🚨 EUVD-2022-28905 📊 7.5/10 📝 Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-28905 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2022-29299 📊 n/a 📝 In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-29299 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-99013 📊 5.3/10 🏢 Webkul 📝 QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99013 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-99008 📊 2.3/10 🏢 kareadita 📝 Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authenticated users to bypass the SSRF blocklist through D... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99008 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-99259 📊 6.3/10 🏢 Webkul 📝 Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unpublished draft blog posts via the ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99259 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-99254 📊 5.3/10 🏢 Stonewuu 📝 Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' ge... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99254 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-99249 📊 7.1/10 🏢 WuKongOpenSource 📝 Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user t... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99249 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-99244 📊 7.7/10 🏢 RooCodeInc 📝 Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-m... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99244 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-98946 📊 8.7/10 🏢 risesoft-y9 📝 Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream ha... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98946 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-98941 📊 8.6/10 🏢 mateaix 📝 MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotec... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98941 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-98936 📊 5.1/10 🏢 mlogclub 📝 bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML or SVG files by spoofing the mul... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98936 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-98931 📊 5.3/10 🏢 Jorani 📝 Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify, delete, and view other employees'... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98931 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100872 📊 5.3/10 🏢 WisdomGarden 📝 Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restri... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100872 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-99218 📊 7.2/10 🏢 Adobe 📝 Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulne... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99218 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101305 📊 2.5/10 🏢 godotengine 📝 Godot Engine through 4.7.2 has a heap out-of-bounds write exists in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBi... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101305 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100871 📊 5.3/10 🏢 WisdomGarden 📝 Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific para... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100871 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2022-29933 📊 9.8/10 📝 xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-29933 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-99219 📊 10.0/10 🏢 Adobe 📝 Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code ex... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99219 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-99240 📊 8.7/10 🏢 misskey-dev 📝 Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, cleanup processing may not ex... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99240 #cybersecurity #infosec #cve #euvd