What needs attention now.

PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php

• hotspotbilling phpnuxbill
• SQL injection

Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials

• Red Lion Controls 700 Series
• Hard-coded credentials

Red Lion Controls N-Tron 700 Series Use of Hard-Coded Credentials

• Red Lion Controls 700 Series
• Hard-coded credentials

Grid Protection Alliance openPDC (Docker image) Use of Hard-coded Credentials

• Grid Protection Alliance openPDC (Docker image)
• Hard-coded credentials

Grid Protection Alliance openPDC and openHistorian Deserialization of Untrusted Data

• Grid Protection Alliance openPDC
• Grid Protection Alliance openPDC (Docker image)
• Insecure deserialization

Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop

• Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module
• Weak cryptography or TLS

Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x

• Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module
• Weak cryptography or TLS

Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key

>=0.0.0-0, <2.0.0 · fixed in 2.0.0

Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.

• Apache Software Foundation Apache CXF
• Weak cryptography or TLS

Apache CXF: Authentication bypass via weak cache keys for validated STS tokens

• Apache Software Foundation Apache CXF
• Weak cryptography or TLS

Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter

• Apache Software Foundation Apache CXF
• Authentication bypass

WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability

• Shinetheme Traveler
• SQL injection

WordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerability

• PX-lab Zombify
• Unrestricted file upload

WordPress EduAdmin Booking plugin < 6.0.0 - SQL Injection vulnerability

• MultiNet Interactive AB EduAdmin Booking
• SQL injection

WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability

• wpdreams Ajax Search Pro
• SQL injection

WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

• tagDiv Opt-In Builder
• SQL injection

WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability

• jegtheme JNews - Pay Writer
• SQL injection

WordPress WPLMS plugin < 1.9.9.8.2 - SQL Injection vulnerability

• VibeThemes WPLMS
• SQL injection

Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose

• Red Hat Build of Podman Desktop
• Red Hat Certification Program for Red Hat Enterprise Linux 9
• Path traversal

Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling

• FalkorDB
• Authentication bypass

Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message

• FalkorDB
• Memory corruption

Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB

• FalkorDB
• Memory corruption

Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB

• FalkorDB
• Memory corruption

Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials.

• Hard-coded credentials

An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id in tasks-lib.lua.

• Code injection

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file

• Command injection

Double flow control refund on HTTP/2 server streams in net/http

• CWE-675

<0.60.0 · fixed in 0.60.0

Root.Mkdir(All) can follow junctions out of the root on Windows in os

• CWE-1386

<1.26.9 || >=1.27.0-0, <1.27.2 · fixed in 1.26.9, 1.27.2

Microsoft Partner Center Elevation of Privilege Vulnerability

• Microsoft Partner Center
• Weak cryptography or TLS

Microsoft Bookings Elevation of Privilege Vulnerability

• Microsoft Bookings
• Broken access control

Microsoft Dataverse Remote Code Execution Vulnerability

• Microsoft Dataverse
• Insecure deserialization

Azure App Service Remote Code Execution Vulnerability

• Microsoft Azure App Service for Linux
• Authentication bypass

Azure SRE Agent Elevation of Privilege Vulnerability

• Microsoft Azure SRE Agent
• Server-side request forgery (SSRF)

Hazelcast allows arbitrary member memory access by low-privileged client

• CWE-20

>=5.6.0, <5.7.0 || >=5.5.0, <5.7.0 || <5.7.0 · fixed in 5.7.0

fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion

• Weak cryptography or TLS

>=6.2.0, <6.3.0 · fixed in 6.3.0

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

• Path traversal
• Command injection

<4.6.78 · fixed in 4.6.78

Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

• IBM Guardium Data Protection
• Path traversal

Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

• IBM Guardium Data Protection
• SQL injection

IBM Guardium Data Protection is affected by vulnerability

• IBM Guardium Data Protection
• Authentication bypass

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

• NetScaler ADC
• NetScaler Gateway
• Memory corruption

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

• IBM Security Verify Access
• IBM Verify Identity Access
• Authentication bypass

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

• IBM Security Verify Access
• IBM Verify Identity Access
• CWE-693

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

• IBM Security Verify Access
• IBM Verify Identity Access
• Authentication bypass

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

• IBM Security Verify Access
• IBM Verify Identity Access
• Insecure deserialization

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

• IBM Security Verify Access
• IBM Verify Identity Access
• Insecure deserialization

Missing authorization in Hewlett Packard Enterprise HPE Intelligent Management Center (iMC)

• Hewlett Packard Enterprise HPE Intelligent Management Center (iMC)
• Broken access control

Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileById

• dromara skyeye
• Server-side request forgery (SSRF)

Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter

• dromara skyeye
• Command injection

Dromara Skyeye xxl-job-admin Missing Authentication on Job Endpoints Allows RCE

• dromara skyeye
• Authentication bypass

Command Injection

• Tenable, Inc. Tenable Identity Exposure (SaaS)
• Command injection

TVU Networks Receiver/Transceiver Missing Authentication via REST API

• TVU Networks TVU Receiver / Transceiver
• Authentication bypass

TVU Networks Receiver/Transceiver Authentication Bypass via /tvu/Login

• TVU Networks TVU Receiver / Transceiver
• Authentication bypass

IBM Guardium Data Protection Cross-Site Scripting

• IBM Guardium Data Protection
• Cross-site scripting (XSS)

IBM Guardium Data Protection Missing Authentication

• IBM Guardium Data Protection
• Authentication bypass

image_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_format

• jtescher image_optimizer
• Command injection

@enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo

• @enmaso/node-convert
• Command injection

dot-access 0.0.3 through 1.0.0 Code Injection via get() Path Argument

• ntharim dot-access
• Code injection

ppt2png through 0.0.6 OS Command Injection via input and output paths

• tzwm ppt2png
• Command injection

Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

• Code injection
• Memory corruption

>=4.0.0, <4.7.10 · fixed in 4.7.10

Handlebars: JavaScript Injection via Own Property Check Bypass

• CWE-184
• CWE-1289

>=3.0.0, <4.7.10 · fixed in 4.7.10