Information Disclosure

Improper certificate validation in DEEBOT PRO M1 and DEEBOT PRO K1VAC robot vacuums exposes MQTT communications to man-in-the-middle interception, allowing unauthenticated network-positioned attackers to retrieve operation logs and activity logs stored on the devices. Both models from Ecovacs Robotics fail to verify server certificates during MQTT sessions, meaning a rogue server can impersonate the legitimate cloud backend without detection. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, but a vendor advisory with remediation guidance was published on 2026-03-31 as referenced by JPCERT.

Samsung Smart Switch prior to version 3.7.72.6 exposes sensitive user data to adjacent network attackers through improper input validation during device transfer sessions. The attack requires both adjacent network positioning and user interaction, constraining real-world exploitability relative to the high confidentiality impact (VC:H) reflected in the CVSS 4.0 score of 6.8. No public exploit code has been identified and this vulnerability does not appear in the CISA KEV catalog at time of analysis.

SamsungPassAutofill prior to version 5.2.10.x on Samsung Android devices improperly exports application components, enabling a locally-installed malicious app to access sensitive autofill credential data with user interaction. The CVSS 4.0 vector (AV:L/PR:L/UI:A/VC:H) confirms the attack is constrained to on-device, low-privilege access requiring user-triggered activity, yielding a moderate score of 5.1 despite high confidentiality impact. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.

Cleartext storage of sensitive information in Samsung Smart Switch prior to version 3.7.72.6 exposes device migration data to adjacent network attackers. The flaw enables an attacker on the same local network segment to intercept or read sensitive data that the application fails to encrypt at rest or in transit. No public exploit or active exploitation has been confirmed, but the high confidentiality impact and low attack complexity make this a meaningful risk in shared or semi-trusted network environments.

Device identity spoofing in Samsung Smart Switch's trouble scanning mode allows adjacent network attackers to impersonate trusted devices, potentially enabling interception or manipulation of data during device transfer sessions. All Smart Switch versions prior to 3.7.72.6 are affected, as reported by Samsung Mobile. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.

Improper authorization in the custom URL scheme handler of Samsung's My Galaxy app (all versions prior to 6.3) exposes sensitive information to remote attackers. The flaw exists because the handler processes inbound custom URL scheme invocations without enforcing adequate authorization checks, enabling an attacker-controlled web page or application to silently extract user data when a victim interacts with a crafted link. No public exploit code has been identified at time of analysis, and CISA KEV does not list this as actively exploited, but the zero-privilege requirement from the attacker's side and the broad Samsung device install base make timely patching advisable.

Improper input validation in the Galaxy Themes application on Samsung Mobile Devices allows a physical attacker to launch arbitrary Android activities, with a high confidentiality impact on the vulnerable system. Affected devices are those running Galaxy Themes prior to the SMR Aug-2026 Release 1 security update. The vulnerability is tagged as an information disclosure issue, and while it requires physical device access and active user interaction, exploitation could allow access to sensitive device data or protected application screens that would otherwise be restricted. No public exploit has been identified at time of analysis, and no KEV listing exists.

Samsung Message on Android devices prior to SMR Aug-2026 Release 1 exposes sensitive user information to physical attackers through improper input validation. An attacker with physical access to an unlocked or accessible device can interact with the Samsung Message application to trigger the flaw and read confidential message content or related data. No public exploit code has been identified, and exploitation requires hands-on device access, limiting widespread automated abuse.

Samsung Dialer on Samsung Mobile Devices prior to SMR Aug-2026 Release 1 exposes SIM-related functions to remote attackers through improper input validation, requiring user interaction to trigger. The CVSS 4.0 vector (AV:N/AC:H/AT:P/PR:N/UI:P/VC:H) classifies this as a network-reachable, high-confidentiality-impact flaw, though high attack complexity and specific prerequisites substantially reduce the realistic threat surface. No public exploit code and no CISA KEV listing have been identified at time of analysis.

Samsung Contacts on Samsung Mobile Devices prior to SMR Aug-2026 Release 1 exposes contact data across Android user profiles to an attacker with physical device access, due to improper input validation that fails to enforce inter-profile data isolation. The CVSS 4.0 vector confirms both the physical access prerequisite (AV:P) and the scope extension to a secondary user's data (SC:H), consistent with a profile boundary bypass in a multi-user Android environment. No public exploit code or active exploitation has been identified at time of analysis.

Unauthorized file deletion via improperly exported Android components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows any locally-installed malicious application to invoke the exported component and delete files under Samsung Contacts' privilege without requiring any elevated permissions of its own. The vulnerability stems from an Android component export misconfiguration, granting third-party apps unintended access to privileged file operations. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and absence of privilege requirements make this straightforward to exploit on affected devices.

Improper input validation in Samsung Contacts on Samsung Mobile devices prior to SMR Aug-2026 Release 1 enables local attackers to delete files under Samsung Contacts' process privilege, bypassing the Android sandbox boundary between applications. The CVSS 4.0 score of 6.9 with VI:H reflects high integrity impact on the vulnerable system, though the local attack vector constrains opportunistic exploitation. No public exploit code exists and the vulnerability is not listed in CISA KEV at time of analysis; Samsung has released a fix in the August 2026 Security Maintenance Release.

Sensitive information exposure in the Advanced Classifieds & Directory Pro WordPress plugin (versions through 3.4.2) allows unauthenticated remote attackers to retrieve custom field listing data via the publicly accessible AJAX action `acadp_public_custom_fields_listings`, bypassing WordPress authentication entirely. A publicly available proof-of-concept has been published by WPScan, though EPSS places exploitation probability at the 1st percentile, suggesting limited observed exploitation to date. No CISA KEV listing exists, and a vendor-released patch is available in version 3.4.3.

Infinite-loop denial-of-service in libexpat before 2.8.3 allows attackers supplying crafted UTF-16 XML to hang the parsing process indefinitely via a low Unicode surrogate handled as a high surrogate in the *_toUtf16 functions. The flaw is gated by a compile-time prerequisite - only builds configured with XML_UNICODE and XML_UNICODE_WCHAR_T are vulnerable - which specifically includes Firefox and Windows-native builds of applications embedding libexpat. A concrete attack payload is publicly available in the upstream patch PR test suite; no active exploitation has been confirmed via CISA KEV at time of analysis.

Memory leak exploitation in Almico Speedfan 4.52 is constrained to local, high-privilege access and produces limited availability degradation via the speedfan.sys kernel driver's MSR Index Handler. The vulnerability resides in the KiSystemCall64 handler path within speedfan.sys, where kernel pool memory is allocated but never released during MSR index processing, enabling gradual resource exhaustion on affected Windows hosts. A publicly available proof-of-concept exists, no vendor patch has been issued, and the vendor has not responded to coordinated disclosure.

Local availability degradation in Mullvad's wireguard.sys kernel driver 0.10.1 stems from improper reference count management (CWE-911) within the AdapterState function of the IOCTL handler. An attacker with high local privileges can trigger this defect to cause driver instability or crash the WireGuard adapter, impacting VPN connectivity. A public proof-of-concept exploit exists; however, this vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog and carries a CVSS 4.0 score of 4.6, reflecting its constrained impact and access prerequisites.

Unauthenticated remote exploitation of Badaso 3.0.0-alpha's File API allows attackers to bypass permission controls in ApiRequest::class (src/Routes/api.php), resulting in unauthorized read, write, and access operations on file resources. The vulnerability stems from improper permission assignment (CWE-275) in the PHP-based File API route handler. A public exploit has been disclosed via a GitHub issue; the vendor has not responded to the coordinated disclosure.

Query injection and oracle enumeration in Ash Framework (ash-project/ash) versions 1.52.0-rc.11 through pre-3.31.1 allow an attacker to forge a belongs_to relationship to a record whose identifier they cannot directly name, and to systematically recover secret lookup values via a comparison oracle. The root cause is a two-part failure in the managed_relationship on_lookup: :relate code path: client-supplied values reach Ash.Query.filter/2 without type-casting, so a nested map is interpreted as a filter predicate rather than a literal scalar, and the missing Ash.Query.limit(1) call lets Ash.read_one/2 distinguish zero, one, and multiple matches - converting boolean filter predicates into an oracle. No public exploit has been identified at time of analysis; a vendor patch is available at version 3.31.1.

Improper privilege management in wongcyrus ExcelLexBot through version 0.0.3 allows remote high-privileged attackers to perform unauthorized actions via the ExcelLexBotS3TriggerFunction Lambda handler, resulting in limited confidentiality, integrity, and availability impact. The affected product is end-of-life and will receive no vendor patch, as the maintainer is no longer supporting it. No public exploit code or active exploitation has been identified at time of analysis, though the remote attack vector and absence of a patch increase residual risk for any remaining deployments.

Weak password recovery in macrozheng mall (commit 0504e86) exposes the /sso/getAuthCode endpoint of the mall-portal module to remote manipulation, enabling account takeover via a broken authentication flow. The flaw maps to CWE-640 and requires no authentication, though exploitation is rated high complexity. A publicly available exploit has been published; the vendor deleted the corresponding GitHub issue without explanation and has not responded to private disclosure.

Unauthenticated information disclosure in MingSoft MCMS up to version 3.0.6 allows remote attackers to extract sensitive data via the /mdiy/form/get endpoint of the ms-mdiy component. The vulnerability requires no credentials or user interaction and is exploitable over the network, making it trivially accessible to any attacker with HTTP reach to the application. A public exploit has been released (CVSS 4.0 E:P), though the vulnerability is not currently listed in the CISA KEV catalog; the vendor did not respond to pre-disclosure notification, leaving no official patch available at time of analysis.

Information disclosure in MingSoft MCMS through version 3.0.6 exposes sensitive data via the `/mdiy/form/data/list` endpoint in the ms-mdiy component, exploitable by unauthenticated remote attackers with no configuration prerequisites. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms trivial network reachability, and a public exploit has been released (E:P). The vendor did not respond to responsible disclosure, leaving no official patch available at time of analysis.

File inclusion in DedeCMS up to 5.7.118 UTF8SP2 allows a remote attacker with low privileges and high-complexity conditions to include arbitrary files via the _4_Setup function within the Installation Wizard (install/index.php). Exploitation results in limited confidentiality, integrity, and availability impact. A proof-of-concept has been publicly disclosed via GitHub, though no active exploitation has been confirmed by CISA KEV. The CVSS 4.0 score of 1.3 reflects the constrained real-world impact and significant attack complexity required.

Unauthenticated file deletion in WP Photo Album Plus WordPress plugin (all versions before 9.2.07.002) exposes a public REST endpoint that performs no capability or nonce verification, permitting any remote actor to delete generated album export ZIP archives stored by the plugin. The CVSS 3.1 score is 5.3 (Medium) with vector AV:N/AC:L/PR:N/UI:N reflecting zero authentication and trivial access requirements, though impact is scoped only to those regenerable archive files. No public exploit or CISA KEV listing exists; EPSS at 0.14% (4th percentile) confirms negligible current exploitation activity.

Nexter Blocks WordPress plugin before 5.0.2 exposes a REST endpoint for saving global CSS that any Contributor-level user can invoke without proper authorization, causing injected styles to render site-wide for all visitors. The attack surface is limited to sites with untrusted Contributor accounts, and impact is constrained to front-end defacement, content suppression, and UI redressing - not code execution or data exfiltration. No public exploit code or active exploitation has been identified; EPSS of 0.10% at the 1st percentile confirms negligible exploitation probability at this time.

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path doesn't use nested_vmx_vmexit() as that API is intended to be used if and only if L2 is active, and the open coded equivalent neglects to put the vmcs12 pages. Failure to put the vmcs12 pages leaks any pinned pages (and/or mappings) if L1 retries VMLAUNCH/VMRESUME. Note, the !from_vmenter scenario doesn't suffer the same problem, as vmx_get_nested_state_pages() only gets/pins/maps the vmcs12 pages if L2 is active, i.e. if a "full" VM-Exit is guaranteed before KVM will retry getting vmcs12 pages.

WP Directory Kit WordPress plugin before version 1.5.5 exposes sensitive site data to any authenticated user due to missing authorization and nonce validation on an AJAX endpoint. Any subscriber-level account holder can trigger the vulnerable action to enumerate the full WordPress user list and access unpublished directory listings belonging to other users - data that should be restricted to privileged roles. A publicly available proof-of-concept exists per WPScan, though EPSS sits at 0.14% (4th percentile), suggesting exploitation has not yet become widespread despite the low barrier to abuse.

Unauthorized data exposure in the WP Directory Kit WordPress plugin (all versions before 1.5.5) allows any authenticated user - including low-privilege Subscribers - to retrieve stored contact messages and associated personal data belonging to other users by invoking an unprotected AJAX endpoint. The root cause is the complete absence of WordPress authorization checks and nonce verification on an authenticated AJAX action, meaning the plugin performs no ownership or permission validation before returning sensitive inter-user data. A publicly available proof-of-concept has been published by WPScan; however, EPSS sits at just 0.14% (4th percentile) and no CISA KEV listing exists, indicating low observed exploitation activity at time of analysis despite the public PoC.

Visitor analytics data exposure in WP Statistics WordPress plugin versions before 14.16.10 allows any authenticated WordPress user - including those with only Subscriber-level access - to invoke dashboard analytics AJAX handlers and retrieve the site's full visitor metrics without authorization. The plugin's AJAX handlers validate a WordPress nonce but omit the required capability check, and because WordPress issues valid nonces to all authenticated users regardless of role, this effectively grants analytics read access to anyone with a site account. Publicly available exploit code exists per WPScan reporting, though no active exploitation is confirmed in the CISA KEV catalog and EPSS remains at 0.14% (4th percentile), indicating limited observed mass exploitation to date.

Out-of-bounds memory read and write in the Zephyr RTOS SF32LB MPI QSPI NOR flash driver allows a low-privileged thread, when explicitly granted flash device access in a CONFIG_USERSPACE build, to disclose arbitrary CPU-addressable memory or corrupt flash and invalidate cache beyond the mapped flash window. The root cause is a signed/unsigned type confusion in the offset bounds check: a crafted negative off_t value converts to a large unsigned integer and the subsequent addition wraps to a small result that passes the check, allowing memcpy to read from or program flash at attacker-controlled addresses. No public exploit code has been identified at time of analysis; exploitation is nonetheless mechanically straightforward for any attacker familiar with signed/unsigned integer confusion vulnerabilities.

Login-shell environment variable leakage in HKUDS nanobot up to 0.2.1 exposes sensitive environment variables to local low-privilege users during agent-driven shell command execution. The `ExecTool._prepare_command` function in `shell.py` defaulted to invoking bash/zsh with the `-l` (login shell) flag, causing system and user profile startup scripts to be sourced and potentially re-exporting credentials, API keys, or tokens into the execution environment where they could be read by the invoking user. A publicly available proof-of-concept exploit exists; no active exploitation has been confirmed (not listed in CISA KEV). The vendor-released fix in v0.3.0 changes the default from login-shell to non-login-shell execution.

Out-of-bounds kernel memory read in SonicWall Global VPN Client's SWIPsec.sys driver allows a local, low-privileged attacker to crash the host system. Affected versions are 4.10.8.1108 and earlier, running on Windows where the IPsec kernel driver is loaded by the VPN client. No public exploit identified at time of analysis, and EPSS probability stands at a very low 0.16% (5th percentile), indicating no signs of active or widespread exploitation interest.

Symlink following in File::Rotate::Simple before v0.4.0 allows a local low-privileged attacker to create arbitrary files with the permissions of the log-rotating process. When the non-default `touch` option is enabled and the log file path is a dangling symlink, the rotate method skips rotation (because the symlink target does not exist) but still invokes touch, which resolves the symlink and materializes the target at an attacker-controlled path. No public exploit code exists and EPSS is 0.17% (7th percentile), indicating negligible current exploitation interest.

Repeated denial-of-service resets in Aviation VHF Link Control X.25 protocol implementations can be triggered remotely over radio frequency by transmitting malformed or out-of-sequence frames. The resulting reset loop degrades communication availability and increases workload for pilots or air traffic controllers, with potential for reduced situational awareness during critical flight operations. No public exploit has been identified at time of analysis, but the radio-frequency attack vector means any actor with appropriate VHF transmitting equipment and protocol knowledge within range could attempt exploitation without authenticating to the target system.

Resource exhaustion in pypdf before 6.15.0 enables denial of service via crafted PDF files containing CID font width entries with maliciously large range values. Any application that processes untrusted PDFs using pypdf's text extraction or font parsing routines is affected, as the library iterates over attacker-controlled CID width ranges without bounds enforcement, consuming excessive CPU and memory. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.

Hono's `proxy()` function in the `hono/proxy` Proxy Helper leaks connection-scoped response headers to downstream clients by failing to strip headers named in the origin's `Connection` response field, violating RFC 9110 Section 7.6.1. Versions 4.7.0 through 4.12.33 of the npm `hono` package are affected; the function correctly removed well-known hop-by-hop headers but neglected to parse and remove the additional headers the origin declared as connection-scoped via `Connection`. No public exploit has been identified at time of analysis and exploitation is conditional on non-default origin behavior, limiting real-world priority despite the network-reachable attack vector.

Kirby CMS's REST API error handler exposes full server filesystem paths to unauthenticated remote users via unsanitized PHP exception messages. Affected are all Kirby installations on versions prior to 4.9.5 (4.x branch) and 5.0.0 through 5.5.1 (5.x branch) where the REST API has not been explicitly disabled. An attacker triggering a PHP-level error receives the raw exception message - including absolute paths such as '/var/www/kirby-site/content/' - enabling server directory enumeration that lowers the bar for chained attacks. No public exploit or CISA KEV listing has been identified at time of analysis.

Datadog Android app versions prior to 5.9.2 structurally associate authenticated users' Datadog UUIDs with Google Firebase Installation IDs on every successful login, transmitting this stable cross-session identifier - alongside crash stack traces that may include in-flight application data, internal class names, package names, and breadcrumbs - to Google's Firebase Crashlytics backend without an identifiable user consent gate or opt-out mechanism. The exposure is not triggered by an external attacker but occurs automatically during normal authenticated app usage for all affected users. No active exploitation has been identified (SSVC Exploitation: none; no CISA KEV listing), and no public exploit code exists; the primary risk is regulatory and privacy-related rather than direct technical compromise.

Plaintext SQLite database storage in the Datadog Android application exposes operationally sensitive monitoring metadata to anyone with physical access to the device or the ability to perform forensic acquisition. Two Room-managed databases - LocalNotificationDatabase and SearchRecentDatabase - store incident notification recipients, deeplinks, service names, and free-text search queries without at-rest encryption; no SQLCipher or equivalent openHelperFactory configuration was found in the codebase. Protection relies entirely on the Android application sandbox, which is insufficient for this class of data in high-risk deployment environments such as on-call engineering teams managing production infrastructure. No public exploit code exists and CISA has not added this to the KEV catalog.

Notification dismissal in the Datadog Android application (versions prior to 5.9.2) can be triggered by any zero-permission co-installed application through the improperly exported BubbleChatActivity component (CWE-926), allowing silent cancellation of the hard-coded Bits AI chat notification (ID 9201) with no identity validation of the caller or their supplied conversation_id. The impact is limited to nuisance-level denial of that specific notification and potential facilitation of in-app phishing workflows, with chat content remaining server-authentication gated and inaccessible to the attacker. SSVC assessment confirms no known active exploitation, and no public exploit code has been identified at time of analysis.

Six exported Android App Widget configuration activities in the Datadog Android application (versions prior to 5.9.2) allow a co-installed zero-permission malicious app to brute-force sequential App Widget IDs and trigger automatic Datadog session login for the victim, exposing live operational data - dashboards, SLOs, on-call schedules, incident details - as a visual side-channel. Exploitation is constrained by three simultaneous preconditions and data exfiltration is limited to screen-visible disclosure only, with no programmatic return path. No public exploit has been identified at time of analysis; SSVC rates exploitation as none with partial technical impact.

Forged on-call acknowledgment and confused-deputy execution in the Datadog Android application (versions prior to 5.9.2) allows any co-installed malicious app to silently dismiss real production incident alerts on behalf of the victim by exploiting an unguarded exported Activity with no permission check. An attacker-controlled app can supply crafted Intent extras to forge a backend Acknowledge API call using the victim's authenticated session, redirect the Datadog process into non-exported internal components, and surface a spoofed alert over the device lock screen. No public exploit has been identified at time of analysis; exploitation requires a malicious co-installed app plus a single user tap.

File and directory information exposure in SourceCodester Online Clothing Store allows unauthenticated remote attackers to retrieve Dreamweaver metadata files from the publicly accessible /_notes/ directory. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms no authentication or special preconditions are required. A publicly disclosed proof-of-concept exists (E:P), documented via a Medium article detailing directory listing and Dreamweaver metadata exposure; no confirmed active exploitation (CISA KEV) has been recorded at time of analysis.

Behavioral workflow enforcement bypass in WonderTrader up to version 0.9.9 allows remote low-privileged attackers to manipulate the getUndoneQty argument within the _undone_qty function of the Pending Order Handler component (src/WtCore/TraderAdapter.h), resulting in unauthorized integrity modification of pending order state. The CVSS 4.0 vector confirms network-accessible exploitation with low privilege requirements and no user interaction. A publicly available proof-of-concept exploit exists (E:P), though no CISA KEV listing is recorded. The vendor was notified prior to disclosure and did not respond, meaning no official patch or advisory has been released.

Netty's RedisArrayAggregator codec fails to release retained partial aggregate state when the maxElements limit is exceeded, unlike the symmetric maxNestedArrayDepth branch which correctly calls releaseAndClearDepths() before throwing. In applications that keep the channel alive after a codec exception - a common resilience pattern - an unauthenticated peer can exploit this inconsistency to keep attacker-controlled ByteBuf references pinned in Netty's pooled buffer allocator and cause subsequent messages to be consumed into the stale pre-error aggregate. A public proof-of-concept test is included in the GHSA advisory; fixed in Netty 4.1.136.Final and 4.2.16.Final with no KEV listing at time of analysis.

Use of an uninitialized variable in WonderTrader up to version 0.9.9 allows a remote low-privileged attacker to cause limited availability disruption by manipulating the m_offsetType argument within the TraderATP Cash Trade Conversion component. The flaw resides in src/Includes/WTSTradeDef.hpp and is exploitable remotely, with a public proof-of-concept available via a Feishu document. No patch has been released and the vendor has not responded to disclosure - exploitation conditions are low complexity once authentication is satisfied, making this a persistent unmitigated risk for deployments using the ATP cash trading interface.

Scheduled task configuration overwrite in Sonatype Nexus Repository 3 enables a low-privileged authenticated user - holding permission to create at least one scheduled task type - to corrupt the configuration of an unrelated existing task via mass assignment against the administrative UI. By injecting internal configuration keys into user-supplied task property values, the attacker causes the system to redirect its write operation onto a pre-existing task rather than creating a new one, disrupting or manipulating that task's behavior. No public exploit or active exploitation has been identified; vendor-released patch 3.95.0 resolves the issue.

Unverified password change in Sonatype Nexus Repository 3 allows any account holding the nexus:* permission to overwrite the administrator password by invoking an onboarding-phase endpoint that remains accessible after initial setup is complete. The endpoint enforces access using only the presence of a local onboarding artifact rather than a proper lifecycle state check, enabling a privileged-but-non-admin account to hijack the administrator credential without invalidating existing administrator sessions. No public exploit has been identified at time of analysis and Sonatype has released a fix in version 3.95.0.

Improper behavioral workflow enforcement in WonderTrader up to version 0.9.9 allows remote attackers to manipulate the FID_JYLB argument in the TraderDD::queryTrades function, causing the application to execute trading query operations in an unintended sequence. Per the CVSS 4.0 vector (AV:N/AC:H/PR:N/UI:N), exploitation is network-reachable without authentication but requires high attack complexity, limiting opportunistic abuse. A proof-of-concept exploit is publicly available (E:P), and the vendor did not respond to responsible disclosure, leaving no patch available at time of analysis.

UNC path injection in Tobit TeamDavid's Webbox link-storing endpoint (`//ServerClient_celink.htm`) forces the server to initiate outbound SMB connections to attacker-controlled hosts, leaking NTLM authentication credentials and enabling SMB relay attacks against internal systems. The unvalidated `pathname` parameter accepts arbitrary UNC paths (e.g., `\\attacker\share`), triggering Windows credential-passing behavior that exposes the server's NTLM hash. No public exploit code identified at time of analysis, though the underlying NTLM coercion technique is well-understood and documented as part of a broader audit of 22 CVEs in the David platform published by InfoGuard.

UNC path injection in TeamDavid Webbox's !ArcEntryMove archive function causes the server to initiate outbound SMB connections to attacker-controlled infrastructure, exposing the server's NTLM authentication material (Net-NTLMv2 hashes). All TeamDavid deployments through Rollout 524 are affected, with the confidentiality impact occurring on subsequent systems - the attacker's SMB listener - rather than the Webbox host itself. No public exploit has been identified at time of analysis, but the attack technique is fully commoditized via tools such as Responder and Impacket; exploitation feasibility is further complicated by a contradictory authentication requirement in the source data that warrants vendor clarification.

UNC path injection in Tobit Laboratories AG TeamDavid's Webbox messaging component allows attackers to coerce the server into initiating outbound SMB connections to attacker-controlled hosts, exposing NTLM authentication credentials. The server processes @@INCLUDE directives containing Windows UNC paths (e.g., \\Server\Share) without validation across email, fax, and SMS composition features. Captured NTLM hashes can be cracked offline or relayed to authenticate against other internal services; the CVE description explicitly states the pathname parameter vector is exploitable without authentication, conflicting with the PR:L designation in the CVSS 4.0 vector. No public exploit or CISA KEV listing has been identified at time of analysis, but this attack class (NTLM coercion via UNC injection) is well-understood and widely tooled.

Hardcoded cryptographic credentials embedded in unencrypted ZTE ZXHN F680 router firmware allow a low-privilege authenticated network attacker to extract integrity verification keys and subsequently bypass application integrity checks on the device. Seven specific firmware versions across the V9.0.10 P1, P4, and P6 branches are confirmed affected per the ZTE advisory. No public exploit identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

CAPTCHA bypass in the Simple CAPTCHA with Cloudflare Turnstile WordPress plugin before 1.42.0 allows unauthenticated network attackers to defeat anti-abuse protections on Forminator-integrated forms by exploiting a flawed validation cache keying mechanism. After solving a single legitimate Turnstile challenge, an attacker can replay token-less form submissions during the validation cache window because the cache is bound to an attacker-controlled, reusable request value rather than the one-time challenge token. A publicly available proof-of-concept exists (WPScan); this vulnerability is not currently listed in CISA KEV, and no EPSS score was provided in source data.

Payment integrity bypass in the Subscriptions for WooCommerce plugin (versions before 2.0.1) enables financial fraud by allowing substitution of an arbitrary approved PayPal order token during the WooCommerce order-received flow. The plugin captures a client-supplied token and marks any order paid solely based on a COMPLETED capture status, without verifying that the captured amount matches the order total or that the token belongs to the specific order. Unauthenticated attackers - where guest checkout is enabled - can exploit this to obtain goods or subscription access without paying the actual order price. A publicly available proof-of-concept exists; no CISA KEV listing at time of analysis.

WP Events Manager for WordPress (all versions before 2.2.5) exposes a payment notification endpoint that accepts fraudulent booking-paid confirmations from unauthenticated attackers. The plugin neither validates that an incoming payment callback originates from the configured merchant nor that the notified amount matches the booking total, enabling any remote actor to mark arbitrary bookings - including other users' bookings - as fully paid without money reaching the merchant. A publicly available exploit exists; the vulnerability is not currently listed in CISA KEV, but the AV:N/AC:L/PR:N/UI:N attack profile means exploitation requires zero privileges and trivial effort.

SELinux label manipulation via TOCTOU race condition in the policycoreutils fixfiles script allows a local low-privileged attacker to corrupt SELinux mandatory access control labels on arbitrary system files, including security-critical targets such as /etc/shadow. The flaw affects fixfiles when run in relabel or restore mode across all supported Red Hat Enterprise Linux releases (6 through 10), Red Hat Hardened Images, and OpenShift Container Platform 4. No public exploit code or active exploitation has been identified at time of analysis, and exploitation is constrained by both a required race condition win and the need for an administrator to actively invoke fixfiles.

TLS credential exposure in ZTE ZXHN F680 fiber gateway firmware allows an adjacent-network attacker to extract unencrypted cryptographic key material - classified under CWE-321 (Use of Hard-coded Cryptographic Key) - enabling potential decryption or impersonation of TLS-protected communications between the device and upstream ISP services. Seven discrete firmware versions are confirmed affected per the ENISA EUVD entry and ZTE's own advisory. No public exploit code or CISA KEV listing is confirmed at time of analysis, and the CVSS adjacency requirement and high complexity rating limit realistic exploitation to technically capable actors with local network proximity.

Root password hash exposure in ZTE F689 firmware allows a physical attacker to extract credential material stored in cleartext or weakly protected form within the device firmware image. The F689 is an ISP-deployed broadband gateway, and this vulnerability (CWE-916) means the hash protecting root-level access uses insufficient computational effort, making offline cracking feasible once extracted. No public exploit code has been identified and no active exploitation is confirmed; however, successful hash recovery grants an attacker a path to persistent root-level device compromise.

Out-of-Bounds Read in Autodesk's image handling library crashes Revit and AutoCAD when a user opens a maliciously crafted TIF file during image import. Affected products span Revit 2024, 2026, and 2027 as well as AutoCAD and AutoCAD LT 2027, all below vendor-specified fix versions. The attack is local and requires user interaction, limiting automated mass exploitation, but remains a viable denial-of-service vector in targeted scenarios against AEC professionals who routinely handle externally sourced CAD assets. No public exploit identified at time of analysis.

Reverse tabnabbing in PILOS versions 2.1.0 through 4.14.1 exposes authenticated users to session hijacking via phishing by omitting the Cross-Origin-Opener-Policy (COOP) response header on pages that open links in new browser tabs. When an authenticated user clicks a target="_blank" link within PILOS, the newly opened page retains a live window.opener reference to the original PILOS tab, allowing the destination page to silently redirect that tab to an attacker-controlled site mimicking PILOS login. No public exploit has been identified at time of analysis, and the vendor-confirmed fix is available in v4.14.1.

Uninitialized heap memory disclosure in FFmpeg's native TIFF decoder (libavcodec/tiff.c) exposes stale heap contents to any party able to retrieve decoded image output. Affected versions span 0.5 through 8.x; FFmpeg 9.0 carries the upstream fix. In server-side media pipelines that accept and return processed TIFF files - transcoding APIs, thumbnail generators, upload handlers - an attacker can craft a structurally valid Deflate-compressed TIFF strip that inflates short, causing the decoder to embed prior heap allocation remnants into the decoded output, potentially leaking sensitive in-process data. No active exploitation is confirmed (not in CISA KEV) and no standalone public exploit code was identified at time of analysis.

Uninitialized heap memory read in FFmpeg's native Screenpresso decoder (libavcodec/screenpresso.c) allows an attacker who can supply crafted SPV1-encoded video to recover stale heap contents - including userspace addresses and prior-frame data - from the process decoding the media. Affected versions span FFmpeg 3.0 through 8.x; version 9.0 resolves the issue via upstream commits and PR #23896. No active exploitation is confirmed in CISA KEV, and no public exploit code has been identified at time of analysis, but the information-disclosure primitive is particularly dangerous in persistent server-side decoding pipelines where heap residue from earlier operations may include sensitive material.

Heap memory disclosure in FFmpeg's native RSCC decoder (libavcodec/rscc.c) allows an attacker who can supply a crafted video file to expose residual heap contents - including data from prior heap allocations or previously decoded frames - to any downstream consumer of the decoded output. The flaw stems from rscc_decode_frame() calling av_image_copy_plane() without verifying that the number of decompressed bytes matches the declared tile geometry, allowing the unwritten suffix of the persistent ctx->inflated_buf to propagate silently into the output frame. All FFmpeg builds from 3.0 through 8.x are affected; no public exploit has been identified at time of analysis, and no KEV listing exists.

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data leakage through speculative execution. Fixup register state as if the Safe-RET sequence executed successfully by "emulating" it, in a manner of speaking, and avoid executing a RET instruction after returning from the interrupt.

Terminal escape sequence injection in GitHub CLI (gh) prior to version 2.97.0 allows an attacker who controls content on GitHub - gists, pull requests, releases, codespaces, API responses, skills, or agent-task output - to embed ANSI/VT escape sequences that are rendered verbatim by the victim's terminal when they run any of the affected display commands. Impact ranges from cosmetic screen manipulation (title bar spoofing, on-screen content overwrite) to, on certain terminal emulators that interpret shell-integration or hyperlink escape sequences, arbitrary command execution in the user's shell. This issue broadens the same CWE-150 class addressed by CVE-2026-45803, which patched only the `gh run view --log` path, to the full set of content-displaying subcommands. No public exploit or KEV listing is present at time of analysis, though the injection surface is wide and the fix is confirmed in v2.97.0.

GitHub CLI's `gh auth status` command in versions prior to 2.97.0 partially exposed fine-grained personal access tokens and GitHub App tokens in terminal and CI output due to a flawed masking algorithm. The defect used `strings.LastIndexByte` to find the last underscore as the masking boundary - for tokens like `github_pat_APPID_secretbody` or `ghs_APPID_JWT`, this left the middle segment (between the type prefix and the last underscore) visible in plain text. Affected token types include fine-grained PATs (`github_pat_*`), GitHub App installation tokens (`ghs_*`), user access tokens (`ghu_*`), and the Actions `GITHUB_TOKEN`; classic tokens (`gho_*`, `ghp_*`) are not affected. No public exploit is identified at time of analysis.

Session cookie theft in the DataPress (Dataverse Integration) WordPress plugin before 2.91 allows any Contributor-level user to steal session credentials from higher-privileged users such as Editors or Administrators. The plugin's template rendering feature improperly exposes the session data of users who view affected content, enabling privilege escalation via session hijacking. No public exploit code has been identified at time of analysis, but the low barrier to entry (Contributor role) makes this a realistic insider or compromised-low-privilege-account threat against WordPress sites using this plugin.

Unauthenticated information disclosure in OpenReception appointment-booking-software prior to version 1.0.5 exposes private channel metadata through the public `/api/tenants/{id}/schedule` endpoint, bypassing the `isPublic` flag that governs channel visibility in the booking UI. Any caller with a valid tenant ID can retrieve channel names, descriptions, IDs, agent associations, pause status, confirmation requirements, and computed slot availability for channels deliberately configured as internal-only - data that the product's own design intends to hide from public callers. No public exploit has been identified and the vulnerability is not listed in CISA KEV, but the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms trivial unauthenticated reachability requiring no special conditions.

Out-of-bounds heap read in llama.cpp's recurrent memory state restore path (builds b5702 through b7653) allows an attacker with write access to the slot save directory to craft a malicious slot file that triggers heap data leakage - including pointer values - into server logs, effectively defeating ASLR protections and enabling multi-stage exploitation. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalogue. An upstream fix is available as a commit to the ggml-org/llama.cpp repository, though a tagged released version past the affected build range has not been independently confirmed.

Cross-origin data leakage in Google Chrome's GPU process - caused by an integer overflow (CWE-190) - enables a remote attacker who has already achieved renderer process compromise to read data across origin boundaries by delivering a crafted HTML page. All Chrome desktop releases prior to 151.0.7922.109 are affected. No public exploit or CISA KEV listing exists at time of analysis; the chained nature of the attack (requiring a prior renderer compromise) substantially constrains real-world risk despite the broad deployment footprint of Chrome.

Uninitialized memory use in Skia, Chrome's 2D graphics engine, exposes a cross-origin data leak primitive in Google Chrome prior to 151.0.7922.109. Exploitation is constrained to attackers who have already achieved renderer process compromise - making this a second-stage, chained vulnerability rather than a standalone initial-access vector. No public exploit or active exploitation has been identified; SSVC rates this as non-automatable with partial technical impact, consistent with the low CVSS base score of 3.1.

Cross-origin data leakage in Google Chrome's Skia graphics library (versions prior to 151.0.7922.109) enables a remote attacker who has already achieved renderer process compromise to extract cross-origin data through a specially crafted HTML page. The vulnerability is classified CWE-457 (Use of Uninitialized Variable) and carries a low CVSS base score of 3.1, reflecting its dependency on a pre-existing renderer compromise as a prerequisite. No public exploit code has been identified at time of analysis, SSVC exploitation status is rated none, and a vendor-released patch is available in Chrome 151.0.7922.109.

Uninitialized GPU memory in Google Chrome on Android prior to 151.0.7922.109 exposes sensitive process memory contents to a remote attacker who has already achieved renderer process compromise. The CWE-457 flaw allows the GPU component to read and return uninitialized memory regions when processing attacker-controlled HTML, resulting in confidentiality impact bounded to the compromised process scope. No public exploit code exists and CISA SSVC rates exploitation as none at time of analysis, making this a second-stage information disclosure component rather than a standalone critical threat.

Firmware update integrity bypass in Insta InstaKNXServiceApp 1.2.3.1469 allows a remote network-positioned attacker to serve unauthenticated firmware or file lists to the application's update handler without detection. The vulnerable function CreateWebClientAndDownloadFileList fails to cryptographically verify the authenticity of data retrieved during the firmware update process (CWE-345), enabling substitution of malicious content. No patch has been released and the vendor did not respond to coordinated disclosure; no public exploit has been independently confirmed at time of analysis, though a GitHub gist linked in references may represent researcher-published proof-of-concept material.

Address bar spoofing in GNOME Epiphany 49.2 and earlier allows remote unauthenticated attackers to display a trusted domain in the browser UI while actually loading content from an attacker-controlled origin, enabling high-fidelity phishing attacks. Exploitation leverages RFC 3986 userinfo URL syntax - a crafted link such as `https://trusted.com:80@attacker.com/` causes Epiphany to render `trusted.com` in the address bar and security menus while WebKit fetches and renders `attacker.com`. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code is identified at time of analysis, though the technique requires no tooling beyond a crafted URL.

Price manipulation via client-supplied ticket values in Event Booking Manager for WooCommerce (Pro) before 5.0.3 allows unauthenticated attackers to book paid event tickets at arbitrary prices, including free. The plugin's native (non-WooCommerce) checkout flow trusts the per-ticket price submitted by the client rather than re-deriving it from the server-side event configuration - a classic business logic failure. No public exploit or CISA KEV listing has been identified at time of analysis, but the attack requires no authentication and no special preconditions beyond the affected checkout mode being in use.

Payment bypass in RegistrationMagic WordPress plugin before 6.0.9.5 enables unauthenticated attackers to finalize arbitrarily-priced paid registrations using any previously-completed PayPal capture, regardless of its amount, currency, or intended payee. The plugin's server-side verification confirms only that a PayPal capture carries COMPLETED status, entirely omitting validation that the captured amount matches the registration fee, that the payee is the site's own account, or that the capture has not already been consumed. Because captures are not deduplicated, a single low-value legitimate capture can be replayed indefinitely to enroll unlimited users in high-value paid registrations at no cost - constituting scalable financial fraud. No public exploit or CISA KEV listing has been identified at time of analysis.

Payment notification forgery in WP Hotel Booking WordPress plugin before 2.3.2 allows unauthenticated remote users to obtain confirmed hotel bookings without submitting any real payment. The plugin fails to validate two critical conditions when processing inbound payment notifications: that the notification originates from the site's own merchant account, and that the reported payment amount matches the actual booking total. An attacker can exploit this by submitting a crafted payment callback (e.g., a fake IPN-style webhook) to have any booking marked as fully paid. No public exploit code has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog.

Price manipulation in WP Hotel Booking WordPress plugin before 2.3.3 allows unauthenticated remote attackers to create confirmed hotel reservations for free or at an arbitrarily reduced price by submitting negative room quantities or manipulated cart totals. The plugin trusts client-supplied cart data without server-side validation, enabling financial fraud against any hotel or accommodation operator running the unpatched plugin. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though the attack requires no authentication and low complexity, making it trivially reproducible by any motivated attacker.

Unauthenticated payment notification forgery in the Five Star Restaurant Reservations WordPress plugin (all versions before 2.7.23) enables remote attackers to fraudulently mark arbitrary pending reservations as paid and confirmed without completing actual payment. The plugin's payment webhook handler accepts incoming IPN-style callbacks without verifying the notification's cryptographic authenticity, recipient identity, payment amount, transaction status, or binding to a specific booking - every control that prevents payment bypass is absent. No public exploit has been identified and this vulnerability is not listed in CISA KEV, but the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates the attack is network-accessible, requires zero privileges and zero user interaction, making it accessible to unsophisticated actors.

Unauthorized membership activation in the Simple Membership WordPress plugin (before version 4.7.7) lets unauthenticated attackers obtain paid membership access at no cost by exploiting the absence of PayPal merchant account verification during payment notification processing. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms low-complexity, unauthenticated network exploitation requiring no user interaction. No public exploit or active exploitation has been identified at time of analysis; a vendor-released patch (version 4.7.7) is available.

Server-side validation bypass in the Easy Booking WordPress plugin (all versions before 3.5.0) allows unauthenticated remote attackers to circumvent minimum booking duration enforcement during cart addition and price calculation. Malicious users can submit manipulated add-to-cart requests with durations shorter than the merchant-configured minimums, completing orders at underpriced totals that the merchant is then expected to fulfill at a financial loss. No public exploit has been identified at time of analysis, though the unauthenticated, low-complexity attack vector makes this trivially reproducible by any remote attacker with HTTP access to the affected site.

Payment fraud via forged Worldpay webhooks affects the GetPaid WordPress plugin before version 2.8.55, allowing unauthenticated remote attackers to mark pending invoices as paid without making any actual payment. The plugin fails to verify the authenticity of incoming Worldpay Instant Payment Notifications (IPNs), meaning any attacker who can reach the webhook endpoint and reconstruct a plausible notification payload can manipulate invoice status. No public exploit has been identified at time of analysis, but the business logic impact - obtaining goods or services without payment - is direct and immediately harmful to affected merchants.

WP Travel Engine WordPress plugin before 6.8.2 allows unauthenticated attackers to fraudulently mark travel bookings as fully paid by exploiting missing PayPal IPN (Instant Payment Notification) validation. The plugin neither verifies that the incoming payment notification was directed to the site's configured merchant account nor confirms that the paid amount matches the booking total, enabling attackers to complete a minimal token payment to their own PayPal account and trigger a spoofed notification that the plugin blindly accepts. With a CVSS 5.3 and no public exploit or KEV listing at time of analysis, the technical severity appears moderate, but the business impact - obtaining travel services without payment - is materially higher than the base score reflects.

Request smuggling primitive in h2 (pip/h2) versions 4.4.0 and below enables network-accessible attackers to craft HTTP/2 header blocks containing duplicate Host headers that the library forwards verbatim to consuming applications. When a consumer downgrades the HTTP/2 request to HTTP/1.1 - a common pattern in reverse proxy and gateway architectures - the resulting HTTP/1.1 request carries two Host header lines, violating RFC 7230 and creating an ambiguity that downstream servers may interpret differently, enabling cache poisoning, security control bypass, or session hijacking. No active exploitation confirmed (not in CISA KEV); no public exploit code identified at time of analysis; fix is available in v4.4.1.

Out-of-bounds heap read in the node-re2 npm package (versions <= 1.26.0) exposes up to 3 bytes of adjacent heap memory per call to JavaScript when Buffer arguments ending in a truncated multi-byte UTF-8 lead byte are passed to replace() or split(). The overread is deterministic, requires no heap grooming, and a working proof-of-concept is included in the GitHub advisory. Applications that pass only strings - not Buffers - are entirely unaffected, but those that process untrusted Buffer input through re2 are at real risk of incremental heap disclosure. No CISA KEV listing was identified; this is a library-layer flaw fixed in re2@1.26.1.

Denial-of-service in Mermaid's radar-beta diagram renderer allows an attacker who can supply diagram input to trigger unbounded CPU and memory consumption by setting the `ticks` parameter to an arbitrarily large integer. Affected npm package versions >= 11.6.0 and < 11.16.1 perform no upper-bound validation on the `ticks` value, causing the JavaScript process - whether a browser tab or a server-side renderer - to freeze indefinitely until the OS terminates it due to OOM. A proof-of-concept is publicly available in the advisory. No KEV listing exists and no EPSS score is provided.

Prototype pollution in the Mermaid JavaScript diagramming library (npm/mermaid) exposes applications to JavaScript Object prototype manipulation when attacker-controlled data is incorrectly passed to configuration APIs. The `assignWithDepth` deep-merge helper used by `mermaid.initialize`, `mermaidAPI.setConfig`, and `mermaidAPI.updateSiteConfig` fails to sanitize `__proto__` keys, allowing an attacker to corrupt the shared Object prototype if a host application forwards user-supplied input into these configuration entry points - a usage pattern explicitly outside Mermaid's documented API contract. No public exploit has been identified and no CISA KEV listing exists; vendor risk assessment is low due to the non-standard application integration pattern required for exploitation.

Unsafe method invocation via Antlers template resolution in Statamic CMS enables unauthenticated remote attackers to destroy content and stored assets on affected installations. Sites running statamic/cms below 5.74.1 or in the 6.x line below 6.24.0 are vulnerable when their templates incorporate user-supplied input into Antlers template resolution - a deployment pattern present on developer-facing or dynamic sites. No public exploit or CISA KEV listing is identified at time of analysis; the CVSS AC:H rating reflects the required site-configuration precondition, tempering real-world exposure despite the destructive impact.