---METADATA---
VENDOR: Spring
PRODUCT: Boot
AFFECTED_VERSIONS: 4.0.0–4.0.5
---END_METADATA---

Description Summary:
A default web security misconfiguration in Spring Boot 4.0.0–4.0.5 allows unauthenticated access to all endpoints in specific servlet-based applications.

Executive Summary:
A critical security misconfiguration in Spring Boot 4.0.0–4.0.5 allows unauthenticated attackers to bypass security controls and access all application endpoints.

Vulnerability Details

CVE-ID: CVE-2026-40976

Affected Software: Spring Boot

Affected Versions: 4.0.0–4.0.5

Vulnerability: This is a security bypass vulnerability resulting from ineffective default web security. It affects servlet-based applications that lack custom Spring Security configurations and rely solely on default settings while using spring-boot-actuator-autoconfigure.

Business Impact

With a CVSS score of 9.1, this vulnerability poses a severe risk of unauthorized access to sensitive application data and management endpoints. It can lead to complete exposure of backend services and potential data breaches, depending on the information exposed by the application's endpoints.

Remediation Plan

Immediate Action: Upgrade to Spring Boot version 4.0.6 or later immediately.

Proactive Monitoring: Review application access logs for unusual requests to sensitive endpoints and audit existing security configurations.

Compensating Controls: Implement custom Spring Security filters to explicitly secure all endpoints until the application can be updated.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 28, 2026, there is no public information indicating active exploitation. However, the nature of the flaw makes it a high-risk target for automated scanning.

Analyst Recommendation

Upgrade to the patched version of Spring Boot as soon as possible. Organizations should also review their application security posture to ensure that proper authentication and authorization controls are in place for all endpoints.

---METADATA---
VENDOR: Cloud Foundry
PRODUCT: UAA (User Account and Authentication)
AFFECTED_VERSIONS: uaa_release v76.12.0-v78.12.0; CF Deployment v30.0.0-v56.0.0
---END_METADATA---

Description Summary:
Cloud Foundry UAA inadvertently exposes private EC keys via the public /token_keys endpoint, threatening JWT integrity.

Executive Summary:
A critical vulnerability in Cloud Foundry UAA exposes private Elliptic Curve keys, allowing attackers to forge JWT tokens and bypass authentication.

Vulnerability Details

CVE-ID: CVE-2026-40965

Affected Software: Cloud Foundry UAA

Affected Versions: uaa_release v76.12.0 through v78.12.0; CF Deployment v30.0.0 through v56.0.0

Vulnerability: The public /token_keys endpoint, intended for public key distribution, incorrectly includes private Elliptic Curve (EC) key components, enabling attackers to sign their own JWTs.

Business Impact

Exposure of signing keys allows an attacker to forge identity tokens, granting them complete, unauthorized access to any system relying on the UAA for authentication. With a CVSS score of 10.0, this represents an absolute failure of the authentication infrastructure.

Remediation Plan

Immediate Action: Update UAA to v78.13.0 or later, or upgrade the CF Deployment to v56.1.0 or later.

Proactive Monitoring: Monitor logs for anomalous authentication requests and verify that only authorized keys are being used for token validation.

Compensating Controls: Immediately rotate all EC keys used for JWT signing and invalidate all currently issued tokens to prevent further unauthorized access.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jun 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This is a critical authentication vulnerability. Beyond patching, it is essential to rotate all affected signing keys immediately, as the potential for token forgery effectively invalidates the security of the entire identity provider service.

---METADATA---
VENDOR: Luanti
PRODUCT: Luanti
AFFECTED_VERSIONS: Versions before 5.15.2
---END_METADATA---

Description Summary:
Luanti versions before 5.15.2 are vulnerable to a Lua sandbox escape when using LuaJIT, allowing a crafted mod to execute arbitrary code.

Executive Summary:
A critical sandbox escape vulnerability in Luanti allows attackers to bypass security restrictions and achieve code execution through malicious mod files.

Vulnerability Details

CVE-ID: CVE-2026-40959

Affected Software: Luanti (formerly Minetest)

Affected Versions: Versions before 5.15.2

Vulnerability: This is a sandbox escape vulnerability occurring when the software utilizes LuaJIT. An attacker can supply a specially crafted mod to break out of the intended execution environment, leading to unauthorized system-level operations.

Business Impact

With a CVSS score of 9.3, this vulnerability poses a severe risk to organizational assets. Successful exploitation could allow a remote attacker to gain control over the underlying host system, leading to total data compromise, loss of service integrity, and potential lateral movement within the network.

Remediation Plan

Immediate Action: Upgrade all Luanti installations to version 5.15.2 or later immediately.

Proactive Monitoring: Review mod installation logs and monitor for unusual server-side process activity or unexpected file system modifications.

Compensating Controls: Restrict the ability to load third-party or untrusted mods to authorized personnel only until the software is patched.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw and the high CVSS score, the potential for exploitation is high; immediate patching is strongly advised.

Analyst Recommendation

The severity of this flaw cannot be overstated, as it directly undermines the isolation mechanism required for safe mod execution. Administrators must prioritize updating their Luanti instances to version 5.15.2 or higher to mitigate the risk of full system compromise.

---METADATA---
VENDOR: Absolute Security
PRODUCT: Secure Access
AFFECTED_VERSIONS: 0 up to (excluding) 14.55
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A privilege misconfiguration in the Absolute Security Secure Access installer for Windows allows a local user to escalate privileges to a higher level.

Executive Summary:
A high-severity privilege misconfiguration in the Absolute Security Secure Access installer for Windows enables local users to perform unauthorized privilege escalation.

Vulnerability Details

CVE-ID: CVE-2026-40952

Affected Software: Absolute Security Secure Access

Affected Versions: 0 up to (excluding) 14.55

Vulnerability: The vulnerability consists of a privilege misconfiguration within the software installer. It requires an attacker to have local access and low privileges to exploit the flaw, potentially resulting in full system control.

Business Impact

An attacker who successfully exploits this vulnerability can gain elevated privileges on the host machine, leading to complete system compromise. Given the CVSS score of 8.5, this flaw poses a severe threat to the confidentiality, integrity, and availability of sensitive data residing on affected Windows endpoints.

Remediation Plan

Immediate Action: Upgrade the Absolute Security Secure Access software to version 14.55 or later to resolve the installer-related privilege misconfiguration.

Proactive Monitoring: Review Windows system logs for unexpected privilege escalation events, such as unauthorized account creation or the execution of administrative tasks by standard users.

Compensating Controls: Restrict local user access to the affected workstations and limit the ability of non-administrative users to execute installers or modify system-level configurations.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Because this requires local access, the attack surface is limited to users who have already gained a foothold on the local system.

Analyst Recommendation

This is a critical security update for organizations utilizing the Secure Access platform. Security teams should ensure that all Windows clients and servers are updated to the specified version to prevent local privilege escalation. Timely patching is essential to maintain the security posture of the endpoint environment.

---METADATA---
VENDOR: realmag777
PRODUCT: FOX – Currency Switcher Professional for WooCommerce
AFFECTED_VERSIONS: 0 through 1.4.5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The FOX – Currency Switcher plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the 'admin_head' function.

Executive Summary:
A missing capability check in the FOX – Currency Switcher Professional for WooCommerce plugin allows authenticated users to trigger unauthorized data loss.

Vulnerability Details

CVE-ID: CVE-2026-4094

Affected Software: FOX – Currency Switcher Professional for WooCommerce

Affected Versions: 0 through 1.4.5

Vulnerability: The plugin fails to perform an adequate authorization check (CWE-862) on the 'admin_head' function. This allows an authenticated user, even with low privileges, to access administrative functions and perform unauthorized actions, such as data deletion.

Business Impact

This vulnerability is rated at 8.1 (High) and poses a significant risk to the availability and integrity of the e-commerce store. An attacker could intentionally trigger data loss, resulting in potential downtime, loss of sales, and damage to the store's reputation.

Remediation Plan

Immediate Action: Update the "FOX – Currency Switcher Professional for WooCommerce" plugin to version 1.4.6 or later immediately.

Proactive Monitoring: Review administrative audit logs for suspicious activity or unexpected changes initiated by low-privileged user accounts.

Compensating Controls: Use a Web Application Firewall (WAF) to block unauthorized requests targeting the plugin's administrative endpoints if an immediate update is not feasible.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 16, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is straightforward, requiring only low-level authenticated access to trigger.

Analyst Recommendation

Given the potential for data loss, site administrators must update the FOX – Currency Switcher plugin to the latest version as a matter of urgency. Additionally, review all current user roles and capabilities to ensure the principle of least privilege is strictly enforced across the WordPress installation.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: Prior to 3.1.0
---END_METADATA---

Description Summary:
Flowise prior to 3.1.0 is vulnerable to OS command injection due to unsafe serialization of stdio commands in the MCP adapter, allowing authenticated attackers to execute arbitrary commands.

Executive Summary:
An authenticated command injection vulnerability in Flowise allows attackers to execute arbitrary code on the underlying host OS.

Vulnerability Details

CVE-ID: CVE-2026-40933

Affected Software: Flowise

Affected Versions: Prior to 3.1.0

Vulnerability: The vulnerability exists in the "Custom MCP" configuration interface, where insufficient input sanitization allows an authenticated attacker to inject malicious arguments into stdio commands, bypassing existing validation checks.

Business Impact

Successful exploitation grants an attacker full control over the underlying server, enabling data exfiltration, ransomware deployment, or complete system takeover. With a CVSS score of 9.9, this vulnerability represents a critical threat to the confidentiality, integrity, and availability of the host environment.

Remediation Plan

Immediate Action: Upgrade Flowise to version 3.1.0 or later immediately to address the command injection flaw.

Proactive Monitoring: Audit logs for suspicious process creation or unusual command executions originating from the Flowise service account.

Compensating Controls: Implement strict network segmentation and ensure the application runs with the least-privilege principle to contain potential breaches.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the ease of command injection, the potential for exploitation is high.

Analyst Recommendation

This vulnerability presents a severe risk to infrastructure integrity. Administrators should apply the 3.1.0 update immediately and conduct a thorough review of the application's configuration to ensure no malicious MCP servers were added prior to the patch.

---METADATA---
VENDOR: WWBN
PRODUCT: AVideo
AFFECTED_VERSIONS: 29.0 and prior
---END_METADATA---

Description Summary:
A WebSocket-based cross-site scripting (XSS) vulnerability in the AVideo YPTSocket plugin allows unauthenticated attackers to achieve universal account takeover.

Executive Summary:
An unauthenticated XSS vulnerability in the WWBN AVideo YPTSocket plugin allows attackers to remotely execute JavaScript in the context of other users, leading to full account takeover.

Vulnerability Details

CVE-ID: CVE-2026-40911

Affected Software: WWBN AVideo

Affected Versions: 29.0 and prior

Vulnerability: The YPTSocket server relays unsanitized JSON messages to connected clients, which then execute the malicious payload via eval() sinks in the client-side script.

Business Impact

With a CVSS score of 10.0, this is a critical vulnerability. An attacker can hijack administrative sessions, steal sensitive user data, and execute privileged actions across the platform, resulting in total loss of platform integrity and trust.

Remediation Plan

Immediate Action: Apply the fix provided in commit c08694bf6264eb4decceb78c711baee2609b4efd or update to the latest patched version.

Proactive Monitoring: Monitor WebSocket traffic for anomalous JSON messages containing suspicious msg or callback fields.

Compensating Controls: If patching is delayed, consider disabling the YPTSocket plugin entirely to mitigate the risk of remote code execution within user browsers.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is exceptionally dangerous due to its unauthenticated nature and the ability to target multiple users simultaneously. Administrators must prioritize the application of the vendor-supplied fix to prevent widespread account compromise.

---METADATA---
VENDOR: ElectricSQL
PRODUCT: Electric
AFFECTED_VERSIONS: 1.1.12 to before 1.5.0
---END_METADATA---

Description Summary:
ElectricSQL is vulnerable to error-based SQL injection via the /v1/shape API, allowing authenticated users to read, modify, or destroy database contents.

Executive Summary:
An authenticated SQL injection vulnerability in the ElectricSQL sync engine allows attackers to perform full database manipulation.

Vulnerability Details

CVE-ID: CVE-2026-40906

Affected Software: ElectricSQL Electric

Affected Versions: 1.1.12 to before 1.5.0

Vulnerability: The vulnerability resides in the order_by parameter of the /v1/shape API, where insufficient validation allows an authenticated user to inject malicious SQL queries into the underlying PostgreSQL database.

Business Impact

With a CVSS score of 9.9, this vulnerability allows an authenticated attacker to bypass all database access controls. This results in a high risk of data destruction, unauthorized data exfiltration, and full database compromise, which could lead to severe operational disruption and regulatory non-compliance.

Remediation Plan

Immediate Action: Upgrade ElectricSQL to version 1.5.0 or later to patch the vulnerable API endpoint.

Proactive Monitoring: Examine database audit logs for anomalous query patterns or unexpected data modification attempts.

Compensating Controls: Enforce strict API authentication and rate-limiting, and ensure the database service account operates with the minimum required privileges.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability represents a critical threat to database integrity. Given that the impact includes the ability to destroy data, administrators must prioritize updating to version 1.5.0 and perform an immediate review of database access logs for signs of suspicious activity.

---METADATA---
VENDOR: Chartbrew
PRODUCT: Chartbrew
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A vulnerability in Chartbrew, an open-source data visualization tool, could potentially be leveraged by attackers to compromise connected data sources.

Executive Summary:
Chartbrew contains a high-severity security flaw that poses a risk to connected database and API environments.

Vulnerability Details

CVE-ID: CVE-2026-40904

Affected Software: Chartbrew

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the Chartbrew web application, which facilitates connections to external data providers. The flaw could potentially allow attackers to bypass intended access controls during the data visualization and retrieval process.

Business Impact

With a CVSS score of 8.1, this vulnerability is classified as high risk. If exploited, an attacker could potentially gain unauthorized access to sensitive information stored within connected databases or manipulate the data used for critical business reporting, leading to significant operational and data integrity risks.

Remediation Plan

Immediate Action: Apply the latest security updates provided by the vendor to address the identified vulnerability.

Proactive Monitoring: Monitor database query logs for anomalous or unauthorized access requests originating from the Chartbrew application server.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter malicious requests and restrict access to the Chartbrew administrative interface to trusted IP addresses only.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams must treat this vulnerability as a high priority. Ensure that the most recent security patches are deployed across all Chartbrew instances to mitigate the risk of unauthorized data exposure.

---METADATA---
VENDOR: GitHub
PRODUCT: goshs
AFFECTED_VERSIONS: Prior to 2.0.0-beta.6
---END_METADATA---

Description Summary:
The goshs SimpleHTTPServer is affected by an ArtiPACKED vulnerability that can lead to the unauthorized leakage of GITHUB_TOKEN credentials via workflow artifacts.

Executive Summary:
A credential leakage vulnerability in goshs allows unauthorized access to sensitive GITHUB_TOKEN credentials through workflow artifacts.

Vulnerability Details

CVE-ID: CVE-2026-40903

Affected Software: GitHub goshs

Affected Versions: Prior to 2.0.0-beta.6

Vulnerability: The "ArtiPACKED" vulnerability allows for the inadvertent exposure of sensitive environment tokens, even if those tokens are not explicitly stored in the source code repository.

Business Impact

Leakage of the GITHUB_TOKEN can provide attackers with unauthorized access to private repositories, workflow secrets, and deployment environments. Given the CVSS score of 9.1, this vulnerability poses a significant risk to the entire software supply chain and organizational development security.

Remediation Plan

Immediate Action: Upgrade goshs to version 2.0.0-beta.6 or later and immediately rotate any GITHUB_TOKENs that were accessible by the affected versions.

Proactive Monitoring: Audit CI/CD logs for unauthorized access and review artifact storage for potential data leakage.

Compensating Controls: Implement strict permissions on repository artifacts and enforce the use of short-lived tokens where possible.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the sensitive nature of the leaked information, the potential for exploitation is high.

Analyst Recommendation

Security teams must treat this as a high-priority incident. Beyond applying the software update, it is critical to assume that existing tokens may have been compromised and to perform a full credential rotation across all affected workflows.

---METADATA---
VENDOR: Unknown
PRODUCT: Math
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
A high-severity vulnerability has been identified in a Math-related software component, posing a significant risk to systems that rely on this library for calculations.

Executive Summary:
A critical security flaw has been reported in a Math software component, which could lead to severe system impacts if exploited.

Vulnerability Details

CVE-ID: CVE-2026-40897

Affected Software: Unknown Math component

Affected Versions: See vendor advisory for affected versions

Vulnerability: The vulnerability relates to a Math-focused software package. Without specific technical details, the CVSS score of 8.8 suggests a serious flaw, likely involving improper input handling or memory management during complex mathematical operations, which could be triggered by remote or local attackers.

Business Impact

The CVSS score of 8.8 reflects a high-severity risk. Exploitation of mathematical libraries can lead to application crashes, data corruption, or potential code execution, which could disrupt financial, scientific, or infrastructure-related applications relying on these calculations.

Remediation Plan

Immediate Action: Identify the specific "Math" software in your environment and check vendor sources for security patches. Update to the latest version immediately.

Proactive Monitoring: Review application logs for unexpected errors or crashes occurring during mathematical processing tasks.

Compensating Controls: Run applications utilizing the affected library with the least privilege necessary to minimize the impact of a potential compromise.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Administrators must investigate their software stacks for any Math-related libraries and ensure they are patched. Given the high CVSS score, treat this as a priority update once the specific vendor advisory is identified.

---METADATA---
VENDOR: Gotenberg
PRODUCT: Gotenberg
AFFECTED_VERSIONS: < 8.31.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
Gotenberg is susceptible to path traversal and improper input validation, allowing external control over file paths used by the API.

Executive Summary:
An unauthenticated vulnerability in the Gotenberg API allows for arbitrary file path manipulation, posing a significant risk to system security.

Vulnerability Details

CVE-ID: CVE-2026-40893

Affected Software: Gotenberg

Affected Versions: < 8.31.0

Vulnerability: This vulnerability (CWE-73, CWE-184) stems from the external control of file names or paths and incomplete input validation. The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates the vulnerability is fully automatable and does not require authentication.

Business Impact

Successful exploitation allows an attacker to manipulate file paths, which could lead to unauthorized file access, overwriting critical system files, or information disclosure. With a CVSS score of 8.2, the potential for unauthorized API usage in an enterprise environment is substantial.

Remediation Plan

Immediate Action: Upgrade to the latest version of the Gotenberg API. If a specific patch version is not yet available, restrict API access at the network level.

Proactive Monitoring: Monitor API access logs for anomalous file path requests or attempts to traverse directories outside of intended working folders.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block path traversal sequences (e.g., ../) in API input parameters.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of May 15, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible due to the lack of required authentication.

Analyst Recommendation

The presence of a proof-of-concept elevates the risk profile for this vulnerability. Administrators should immediately evaluate the exposure of their Gotenberg instances and apply security updates or implement strict WAF filtering to prevent exploitation.

---METADATA---
VENDOR: Vendure
PRODUCT: Vendure
AFFECTED_VERSIONS: 1.7.4 through 3.6.1
---END_METADATA---

Description Summary:
An unauthenticated SQL injection vulnerability in the Vendure Shop API allows remote attackers to execute arbitrary SQL commands against the backend database.

Executive Summary:
An unauthenticated SQL injection vulnerability in the Vendure Shop API permits remote attackers to execute arbitrary database queries, leading to potential unauthorized data access or modification.

Vulnerability Details

CVE-ID: CVE-2026-40887

Affected Software: Vendure

Affected Versions: 1.7.4 through 3.6.1

Vulnerability: Input validation failure in the Shop API allows unauthenticated users to inject malicious SQL into query string parameters, which are processed without sufficient sanitization.

Business Impact

This vulnerability carries a CVSS score of 9.1, indicating a critical risk to business operations. Exploitation could result in the exfiltration of sensitive customer data, unauthorized administrative access, or complete database corruption, causing significant reputational and operational harm.

Remediation Plan

Immediate Action: Upgrade to versions 2.3.4, 3.5.7, or 3.6.2 depending on your current deployment branch.

Proactive Monitoring: Review database query logs for syntax errors, unexpected union selects, or signs of reconnaissance activity targeting the Vendure Shop API.

Compensating Controls: Apply the provided vendor hotfix to the RequestContextService to validate languageCode inputs, or implement a WAF rule to block suspicious SQL injection patterns in query strings.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the ease of exploitation and the potential for total database compromise, organizations must apply the provided patches or hotfixes immediately. Ensure all database backends (PostgreSQL, MySQL, SQLite) are protected by the updated validation logic.

---METADATA---
VENDOR: goshs
PRODUCT: goshs
AFFECTED_VERSIONS: Prior to 2.0.0-beta.6
---END_METADATA---

Description Summary:
An SFTP authentication bypass in goshs allows unauthenticated network attackers to access files without a password when specific configurations are used.

Executive Summary:
An SFTP authentication bypass in the goshs SimpleHTTPServer allows unauthenticated attackers to access files without credentials, representing a critical security risk.

Vulnerability Details

CVE-ID: CVE-2026-40884

Affected Software: goshs (SimpleHTTPServer)

Affected Versions: Prior to 2.0.0-beta.6

Vulnerability: When configured with empty-username basic-auth and the -sftp flag, the server fails to initialize an SFTP password handler, effectively disabling authentication for the SFTP service.

Business Impact

The CVSS score of 9.8 reflects the severity of this access control failure. An attacker can remotely access the entire filesystem reachable by the goshs service, leading to full data exfiltration and potential compromise of host integrity.

Remediation Plan

Immediate Action: Upgrade to version 2.0.0-beta.6 or later immediately to resolve the SFTP authentication bypass.

Proactive Monitoring: Inspect SFTP access logs for connections originating from unexpected IP addresses or connections that successfully authenticate despite invalid or empty credentials.

Compensating Controls: If upgrading is not immediately feasible, disable the SFTP service or restrict network access to the server to prevent unauthorized connections.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is a significant oversight in authentication logic. Users of goshs should update to 2.0.0-beta.6 immediately to ensure that SFTP access is correctly protected by password verification.

---METADATA---
VENDOR: Apache
PRODUCT: Camel
AFFECTED_VERSIONS: 3.0.0 before 4.14.7, 4.15.0 before 4.18.2, 4.19.0 before 4.20.0
CONFIDENCE: high
MISSING: exploit_status
---END_METADATA---

Description Summary:
Apache Camel’s JMS components are vulnerable to remote code execution due to insecure deserialization of ObjectMessage payloads when mapJmsMessage is enabled.

Executive Summary:
An insecure deserialization vulnerability in Apache Camel JMS components allows attackers to achieve remote code execution by publishing crafted payloads to a message queue.

Vulnerability Details

CVE-ID: CVE-2026-40860

Affected Software: Apache Camel

Affected Versions: 3.0.0 before 4.14.7, 4.15.0 before 4.18.2, 4.19.0 before 4.20.0

Vulnerability: The application deserializes JMS ObjectMessage payloads without adequate filtering or allowlisting, allowing an attacker to trigger a deserialization gadget chain on the classpath.

Business Impact

This critical vulnerability (CVSS 9.8) enables remote code execution, which can be leveraged to gain full control over the application server. Any organization using Apache Camel as a JMS consumer is at significant risk of total system compromise if an attacker can reach the message queue.

Remediation Plan

Immediate Action: Upgrade to version 4.20.0, 4.14.7, or 4.18.2, depending on the specific release stream in use.

Proactive Monitoring: Monitor JMS traffic for suspicious or malformed ObjectMessage payloads and review application logs for unexpected deserialization errors.

Compensating Controls: Implement strict network-level access controls for the message broker to ensure only trusted sources can publish messages to the consumed queues.

Exploitation Status

Public Exploit Available: Not specified

Analyst Notes: As of Apr 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The reliance on default settings like mapJmsMessage significantly expands the attack surface for this vulnerability. Organizations must prioritize upgrading their Apache Camel dependencies to versions that enforce secure deserialization practices to prevent unauthorized code execution.

---METADATA---
VENDOR: Apache
PRODUCT: Camel
AFFECTED_VERSIONS: 4.0.0 up to (excluding) 4.14.8, 4.15.0 up to (excluding) 4.18.3, 4.19.0 up to (excluding) 4.20.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
Apache Camel is susceptible to an untrusted Java deserialization vulnerability, which could allow an attacker to achieve full system compromise.

Executive Summary:
A severe deserialization vulnerability in Apache Camel presents a critical risk, enabling unauthenticated remote attackers to achieve total technical impact.

Vulnerability Details

CVE-ID: CVE-2026-40859

Affected Software: Apache Camel

Affected Versions: 4.0.0 up to (excluding) 4.14.8, 4.15.0 up to (excluding) 4.18.3, 4.19.0 up to (excluding) 4.20.0

Vulnerability: This vulnerability involves the deserialization of untrusted data, allowing an attacker to manipulate serialized objects. The vulnerability is network-accessible and requires no authentication, though it is categorized as having high complexity for exploitation.

Business Impact

The CVSS score of 8.1 (High) underscores the severity of this issue, as it permits full technical impact on the affected system. Exploitation could lead to unauthorized data access, modification, or complete service disruption, causing significant operational and reputational damage.

Remediation Plan

Immediate Action: Update Apache Camel instances to the patched versions (4.14.8, 4.18.3, or 4.20.0) as documented in the official Apache security release.

Proactive Monitoring: Review enterprise integration patterns and service logs for signs of anomalous deserialization activity or unexpected remote connections.

Compensating Controls: Utilize a Web Application Firewall (WAF) to inspect incoming traffic for malicious serialized objects and enforce strict input validation policies.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Apache Camel is a core integration component in many enterprise environments, making this vulnerability particularly dangerous. Security teams must prioritize patching this flaw to prevent remote attackers from leveraging deserialization weaknesses to gain control over middleware infrastructure.

---METADATA---
VENDOR: MB connect line, Helmholz
PRODUCT: mbNET, mbNET.rokey, mbNET.mini, REX200/250, REX100
AFFECTED_VERSIONS: MB connect line mbNET/mbNET.rokey: 0.0.0 through 8.4.4; mbNET.mini: 0.0.0 through 3.0.2; Helmholz REX200/250: 0.0.0 through 8.4.4; REX100: 0.0.0 through 3.0.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A local input validation vulnerability in the cfgparser component allows a local attacker to achieve code execution via a maliciously crafted file on a USB device.

Executive Summary:
A critical input validation flaw in multiple MB connect line and Helmholz industrial gateway products permits local code execution via crafted USB storage.

Vulnerability Details

CVE-ID: CVE-2026-40851

Affected Software: MB connect line (mbNET, mbNET.rokey, mbNET.mini) and Helmholz (REX200/250, REX100)

Affected Versions: MB connect line mbNET/mbNET.rokey: 0.0.0 through 8.4.4; mbNET.mini: 0.0.0 through 3.0.2; Helmholz REX200/250: 0.0.0 through 8.4.4; REX100: 0.0.0 through 3.0.2

Vulnerability: This is an improper validation of input (CWE-1287) vulnerability within the cfgparser. The vulnerability allows an attacker with local physical access to trigger a confusion attack using a specially crafted file on a USB stick.

Business Impact

Successful exploitation allows an attacker to execute arbitrary code with the privileges of the affected service. Given the CVSS score of 8.4, this poses a high risk to operational technology (OT) environments, potentially leading to unauthorized system control, loss of process integrity, or complete device compromise.

Remediation Plan

Immediate Action: Update the affected devices to the latest firmware versions provided by the respective vendors (MB connect line or Helmholz) as detailed in the official security advisory (VDE-2026-054).

Proactive Monitoring: Restrict physical access to USB ports on industrial hardware and monitor logs for unexpected configuration parsing errors or unauthorized file system operations.

Compensating Controls: Disable USB functionality at the kernel or hardware level if the feature is not required for operational tasks to prevent the use of malicious storage media.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of May 29, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability requires physical proximity, which serves as a significant constraint for potential attackers.

Analyst Recommendation

Due to the severity of this code execution flaw, users should prioritize firmware updates for all listed industrial gateway devices. Physical security controls should be audited to ensure that unauthorized personnel cannot interact with device USB ports.

---METADATA---
VENDOR: Saleswonder LLC
PRODUCT: WebinarIgnition
AFFECTED_VERSIONS: Through 4.08.253
---END_METADATA---

Description Summary:
Saleswonder LLC's WebinarIgnition plugin for WordPress is vulnerable to Blind SQL Injection, allowing unauthenticated attackers to extract database information.

Executive Summary:
A critical Blind SQL Injection vulnerability in the Saleswonder LLC WebinarIgnition plugin allows unauthenticated attackers to extract sensitive information from the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-40797

Affected Software: Saleswonder LLC WebinarIgnition

Affected Versions: Through 4.08.253

Vulnerability: This is a Blind SQL Injection vulnerability where the application fails to properly neutralize special elements in SQL commands, allowing an attacker to manipulate queries and retrieve data from the database.

Business Impact

With a CVSS score of 9.3, this vulnerability poses a severe risk of data breach. An attacker can systematically extract user data, credentials, and potentially other sensitive application information, leading to significant reputational damage and regulatory compliance issues.

Remediation Plan

Immediate Action: Update to the latest version of the WebinarIgnition plugin. If no patch is available, deactivate and remove the plugin until a fix can be verified.

Proactive Monitoring: Monitor web server logs for suspicious SQL injection patterns, such as unexpected use of UNION, SELECT, or WAITFOR commands.

Compensating Controls: Implement a Web Application Firewall (WAF) with SQL injection protection rules enabled to block malicious payloads targeting the plugin.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the ease with which SQL injection can be automated, this vulnerability is a high-priority threat. Organizations should update immediately and review database access logs to ensure no unauthorized data extraction has occurred.

---METADATA---
VENDOR: GeekyBot
PRODUCT: GeekyBot Plugin
AFFECTED_VERSIONS: GeekyBot <= 1.2.2
---END_METADATA---

Description Summary:
The GeekyBot WordPress plugin is susceptible to an unauthenticated arbitrary file upload vulnerability, which can lead to remote code execution.

Executive Summary:
An unauthenticated arbitrary file upload vulnerability in the GeekyBot plugin allows attackers to upload malicious files, posing a critical risk of full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-40772

Affected Software: GeekyBot

Affected Versions: GeekyBot <= 1.2.2

Vulnerability: This vulnerability allows an unauthenticated attacker to upload arbitrary files to the server, which can subsequently be executed to achieve remote code execution (RCE) on the underlying host.

Business Impact

With a maximum CVSS score of 10.0, this is a critical vulnerability. Successful exploitation grants an attacker complete control over the affected server, enabling them to install backdoors, steal sensitive information, or use the server for further malicious activities, resulting in a total security failure.

Remediation Plan

Immediate Action: Update the GeekyBot plugin to version 1.2.3 or later immediately.

Proactive Monitoring: Scan the web server's upload directories for unauthorized files or suspicious scripts that may have been uploaded via this vector.

Compensating Controls: Configure the web server to restrict file execution permissions in upload directories and deploy a WAF to block unauthorized file upload requests.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability constitutes the highest level of risk. Immediate action is required to patch the software and perform a security audit of the affected server to ensure no malicious files have already been introduced.

---METADATA---
VENDOR: Divi
PRODUCT: Contact Form Extender for Divi
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An unauthenticated arbitrary file deletion vulnerability exists in the Contact Form Extender for Divi plugin, allowing remote attackers to remove files from the server.

Executive Summary:
The Contact Form Extender for Divi plugin contains an unauthenticated file deletion vulnerability that allows attackers to remove critical server files.

Vulnerability Details

CVE-ID: CVE-2026-40769

Affected Software: Contact Form Extender for Divi

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is an unauthenticated vulnerability, meaning no login is required to trigger the file deletion process. The flaw resides in the file handling functions of the plugin, permitting remote attackers to delete arbitrary files on the system.

Business Impact

The CVSS score of 8.6 reflects the high severity of this flaw, as it allows for catastrophic system disruption. An attacker could delete critical system files, leading to a complete denial of service (DoS) or the destruction of essential application data, resulting in significant operational downtime.

Remediation Plan

Immediate Action: Update the Contact Form Extender for Divi plugin to the latest version immediately.

Proactive Monitoring: Monitor server file system activity logs for unauthorized deletion events or suspicious file modifications.

Compensating Controls: Use a WAF to block unauthorized requests that target the specific file upload or deletion functions of the plugin.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This is a critical vulnerability due to the lack of required authentication. Organizations must prioritize updating this plugin immediately to prevent potential malicious actors from causing irreversible damage to the host server's file system.

---METADATA---
VENDOR: StylemixThemes
PRODUCT: MasterStudy LMS
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability in MasterStudy LMS allows authenticated users with the Subscriber role to execute arbitrary SQL commands.

Executive Summary:
MasterStudy LMS is vulnerable to a critical SQL injection flaw that enables authenticated subscribers to manipulate the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-40766

Affected Software: StylemixThemes MasterStudy LMS

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The application fails to perform adequate input validation on parameters processed by the LMS, allowing an authenticated Subscriber to perform unauthorized database operations.

Business Impact

The ability to perform SQL injection can lead to the exfiltration of personally identifiable information (PII) or the total compromise of site data. The CVSS score of 8.5 reflects the high impact on confidentiality and integrity that this vulnerability presents to the organization.

Remediation Plan

Immediate Action: Update MasterStudy LMS to the latest version immediately upon release of the security patch.

Proactive Monitoring: Monitor database query logs for unusual query structures or unexpected unauthorized access attempts.

Compensating Controls: Utilize a Web Application Firewall (WAF) to provide virtual patching by filtering malicious SQL payloads.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should treat this SQL injection vulnerability as a high priority. Ensure that the plugin is updated immediately and consider restricting user access to the LMS functions until the patch is successfully applied.

---METADATA---
VENDOR: themagnifico52 Kids
PRODUCT: Kids Online Store
AFFECTED_VERSIONS: From n/a through 0.8.9
---END_METADATA---

Description Summary:
An unrestricted file upload vulnerability in themagnifico52 Kids Online Store allows attackers to upload and execute a web shell.

Executive Summary:
A critical unrestricted file upload vulnerability in the Kids Online Store allows remote attackers to gain unauthorized control via web shell execution.

Vulnerability Details

CVE-ID: CVE-2026-40750

Affected Software: themagnifico52 Kids Online Store

Affected Versions: n/a through 0.8.9

Vulnerability: This vulnerability involves the lack of file type restrictions during the upload process. An attacker can exploit this to upload a malicious file, such as a web shell, to the server, allowing for subsequent remote command execution.

Business Impact

With a CVSS score of 9.9, this flaw allows for complete server takeover. Once a web shell is established, an attacker can steal sensitive customer data, modify store content, or pivot into the internal network, causing significant business disruption and legal liability.

Remediation Plan

Immediate Action: Update the Kids Online Store to the latest version, ensuring that robust file validation and sanitization measures are in place.

Proactive Monitoring: Scan the web server for unauthorized files, particularly in directories where user uploads are permitted, and inspect for anomalous web server behavior.

Compensating Controls: Use file upload restrictions at the application level and ensure the web server is configured to prevent the execution of scripts within upload directories.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation. However, the ease of exploiting file upload vulnerabilities to gain a web shell makes this a high-priority target for automated scanning and exploitation.

Analyst Recommendation

Organizations should prioritize updating their Kids Online Store installation to version 0.9.0 or higher. Immediate action is required to prevent potential unauthorized access, and administrators should conduct a security review of all uploaded content to ensure no malicious files have been deployed.

---METADATA---
VENDOR: Dell
PRODUCT: Container Storage Modules (CSI PowerStore)
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability exists in Dell Container Storage Modules (CSI PowerStore) version 2, potentially impacting the integrity of storage management operations.

Executive Summary:
A high-severity vulnerability in Dell Container Storage Modules (CSI PowerStore) could allow an attacker to compromise storage infrastructure integrity.

Vulnerability Details

CVE-ID: CVE-2026-40711

Affected Software: Dell Container Storage Modules

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the CSI PowerStore driver within Dell's Container Storage Modules. Detailed technical specifics are limited, but the flaw likely allows for unauthorized manipulation or access to storage resources via the container orchestration interface.

Business Impact

With a CVSS score of 8.0, this vulnerability presents a significant risk to data availability and storage security. Successful exploitation could lead to unauthorized access to persistent storage volumes or disruption of mission-critical containerized services, resulting in operational downtime.

Remediation Plan

Immediate Action: Apply the latest vendor security patches for Dell Container Storage Modules and the associated CSI PowerStore driver.

Proactive Monitoring: Audit container orchestration logs (e.g., Kubernetes API server logs) for unauthorized modifications to storage classes or persistent volume claims.

Compensating Controls: Utilize network segmentation to restrict access to the storage management interface to authorized administrative nodes only.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should treat this vulnerability with high priority, as it impacts core storage infrastructure. Ensure that all CSI drivers are updated to the latest secure versions to maintain the confidentiality and integrity of your containerized data environment.

---METADATA---
VENDOR: EVoke
PRODUCT: EVoke CSMS
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
The EVoke CSMS platform contains a critical vulnerability where WebSocket endpoints lack authentication, allowing attackers to impersonate charging stations and gain unauthorized system access.

Executive Summary:
A critical authentication failure in EVoke CSMS WebSocket endpoints allows attackers to impersonate charging stations, leading to potential unauthorized access and complete system compromise.

Vulnerability Details

CVE-ID: CVE-2026-40702

Affected Software: EVoke EVoke CSMS

Affected Versions: See vendor advisory

Vulnerability: The vulnerability stems from missing authentication mechanisms on WebSocket endpoints. This allows an unauthenticated attacker to inject traffic and impersonate legitimate charging stations, effectively bypassing security controls to execute unauthorized actions.

Business Impact

With a CVSS score of 9.4, this vulnerability represents an extreme risk to the platform's security. Successful exploitation could result in the compromise of the charging infrastructure, unauthorized data access, and potential large-scale operational disruption, severely impacting both business revenue and physical asset security.

Remediation Plan

Immediate Action: Apply the latest security update provided by EVoke to implement mandatory authentication for all WebSocket communications.

Proactive Monitoring: Monitor WebSocket traffic patterns for anomalous connection requests or suspicious commands originating from unauthorized or unexpected endpoints.

Compensating Controls: Deploy strict network segmentation and egress filtering to limit communication to only known, trusted charging station IP addresses.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 25, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The high CVSS score underscores the severity of this authentication weakness. Organizations utilizing EVoke CSMS must prioritize this update to prevent unauthorized control over critical infrastructure components.

---METADATA---
VENDOR: F5
PRODUCT: BIG-IP and BIG-IQ
AFFECTED_VERSIONS: F5 BIG-IP: 21.0.0 up to (excluding) 21.0.0.2, 17.5.0 up to (excluding) 17.5.1.6, 17.1.0 up to (excluding) 17.1.3.2, 16.1.0 and later; F5 BIG-IQ: 8.4.0 and later
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An OS command injection vulnerability in F5 BIG-IP and BIG-IQ allows a highly privileged authenticated attacker to escalate privileges via SNMP configuration.

Executive Summary:
An OS command injection vulnerability in F5 BIG-IP and BIG-IQ enables high-privileged users to achieve further unauthorized privilege escalation.

Vulnerability Details

CVE-ID: CVE-2026-40698

Affected Software: F5 BIG-IP and BIG-IQ

Affected Versions: See metadata for specific version ranges.

Vulnerability: This is an OS command injection flaw (CWE-77) that can be triggered by an authenticated attacker with a "Resource Administrator" role or higher, allowing them to manipulate SNMP configurations via iControl REST or the TMOS shell.

Business Impact

While this requires high-level authentication, a successful exploit grants the attacker elevated control over the network infrastructure, which can be leveraged to compromise entire segments. The CVSS score of 8.7 reflects the high impact on system integrity and the potential for full administrative takeover of the networking appliance.

Remediation Plan

Immediate Action: Update to the patched versions provided by F5 (e.g., 21.1.0 and later for BIG-IP) as documented in the vendor advisory.

Proactive Monitoring: Audit all SNMP configuration changes and review logs for suspicious activity within iControl REST and the TMOS shell.

Compensating Controls: Limit access to administrative interfaces and REST APIs to trusted IP addresses and strictly enforce the principle of least privilege for all administrative accounts.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The requirement for high-level authentication (Resource Administrator role) serves as a significant barrier to entry, but the impact remains critical once compromised.

Analyst Recommendation

System administrators should immediately review their F5 deployment versions and apply the necessary patches. Given the potential for total system compromise, ensure that administrative access is tightly controlled and that all configuration changes are monitored by security personnel.

---METADATA---
VENDOR: Dell
PRODUCT: ECS / ObjectScale
AFFECTED_VERSIONS: ECS 3.8.1.0 through 3.8.1.7; ObjectScale prior to 4.3.0.0
---END_METADATA---

Description Summary:
Dell ECS and ObjectScale contain a hard-coded credentials vulnerability, enabling local attackers to gain unauthorized filesystem access.

Executive Summary:
A critical hard-coded credential vulnerability in Dell ECS and ObjectScale enables local, unauthenticated attackers to gain unauthorized access to the underlying filesystem.

Vulnerability Details

CVE-ID: CVE-2026-40636

Affected Software: Dell ECS and ObjectScale

Affected Versions: ECS 3.8.1.0-3.8.1.7; ObjectScale < 4.3.0.0

Vulnerability: The product utilizes hard-coded credentials within its configuration, which can be exploited by an unauthenticated attacker with local access to the system. This allows for unauthorized escalation and direct interaction with the filesystem.

Business Impact

With a CVSS score of 9.8, this vulnerability poses a severe threat to the confidentiality and integrity of stored data. Local exploitation could allow an attacker to bypass security controls, leading to unauthorized access to sensitive information stored within the Dell ECS or ObjectScale platforms, potentially resulting in a total loss of data sovereignty.

Remediation Plan

Immediate Action: Apply the latest security patches provided by Dell for ECS and ObjectScale to remove the hard-coded credentials.

Proactive Monitoring: Monitor local system access logs and audit trails for unauthorized login attempts or unexpected command execution on the storage appliance.

Compensating Controls: Ensure that physical and logical access to the hardware management interface is strictly restricted to authorized personnel only.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 11, 2026, there is no public information indicating active exploitation of this vulnerability. However, the presence of hard-coded credentials is a high-risk security flaw that mandates immediate attention.

Analyst Recommendation

Security teams must prioritize the deployment of vendor-supplied patches for all affected Dell storage hardware. Because this vulnerability facilitates filesystem access, it represents a significant risk to data stored on these platforms and should be addressed as part of an emergency maintenance cycle.