CVE Vulnerability Advisory Database

[Affected Scope] All environments running Campfire version 1.4.4 and earlier.

[Impact] Authenticated users can bypass internal network restrictions using special-use IP ranges (CGNAT, NAT64, 6to4) to access internal resources and leak OpenGraph metadata.

[Mitigation] Immediately upgrade to Campfire v1.4.5 or later to apply security patches.

[Affected Scope] PHP 8.1, 8.2, and 8.3 environments without the latest security patches.

[Impact] Remote attackers can achieve arbitrary code execution (RCE) by exploiting memory corruption in the PHP global state.

[Mitigation] Immediately update PHP to the latest security release and restart PHP-FPM/Web server processes.

[Affected Scope] All web applications and server environments running on the PHP engine.

[Impact] Unauthenticated remote attackers can trigger Out-of-Memory (OOM) conditions to execute arbitrary code (RCE) with system privileges.

[Mitigation] Immediately apply official PHP security patches and restrict abnormal memory allocation via php.ini configurations.

[Affected Scope] All unpatched versions of SiteGuard Server Edition

[Impact] Local attackers with low privileges can execute arbitrary OS commands as root or SYSTEM, leading to full system compromise

[Mitigation] Immediately apply the official security patch from EG Secure and audit local server access permissions

[Affected Scope] Collabora Online Built-in CODE Server (richdocumentscode) for Nextcloud before version 26.4.303.

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands, leading to full system compromise.

[Mitigation] Update the richdocumentscode app to version 26.4.303 or later immediately.

[Affected Scope] Wide range of Atlassian Data Center products including Bitbucket, Confluence, Jira, Bamboo, and Crowd.

[Impact] Unauthenticated remote attackers can access sensitive files within the web application root directory, leading to information disclosure.

[Mitigation] Immediately upgrade to the fixed versions provided by Atlassian and restrict access to sensitive web root files.

[Affected Scope] AhsayCBS versions up to 9.15.2.69 and 10.3.4.44, specifically the Replication Receiver component

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands by manipulating API arguments, leading to full system compromise

[Mitigation] Immediately upgrade to version 9.15.2.70 or 10.3.4.45 or later

[Affected Scope] All AhsayCBS installations running versions up to 9.15.2.69 and 10.3.4.44.

[Impact] Unauthenticated remote attackers can bypass the system password verification logic to gain full administrative access to the backup server.

[Mitigation] Immediately upgrade to version 9.15.2.70, 10.3.4.45, or later as per vendor instructions.

[Affected Scope] Zammad versions 6.3.0 to 6.5.4 (7.0.0 to 7.1.2 are vulnerable but currently non-exploitable)

[Impact] Unauthenticated attackers can hijack user sessions and execute arbitrary code with 'zammad' user privileges.

[Mitigation] Immediately update to the latest patched versions (6.5.5+ or 7.1.3+).

[Affected Scope] Plex Media Server versions prior to 1.43.3.10861.

[Impact] An authenticated admin can exploit the TranscoderH264Options preference to write arbitrary files, leading to full system compromise via malicious library (.so) execution.

[Mitigation] Immediately update to version 1.43.3.10861 or later and enforce Multi-Factor Authentication (MFA) for all admin accounts.

[Affected Scope] All Plex Media Server installations prior to version 1.43.3.10861

[Impact] Authenticated attackers can bypass network restrictions to access internal resources or perform unauthorized external requests.

[Mitigation] Immediately update Plex Media Server to version 1.43.3.10861 or later.

[Affected Scope] All Plex Media Server installations prior to version 1.43.3.10861

[Impact] Attackers can manipulate 'searchOne' parameters to invoke internal plugin functions and inject arbitrary parameters, potentially leading to server compromise or unauthorized data access

[Mitigation] Immediately update Plex Media Server to version 1.43.3.10861 or later

[Affected Scope] All Plex Media Server installations prior to version 1.43.3.10861.

[Impact] Authenticated attackers with a valid X-Plex-Token can force the server to perform unauthorized HTTP POST requests to arbitrary internal or external destinations.

[Mitigation] Immediately update Plex Media Server to version 1.43.3.10861 or later.

[Affected Scope] All WordPress installations running vulnerable core versions and specific themes.

[Impact] Unauthenticated attackers can include and execute arbitrary local PHP files, leading to full server compromise.

[Mitigation] Immediate update to the latest WordPress security release and deployment of WAF filtering rules.

[Affected Scope] All unpatched versions of Adobe Commerce and Magento Open Source.

[Impact] Unauthenticated attackers can execute arbitrary code with server privileges, leading to full system compromise and sensitive data theft.

[Mitigation] Immediately apply Adobe security patches (APSB26-146) and implement WAF rules to block malicious template patterns.

[Affected Scope] PaperCut MF and PaperCut NG print management solutions

[Impact] Attackers capable of manipulating system configuration parameters can execute arbitrary Java bytecode under the security context of the PaperCut server process

[Mitigation] Apply the official vendor security patches immediately and restrict access to database configuration utilities

[Affected Scope] Web management interface of PaperCut MF and PaperCut NG.

[Impact] Unauthenticated remote attackers can trigger backend actions and modify system configurations before access validation checks complete, potentially leading to Remote Code Execution (RCE).

[Mitigation] Apply the official vendor security patches immediately and restrict external access to the web management ports (default 9191, 9192).

[Affected Scope] Zimbra Collaboration (ZCS) versions prior to 10.1.20, specifically when the optional zimbra-snmp package is installed and SNMP notifications are enabled.

[Impact] An unauthenticated remote attacker can execute arbitrary operating system commands as the Zimbra user by sending specially crafted SMTP requests.

[Mitigation] Immediately upgrade Zimbra Collaboration to version 10.1.20 or later, or temporarily disable the zimbra-snmp service.

[Affected Scope] All versions of Adobe Commerce and Magento Open Source (2.4.7 and earlier)

[Impact] Unauthenticated remote attackers can escalate privileges to gain administrative access and compromise sensitive data

[Mitigation] Apply Adobe security patch APSB26-92 immediately and implement IP whitelisting for the admin panel

[Affected Scope] Microsoft SharePoint Server 2016, 2019, and Subscription Edition.

[Impact] Authorized attackers can execute arbitrary code over the network, leading to full server compromise.

[Mitigation] Apply official Microsoft security updates immediately and monitor for unauthorized web shell activity.