An unauthenticated remote code execution flaw in PHP is already being exploited, but no affected versions, fixed release or severity score have been published yet, leaving defenders unable to patch.
Every CISA KEV addition, plus critical-severity flaws in the kit that sits at the edge of a network: firewalls, VPN gateways, load balancers, routers, switches and management consoles.
Colour on the left of each entry is the CVSS severity. A pink CISA KEV badge means the flaw is being exploited right now — treat those first, whatever the score says. How each post is sourced and checked is set out in the methodology.
PHP Stale Internal Request-State Vulnerability
A memory-handling bug in PHP’s core request processing lets stale pointers from a freed request linger into the next one, giving unauthenticated attackers a path to remote code execution.
Arista VeloCloud Orchestrator SQL Injection Vulnerability
Any authenticated user on an on-prem VeloCloud Orchestrator can use SQL injection to escalate to a local superuser operator account, exposing internal functions never meant to be reachable remotely, and it’s already being exploited.
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server …
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
A low-privilege user on a host running SiteGuard Server Edition can inject OS commands that execute with root or SYSTEM rights, turning a minor foothold into full control of the machine.
Plex Media Server External Control of File Name or Path Vulnerability
Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained …
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins’ functions and supply their own …
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the ‘protocol’ parameter …
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the …
Siemens Software Center Uncontrolled Search Path Element Vulnerability
Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application …