CVE Vulnerability Advisory Database

[Affected Scope] All AhsayCBS installations running versions up to 9.15.2.69 and 10.3.4.44.

[Impact] Unauthenticated remote attackers can bypass the system password verification logic to gain full administrative access to the backup server.

[Mitigation] Immediately upgrade to version 9.15.2.70, 10.3.4.45, or later as per vendor instructions.

[Affected Scope] JFrog Artifactory Self-Managed instances running under default configurations

[Impact] Unauthenticated network-facing attackers can bypass authentication mechanisms to obtain full administrative privileges

[Mitigation] Immediately upgrade to the latest patched version recommended by JFrog and restrict network access to the instance

[Affected Scope] All JFrog Artifactory Self-Managed instances

[Impact] Unauthenticated attackers can obtain internal anonymous tokens even when anonymous access is disabled, leading to unauthorized access to sensitive artifacts

[Mitigation] Immediate upgrade to the latest patched version and verification of security configurations

[Affected Scope] macOS systems running versions prior to Sequoia 15.7.9, Sonoma 14.8.9, Tahoe 26.6.1/26.7, or Golden Gate 27 with Screen Sharing or VNC services enabled

[Impact] A remote attacker on the network can bypass authentication mechanisms to establish an unauthorized Screen Sharing session without valid credentials, gaining full GUI-level control over the target system

[Mitigation] Immediately apply the latest macOS security updates, or disable 'Screen Sharing' and 'Remote Management' services until patches can be deployed

[Affected Scope] Check Point Security Management Servers and SmartConsole instances exposed to the internet without Trusted Clients restrictions configured

[Impact] Unauthenticated remote attackers can obtain a valid application login token, granting them full administrative privileges to modify security policies and configurations

[Mitigation] Apply the official vendor patches immediately, restrict internet access to the Management Server, and configure Trusted Clients IP restrictions

[Affected Scope] LiteLLM proxy server and AI Gateway environments running versions prior to 1.84.0

[Impact] Unauthenticated attackers can bypass API key validation using a fabricated Authorization header, gaining unauthorized access to internal MCP tools and LLM APIs.

[Mitigation] Immediately upgrade the LiteLLM package to version 1.84.0 or higher.

[Affected Scope] Kestra open-source versions prior to 1.0.45 and 1.3.21

[Impact] Unauthenticated remote attackers can bypass authentication filters to create and execute arbitrary workflows, leading to Remote Code Execution (RCE) as root inside the worker container

[Mitigation] Immediately upgrade Kestra to version 1.0.45, 1.3.21, or higher

[Affected Scope] Check Point Remote Access and Mobile Access VPN gateways utilizing the deprecated IKEv1 key exchange protocol

[Impact] Unauthenticated remote attackers can bypass user authentication and establish unauthorized VPN connections without valid user credentials

[Mitigation] Apply the official vendor hotfixes immediately, or disable the deprecated IKEv1 protocol and transition to IKEv2

[Affected Scope] Oracle E-Business Suite (EBS) versions 12.2.3 through 12.2.15, specifically the Oracle Payments (File Transmission) component

[Impact] Unauthenticated remote attackers can bypass authentication via HTTP, leading to complete takeover of the Oracle Payments module

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, and restrict external HTTP access to the Payments module until patched

[Affected Scope] Cisco Catalyst SD-WAN Controller (formerly vSmart), Manager (formerly vManage), and Validator (formerly vBond)

[Impact] Unauthenticated remote attackers can bypass authentication to obtain administrative privileges and manipulate the SD-WAN fabric configuration via NETCONF

[Mitigation] Apply official security patches immediately, and perform system checks on control connections as a temporary measure

[Affected Scope] Quest KACE Systems Management Appliance (SMA) versions 13.0, 13.1, 13.2, 14.0, and 14.1

[Impact] Unauthenticated remote attackers can bypass SSO authentication to impersonate legitimate users and achieve complete administrative takeover

[Mitigation] Immediately upgrade to the patched versions (13.0.385, 13.1.81, 13.2.183, 14.0.341, or 14.1.101 and above)

[Affected Scope] ownCloud Core versions from 10.6.0 up to (but excluding) 10.13.1 are affected.

[Impact] Unauthenticated attackers can access, modify, or delete any file if they know the victim's username and the victim has no signing-key configured.

[Mitigation] Immediately upgrade ownCloud Core to version 10.13.1 or higher, and enforce signing-key configurations as a temporary workaround.

[Affected Scope] PaperCut NG and MF versions 22.0.5 (Build 63914) and earlier

[Impact] Unauthenticated remote attackers can bypass authentication to gain administrative access and execute arbitrary code with system privileges

[Mitigation] Immediately upgrade to the latest patched versions (22.0.9 or higher) and restrict external access to management ports 9191 and 9192

[Affected Scope] Container environments and host OS running Linux kernel versions prior to v5.17-rc3

[Impact] An attacker inside a container can bypass namespace isolation, escalate privileges to host root, and execute arbitrary code

[Mitigation] Update the Linux kernel to the patched version, and enforce container security profiles (AppArmor, Seccomp, non-root users)