What needs attention now.

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

• Adobe Campaign Classic
• Code injection

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

• Adobe Campaign Classic
• Code injection

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

• Adobe Campaign Classic
• SQL injection

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

• Adobe Campaign Classic
• Server-side request forgery (SSRF)

Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)

• Adobe Campaign Classic
• CWE-20

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

• Adobe Campaign Classic
• Code injection

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

• Adobe Campaign Classic
• Broken access control

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

• Adobe Campaign Classic
• SQL injection

PHP file inclusion in WordPress

• WordPress
• File inclusion

Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one

• dokploy
• Information disclosure
• Broken access control

Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys

• GitroomHQ postiz-app
• Weak cryptography or TLS
• CWE-341

Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token

• David-Crty Databasement
• Broken access control

Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Path traversal

Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Path traversal

Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Command injection

Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Command injection

Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom write

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Memory corruption

Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Memory corruption

Vector: Arbitrary file write in the file sink via templated path (path traversal).

• vector
• Path traversal

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Command injection

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Command injection

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Command injection

BIG-IP APM OAuth vulnerability

• F5 BIG-IP
• Memory corruption

Clickjacking in Fortinet FortiPAM Chrome Extension

• Fortinet FortiPAM Chrome Extension
• CWE-1021

Hard-coded credentials in NVIDIA Infrastructure Controller

• NVIDIA Infrastructure Controller
• Hard-coded credentials

CVE-2026-93088

• SGLang
• Insecure deserialization

SQLi in Karel Electronics' KarelIPS

• Karel Electronic Industry and Trade Inc. KarelIPS
• SQL injection

D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface

• D-LINK DAP-1360
• Command injection

Directory Traversal and File upload allows execution of arbitrary script on the Management Server

• checkpoint Quantum Security Management
• Path traversal

Remote code execution vulnerability

• Zohocorp ManageEngine ADSelfService Plus
• Command injection

Improper authorization in Qualcomm Software Center

• Qualcomm, Inc. Snapdragon
• Broken access control

Direct references to unsafe objects (IDOR) in Tankuam Places by Kompini

• Kompini Tankuam Places
• Broken access control

TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension

• Erlang OTP
• CWE-322

Security Advisory 0183

• Arista Networks VeloCloud Orchestrator (VCO) On-Prem
• CWE-20

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode

• CWE-1286

Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode

• Denial of service

Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buffer in encode_punycode

• Memory corruption

Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter

• LiquidWeb Give Tributes
• Insecure deserialization

Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter

• Meta Box Frontend Submission
• Privilege escalation

Gigatech PDV5701 WebSocket Service index.html missing authentication

• Gigatech PDV5701
• Authentication bypass

Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.

• Path traversal

MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.

• SQL injection

MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).

• SQL injection

webpy web.py 0.76 is vulnerable to Insufficient Session Expiration.

• Authentication bypass

Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management

• Moore Threads MTT S80 Driver Package
• Privilege escalation

Joplin: SSO Auth Code Login Missing Rate Limiting — 9-Digit Numeric Code Brute-Forceable via Unprotected Endpoint

• laurent22 joplin
• Authentication bypass

MaxKB: Prompt-injectable agent can lead to command execution

• 1Panel-dev MaxKB
• Command injection
• Privilege escalation

Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow

• Moore Threads MTT S80 Driver Package
• Memory corruption

MaxKB AWS Bedrock model credential injection leads to remote code execution

• 1Panel-dev MaxKB
• Command injection

Code injection in OpenStack Octavia

• OpenStack Octavia
• Code injection

Code injection in OpenStack Octavia

• OpenStack Octavia
• Code injection

Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter

• warp-tech warpgate
• Cross-site scripting (XSS)

ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference

• ColorFul iGameCenter
• Memory corruption

Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a message whose envelope address reaches the shell in _sendmail_pipe

• Command injection

Ajenti: Privilege escalation to root via unauthenticated/unauthorized plugin install task

• ajenti
• Broken access control

Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

• fluent-bit
• Memory corruption

Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust

• Mailu
• Mailu helm-charts
• Authentication bypass
• CWE-807

Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting its credential as an Authorization bearer header instead,...

• Authentication bypass

>=3.0.0, <3.3.2 · fixed in 3.3.2

Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232

• Apache Software Foundation Apache MINA
• Insecure deserialization

Insufficient verification of data authenticity in Eclipse Foundation Eclipse Open VSX

• Eclipse Foundation Eclipse Open VSX
• CWE-345