Authentication Bypass

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on probe failure The vub300 driver lifetime-manages its controller state using vub300->kref, with vub300_delete() freeing the mmc host when the last reference is dropped. The probe error path after the inactivity timer has been armed still bypasses that lifetime rule, however, and falls through to mmc_free_host() directly if mmc_add_host() fails. The race window is between arming the inactivity timer and reaching the probe error unwind after mmc_add_host() fails: probe thread timer/workqueue ------------ --------------- kref_init(&vub300->kref) ref = 1 kref_get(&vub300->kref) ref = 2, timer ref add_timer(inactivity_timer) fires after one second | | race window |<----------------------------------------------------> | mmc_add_host(mmc) inactivity timer fires vub300_queue_dead_work() kref_get() ref = 3 queue_work(deadwork) mmc_add_host() fails timer_delete_sync() mmc_free_host(mmc) frees vub300 deadwork runs use-after-free The inactivity timeout is one second, so this would require mmc_add_host() to both fail and take more than one second to do so. This is unlikely to happen in practice, but the error path is still wrong. timer_delete_sync() only waits for the timer callback itself. It does not flush deadwork that the callback may already have queued. As a result, queued deadwork can still hold a kref while the probe error path directly frees the backing mmc host, including the vub300 storage. Fix this by using the same lifetime mechanism as disconnect. Clear vub300->interface so that the timer callback and any queued deadwork return early and drop their references, then drop the initial probe reference and return without falling through to err_free_host.

Missing authorization on ECS WordPress plugin's dynamic repeater actions (versions before 4.3.8) allows any contributor-level account or above to read, alter, and delete binding configurations of posts they do not own, and to overwrite site-wide plugin presets. The plugin relies solely on a nonce for these actions - a token available to anyone who can open the page builder - without performing capability or ownership checks (CWE-862). No public exploit has been identified at time of analysis, and the EPSS score of 0.13% (3rd percentile) indicates very low current exploitation probability; however, the attack requires only a standard contributor account, making multi-author WordPress sites the primary risk surface.

Cross-site privilege escalation in the Backup Migration WordPress plugin (versions before 2.1.7) exposes WordPress multisite networks to unauthorized administrative access. A sub-site administrator can exploit an improperly restricted post-restore automatic login mechanism to obtain a persistent, long-lived authenticated session as an administrator of a separate site within the same network - without supplying credentials and bypassing any two-factor authentication controls in place on the target site. No public exploit code has been identified at time of analysis, and EPSS sits at 0.18% (8th percentile), indicating low current exploitation probability despite the high confidentiality and integrity impact.

Unauthorized disclosure of unpublished Elementor content affects the ECS WordPress plugin before version 4.3.8, allowing any unauthenticated internet user to retrieve the fully rendered HTML of private, draft, or pending Elementor documents by supplying a valid post identifier to a plugin AJAX endpoint. The plugin's AJAX handler for rendering Elementor documents performs no post-status check and enforces no WordPress capability, completely bypassing the platform's native visibility controls for those requests. No public exploit code has been identified and EPSS is 0.15% (5th percentile), indicating low observed exploitation probability, though the zero-authentication requirement makes the attack trivially automatable against enumerable sequential post IDs.

Authorization bypass in the wpdevart Booking Calendar, Appointment Booking System plugin for WordPress (all versions through 3.2.36) permits unauthenticated remote attackers to write attacker-controlled payment status and transaction data directly into the plugin's payments database table, bypassing any payment gateway verification. This enables fraudulent marking of reservations as paid or completed, cancellation of legitimate customer payments, and dispatch of transactional booking confirmation emails to arbitrary parties. No public exploit has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.

Red Hat Quay's notification API exposes sensitive integration secrets - including webhook URLs, Slack tokens, and email addresses - to any authenticated repository administrator who can enumerate or guess a target notification's UUID. The flaw is an Insecure Direct Object Reference (CWE-639): the notification UUID acts as the sole access control key, with no ownership check verifying that the requesting admin belongs to the repository whose notification is being accessed. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis, but the confidentiality impact is High per CVSS due to the sensitivity of the exposed secrets.

JWT claim validation failures in Red Hat Quay's federated robot account and SSO authentication pathways allow an attacker who already holds a legitimately-issued token from the same configured identity provider to bypass audience (`aud`), authorized party (`azp`), and subject (`sub`) restrictions. Affected deployments include Red Hat Quay 3 and Red Hat OpenShift Update Service across all currently tracked versions. Successful exploitation yields unauthorized access to registry resources beyond the attacker's intended scope, including potential cross-account or cross-namespace read and write access within the Quay instance. No public exploit code has been identified and this CVE is not currently listed in the CISA KEV catalog.

QoS policy authorization bypass in OpenStack Octavia through version 18.0.0 permits authenticated tenant users to associate another project's Quality of Service policy with an amphora they control, blocking the legitimate policy owner from deleting that resource. The vendor confirms all Octavia deployments are affected, making this a universal tenant-isolation concern for multi-tenant OpenStack clouds. No active exploitation or public exploit code has been identified at time of analysis; the CVSS 4.3 Medium score reflects limited impact scope - integrity only, with no confidentiality or availability exposure.

Access control bypass in the iCagenda Event Scheduler Extension for Joomla (all versions prior to 4.0.11) permits authenticated backend operators to enumerate Joomla user profiles beyond their intended permission scope. An operator account granted access exclusively to the `com_icagenda` component - a tightly restricted, low-trust role - can leverage the flaw to query the broader Joomla user database, violating the principle of least privilege. No public exploit has been identified at time of analysis, and the CVSS 4.0 score of 5.1 (Medium) reflects the high privilege prerequisite and limited confidentiality impact.

Improper authentication enforcement in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 exposes sensitive information to remote attackers via CWE-287, allowing bypassed or unenforced authentication checks to leak protected data. A critical discrepancy exists between the CVE description - which names a 'remote authenticated attacker' - and the CVSS vector (PR:N), which implies no authentication is needed; this ambiguity affects real-world risk assessment and should be resolved against the IBM advisory. No public exploit code has been identified at time of analysis, and a vendor patch is available.

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 expose a security bypass whereby a remote low-privilege authenticated attacker can disable server-side input validation by supplying a specific request parameter, then submit otherwise-rejected malicious input. The vulnerability is rooted in CWE-693 (Protection Mechanism Failure), meaning a core defensive control can be switched off at the attacker's discretion rather than enforced by the server. With CVSS 6.3 Medium, partial confidentiality, integrity, and availability impacts are possible; no public exploit code or active exploitation has been identified at time of analysis.

Sensitive information disclosure in IBM Db2 Mirror for i 7.4, 7.5, and 7.6 stems from improper authentication (CWE-287), enabling remote attackers to retrieve data beyond their authorized scope. The official CVSS vector rates this as PR:N (no privileges required), yet IBM's own description qualifies the attacker as 'remote authenticated' - a direct conflict that security teams should resolve with the vendor before assuming exploitability by unauthenticated parties. IBM has released a patch and no public exploit code has been identified at time of analysis.

SQL injection in Tenable Security Center permits an authenticated administrator to execute arbitrary SQL queries against the underlying database, exposing sensitive data including stored credentials. The CVSS vector (PR:H) confirms exploitation requires existing administrator-level access, placing this squarely in the insider threat and compromised-admin scenario space. No public exploit code or active exploitation has been identified at time of analysis, but the 'Authentication Bypass' tag signals that extracted credentials could enable downstream privilege escalation or lateral movement into connected systems managed by Security Center.

Authorization bypass in Webkul Bagisto's backend reporting endpoint (/admin/reporting/sales/) allows authenticated low-privilege users to access sales reporting data outside their intended authorization scope. Affected deployments include Bagisto versions up to and including 2.4.4, confirmed via CPE cpe:2.3:a:webkul:bagisto. A publicly available proof-of-concept exploit has been published on GitHub, and while not listed in CISA KEV, the vendor has acknowledged the issue through internal security assessment, indicating awareness but no confirmed patched release version at this time.

Remote unauthenticated information disclosure in Dell Wyse Management Suite (WMS) versions prior to 2605.0.2 allows network-accessible attackers to access sensitive data through a critical management function lacking authentication enforcement. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no credentials, no user interaction, and no special configuration - any reachable WMS instance running an unpatched version is a valid target. No public exploit code and no confirmed active exploitation (CISA KEV) have been identified at time of analysis; a vendor-released patch is available.

Authorization bypass via Insecure Direct Object Reference (IDOR) in Webkul Bagisto's backend customer detail endpoint allows remote authenticated users to enumerate and retrieve customer records outside their authorized scope by manipulating the ID parameter in requests to /admin/customers/view. Versions up to and including 2.4.4 are confirmed affected per NVD CPE data, and publicly available exploit code exists on GitHub. The vendor has acknowledged the vulnerability class and confirmed that partial remediation is underway internally, though no specific patched release version has been publicly confirmed.

Hard-coded credentials in Dell Wyse Management Suite (WMS) versions prior to 2605.0.2 expose management-plane access to any low-privileged local user who discovers them. Exploitation yields high confidentiality and integrity impact - an attacker can read sensitive management data and alter system state - while availability is unaffected. No public exploit code or CISA KEV listing exists at time of analysis, but the CWE-798 class is historically trivial to exploit once credentials are extracted from binaries or configuration files.

Improper access control in Webkul Bagisto's Customer Item Deletion Endpoint (versions up to 2.4.4) permits a remotely-accessible, authenticated attacker to delete customer items beyond their authorization scope. A public proof-of-concept exploit is available on GitHub, and the vendor has acknowledged the issue, confirming partial fixes have shipped with remaining remediation planned for future releases. This is not currently listed in the CISA KEV catalog, and real-world impact is moderated by the PR:H authentication requirement.

Authorization bypass in Webkul Bagisto's Admin Customer Impersonation Feature (versions up to 2.4.4) allows authenticated administrators to manipulate the ID parameter at /admin/customers/login-as-customer/ to impersonate arbitrary customers beyond their intended authorization scope. The CVSS 4.0 score of 5.1 reflects high-privilege prerequisites (PR:H) and limited impact metrics, but a publicly available proof-of-concept on GitHub meaningfully lowers the exploitation barrier for any attacker who already holds admin credentials. The vendor has acknowledged the vulnerability and confirmed partial internal remediation, with remaining fixes planned for upcoming releases.

E-Municipality by Universal Software Inc. exposes a remotely exploitable authentication bypass via trusted identifier exploitation (CWE-305), affecting all versions from 20251127 up to the patched release 20260204. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms that unauthenticated remote attackers can reach the vulnerable authentication layer with no user interaction and no access prerequisites, resulting in limited integrity compromise. Disclosed by Turkey's national CSIRT (USOM), no public exploit or CISA KEV listing exists at time of analysis.

The getAttributeViewBacklinks endpoint in SiYuan before v3.7.4 leaks hidden document metadata to unauthenticated network attackers due to a logic error that applies the wrong access control list during backlink filtering. By supplying a publicly visible database row identifier, anonymous users receive the database name, row title, and full document path of hidden-tier documents that reference that row - bypassing the visibility list entirely. No public exploit has been identified at time of analysis, but the zero-privilege, low-complexity network vector means any internet-exposed SiYuan instance is trivially interrogable.

SiYuan personal knowledge management software before v3.7.4 exposes block identifiers from restricted and password-protected documents via the unauthenticated `getRefIDsByFileAnnotationID` API endpoint, which processes annotation-to-block lookups without any publish-access authorization check. Remote unauthenticated attackers who can observe PDF annotation identifiers on published pages can query this endpoint to enumerate citation relationships spanning documents intended to be inaccessible, leaking structural metadata about restricted content. This CVE is absent from the CISA KEV catalog and no public exploit code has been identified at time of analysis, though the CVSS 4.0 AV:N/AC:L/PR:N/UI:N vector indicates the flaw is trivially reachable with no authentication prerequisite.

Scope cap bypass in the Grav API plugin before 1.0.13 allows a holder of a scoped API key issued on a super admin account to call unauthorized DemoController operations. The private requireSuper() method exits early after confirming isSuperAdmin(), never reaching requirePermission() where api_key_scopes enforcement occurs, making the scope restriction on that key inert for the baseline() and reset() endpoints. Impact is bounded to demo-engine control - forced demo resets or baseline captures - and is conditional on demo mode being actively configured with writable resources. No public exploit is identified at time of analysis.

IP spoofing in go-chi's RealIP middleware allows unauthenticated network attackers to forge the apparent client source IP by prepending an arbitrary value to the X-Forwarded-For header, because the middleware blindly trusts the leftmost entry rather than walking the header right-to-left past trusted proxies. Applications that use middleware.RealIP() for IP-based access control or audit logging are directly exposed across all major version branches (v1 through v5 before 5.3.0). A working proof-of-concept is published in the GitHub Security Advisory GHSA-9g5q-2w5x-hmxf; no CISA KEV listing at time of analysis.

IP spoofing in go-chi/chi's RealIP middleware through version 5.2.1 enables unauthenticated remote attackers to inject arbitrary values into the True-Client-IP, X-Real-IP, or X-Forwarded-For headers, which the middleware blindly accepts and uses to overwrite r.RemoteAddr without any trusted-proxy verification. Applications that rely on r.RemoteAddr for IP-based access controls, rate limiting, or geo-IP restrictions are directly bypassed, and audit logs are silently corrupted with attacker-chosen addresses. A public proof-of-concept is confirmed in the GitHub Security Advisory GHSA-rjr7-jggh-pgcp; no CISA KEV listing at time of analysis.

IP spoofing via the RealIP middleware in go-chi/chi (versions 5.2.1 through 5.2.x) allows unauthenticated remote attackers to bypass IP-based access control lists, circumvent rate-limiting mechanisms, and forge log entries by prepending a fabricated address to the X-Forwarded-For HTTP header. A proof-of-concept is included in the GitHub security advisory (GHSA-3fxj-6jh8-hvhx), confirming exploitability against any chi application that enables the RealIP middleware and enforces controls based on the overwritten r.RemoteAddr. No active exploitation has been confirmed in CISA KEV at time of analysis.

Missing authorization on SiYuan's /api/ref/refreshBacklink endpoint exposes instances prior to v3.7.4 to unauthenticated server-side write operations. Any network-accessible anonymous user can supply an attacker-controlled block ID to flush transaction queues, trigger global reference scans, and enqueue database writes, bypassing the application's read-only access controls. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the unauthenticated network vector and low attack complexity make this a viable target for resource amplification abuse.

Order integrity bypass in the Epeken All Kurir for Woocommerce WordPress plugin (≤2.1.2) allows unauthenticated network attackers to mark arbitrary orders as confirmed - and, under non-default payment configurations, as paid - without owning the order or completing a real transaction. The plugin's payment-confirmation handler performs no origin check and no actual payment verification, making it possible for an adversary to fraudulently trigger fulfillment workflows. No public exploit code has been identified at time of analysis, and EPSS sits at 0.15% (4th percentile), indicating low observed exploitation probability despite the unauthenticated network vector.

Authorization bypass via Insecure Direct Object Reference (IDOR) in RosarioSIS up to version 12.8 allows authenticated low-privilege users to manipulate numeric record IDs in HTTP requests to save or delete records belonging to other schools within the same multi-tenant installation. The vulnerability is program-wide, affecting at least Accounting, Attendance, and Discipline modules - not limited to Discipline/Referrals.php as the CVE description implies. A publicly available exploit exists (GitHub issue #301); the flaw is not in CISA KEV and CVSS 4.0 scores it at 2.1 with an active proof-of-concept modifier.

Unauthenticated build triggering in OpenChoreo before v1.0.3, v1.1.3, and v1.2.0-rc.2 allows any remote attacker to fire CI/CD pipeline jobs without valid webhook credentials. The POST /api/v1alpha1/autobuild endpoint trusts the caller-controlled X-Event-Key header to select a webhook provider and does not enforce HMAC-SHA256 validation for Bitbucket events, permitting cross-provider spoofing and build triggers using attacker-supplied commit SHAs against any matched repository and branch. No public exploit is identified at time of analysis, and vendor-confirmed patches exist for all affected release lines.

JupyterLab's PyPI extension manager uses a weaker custom normalization instead of PyPI's canonical name resolution, enabling authenticated users to bypass administrator-configured package blocklists by submitting alternate spellings of blocked packages. Versions 4.5.0 through 4.5.9 and 4.6.0 through 4.6.1 are affected; fixed releases 4.5.10 and 4.6.2 are available. No public exploit identified at time of analysis, though the bypass technique is directly inferrable from the advisory description and is trivial to reproduce against vulnerable deployments that combine a custom allow/block list with the default PyPI Extension Manager and restricted terminal access.

Insecure direct object reference in streama's ViewingStatusController exposes all authenticated users' viewing history to lateral enumeration, deletion, and manipulation by any peer authenticated user. The `list` endpoint previously returned all users' ViewingStatus records without filtering, and read, update, and delete operations accepted arbitrary primary keys without ownership verification, enabling cross-user data access. No active exploitation has been confirmed and no public exploit code has been identified; an upstream fix is available via GitHub commit but no official tagged release version has been confirmed.

Missing authentication on RTSP/ONVIF interfaces across ten Tenda smart camera product lines allows unauthenticated remote attackers to access live video streams without credentials. Affected devices include CH7, CH7G, CH10, CP3, CP3 Pro, CP7, and the TC3-series (TC3B14C, TC3B15C, TC3T14C, TC3T15C) running firmware through 20260625. Public proof-of-concept exploit code exists on GitHub (E:P per CVSS 4.0 supplemental metrics), though high attack complexity (AC:H) limits trivial mass exploitation; no vendor patch has been identified at time of analysis.

Unauthorized file access in IBM i 7.3 through 7.6 is possible via a TOCTOU race condition exploitable by local authenticated users. The flaw allows an attacker with local access and low privileges to win a timing window between a file permission check and the subsequent file operation, bypassing intended access controls. No public exploit code has been identified at time of analysis, but IBM has released a patch and the CVSS score of 7.1 reflects high confidentiality and integrity impact.

Policy information disclosure in Elastic Fleet Server allows any enrolled agent with valid credentials to retrieve policy documents it was not assigned to by substituting a client-controlled key in artifact download requests. The authorization decision relied on a client-supplied value that was persisted without being cross-checked against the server-side record of the requesting agent's actual policy assignment - a textbook CWE-639 flaw. The CVSS 3.1 score of 6.5 (AV:N/AC:L/PR:L/UI:N) reflects network-accessible, low-complexity exploitation by any authenticated agent; no public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.

Elastic Security's case management API in Kibana fails to enforce the same authorization controls applied in the UI, allowing authenticated low-privileged users to modify case records they are only entitled to view. The vulnerability arises from a mass-assignment flaw (CWE-915/CAPEC-77) where the API accepts object attributes that bypass privilege checks enforced at the UI layer - a classic server-side trust boundary mismatch. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV, but the low exploitation complexity (AV:N/AC:L/PR:L) makes it accessible to any authenticated insider or compromised low-privilege account.

Cross-space alerting rule telemetry disclosure in Kibana allows an authenticated user with read access to alerting rules in one Kibana space to retrieve execution telemetry belonging to other spaces they are not authorized to access. The exposed metadata includes rule identifiers, rule names, space identifiers, execution outcomes, timestamps, and execution counters - a meaningful control gap for organizations using Kibana Spaces for multi-tenant or departmental isolation. Fixes are available in Kibana 8.19.20 and 9.4.5 per Elastic advisory ESA-2026-105; no public exploit or CISA KEV listing exists at time of analysis.

Missing authorization in Kibana's internal data retrieval capability for Elastic Defend endpoint response actions exposes sensitive security telemetry to any authenticated low-privileged user. The internal API endpoint used for endpoint response actions bypasses the Security Solution and endpoint privilege checks applied to its user-facing equivalents, executing with elevated internal permissions rather than the requesting user's permissions. No public exploit or CISA KEV listing exists at time of analysis; however, any authenticated Kibana user - regardless of Security Solution role assignments - can exploit this to read endpoint response records and host-returned response content from managed endpoints.

Unauthorized Osquery live query execution in Elastic Kibana allows a low-privileged authenticated user to run endpoint queries against Elastic Agents assigned to Kibana spaces they have no authorization to access, violating the platform's space-based multi-tenancy access control model. By exploiting a user-controlled key authorization bypass (CWE-639 / CAPEC-1), an attacker can exfiltrate host telemetry - running processes, network connections, file system state - from isolated organizational spaces, with results written to the Osquery results data stream accessible to the attacker. No active exploitation is confirmed (not in CISA KEV) and no public proof-of-concept has been identified at the time of analysis; however, the network-accessible vector and high confidentiality impact make this a meaningful risk in multi-tenant deployments.

Missing authorization in Elastic Kibana's Security solution allows users holding only detection rule authoring privileges to associate and indirectly trigger Elastic Defend endpoint response actions - including host isolation, process termination, and remote execution - against managed hosts, without ever being granted the dedicated Endpoint response action privileges that are supposed to govern those capabilities. The exploitation path is indirect: a restricted user crafts a detection rule with embedded response actions, and when that rule generates alerts against matching endpoints, the privileged actions execute autonomously through the Elastic Defend agent. No public exploit has been identified at time of analysis, and the flaw is not listed in the CISA KEV catalog.

Incorrect authorization in Kibana's Synthetics feature allows an authenticated user holding only Synthetics write privilege in a single space to permanently delete private locations shared across multiple spaces, including those the user has no access to. The root cause is an incomplete access-control check that evaluates only the monitors visible in the requesting user's own space, ignoring dependent monitors in other spaces. No public exploit or active exploitation has been identified; the CVSS 5.4 score reflects a real but bounded integrity and availability impact limited to Elastic Kibana instances using multi-space Synthetics deployments.

Kibana's Machine Learning space management feature performs an incomplete authorization check when removing a saved object from a space, accepting trained models as targets while only verifying privileges for anomaly detection jobs and data frame analytics jobs. Authenticated users whose roles grant ML job creation rights but lack the trained model privilege can therefore remove a trained model from the active space, despite having no legitimate authority over trained models. No public exploit is identified and this vulnerability is not listed in CISA KEV; real-world impact is bounded by the reversibility of the action and the non-deletion of the underlying model.

Kibana's Agent Builder feature exposes an A2A JSON-RPC API endpoint vulnerable to Insecure Direct Object Reference (CWE-639), allowing an authenticated low-privilege user to overwrite and seize ownership of another user's conversation within the same Kibana space. The root cause is that the server-side ownership check treats a non-existent conversation ID identically to one that exists but belongs to a different user, so supplying a known identifier is sufficient to hijack it. No confidentiality breach occurs - the attacker does not read overwritten content - but the original owner suffers permanent, irrecoverable loss of their conversation history. No public exploit code has been identified and this CVE does not appear in CISA KEV at time of analysis.

Unauthenticated MQTT access on Philips Hue Bridge Pro exposes all connected Zigbee lighting devices to any attacker sharing the same network segment. The firmware ships Mosquitto MQTT broker v2.0.22 with anonymous access enabled and no interface binding restriction, meaning no credentials are needed to subscribe to device telemetry topics or publish commands that toggle, dim, or cycle lights. No public exploit code has been identified at time of analysis; however, CISA is tracking this vulnerability via CSAF advisory va-26-225-01, indicating active government-level monitoring.

Gitea's Email Management API allows authenticated users to bypass access controls enforced by the ManageCredentials feature, enabling unauthorized credential-related actions on affected instances. All Gitea Open Source Git Server versions up to and including 1.26.4 are affected. An authenticated low-privileged user can exploit this to read or modify credential-related data beyond their intended permissions, with a fix delivered in v1.27.0.

Local file inclusion in Zimbra Collaboration's Classic Web Client (versions before 10.1.17) exposes protected server-side files via the Forward servlet's unvalidated 'fu' request parameter. An attacker supplying a crafted path can read files such as WEB-INF/web.xml, leaking application configuration including database credentials, internal class mappings, and security settings. The vulnerability carries a low CVSS score of 3.1, but the confidentiality impact of web.xml disclosure can be disproportionately severe since that file often contains secrets used to pivot further. No public exploit code or CISA KEV listing has been identified at time of analysis.

Stored XSS in Zimbra Collaboration Classic Web Client before 10.1.17 enables remote, unauthenticated attackers to deliver malicious JavaScript via crafted email attachments, which executes in the victim's browser session upon inline preview. Affected organizations running ZCS versions prior to 10.1.17 are exposed to session hijacking, unauthorized webmail actions, and data exfiltration without the attacker needing any account on the target system. No active exploitation has been confirmed by CISA KEV, and no public exploit code has been identified at time of analysis, but the email delivery vector requires no attacker foothold and lowers the exploitation barrier significantly.

Authorization bypass in Zimbra Collaboration (ZCS) before 10.1.17 allows authenticated users to impersonate other accounts and send emails by exploiting improper permission validation in the SaveDraftRequest SOAP handler. An attacker with a valid low-privilege account can craft SOAP requests that circumvent delegation and send-as permission checks, enabling unauthorized email impersonation without possessing the required access grants. No active exploitation has been confirmed (no CISA KEV listing) and no public exploit code has been identified at time of analysis; the CVSS score of 3.1 reflects the constrained real-world impact.

Filter rule bypass in rsync before 3.5.0 allows remote clients connecting to an rsync daemon to override module-level filter restrictions by injecting malicious --filter merge file directives during filter evaluation. The daemon's intended access controls - designed to restrict which files a module exposes - can be circumvented, granting the attacker read and limited write access to files the module filter was meant to exclude. No public exploit has been identified at time of analysis, and the vendor has released a fix in v3.5.0 designated as a major security release.

Credential exposure in hashi-vault-js (npm) leaks live HashiCorp Vault tokens and secret values into application logs and monitoring platforms via unredacted AxiosError objects. Every API method in the library re-throws the raw AxiosError, which carries the full Axios request configuration-including the X-Vault-Token authentication header and request body containing submitted passwords or secrets. Any consuming application that passes caught exceptions to logging utilities (console.error, pino, winston) or observability platforms (Sentry, APM agents) will persistently record live Vault credentials in plaintext. No public exploit has been identified at time of analysis, but the vulnerability is structurally trivial to trigger through normal error-path execution in any affected Node.js service.

Broken access control in the WPEverest User Registration WordPress plugin (versions ≤5.2.6) permits unauthenticated remote attackers to bypass authorization checks and perform unauthorized actions within the registration subsystem, yielding limited integrity impact. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) confirms exploitation requires no authentication, no user interaction, and no special configuration, though impact is constrained to integrity modifications with no confidentiality or availability effect. No public exploit code and no active exploitation have been identified at time of analysis.

Broken access control in InstaWP Connect (WordPress plugin) versions up to and including 0.1.3.7 permits unauthenticated remote attackers to perform restricted actions without authorization, resulting in limited integrity impact on the target WordPress installation. The root cause is CWE-862 (Missing Authorization), where one or more plugin endpoints fail to verify the requester's permissions before executing sensitive operations. No public exploit code has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog, but the low attack complexity and absence of authentication requirements lower the exploitation bar considerably.

Broken access control in Revolut Gateway for WooCommerce allows unauthenticated remote attackers to reach restricted plugin endpoints and read protected data, yielding low confidentiality exposure with no integrity or availability impact. All plugin versions below 4.22.10 on WordPress/WooCommerce installations are affected. No public exploit or CISA KEV listing has been identified at time of analysis, and a vendor-released patch is available.

Broken access control in GiveWP, the WordPress donation management plugin, allows unauthenticated remote attackers to perform unauthorized integrity-affecting actions against installations running versions prior to 4.16.6. Rooted in CWE-862 (Missing Authorization), the flaw is network-exploitable with no authentication and low attack complexity, making it trivially automatable at scale against the plugin's widespread nonprofit and charity WordPress install base. No public exploit code or CISA KEV listing has been identified at time of analysis, but the unauthenticated vector warrants prompt patching given the plugin's broad deployment footprint.

Broken Access Control in the Motors WordPress plugin (car dealership and classified listings, by Stylemix) through version 1.4.113 allows subscriber-level authenticated users to perform privileged actions that should be restricted to higher roles, resulting in a high integrity impact. The flaw is classified as CWE-862 (Missing Authorization), meaning the plugin fails to verify whether the requesting user has sufficient privileges before executing sensitive operations. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

Broken Access Control in the Anti Spam and list cleaner - AcyChecker WordPress plugin (versions <= 2.0.0) allows attackers to access or invoke restricted plugin functionality without proper authorization. Reported by Patchstack and tracked as EUVD-2026-57901, the flaw stems from missing authorization checks (CWE-862) on one or more plugin endpoints or AJAX handlers. Depending on the exposed functionality - which can include email list management, spam rule configuration, or subscriber data operations - an attacker could read, modify, or degrade plugin-controlled data. No public exploit has been identified at time of analysis.

Broken access control in Contact Form 7 - PayPal & Stripe Add-on versions 2.5.1 and below allows unauthenticated remote attackers to invoke privileged plugin functionality without authorization, enabling unauthorized modification of plugin state or disruption of payment form behavior. Discovered and disclosed by Patchstack (ENISA EUVD-2026-57898), the flaw is rooted in CWE-862 (Missing Authorization), meaning one or more plugin endpoints or AJAX handlers execute sensitive actions without verifying caller permissions. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.

Broken access control in Internal Link Optimiser (WordPress plugin by Toast Plugins) versions up to and including 5.2.7 exposes restricted plugin functionality to unauthenticated network attackers. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms that no credentials or user interaction are required, allowing any remote party to interact with privileged plugin endpoints on affected WordPress installations. The impact is limited to partial confidentiality and integrity compromise - consistent with unauthorized read or write access to internal link data - with no availability impact identified. No public exploit code or CISA KEV listing has been identified at time of analysis.

Broken access control in the AI for SEO WordPress plugin (versions ≤ 2.4.2) permits unauthenticated remote attackers to invoke restricted plugin functionality without credentials. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication, no user interaction, and no special network position - any internet-facing WordPress site running the affected plugin is reachable. Impact is bounded to partial integrity and availability disruption (I:L/A:L) with no confidentiality exposure, suggesting unauthorized manipulation of plugin operations rather than data exfiltration. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.

Broken access control in the ReactPress WordPress plugin (versions up to and including 3.4.0) permits subscriber-level authenticated users to perform privileged operations that should be restricted to higher-capability roles. The CVSS vector (S:C) indicates the flaw's impact extends beyond the plugin's own trust boundary, potentially affecting broader WordPress site resources such as content or configuration. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

Broken access control in WP Social Avatar WordPress plugin (versions ≤ 1.5) exposes one or more plugin endpoints to unauthenticated remote attackers, who can perform restricted operations without valid credentials. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms network-accessible exploitation with no credentials or user interaction required, with consequences limited to low-severity integrity and availability impact and no confidentiality exposure. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA Known Exploited Vulnerabilities catalog.

Broken access control in the Secure Card Gateway for ePay Paycenter WordPress plugin (versions ≤ 1.0.32) enables remote unauthenticated attackers to bypass authorization checks and invoke privileged plugin operations without supplying any credential. Reported by Patchstack and classified as CWE-862 (Missing Authorization), the flaw carries a CVSS 3.1 score of 6.5 with a fully network-accessible, zero-privilege, zero-interaction attack vector. No active exploitation has been confirmed - this CVE does not appear in the CISA KEV catalog - and no public proof-of-concept code has been identified at time of analysis.

Broken access control in the AcyMailing SMTP Newsletter WordPress plugin (versions <= 10.11.1) permits subscriber-level users to access restricted functionality reserved for higher-privileged roles. The flaw, rooted in missing authorization checks (CWE-862), allows a low-privileged but authenticated WordPress user to read sensitive newsletter data - including subscriber lists, campaign details, or configuration - that should require administrator or editor access. No public exploit or active exploitation via CISA KEV is confirmed at time of analysis, though Patchstack has documented and disclosed the vulnerability.

Broken access control in the Service Finder Booking WordPress plugin (versions up to and including 6.2) allows authenticated subscribers to trigger high-availability-impact actions they should not be authorized to perform. The flaw is classified as CWE-862 (Missing Authorization), meaning the plugin fails to verify that the requesting user has sufficient privileges before executing sensitive operations. No public exploit or active exploitation has been identified at time of analysis, though the low attack complexity and network accessibility make it straightforward to trigger once a subscriber account is obtained.

Unauthenticated IDOR in the Do Lasso WordPress affiliate link management plugin (versions 358 and earlier) allows remote attackers without any credentials to reference and manipulate internal objects by supplying attacker-controlled identifier values, resulting in unauthorized modification or disruption of affiliate link data. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication and no user interaction against default plugin installations. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity and zero-privilege requirement lower the barrier to opportunistic abuse.

Broken Access Control in the Tourfic WordPress plugin (all versions up to and including 2.23.1) allows authenticated subscriber-level users to access restricted functionality or data beyond their intended authorization scope. The flaw stems from missing authorization checks (CWE-862), enabling low-privileged authenticated users to bypass access controls and retrieve sensitive information, as reflected by the High confidentiality impact in the CVSS vector. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low-complexity, network-accessible nature of the flaw makes it straightforward to exploit for any registered site user.

Denial of service against PostgreSQL DDL operations is achievable by any authenticated database user who creates a custom type, exploiting missing authorization checks in two specific code paths - range subtype assignment and SQL expression type references. By manufacturing an artificial type dependency through these unguarded paths, a low-privileged user can permanently block administrators from executing ALTER TYPE or DROP TYPE on the affected object, disrupting schema maintenance across PostgreSQL versions 14 through 18 prior to their respective patched releases (14.24, 15.19, 16.15, 17.11, 18.5). No public exploit code exists and active exploitation has not been confirmed by CISA KEV at time of analysis.

Plugin lock-rule enforcement bypass in JupyterLab (pip package, versions >=4.1.0,<=4.5.9 and >=4.6.0,<=4.6.1) allows authenticated users to subvert administrator-configured plugin restrictions by sending direct requests to the /lab/api/plugins endpoint. Two distinct server-side enforcement gaps expose child plugins of multi-plugin extensions and plugins locked via the 'lock all' mechanism to unauthorized enable/disable operations, undermining data integrity controls and security restrictions - such as download/upload limits - implemented through locked plugins. No public exploit code has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog.

The getLocalStorage API endpoint in SiYuan before v3.7.4 exposes the administrator's full local storage map to unauthenticated network callers and publish readers, with only three keys redacted by an incomplete sanitization filter. Sensitive operational metadata - including closed-tab history, search keywords, private document identifiers, and expanded folder paths - can be harvested in a single unauthenticated HTTP request against any network-accessible instance. No public exploit has been identified at time of analysis, but the zero-authentication, low-complexity attack path means any internet-exposed SiYuan deployment running a version below 3.7.4 is trivially reachable.

The getBookmarkLabels API endpoint in SiYuan before v3.7.4 exposes all workspace bookmark labels to unauthenticated and publish-mode readers due to missing authorization checks (CWE-862), leaking organizational metadata - topic taxonomy, project labels, and subject-matter vocabulary - from documents the requester cannot otherwise access. Any network-reachable SiYuan instance prior to v3.7.4 is affected regardless of publish-mode configuration, as the endpoint applies no access-control filtering. No public exploit has been identified at time of analysis, and no CISA KEV listing exists; risk is primarily reconnaissance-enabling intelligence disclosure rather than direct data exfiltration.

Unauthorized document outline disclosure in SiYuan before v3.7.4 exposes heading identifiers for any document to unauthenticated network callers via the `/api/storage/getOutlineStorage` endpoint, which performs no authorization verification whatsoever. Affected are all SiYuan deployments (cpe:2.3:a:siyuan-note:siyuan:*) configured to listen on externally reachable interfaces running any version prior to v3.7.4. No public exploit has been identified at time of analysis, though the attack requires no credentials and is trivially automatable - any caller who supplies a document identifier retrieves its structural outline regardless of document-level access restrictions.

Unauthenticated access to the /api/block/getRefIDs endpoint in SiYuan before v3.7.4 exposes block reference metadata from password-protected documents, allowing remote attackers without any credentials to enumerate internal document structures. The endpoint fails to enforce the document-level password tier before returning block identifiers, meaning the password protection on sensitive documents is effectively bypassed for this API route. No public exploit code has been identified at time of analysis, and a vendor-released patch is available in v3.7.4 per the GitHub Security Advisory GHSA-vg99-7gj7-2fr5.

Unauthenticated filesystem reconnaissance in SiYuan versions before v3.7.4 allows any network-reachable anonymous reader to probe arbitrary absolute paths on the host via the `getUniqueFilename` endpoint, which performs no authorization check or path confinement before returning existence results. The missing authorization control (CWE-862) means the attack requires zero credentials and zero user interaction against any exposed SiYuan HTTP interface, enabling structured enumeration of filesystem layout, installed software, and sensitive path locations as a precursor to more targeted attacks. No public exploit code and no CISA KEV listing have been identified at time of analysis, but the zero-barrier exploitation profile makes pre-attack reconnaissance trivially achievable against internet-exposed or LAN-accessible instances.

Flowise before 3.1.4 exposes stored third-party API credentials (OpenAI, ElevenLabs) through a missing authorization check in the unauthenticated text-to-speech endpoint, enabling financial abuse at the chatflow owner's expense. The `/api/v1/text-to-speech/generate` endpoint is whitelisted from authentication and fetches any chatflow by UUID without verifying its `isPublic` status, allowing any network-reachable attacker with a valid chatflow UUID to generate unlimited TTS audio billed to the victim. A public proof-of-concept is included in the GHSA advisory; no CISA KEV listing exists at time of analysis.

Flowise's cloud billing API exposes a broken access control flaw at the GET /api/v1/organization/customer-default-source endpoint, enabling any authenticated user to retrieve payment and profile data belonging to arbitrary other customers by manipulating the customerId query parameter. Versions up to and including 3.1.2 are affected; the server authenticates the session but performs no ownership check on the requested customer object, returning full Stripe customer records - including email, balance, currency, and invoice metadata - for any valid customerId supplied. A proof-of-concept is publicly documented in GitHub security advisory GHSA-2364-jh4q-m9vm, and the predictable Stripe-format customer ID scheme (cus_XXX) makes systematic enumeration practical for any registered user.

Forcepoint One Endpoint (F1E) on macOS prior to version v26.04.5758 allows any standard, non-administrative local user to disable the SafariExtension component that enforces Data Loss Prevention browser controls, effectively creating a blind spot in the organization's DLP posture. The CWE-754 root cause indicates the agent fails to properly validate exceptional or edge-case conditions when processing requests that alter the extension's operational state, permitting a low-privilege account to defeat a security control intended to require elevated rights. No public exploit code has been identified at time of analysis, and the vulnerability has not been added to the CISA Known Exploited Vulnerabilities catalog.

Broken authorization in the Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin (versions before 7.0.9) allows any authenticated WordPress user - including the lowest-privilege subscriber role - to disconnect the site's Ecwid store and take the entire storefront offline. The affected store-management action performs neither a capability check nor a nonce verification, meaning the only barrier to exploitation is a valid WordPress session. A public exploit exists per WPScan reporting, and the fix is confirmed available in version 7.0.9.

Broken object-level authorization in the Booking for Appointments and Events Calendar WordPress plugin (versions before 2.4.6) allows any authenticated employee or provider account to read appointment records they are not assigned to, exposing booked customers' personal data. The vulnerability is a classic IDOR (CWE-639): the plugin fetches appointment details by a caller-controlled identifier without verifying the requesting employee is the one assigned to that appointment. No active exploitation has been confirmed (not in CISA KEV), and EPSS places this at the 3rd percentile, reflecting limited real-world exploitation pressure, though the PII disclosure impact is concrete.

Unauthenticated reservation-status manipulation in the Food Menu WordPress plugin (versions before 6.0.2) allows any site visitor to alter the status of arbitrary bookings without authentication. The plugin's reservation-status update action is exposed without capability or ownership verification, and the only gate - a WordPress nonce - is publicly accessible to all visitors, rendering it ineffective as an access control boundary. No active exploitation is confirmed (not in CISA KEV) and EPSS sits at 0.15%, but the zero-friction exploitation path on any affected food-service or restaurant site makes it a meaningful integrity risk for operators relying on accurate reservation data.

Token bypass in the Prevent Direct Access - Protect WordPress Files plugin (versions ≤2.8.8.8) allows unauthenticated remote attackers to download any file the plugin is configured to protect. The `get_advance_file_by_url()` method in `includes/repository.php` performs token validation using a SQL `LIKE` clause without sanitizing input via `$wpdb->esc_like()`, meaning a request supplying `%` as the token value matches any record in the plugin's file table and causes the server to return the protected file. No public exploit has been identified at time of analysis, and the vendor-released fix is available in version 2.8.8.9.

Incorrect authorization in OpenNMS Meridian and Horizon's v2 Alarm REST API allows any authenticated ROLE_REST user to acknowledge, escalate, or clear alarms attributed to arbitrary usernames, effectively forging audit records without holding delegation privileges. An inverted boolean condition in AlarmRestService.java - `!StringUtils.isNotBlank(ackUser)` instead of `StringUtils.isNotBlank(ackUser)` - renders the credential delegation check dead code for any non-blank username supplied in the request. Users simultaneously holding ROLE_REST and ROLE_READONLY can additionally bypass the read-only restriction to modify alarm state. No public exploit exists and the vulnerability is absent from CISA KEV; vendor-confirmed patches are available via OpenNMS GitHub PR #8755.

JEXL expression sandbox bypass in OpenNMS Meridian and Horizon allows a low-privileged authenticated user to load arbitrary Java classes on the server via the Measurements REST API, enabling confidentiality disclosure and integrity compromise. The flaw stems from incorrect authorization logic in OnmsJexlUberspect that checked method calls on a whitelisted class object against the whitelisted class rather than against java.lang.Class itself, allowing reflection chains such as table.getClass().forName('java.lang.Runtime') to escape the sandbox. No public exploit or CISA KEV listing has been identified at time of analysis, but the upstream GitHub PR provides regression tests that precisely document the bypass technique.

Anti-tamper protection bypass in Palo Alto Networks Prisma Access Agent on Windows allows a local administrator to gain unauthorized access to the agent's protected processes and files, effectively disabling endpoint security enforcement. Only the Windows platform is affected - Linux, macOS, iOS, Android, and Chrome OS deployments are explicitly not impacted. No public exploit code has been identified and no active exploitation has been confirmed (CVSS E:U), keeping real-world risk constrained to insider threat and post-compromise scenarios.

Authentication bypass in the Windows network driver of Palo Alto Networks Prisma Access Agent allows a local administrator to circumvent the agent's security inspection enforcement, subsequently enabling injection and interception of arbitrary network traffic. Only the Windows platform is affected - Linux, macOS, iOS, Android, and Chrome OS deployments are explicitly confirmed unaffected by the vendor. No public exploit has been identified at time of analysis, and exploitation requires pre-existing local administrator access, significantly narrowing the realistic threat population.

Account Protection bypass in Palo Alto Networks Prisma Browser allows a local user to circumvent intended security controls due to insufficiently protected credentials (CWE-522), yielding low confidentiality exposure with no integrity or availability impact. The CVSS 4.0 score of 0.5 reflects the constrained attack surface - local access only, specific target conditions required (AT:P), and minimal data exposure. No public exploit code exists and the vulnerability is not listed in the CISA KEV catalog, consistent with the Exploit Maturity modifier E:U (Unreported).

Cross-tenant IDOR in CERT/CC's VINCE platform allows any authenticated case participant to read another vendor's embargoed CaseStatement and per-vulnerability CaseMemberStatus records by supplying an arbitrary member ID in the API request. The authorization check in test_func validates only that the requester is a participant in the case (_is_my_case) but does not verify that the requested member ID belongs to their own organization, making the share_status embargo control bypassable. Affected versions are all VINCE releases before 3.0.44; no public exploit or active exploitation (CISA KEV) has been identified at time of analysis.

Insecure Direct Object Reference (IDOR) in CERT/CC's VINCE coordination platform allows an authenticated vendor admin to manipulate or read notification configuration for contacts belonging to other vendors. The ModifyEmailNotifications view in vinny/views.py resolves a VinceCommEmail record by raw primary key supplied in the URL without verifying that the targeted record belongs to the requesting admin's own vendor group, enabling unauthorized cross-tenant read and write of email routing settings. No public exploit has been identified and EPSS is negligible (0.15%), but the flaw undermines the trust isolation between vendor tenants in a vulnerability coordination context.

Credential interception in Red Hat Multicluster Engine for Kubernetes (MCE) exposes newly rotated provider credentials through an authorization bypass in the provider-credential-controller component. An attacker with specific hub cluster permissions and prior knowledge of a credential value can manipulate `copiedFrom` labels to hijack the credential rotation process, gaining unauthorized read access to sensitive credentials scoped across managed clusters. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the high confidentiality impact and cross-cluster scope change make this a meaningful risk in mixed-trust MCE deployments.

Authorization bypass in LXD (Canonical) allows authenticated project members to circumvent container privilege isolation restrictions enforced at the project level. When a project is configured with `restricted.containers.privilege=isolated`, LXD's enforcement logic fails to apply the restriction if an instance is created or updated without explicitly setting the `security.idmap.isolated` key - effectively treating omission as permission. No public exploit code or CISA KEV listing exists at time of analysis, but the bypass is exploitable by any authenticated LXD user with instance-creation rights in a restricted project.

PDF annotation content in SiYuan through v3.7.2 is exposed without authorization via the /api/asset/getFileAnnotation endpoint, which applies only the generic CheckAuth middleware rather than the publish-access controls enforced on the /assets/* route. When publish authentication is disabled, anonymous readers can retrieve .sya annotation files containing private highlights and notes from password-protected, unpublished, or publish-forbidden documents simply by knowing a valid asset path; authenticated publish RoleReaders face the same missing check. The CVSS 4.0 score of 6.9 reflects a network-accessible, unauthenticated vector with limited scope - encrypted notebooks are not affected - and no public exploit code or CISA KEV listing has been identified at time of analysis.