An unauthenticated endpoint in MLflow’s webhook tester can be redirected to internal addresses or cloud metadata services, and the response body is handed straight back to the attacker.
Every CISA KEV addition, plus critical-severity flaws in the kit that sits at the edge of a network: firewalls, VPN gateways, load balancers, routers, switches and management consoles.
Colour on the left of each entry is the CVSS severity. A pink CISA KEV badge means the flaw is being exploited right now — treat those first, whatever the score says. How each post is sourced and checked is set out in the methodology.
Apple macOS Improper Authentication Vulnerability
Screen Sharing on unpatched Macs can be accessed by anyone on the network without a password, giving full remote control, and Apple confirms it’s already being exploited.
Broadcom VMware vCenter Path Traversal Vulnerability
A network-reachable flaw in vCenter’s Syslog service lets an attacker write files outside its intended directory, leading to arbitrary code execution on the server that controls your virtual infrastructure.
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
A double-free bug in Windows’ IKE Extension lets an unauthenticated attacker execute code over the network on any host with IPsec listening, and it’s already being exploited.
Microsoft SharePoint Weak Authentication Vulnerability
An unauthenticated attacker with network access to Microsoft Office SharePoint can bypass authentication controls and read data that should be protected, no login or user action needed.
Ray-Project Ray Code Injection Vulnerability
Ray’s local developer interface trusts a spoofable browser header as its only defence, letting a malicious webpage combine DNS rebinding with Firefox or Safari to run code on a developer’s machine.
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
An unauthenticated attacker can trigger a heap memory fault over the network on Cisco ASA and FTD firewalls, forcing an unplanned reload and knocking down the firewall’s availability.
Metabase SQL Injection Vulnerability
An unauthenticated attacker can send crafted SQL through Metabase’s own password-reset endpoint and walk away with full administrator control of the instance, no login required.
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
A kernel-level flaw in Windows’ WinSock driver lets an attacker who already has a foothold on a machine escalate to full SYSTEM control, and it’s already being exploited.
Progress LoadMaster Command Injection Vulnerability
An unauthenticated attacker on the adjacent network can run arbitrary OS commands on Progress LoadMaster appliances through unsanitised API endpoints, and the flaw is already being exploited.