🚨 EUVD-2026-97235 📊 6.5/10 📝 A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and does not apply the search limit on the call... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97235 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97236 📊 5.4/10 📝 An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package. The domain and subnet interface API checks only tha... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97236 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97237 📊 5.3/10 🏢 y_project 📝 A security vulnerability has been detected in y_project RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97237 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97238 📊 10.0/10 🏢 TRENDnet 📝 A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97238 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97239 📊 7.1/10 🏢 Flock 📝 SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' d... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97239 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97240 📊 6.9/10 🏢 krupalshah 📝 A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the fun... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97240 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97241 📊 n/a 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to fix UAF Currently the sched cache grou... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97241 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2025-211060 📊 n/a 🏢 Unknown 📝 The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it is reflected back into an admin-ar... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-211060 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97242 📊 n/a 🏢 Unknown 📝 The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it, allowing any authenticated user such ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97242 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97243 📊 n/a 🏢 Unknown 📝 The Hotel Booking WordPress plugin through 3.8 does not implement CSRF protection on its administrative booking order management, allowing attackers to trick... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97243 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97244 📊 n/a 🏢 Unknown 📝 The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of its bulk comment-deletion routines, all... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97244 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97245 📊 6.9/10 🏢 krupalshah 📝 A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the fu... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97245 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97174 📊 6.9/10 🏢 jackq 📝 A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of t... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97174 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97175 📊 5.3/10 🏢 yangzongzhuan 📝 A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulation leads to cross-site requ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97175 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97176 📊 5.3/10 🏢 prasathmani 📝 A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tiny... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97176 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97177 📊 8.8/10 🏢 Rapid7 📝 The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module int... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97177 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97178 📊 7.0/10 🏢 Samsung Mobile 📝 Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97178 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97179 📊 5.1/10 🏢 Samsung Mobile 📝 Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97179 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97180 📊 5.1/10 🏢 Samsung Mobile 📝 Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97180 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97181 📊 5.1/10 🏢 Samsung Mobile 📝 Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97181 #cybersecurity #infosec #cve #euvd