@euvd-bot.bsky.social🚨 EUVD-2026-97835 📊 5.3/10 🏢 itsourcecode 📝 A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97835 #cybersecurity #infosec #cve #euvd
@stackflag.bsky.socialCVE-2026-96012
Versions 7.4, 7.5, and 7.6 of IBM Db2 Mirror for i can be tricked by a logged‑in user into running code with higher privileges. This could let an attacker take control of the database server. Apply the vendor's…
Too many irrelevant or confusing CVEs? Use stackflag.com
Envoy 1.38.7 updates Wasmtime to 24.0.10 to resolve CVE-2026-54786. The fix covers Envoy's WebAssembly path. #Envoy #WebAssembly #CVE
@stackflag.bsky.socialCVE-2026-108362 - ra-tls-clients
The Privasys Remote Attestation TLS client library (versions before 0.11.0) will accept proof from any trusted secure enclave without checking that the enclave is the specific one…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-109423 - netease cloud music for windows
The NetEase Cloud Music application for Windows (versions 3.1.38 and 3.1.39.205426) does not properly check the security certificates of the sites it connects to.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-109422 - netease cloud music for windows
The Windows version of NetEase Cloud Music (versions 3.1.38 and 3.1.39.205426) may let an attacker cause the program to launch any file on the computer. This happens…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-109575 - data plane api ee
Versions 2.2.0 through 3.4.3 of HAProxy Data Plane API (both Community and Enterprise editions) can unintentionally turn off login checks for some management interfaces. An…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-57118 - praisonai
The PraisonAI system lets anyone view the names of its agents and send commands to them, even if they are not logged in. This can waste compute resources, reveal private…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-87744 - exploit intelligence
The Quarkus REST Data Panache component in Red Hat's Build of Quarkus can unintentionally open generated API endpoints to anyone if a developer adds custom…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stemshop.bsky.social🚨 CVE-2026-87744 — CVSS 9.1 CRITICAL A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypas... 🔎 https://stemshop.top/cve/CVE-2026-87744 #CVE #CyberSecurity #InfoSec
@stemshop.bsky.social🚨 CVE-2026-57118 — CVSS 9.8 CRITICAL PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents a... 🔎 https://stemshop.top/cve/CVE-2026-57118 #CVE #CyberSecurity #InfoSec
@stemshop.bsky.social🚨 CVE-2026-77366 — CVSS 9.9 CRITICAL obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, t... 🔎 https://stemshop.top/cve/CVE-2026-77366 #CVE #CyberSecurity #InfoSec
@stemshop.bsky.social🚨 CVE-2026-108918 — CVSS 9.3 CRITICAL A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /gofor... 🔎 https://stemshop.top/cve/CVE-2026-108918 #CVE #CyberSecurity #InfoSec
@stemshop.bsky.social🚨 CVE-2026-108917 — CVSS 9.3 CRITICAL A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the ... 🔎 https://stemshop.top/cve/CVE-2026-108917 #CVE #CyberSecurity #InfoSec
@euvd-bot.bsky.social🚨 EUVD-2026-97679 📊 7.5/10 🏢 Progress Software Corporation 📝 Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or ent... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97679 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97680 📊 7.5/10 🏢 Progress Software Corporation 📝 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97680 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97760 📊 5.3/10 🏢 9001 📝 copyparty is a portable file server. Prior to 1.20.19, FTP upload path handling does not confine destinations to configured copyparty volumes. When FTP or FT... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97760 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97762 📊 8.1/10 🏢 C4illin 📝 ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the /delete/{id} endpoint uses HTTP GET for permanent deletion without CSRF protection... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97762 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97763 📊 8.1/10 🏢 C4illin 📝 ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an ou... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97763 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97764 📊 n/a 🏢 IBM 📝 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97764 #cybersecurity #infosec #cve #euvd