🚨 EUVD-2026-99702 📊 6.5/10 🏢 Microsoft 📝 Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99702 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-99668 📊 5.9/10 🏢 Microsoft 📝 Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99668 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2024-31812 📊 2.3/10 🏢 Python Software Foundation 📝 There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-31812 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100539 📊 5.4/10 🏢 Adobe 📝 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100539 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101561 📊 8.7/10 🏢 ILIAS-eLearning e.V. 📝 ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or impo... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101561 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101562 📊 6.3/10 🏢 bbPress 📝 bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hi... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101562 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101563 📊 5.3/10 🏢 zuihou 📝 lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerability in the oauth module's /anyone/findDeptByCompany ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101563 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101564 📊 6.0/10 🏢 iflytek 📝 AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows authentic... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101564 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101565 📊 8.2/10 🏢 flexprice 📝 FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101565 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101566 📊 5.3/10 🏢 colanode 📝 Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an enc... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101566 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101567 📊 8.7/10 🏢 coderamp-labs 📝 Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob ingestion that allows unauthenticated attacker... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101567 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101568 📊 6.3/10 🏢 holaboss-ai 📝 holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutabl... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101568 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101569 📊 8.3/10 🏢 holaboss-ai 📝 holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any messaging-platform user to su... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101569 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101570 📊 9.2/10 🏢 databasus 📝 Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to brute-force password reset cod... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101570 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-99224 📊 6.9/10 🏢 Swann Communications 📝 SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could all... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-99224 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101571 📊 5.3/10 🏢 Shopizer 📝 Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplyi... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101571 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101572 📊 5.3/10 🏢 we-promise 📝 Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesController#create that allows family memb... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101572 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101573 📊 5.3/10 🏢 growchief 📝 GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authenticated user to list users acr... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101573 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101574 📊 6.0/10 🏢 blinkospace 📝 Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated users to read other users' priv... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101574 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101575 📊 7.1/10 🏢 ModelEngine-Group 📝 Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows authenticated users to read other tenants... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101575 #cybersecurity #infosec #cve #euvd