Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
42900
Total
3476
Critical
12865
High
12603
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-81677 | UNKNOWN | — | The ‘/ws/apiprensa/getVideo’ endpoint is vulnerable to SQL injection due to improper validation of the GET parameter `id_ambito`. An attacker can inject SQL syntax that breaks … | Aug 27, 2026 |
| CVE-2026-81676 | UNKNOWN | — | A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the `limit_videos` parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting … | Aug 27, 2026 |
| CVE-2026-81675 | UNKNOWN | — | The endpoint ‘/ws/apiprensa/getVideoUltimasSeccion’ contains an SQL injection vulnerability in the id_seccion parameter. The parameter is directly embedded in a complex SQL query that includes grouping … | Aug 27, 2026 |
| CVE-2026-81674 | UNKNOWN | — | The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject … | Aug 27, 2026 |
| CVE-2026-81673 | UNKNOWN | — | The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. The application does not validate or sanitize these inputs before including … | Aug 27, 2026 |
| CVE-2026-81672 | UNKNOWN | — | SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the id_video parameter. The application does not sanitize input before constructing SQL queries, … | Aug 27, 2026 |
| CVE-2026-81668 | MEDIUM | 5.4 | A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An … | Aug 27, 2026 |
| CVE-2026-81662 | UNKNOWN | — | Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding … | Aug 27, 2026 |
| CVE-2026-81659 | UNKNOWN | — | Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local … | Aug 27, 2026 |
| CVE-2026-81658 | MEDIUM | 6.5 | A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged … | Aug 27, 2026 |
| CVE-2026-81562 | MEDIUM | 5.3 | A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os … | Aug 27, 2026 |
| CVE-2026-81560 | MEDIUM | 5.3 | A vulnerability was identified in blackms aistack up to 1.6.1. Affected by this issue is some unknown functionality of the file src/web/server.ts of the component … | Aug 27, 2026 |
| CVE-2026-74233 | CRITICAL | 9.8 | Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, … | Aug 27, 2026 |
| CVE-2026-74232 | CRITICAL | 9.8 | Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, … | Aug 27, 2026 |
| CVE-2026-66155 | HIGH | 7.6 | A vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), Element maps-ng V49 (All versions … | Aug 27, 2026 |
| CVE-2026-5218 | MEDIUM | 4.3 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting … | Aug 27, 2026 |
| CVE-2026-17562 | MEDIUM | 6.5 | Authorization bypass through User-Controlled key vulnerability in Summit Security Systems AdisyonPro allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AdisyonPro: before v5.21.0. | Aug 27, 2026 |
| CVE-2026-81625 | HIGH | 8.8 | A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test (VT) on the affected products to trigger a stack buffer … | Aug 27, 2026 |
| CVE-2026-81581 | HIGH | 8.8 | Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside … | Aug 27, 2026 |
| CVE-2026-81579 | HIGH | 8.8 | In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a … | Aug 27, 2026 |
| CVE-2026-81576 | HIGH | 7.7 | If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole … | Aug 27, 2026 |
| CVE-2026-81575 | HIGH | 7.5 | If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data … | Aug 27, 2026 |
| CVE-2026-81574 | HIGH | 8.2 | In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format … | Aug 27, 2026 |
| CVE-2026-81573 | HIGH | 8.6 | If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only … | Aug 27, 2026 |
| CVE-2026-81572 | HIGH | 7.8 | cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such … | Aug 27, 2026 |