🚨 EUVD-2026-97357 📊 6.9/10 🏢 opensource-socialnetwork 📝 Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that allows unau... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97357 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97358 📊 7.1/10 🏢 LavaLite 📝 LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97358 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97359 📊 5.1/10 🏢 RT-Thread 📝 RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx_ringbuffer as a Serial ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97359 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97360 📊 8.5/10 🏢 cfdude 📝 mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metach... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97360 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-63973 📊 9.4/10 🏢 DJI 📝 DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to conne... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-63973 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97361 📊 5.3/10 🏢 Cairo-dock 📝 A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file ww_page.php of the component Qu... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97361 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97362 📊 8.8/10 🏢 ManageIQ 📝 A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_load to silently fall back to YAM... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97362 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97363 📊 4.8/10 🏢 Yungengxin 📝 A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the library kgameprotect.sys. Execu... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97363 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97364 📊 6.9/10 📝 A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The m... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97364 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97365 📊 6.5/10 🏢 Progress 📝 In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP respo... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97365 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97366 📊 4.0/10 🏢 Progress 📝 In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, thi... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97366 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97367 📊 7.4/10 🏢 Progress 📝 In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97367 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97368 📊 4.8/10 🏢 Yungengxin 📝 A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_14000443C in the library LWBilling6... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97368 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97369 📊 2.0/10 🏢 ImageMagick 📝 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy chec... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97369 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97370 📊 7.1/10 🏢 TDuckCloud 📝 TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form su... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97370 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97371 📊 5.3/10 🏢 TDuckCloud 📝 TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fields to other users' forms via PO... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97371 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97372 📊 7.1/10 🏢 dromara 📝 lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other user... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97372 #cybersecurity #infosec #cve #euvd

CVSS 10.0, zero auth, actively exploited: CVE-2026-85097 in Bricksforge for WordPress. A fake image hides PHP, the plugin trusts the filename and the server runs it. Patch to 3.1.8.10. Breakdown: https://www.linkedin.com/feed/update/urn:li:share:7515411083231141888/ #cybersecurity #infosec