, graph, and tags - incorrectly apply the visibility access-control list rather than the disabled list, bypassing the intended publication restriction. Unauthenticated attackers can enumerate and read content that the SiYuan operator has explicitly marked as forbidden from publishing; no public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

Unauthenticated information disclosure in SiYuan before v3.7.4 exposes private knowledge-base content to anonymous publish-mode readers through 17 insufficiently protected block API endpoints in kernel/api/block.go. Remote attackers without credentials can enumerate arbitrary block IDs to retrieve private text content, structural metadata, and block existence information across the entire workspace. No public exploit or active exploitation has been identified at time of analysis; a vendor-released patch is available in v3.7.4 per GitHub Security Advisory GHSA-4vpg-gwqq-w44c.

Authentication bypass in Bastillion (bastillion-io/bastillion, all versions prior to the fix commit) lets unauthenticated remote attackers reach administrative controllers by prefixing request URIs with arbitrary path segments that the AuthFilter fails to normalize. Because the servlet-based access-management console governs SSH access to an entire managed fleet, an attacker can enumerate users, create manager accounts, and register systems, effectively seizing control of privileged SSH access. VulnCheck reported the issue and a vendor fix commit exists; no public exploit has been identified at time of analysis.

Unauthenticated access to the classifieds-types REST endpoint in WPAdverts - Classifieds Plugin for WordPress (all versions through 2.3.2) exposes internal site configuration data due to a missing authorization check in class-rest-blocks.php. Remote attackers without any credentials can retrieve registered post types, taxonomy definitions, form schema metadata, contact options, and custom field meta keys - information that supports targeted reconnaissance for follow-on attacks. No public exploit has been identified at time of analysis and this vulnerability is not listed in CISA KEV, but the CVSS AV:N/PR:N vector means any internet-facing WordPress site running the affected plugin version is reachable without precondition.

Remote code execution in Reportico (reportico-web) versions 8.1.0 and earlier lets an unauthenticated attacker inject arbitrary PHP into the PreExecuteCode attribute of any report and have it executed by the server, bypassing the application's safe_mode restriction entirely. The flaw stems from missing access control on report attribute handling, so no authentication or user interaction is required. CVSS is 9.8 and a public vulnerability-research writeup exists, though EPSS remains low (0.27%, 19th percentile) and it is not on CISA KEV.

Incorrect authorization in Mattermost's Boards component across versions 11.7.x through 11.7.6, 10.11.x through 10.11.21, and 11.8.x through 11.8.3 enables privilege escalation within board management. Board editors and non-guest team members can supply arbitrary values in BoardMember.Scheme* fields through the boards member API or archive-import endpoint, effectively granting board admin rights to any user without server-side enforcement. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

Unauthorized internal-account access in Mahara ePortfolio (all releases before 25.04.5 and 26.04.0) allows remote attackers to log into other users' accounts by abusing the Learning Tools Interoperability (LTI) integration, an authentication-bypass class flaw affecting both the LTI 1.1 and LTI 1.3 Advantage connectors. The issue occurs 'under certain circumstances,' implying LTI must be configured and reachable, and no public exploit identified at time of analysis. The assigned CVSS of 9.8 reflects full confidentiality/integrity/availability compromise of the targeted account, though the conditional wording suggests real-world exploitation depends on LTI being enabled.

MLflow's `CreateModelVersion` endpoint prior to version 3.15.0 permits authenticated users to anchor a model version to another user's run or logged-model artifact directory, then retrieve those artifacts through `GET /model-versions/get-artifact` without holding the required READ permission on the source resource. This confused-deputy pattern arises because `_validate_source_run()` and `_validate_source_model()` in `mlflow/server/handlers.py` enforce only path containment - not cross-user authorization - allowing the registered model's artifact-read gate to be used as a proxy to exfiltrate a victim's ML artifacts. No active exploitation has been confirmed (not in CISA KEV), and the vendor-released fix is available in MLflow 3.15.0 alongside a public security advisory and PR diff that fully document the exploit technique.

Unauthorized file download in Typemill before 2.26.0 is achievable by unauthenticated remote attackers through a path-equivalence authorization bypass in the media file download controller. The role-based restriction map is consulted using the raw, unnormalized URL-supplied filename, while the PHP filesystem layer transparently resolves path-equivalent forms - dot-slash prefixes, double slashes, and percent-encoded separators - to the actual protected file, producing an authorization mismatch that allows restricted media to be served without credentials. No public exploit code has been identified at time of analysis, but the attack requires no authentication, no user interaction, and no special client capabilities beyond a standard HTTP request.

Server-Side Request Forgery (SSRF) in 9Router 0.5.4 and earlier allows unauthenticated remote attackers to probe internal network services by supplying an arbitrary issuerUrl to the /api/auth/oidc/test endpoint, which the application fetches without validating against private or loopback address ranges. The reflected OIDC discovery fields - including token_endpoint and jwks_uri - expose internal service metadata, enabling internal network enumeration. No public exploit code or CISA KEV listing has been identified at time of analysis, though the unauthenticated, low-complexity attack surface makes opportunistic scanning plausible.

Incorrect authorization in OpenViking's debug vector scroll and count endpoints exposes all co-tenant records to any authenticated user within the same account. The storage backend in viking_vector_index_backend.py enforces only account-level scoping, with no per-user access controls, enabling lateral data theft of private memories, skills, resources, and secrets without administrative privileges. No active exploitation has been confirmed (not in CISA KEV), and no vendor-released patch version has been identified at time of analysis.

Unauthenticated access to JimuReport's report folder template listing endpoint exposes all report definitions, share tokens, embedded SQL statements, and live query data to any remote attacker. The CWE-306 root cause - missing authentication for a critical function - means the disclosure requires no credentials, no user interaction, and no special tooling. With a CVSS 4.0 score of 8.7 and a network-accessible, zero-complexity attack path, this represents a high-priority information disclosure risk for any JimuReport deployment reachable from an untrusted network. No public exploit or CISA KEV listing has been identified at time of analysis, though the vulnerability is fully disclosed via VulnCheck advisory and a public GitHub issue.

Missing authorization on Determined's generic task management API endpoints allows any authenticated user to kill, pause, or unpause tasks belonging to other users. The flaw - rooted in CWE-862 (Missing Authorization) - means a low-privileged user with a valid account can disrupt any other user's ML training workloads across the platform without owning those tasks. No public exploit code has been identified at time of analysis, but the attack surface is straightforward: any authenticated API call to the affected endpoints against an unprotected resource suffices.

Insecure Direct Object Reference (IDOR) in phpIPAM through 1.8.1 allows any holder of a valid temporary share URL to enumerate every IP address record stored across all subnets and sections - far beyond the single subnet the share was issued for. The flaw exists because the temporary share handler in app/temp_share/index.php passes the attacker-controlled subnetId GET parameter directly to a database fetch without confirming the returned address belongs to the authorized subnet. Exposed records include hostnames, DNS names, MAC addresses, owner and contact fields, and free-text notes that frequently contain credentials and configuration details. No public exploit or CISA KEV listing has been identified at time of analysis; a vendor-released patch is available in v1.8.2.

Broken object-level authorization on Crawlab's password-change endpoint allows any authenticated user to overwrite the credentials of any platform account, including administrators, without ownership or role verification. The attack is a two-step IDOR chain: enumerate user IDs through an unrestricted user-listing endpoint, then submit a password-change request targeting the administrator account ID. Once administrator access is seized, full platform control enables deployment of malicious crawler scripts, achieving arbitrary code execution across all distributed worker nodes. No public exploit has been identified at time of analysis, though the IDOR pattern is trivially reproducible by any holder of a valid session.

Unauthorized S3 signed-URL generation in Budibase prior to 3.41.3 allows any authenticated published-app user holding the low-privilege BASIC role to supply arbitrary bucket and key values to POST /api/attachments/:datasourceId/url and receive valid signedUrl and publicUrl values generated using the application's stored S3 datasource credentials. The root cause is missing authorization (CWE-862) on this endpoint, which fails to restrict low-privileged app users from invoking datasource-credential-backed operations. No public exploit or CISA KEV listing has been identified at time of analysis, though the low attack complexity and the wide availability of BASIC-role accounts in published Budibase apps makes this a realistic internal threat.

Improper access control in OSSRS SRS (Simple Realtime Server) before v5.0.213 allows remote attackers to bypass RTMP publish authorization enforced by the vhost security layer (security.enabled / SrsSecurity::check() in trunk/src/app/srs_app_security.cpp), enabling unauthorized stream publishing and, per the report, arbitrary code execution against the RTMP listener. The issue is tagged as both RCE and Authentication Bypass and affects deployments that rely on SRS's built-in allow/deny security rules to gate who may publish. Publicly available exploit code exists (a dedicated CVE-2026-68004 GitHub repository), though the vulnerability is not listed in CISA KEV and EPSS probability is low (0.42%, 35th percentile).

Privilege escalation in Red Hat Advanced Cluster Management's multicloud-operators-subscription controller lets a low-privileged user on a managed cluster create a Subscription with crafted annotations that the controller processes with its own elevated Service Account, deploying attacker-chosen resources into arbitrary namespaces. The flaw (CWE-863, CVSS 9.9, scope-changed) affects Red Hat ACM 2.x and Multicluster Global Hub as reported by Red Hat. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.

Code execution in JetBrains PyCharm before 2026.2.1 is possible through Jupyter MCP (Model Context Protocol) tools that expose critical functions without authentication. The root cause is CWE-306 (Missing Authentication for Critical Function) - the MCP tool surface in PyCharm's Jupyter integration fails to enforce any authentication check before executing code. Any local attacker able to reach the MCP endpoint can trigger arbitrary code execution with the privileges of the running PyCharm process, achieving full confidentiality, integrity, and availability impact. No public exploit code has been identified at time of analysis.

Unauthorized project transfer between organizations in JetBrains YouTrack before version 2026.2.17917 exposes high-severity access control failure affecting any multi-tenant or multi-organization deployment. Any authenticated low-privileged user can transfer projects across organizational boundaries without holding the necessary authorization, resulting in high confidentiality and integrity impact against affected projects and their data. No public exploit or CISA KEV listing is identified at time of analysis, but the low attack complexity and authentication-only requirement make this straightforwardly exploitable by any active YouTrack user.

Missing authorization on the mailbox endpoint in JetBrains YouTrack enables any authenticated user to delete arbitrary entities across the platform, regardless of ownership or role. Affected versions span three active release branches: all releases prior to 2025.3.156085, 2026.1.13914, and 2026.2.18095. The CVSS 3.1 score of 8.1 (High) reflects high integrity and availability impact with a low-privilege authentication bar; no public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis.

Authentication bypass in FakeFish (openshift-metal3/fakefish), a Redfish BMC emulator used to bridge metal3/Ironic provisioning to KubeVirt virtual machines, lets any authenticated cluster user manage VMs they do not own. Because FakeFish forwards inbound Redfish credentials to backend scripts but the KubeVirt backend authenticates via a mounted KUBECONFIG and ignores those credentials entirely, no meaningful authorization occurs; an attacker can power target VMs on and off and mount arbitrary virtual CD/ISO images. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is trivial to trigger given the missing authentication check.

Missing Authorization in Sonlogger (Dolusoft Software Technologies) versions v6.6.6 through before 6.7.4.8 exposes protected functionality to unauthenticated remote attackers via ACL bypass, resulting in high confidentiality impact. The CVSS vector confirms AV:N/PR:N, meaning no credentials are required - any network-reachable instance is exposed by default. No public exploit or active exploitation has been identified at time of analysis, but SSVC flags the flaw as automatable, meaning mass scanning and opportunistic exploitation is technically feasible.

Missing authorization in Dolusoft Software Technologies Fortilogger (before version 6.1.5.9) allows unauthenticated remote attackers to access functionality that should be restricted by access control lists. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication and no user interaction over the network, with a resulting high confidentiality impact. No public exploit code or active exploitation has been identified at time of analysis, though the vulnerability was flagged and disclosed by Turkey's national USOM cybersecurity authority.

Cross-zone isolation is broken in Kong Mesh's global control plane, allowing any authenticated zone to inject and overwrite mesh resources attributed to other zones by spoofing the in-band ControlPlane.Identifier during KDS sync. Multiple release trains are affected, including all Kong Mesh versions prior to 2.7.29, 2.9.19, 2.11.18, 2.12.14, 2.13.10, and 2.14.2. No public exploit has been identified at time of analysis; the CVSS 4.0 score of 7.0 reflects high integrity impact to global control plane state and downstream zones, with no availability impact.

Authentication bypass in the openssl_encrypt Python library (versions before 1.4.0) lets attackers who can tamper with ciphertext in transit defeat integrity protection, because a failed AES-GCM authenticated decryption in pqc.py silently falls back to unauthenticated AES-CTR. Reported by VulnCheck and carrying a CVSS 4.0 base score of 9.3, the flaw enables undetected bit-flipping and ciphertext manipulation. No public exploit identified at time of analysis, but a vendor patch is available.

Authentication bypass in the jahlives openssl_encrypt library (all versions before 1.4.0) lets remote unauthenticated attackers fully control the key-management API because verify_api_token treats any non-empty Bearer string as valid. An attacker can upload attacker-controlled public keys, enumerate every stored key, and revoke keys belonging to arbitrary users, undermining the confidentiality and integrity guarantees the tool is meant to provide. The flaw is vendor-confirmed with a patch available and was reported by VulnCheck; no public exploit identified at time of analysis, though the trivial nature makes weaponization simple.

Hardcoded JWT signing secrets embedded in config.py of openssl_encrypt versions before 1.4.0 allow any party with access to the library's publicly hosted source code to forge cryptographically valid JWT tokens for arbitrary client IDs, bypassing authentication on keyserver and telemetry APIs. The static secrets pass all validation checks, making exploitation a matter of reading the source and generating a token with standard JWT tooling-no brute-force or cryptographic attack is required. No CISA KEV listing or public proof-of-concept exploit has been identified at time of analysis, but the trivially low exploitation complexity makes this a high-priority remediation for any network-exposed deployment running an unpatched version.

Authentication bypass in the jahlives/openssl_encrypt PHP library (all versions before 1.4.0) exposes deployments running the standalone telemetry server to full API authentication compromise via hardcoded credentials. The static default secret key embedded in the telemetry server configuration is used for API key hashing; any attacker who obtains this now-public value can reconstruct valid API key hashes and authenticate to the telemetry API without possessing legitimate credentials. The vendor has released a fix in version 1.4.0, confirmed via GHSA-p926-6hjp-w9jw; no public exploit code or CISA KEV listing has been identified at the time of analysis.

Hardcoded PostgreSQL credentials embedded in openssl_encrypt standalone server configuration files expose backend databases to unauthorized access in all versions before 1.4.0. Network-adjacent attackers who obtain the well-known static credentials - trivially available from the distributed software package or public advisory - can authenticate directly to the PostgreSQL instance and retrieve sensitive stored data without any legitimate account. No public exploit code has been identified and this CVE is not listed in the CISA KEV catalog, but the CWE-798 root cause makes exploitation mechanically trivial for any attacker within network reach of the database port.

Integrity-protection bypass in the jahlives openssl_encrypt Python library (all versions before 1.4.0) lets an attacker who can influence the process environment silently disable HMAC authentication in the CamelliaCipher code path. When the PYTEST_CURRENT_TEST environment variable is present, the library skips generating and verifying HMAC tags, so ciphertext is produced and accepted without integrity protection, enabling undetected tampering of encrypted data. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis and it is not listed in CISA KEV.

Sandbox bypass in the openssl_encrypt Python plugin (jahlives, all versions before 1.4.0) allows attackers to completely circumvent the restricted_open file access control layer by importing Python's standard pathlib or io modules within the sandbox context, enabling arbitrary file read and write on the host filesystem. The vulnerability is exploitable over the network with no privileges required but requires passive user interaction (UI:P per CVSS 4.0), scoring 8.7 on the CVSS 4.0 scale. No public exploit has been identified at time of analysis, and a vendor-released patch is available in version 1.4.0.

openssl_encrypt (jahlives, versions before 1.4.0) ships with an insecure default trusted_proxies configuration that grants implicit trust to all RFC 1918 private address space in IntegrityProxyConfig, enabling mutual TLS authentication bypass via forged client certificate headers. Any attacker with access to a co-located private network segment can inject a crafted header that the library accepts as a legitimate certificate identity, effectively impersonating an authenticated mTLS principal. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the authentication bypass class is operationally severe for any deployment relying on mTLS for access control.

Sensitive-token exposure in openssl_encrypt (the jahlives Python package, pip 'openssl-encrypt') before 1.4.0 stems from the keyserver and telemetry server accepting refresh tokens as GET query parameters. Because URLs are routinely written to server access logs, proxy/CDN logs, browser history, and forwarded in HTTP Referer headers, any party with access to those artifacts can harvest a valid refresh token and mint new access tokens, effectively bypassing authentication. Reported by VulnCheck; no public exploit identified at time of analysis and it is not on CISA KEV.

Insecure Direct Object Reference (IDOR) in the openssl_encrypt Python pip package (versions before 1.4.0) allows any authenticated client to revoke another client's cryptographic key without owning it. The keyserver's revoke_key method at lines 195-270 of service.py validates the requester's ML-DSA post-quantum signature but never checks whether the requesting client_id matches the key's owner_client_id - meaning an attacker with valid credentials can target any key in the server by presenting their own legitimate signature against a victim's key ID. No public exploit is identified at time of analysis, though the low attack complexity and the availability of a detailed GHSA advisory make exploitation straightforward for authenticated clients.

Schema validation bypass in the openssl_encrypt Python package (by developer 'jahlives') before version 1.4.0 lets attackers slip malformed or malicious metadata past all JSON schema checks. Because validation fails open when the optional jsonschema library is absent - and because unknown metadata format versions are silently skipped - an attacker who controls the runtime environment or the supplied metadata can process unvalidated data. Reported by VulnCheck and carrying a CVSS 4.0 base score of 9.3; no public exploit identified at time of analysis and it is not listed in CISA KEV.

Missing authorization in stoatchat's Subscribe message handler exposes private server membership data to any authenticated user on the platform. By sending a crafted Subscribe message referencing an arbitrary server ID, an authenticated attacker receives a live stream of UserUpdate events - including display names, avatars, and presence status - for members of private servers they have no legitimate access to. No public exploit code has been identified at time of analysis, but the attack is trivially repeatable by any account holder, requiring only knowledge of a target server's ID.

Authentication bypass in EFM ipTIME A3004T (firmware 14.19.0) lets remote attackers defeat session validation through the httpcon_check_session_url function, granting unauthorized access to the router's web management interface. Publicly available exploit code exists, though the flaw is not yet listed in CISA KEV. The vendor was notified but did not respond, so no fix is currently available.

Unauthenticated remote root access affects the Tenda W20E router (firmware V16.01.0.6(2782)) through its /goform/telnet web endpoint, which activates the device's Telnet daemon without any authentication check. Any attacker who can reach the router's management interface can enable Telnet and log in for a root shell, giving full control of the device. A public disclosure/PoC repository exists, though the flaw is not listed in CISA KEV and EPSS-modeled exploitation probability is currently low (0.19%).

Sandbox escape in the Scriban .NET templating engine (all versions before 7.0.0) lets attacker-influenced templates read object members that a tightened MemberFilter was meant to hide, because type accessors are cached by Type alone and survive both filter changes and TemplateContext.Reset(). Applications that reuse a single TemplateContext across requests or tenants and rely on MemberFilter as a security boundary can leak filtered properties and fields to a later, more-restricted render. Reported by VulnCheck with a working proof-of-concept in the vendor advisory; not listed in CISA KEV, and no EPSS score was provided in the source data.

Arbitrary CLR property writes in Scriban (the .NET templating engine) before 7.2.2 allow template code to mutate live host objects passed into a TemplateContext, bypassing C# setter-visibility rules entirely. Any object pushed via the documented ScriptObject pattern becomes fully writable, so template authors can set private, internal, and init-only setters as well as mass-assign public ones (e.g. {{ user.is_admin = true }}), and the changes persist on the host object after Render() returns. Publicly available proof-of-concept steps exist in the GHSA advisory; no active exploitation is reported (not in CISA KEV) and no EPSS score was supplied.

Permission bypass in stoatchat before 0.15.0 allows authenticated users holding only ViewChannel access to read individual message content through the message_fetch route, circumventing the ReadMessageHistory restriction that bulk read routes correctly enforce. Organizations that deliberately deny ReadMessageHistory to specific users or roles - intending to block historical message access - are exposed because the single-message fetch path uses a weaker authorization check. No public exploit code has been identified and the product is not listed in CISA KEV, but the authorization inconsistency is straightforward to exploit for any actor already authenticated to the platform.

Unauthenticated PII exposure in WP Travel Engine (WordPress plugin, all versions ≤ 6.8.4) allows any visitor to retrieve private customer booking details - including full name, email, street address, city, and phone number - by supplying an arbitrary booking ID to the checkout endpoint. The plugin's only access control on the affected AJAX handler is a frontend nonce broadcast publicly to all visitors via the wteL10n JavaScript global, meaning it functions solely as a CSRF token and does not gate unauthenticated access. No public exploit code has been identified at time of analysis, but the attack is mechanically trivial and requires no prior account or privileges.

Customer-uploaded file disclosure in Extra Product Options Builder for WooCommerce (all versions before 1.2.176) allows unauthenticated requesters who know a file's stored name to retrieve it via an unprotected plugin endpoint, bypassing a missing authorization check (CWE-862). The real-world severity is conditional on web server type: the plugin writes deny-all rules to upload directories, meaning this endpoint only crosses a new security boundary on Apache-hosted sites; on default nginx deployments, those files are already directly URL-accessible and the endpoint adds no measurable additional exposure. Publicly available exploit code exists, but no public exploit identified at time of analysis confirms active exploitation, and EPSS sits at 0.22% (12th percentile) despite the elevated CVSS score.

Authentication bypass in the Simple JWT Login WordPress plugin before 3.6.8 lets unauthenticated attackers log in as any user - including administrators - by presenting a valid Google identity token that carries the victim's email address. Because the plugin never checks the token's audience (aud) claim, a Google-issued ID token minted for an entirely different OAuth application is accepted as proof of identity, turning any site with Google sign-in enabled into a full-account-takeover target. Publicly available exploit details exist (WPScan), though EPSS remains low (0.16%) and the flaw is not listed in CISA KEV.

Unauthorized data destruction in the Solace Extra WordPress plugin (versions through 1.6.0) lets low-privileged authenticated users invoke the import_zip() AJAX handler, which lacks a capability check. Because the handler trusts only the site-wide 'ajax-nonce' that WordPress emits on every admin page to any logged-in user, Subscriber-level accounts can wipe navigation menus, sidebar widgets, all theme mods, and Elementor templates, and force arbitrary demo-content imports. There is no public exploit identified at time of analysis and the flaw is not in CISA KEV, but the trivial exploitation path and 9.1 CVSS make it a high-priority integrity/availability issue.

Authentication bypass in Tenda AC10 firmware 16.03.10.09_multi_TDE01 allows unauthenticated remote attackers to circumvent the httpd web management interface's access controls via manipulation of the R7WebsSecurityHandler function. The vulnerability carries a CVSS 4.0 score of 8.9 with full confidentiality, integrity, and availability impact against the vulnerable system. A publicly available proof-of-concept exploit has been published on GitHub, materially lowering the exploitation barrier and enabling opportunistic mass-targeting of exposed devices.

Authentication bypass in SiYuan's WebSocket endpoint allows unauthenticated remote attackers to access the live kernel event stream - including document identifiers, titles, and operation logs - in all versions before v3.7.4. The flaw stems from a query-parameter parsing differential between two distinct security checks: the auth-exemption path and the session quarantine path resolve duplicate query parameters differently, allowing a crafted URI to satisfy the exemption check while evading token validation entirely. No active exploitation has been confirmed (not in CISA KEV), but the unauthenticated network-accessible attack vector and CVSS 4.0 score of 8.7 make this a high-priority patch for any internet-exposed SiYuan deployment.

Hard-coded TR-069 remote management credentials in LB-LINK X-PRO firmware 1.0.22-20231206 allow network-accessible unauthenticated attackers to authenticate to the device's CWMP interface via static credentials embedded in /etc/config/easycwmp. A public proof-of-concept exploit has been released, effectively eliminating the primary barrier to exploitation. The vendor was unresponsive to coordinated disclosure, and no patch has been issued; no public exploit identified at time of analysis as confirmed active exploitation (CISA KEV listing absent), though publicly available exploit code exists.

Unauthenticated privilege escalation in the Pods - Custom Content Types and Fields plugin for WordPress (all versions through 3.3.9) lets remote attackers bypass every authorization guard on the pods_admin AJAX router and perform administrator-level actions. Because failed checks return false instead of halting execution, an attacker with no account can promote themselves to Administrator or overwrite any user's password - including the site owner's - leading to full site takeover. Reported by Wordfence; no public exploit identified at time of analysis, though the root cause is precisely described.

Hard-coded credentials embedded in the /etc/shadow file of the LB-LINK X-PRO wireless router (firmware 1.0.22-20231206) allow remote attackers who obtain those static credentials to authenticate to the device's management interface without any privilege requirement. The affected product is also marketed as the B-Link AC1200 X-PRO (model AC6). A public proof-of-concept has been published, effectively neutralizing the high attack complexity barrier by making the hardcoded password discoverable; no vendor patch exists because the vendor did not respond to disclosure, leaving all deployed units permanently vulnerable to authentication bypass and full device compromise.

Account takeover in the TrueBooker appointment-booking plugin for WordPress (all versions through 1.2.6) lets remote attackers hijack any account, including administrators. The add_front_user_update() AJAX action is exposed to unauthenticated visitors and trusts a caller-supplied truebooker_wp_user_id, so an attacker can rewrite an admin's email address and then use WordPress's built-in password-reset flow to seize the account. No public exploit has been identified at time of analysis, but the flaw is trivially exploitable and carries a CVSS of 9.8.

Authentication bypass in the User Profile Builder WordPress plugin (versions through 3.16.4) lets unauthenticated attackers log in as the site's Administrator (user ID 1) by submitting a registration with a 61-70 character username, resulting in full site takeover. The flaw is a PHP type-confusion bug where an error object is silently coerced to the integer 1, binding an autologin nonce to the admin account. Rated CVSS 9.8; no public exploit identified at time of analysis, though the fix commit publicly reveals the exact defective code path.

Integer underflow in the Linux kernel's jbd2 journaling subsystem corrupts critical journal metadata, aborting the filesystem journal and rendering affected ext4 volumes unavailable. Local, low-privileged attackers on unpatched systems running ext4 with the fast-commit feature can trigger the arithmetic wraparound in jbd2_journal_initialize_fast_commit() to corrupt j_last, j_fc_first, and j_free, with CVSS scoring this at 7.8 (AV:L/AC:L/PR:L). No public exploit code has been identified and CISA KEV listing is absent, with EPSS at 0.22% (14th percentile), but the breadth of the patch set across six stable kernel branches signals meaningful engineering priority across the fleet.

Landlock SCOPE_SIGNAL enforcement in the Linux kernel can be bypassed by a sandboxed process via the asynchronous SIGIO delivery path, allowing it to send arbitrary signals - including SIGKILL - to processes outside its Landlock domain such as supervisors or security monitors. The flaw exists because hook_file_send_sigiotask() evaluates the Landlock domain recorded at F_SETOWN time rather than the live sender domain, and control_current_fowner() incorrectly skips domain recording when a single member of the target process group (PIDTYPE_PGID) shares the caller's thread group, leaving the remaining group members unchecked at delivery. No public exploit code exists and EPSS is 0.22% (13th percentile), but the impact is significant for environments relying on Landlock as a containment boundary.

BPF verifier register bounds mismatch in the Linux kernel allows local users with BPF loading capability to bypass BPF memory safety checks via crafted programs targeting LSM hook context loads. The flaw in check_mem_access() causes stale register bounds from prior instructions to corrupt the verifier's abstract interpretation, producing a divergence between the verifier's belief and runtime state that can be exploited to escape the BPF sandbox. Patches are confirmed available in stable branches (6.12.103, 6.18.40, 7.1.5, 7.2-rc1); no public exploit or CISA KEV listing exists, and EPSS is low at 0.22% (13th percentile), indicating limited observed real-world exploitation.

Silent data corruption in the Linux kernel nvdimm/btt subsystem results from a broken lane-acquisition locking model that became invalid once BTT lanes were made preemptible. On systems with NVDIMM persistent memory configured in BTT (Block Translation Table) mode, a low-privileged local user can trigger a preemption-induced race where a second task observes a non-zero per-CPU recursion count, incorrectly infers it already holds the lane lock, bypasses mutual exclusion, and concurrently accesses shared per-lane metadata and workspace state, yielding high-integrity and high-confidentiality impact. No public exploit exists and EPSS is 0.18% (8th percentile), but the race is reproducible via the upstream ndctl btt-check.sh unit test and patches are available across all actively maintained stable kernel branches.

Exclusive BPF maps in the Linux kernel can be inserted as inner maps within non-exclusive outer map-in-map structures, allowing any unrelated local BPF program to look up and mutate a map that is supposed to be bound exclusively to a single program by cryptographic hash. This bypasses the signed BPF loader's integrity guarantee - an adversary on a hostile host can rewrite the frozen metadata map contents that the loader has already validated against a signed hash. No public exploit is identified at time of analysis and EPSS is very low (0.18%), but the impact is high for environments relying on exclusive maps as a trust boundary.

Sleepable BPF_LSM_CGROUP programs can be loaded into the Linux kernel without verifier rejection, causing a kernel BUG when those programs invoke blocking helpers inside an RCU read-side critical section. The cgroup BPF shim runs under rcu_read_lock_dont_migrate(), which prohibits sleeping; if a program marked BPF_F_SLEEPABLE attaches to an LSM cgroup hook such as file_open and calls bpf_get_dentry_xattr(), the kernel triggers a 'sleeping function called from invalid context' BUG. No public exploit identified at time of analysis; EPSS at 0.17% reflects the niche exploitation path requiring BPF-loading capability.

Hardware protection bypass in the Linux kernel's PMBus hwmon driver silently discards concurrent regulator fault events, preventing hw_protection_trigger() from firing when multiple power faults coincide. Systems running affected kernel versions (6.6.143-6.6.145, 6.12.92-6.12.97, 6.18.21-6.18.40, 6.19.11-6.20, 7.0-7.1.4) with PMBus-managed power rails may fail to respond to simultaneous under-voltage and over-current events, leaving hardware operating without critical protection. No public exploit has been identified; EPSS of 0.22% (13th percentile) and absence from CISA KEV confirm this is not actively exploited.

Integer underflow in the ksmbd in-kernel SMB3 server's DACL parsing logic allows authenticated remote SMB clients to bypass ACE count validation, driving large kernel heap allocations. The flaw exists in parse_dacl(), where subtracting sizeof(struct smb_acl) from an attacker-controlled 16-bit DACL size using unsigned arithmetic wraps to a large size_t when the DACL size is smaller than the header, permitting an ACE count of up to 0xffff to pass the guard unchecked. No public exploit has been identified at time of analysis, and EPSS at 0.22% (13th percentile) indicates minimal current exploitation activity, though upstream kernel patches confirm vendor acknowledgment and the attack path is fully documented in the fix commit.

Netfilter ip6tables rule evasion in the Linux kernel allows remote attackers to slip malformed IPv6 packets past firewall policy. The ah, hbh, and rt matches for IPv6 extension headers derived the header length without fully validating it against available skb data, so a packet whose advertised extension-header length exceeded the real data was treated as a rule mismatch (returning false) rather than being dropped - letting it bypass ip6tables rules specifically written to drop such traffic. The fix sets hotdrop=true so malformed packets are discarded. No public exploit identified at time of analysis; EPSS is low (0.23%, 14th percentile) and this is not in CISA KEV.

Denial-of-service in the Linux kernel's KVM x86 subsystem allows a guest VM to crash the host hypervisor by exploiting a state inconsistency in PV EOI (paravirtual end-of-interrupt) handling. When a guest triggers a memory read failure in `pv_eoi_get_user()` while concurrently disabling PV EOI, KVM fires a fatal assertion in `kvm_lapic_sync_from_vapic()` at `lapic.c:3338`, producing a kernel BUG and crashing the host. This takes down all co-resident virtual machines. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but vendor-confirmed patches are available across multiple stable kernel branches.

Use-after-free in the Linux kernel's KVM x86 irqfd subsystem exposes hypervisor hosts to potential privilege escalation and VM escape when VFIO PCI device passthrough is in use. The flaw arises because a failed IRTE bypass update leaves irqfd->producer as a dangling pointer; if the VFIO PCI vector is subsequently disabled-an event independent of KVM routing-the now-freed vfio_pci_irq_ctx struct can be dereferenced through KVM's routing table, corrupting kernel memory. No public exploit has been identified at time of analysis and EPSS is low (0.22%, 13th percentile), but the S:C scope change in the CVSS vector reflects the potential for a low-privilege local attacker to escape VM boundaries into the host kernel.

Authentication bypass and full account takeover in the User Session Synchronizer WordPress plugin (versions ≤1.4.0) lets unauthenticated attackers log in as any user, including administrators, by abusing the init-hooked synchronize_session() handler. Because an unregistered ussync-key slot makes get_option() return false, the AES-256-CBC key silently degrades to the predictable md5('') and the referer allowlist collapses to an empty match, while the IV is hard-coded, so an attacker who knows or guesses a target email can forge a valid ussync-ref token. No public exploit is identified at time of analysis and the flaw is not in CISA KEV, but the CVSS 9.8 rating and trivial cryptographic prerequisites make weaponization straightforward.

Authentication bypass in the 6Storage Rentals WordPress plugin (versions up to and including 2.27.0) lets unauthenticated attackers log in as any existing WordPress account, including administrators, simply by submitting the victim's email address. The flaw stems from the six_storage_create_wp_user() AJAX handler being exposed to unauthenticated callers while it silently establishes an authenticated session for the resolved user. No public exploit has been identified at time of analysis, but exploitation is trivial and the CVSS score of 9.8 reflects full compromise via a single crafted request.

Red Hat Quay 3's exported action logs download endpoint fails to enforce authorization, permitting any network-accessible party who holds a valid file ID to retrieve full audit log exports without authenticating. The file IDs, while complex and not publicly guessable, are transmitted in plaintext via email notifications and webhook callbacks - creating a realistic interception pathway for adversaries with network positioning. No active exploitation or public POC has been identified; EPSS at 0.31% (23rd percentile) reflects low automated exploitation probability, though targeted disclosure remains credible wherever log export notifications traverse unencrypted channels.

Red Hat Quay's Stripe billing webhook handler at /webhooks/stripe processes inbound JSON payloads without verifying the Stripe-Signature HMAC header, enabling any network-reachable unauthenticated attacker to forge billing events. Successful exploitation resets the targeted namespace's build quota to its configured maximum and dispatches unsolicited billing notification emails to namespace administrators. No public exploit has been identified and EPSS is 0.14% (4th percentile), but the zero-prerequisite attack path makes exploitation trivially scriptable by any attacker with HTTP access to the endpoint.

Red Hat Quay 3 and Red Hat OpenShift Update Service expose an unauthenticated security scanner notification endpoint when the SECURITY_SCANNER_V4_PSK (pre-shared key) is absent, enabling remote unauthenticated attackers to flood the notification queue and inject path traversal characters into outbound Clair API URL paths. The primary impact is worker resource exhaustion leading to denial of service, with a secondary low-integrity impact from blind path manipulation against the configured Clair vulnerability scanner host. No public exploit identified at time of analysis, and EPSS of 0.26% (17th percentile) indicates low current exploitation probability.

Authentication bypass in Laravel Socialite's Facebook provider (versions before 5.29.0) lets unauthenticated remote attackers replay captured OIDC id_tokens because getUserByOIDCToken() in FacebookProvider.php validates signature, aud, and iss but never checks a session-bound nonce. An attacker holding any valid, unexpired id_token minted for the same Facebook App ID can submit it to the backend's userFromToken() endpoint and be logged in as the victim, achieving full account takeover. Reported by VulnCheck and assigned CVSS 4.0 9.2; no public exploit has been identified at time of analysis and it is not on CISA KEV.

Unauthenticated access to the XCB daemon on PAX Technology Q80 payment terminals allows network-adjacent attackers to disclose sensitive configuration data and alter device settings without credentials. The flaw is a complete absence of authentication enforcement at a critical daemon interface (CWE-306), and ZDI explicitly notes this can be chained with additional vulnerabilities to achieve arbitrary code execution in the context of root on the terminal. No public exploit code or CISA KEV listing has been identified at time of analysis.

Authentication bypass in IBM Db2 Mirror for i (versions 7.4, 7.5, and 7.6) lets a remote, unauthenticated attacker read or modify sensitive information by exploiting improper validation of request URI path segments. Because the flaw is reachable over the network without credentials or user interaction, an attacker can defeat access controls on the replication/administration interface and reach protected functionality or data. No public exploit has been identified at time of analysis, but the maximal CVSS 9.8 rating and the low attack complexity make this a high-priority patching target.

Security restriction bypass in IBM Db2 Mirror for i 7.4, 7.5, and 7.6 permits remote authenticated attackers to exceed their authorized privilege level via manipulated user-supplied input processed without adequate authorization checks. With a CVSS score of 8.8 and full confidentiality, integrity, and availability impact, exploitation could allow an attacker with only low-privilege credentials to read, modify, or disrupt mirrored database content. No public exploit code and no CISA KEV listing have been identified at time of analysis, though a vendor patch is available.

Authentication bypass and re-installation abuse in Emlog 2.6.26 and earlier lets a remote unauthenticated attacker POST to install.php with action=reinstall, which deliberately skips the already-installed guard because that check only runs when the action is not 'reinstall'. By supplying attacker-chosen database and admin credentials, the attacker overwrites config.php via file_put_contents and provisions a new administrator account, achieving full takeover of an already-live site. No public exploit has been identified at time of analysis and no vendor-released patch is available, though the flaw is trivially reachable against default installations.

Privilege escalation in Tenable Security Center allows an authenticated Security Manager to manage users outside their authorized group scope, bypassing the platform's intended group-based access controls. The flaw affects all Security Center versions prior to 6.9.0 and is exploitable over the network by any user holding the Security Manager role with at least one 'manage user' permission grant. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog, though the vendor has self-reported it and released a patch via advisory TNS-2026-22.