🚨 CVE-2026-108551 — CVSS 9.3 CRITICAL openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers con... 🔎 https://stemshop.top/cve/CVE-2026-108551 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-108549 — CVSS 9.2 CRITICAL cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhoo... 🔎 https://stemshop.top/cve/CVE-2026-108549 #CVE #CyberSecurity #InfoSec

🚨 EUVD-2026-96338 📊 5.3/10 🏢 strapi 📝 Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96338 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96339 📊 2.3/10 🏢 kortix-ai 📝 Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by s... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96339 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96340 📊 8.2/10 🏢 SillyTavern 📝 SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources becaus... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96340 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96341 📊 7.7/10 🏢 spotweb 📝 Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by pub... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96341 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96342 📊 7.1/10 🏢 iflytek 📝 AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared varia... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96342 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96343 📊 6.9/10 🏢 iflytek 📝 AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that accepts any Bearer token without ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96343 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96344 📊 9.2/10 🏢 chenhg5 📝 cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unau... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96344 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96345 📊 8.7/10 🏢 iflytek 📝 SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attac... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96345 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96346 📊 9.3/10 🏢 ferdikoomen 📝 openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject Java... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96346 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96347 📊 7.7/10 🏢 OpenRefine 📝 OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython fa... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96347 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96348 📊 6.9/10 🏢 PDFMathTranslate 📝 PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the s... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96348 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96349 📊 2.3/10 🏢 schlagmichdoch 📝 PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks' discovery rooms b... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96349 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96316 📊 7.7/10 🏢 FusionPBX 📝 FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauthenticated attackers to execute c... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96316 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96317 📊 6.9/10 🏢 smp46 📝 Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because bac... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96317 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-96318 📊 6.9/10 🏢 smp46 📝 Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milli... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96318 #cybersecurity #infosec #cve #euvd