🚨 EUVD-2025-211070 📊 9.3/10 🏢 RVC-Boss 📝 GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute co... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-211070 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97873 📊 4.9/10 🏢 vercel 📝 Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97873 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97874 📊 5.3/10 🏢 frappe 📝 ERPNext 15.55.0 through 16.50.0 contains an incorrect authorization vulnerability in the get_timesheet_html method that lets authenticated portal users vie... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97874 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97875 📊 5.3/10 🏢 frappe 📝 ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnerability that allows authenticated users to view stock quantities via whitelisted batch... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97875 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97876 📊 5.3/10 🏢 SPIP 📝 SPIP before 4.4.18 contains a server-side request forgery vulnerability in recuperer_url() in ecrire/inc/distant.php that follows up to 10 redirects without ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97876 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97877 📊 6.9/10 🏢 cockpit-hq 📝 Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enumerate accounts due to an incomp... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97877 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97878 📊 8.7/10 🏢 ayuhito 📝 modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97878 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97879 📊 7.3/10 🏢 tianma-if 📝 EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97879 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97880 📊 8.4/10 🏢 tianma-if 📝 EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through noteb... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97880 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97881 📊 8.5/10 🏢 tianma-if 📝 EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97881 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97882 📊 8.4/10 🏢 tianma-if 📝 EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97882 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97883 📊 7.7/10 🏢 continuedev 📝 Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97883 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97884 📊 2.3/10 🏢 aaif-goose 📝 goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode b... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97884 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97885 📊 5.3/10 🏢 snapotter-hq 📝 SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal to call the /api/v1/upload, /a... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97885 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97886 📊 8.7/10 🏢 rdfjs 📝 N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97886 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97887 📊 2.3/10 🏢 learnhouse 📝 LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /api/v1/playgrounds/{uuid}/duplicate that skips the read-access and draf... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97887 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97888 📊 5.3/10 🏢 zofe 📝 Rapyd Admin from 9.4.0 before 9.20.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through sel... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97888 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97889 📊 9.3/10 🏢 zofe 📝 Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97889 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97890 📊 8.6/10 🏢 zofe 📝 Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege management vulnerability in the UsersEdit Livewire component that allows users with the e... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97890 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97891 📊 7.1/10 🏢 MarceauKa 📝 Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API controllers that skips ownership che... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97891 #cybersecurity #infosec #cve #euvd