🚨 EUVD-2026-101740 📊 7.7/10 🏢 gitpython-developers 📝 GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.ls_remote forwards ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101740 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101735 📊 6.3/10 🏢 n8n-io 📝 n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched reques... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101735 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101730 📊 7.0/10 🏢 n8n-io 📝 n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in the Chat Trigger hosted-chat pag... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101730 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101725 📊 7.7/10 🏢 n8n-io 📝 n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101725 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101720 📊 6.1/10 🏢 FreeRDP 📝 FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because th... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101720 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101715 📊 7.1/10 🏢 FreeRDP 📝 FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force se... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101715 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101669 📊 7.1/10 🏢 error311 📝 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise flattens logical fold... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101669 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-102072 📊 8.4/10 🏢 Siemens 📝 A vulnerability has been identified in Siemens Software Center (All versions). The affected application loads dynamic-link libraries (DLLs) from an unco... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102072 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-102073 📊 7.1/10 🏢 Grafana 📝 Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A user holding only the Viewer rol... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102073 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-98154 📊 4.8/10 🏢 Edimax 📝 A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the compone... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98154 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-102074 📊 7.3/10 🏢 Perforce 📝 P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102074 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-102087 📊 5.4/10 🏢 Progress Software 📝 In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the TabStrip, Menu, and PanelBar components insert data source imageUrl values into si... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102087 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-60712 📊 6.9/10 🏢 frappe 📝 Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-60712 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101711 📊 7.5/10 🏢 TP-Link Systems Inc. 📝 Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing a... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101711 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-60717 📊 8.2/10 🏢 frappe 📝 Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitel... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-60717 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2025-211073 📊 6.3/10 🏢 frappe 📝 Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-211073 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-98158 📊 6.7/10 🏢 gohugoio 📝 Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98158 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-98163 📊 6.9/10 🏢 frappe 📝 Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sending Document Follow email notificatio... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98163 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-102075 📊 n/a 🏢 TotalSecurity 📝 A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading I... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102075 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-102076 📊 5.4/10 🏢 Progress Software 📝 In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attributes from bound dataSource fields by string ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102076 #cybersecurity #infosec #cve #euvd