CVE-2026-126474

OpenEMR versions before 8.5.0 are vulnerable to a reflected cross-site scripting (XSS) flaw in the ACL module . The root cause is the injection of unencoded input into inline script blocks via the module_id parameter. Attackers can leverage crafted acl/index or acl/acl links to execute arbitrary ...

CVE-2026-58221

Samba AD: authenticated LDAP access allows domain takeover. Low-privilege authenticated domain users can modify Samba AD's internal LDB special records @MODULES, @PARTITION over LDAP, bypassing security controls. rootdsefilteroperations only blocks anonymous callers, so authenticated requests rea...

CVE-2025-13056

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Centreon Infra Monitoring Administration ACL menu configuration modules allows Stored XSS to users with high privileges. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, fro...

Forum Access - Critical - Arbitrary PHP code execution - SA-CONTRIB-2023-035

This module changes your forum administration page to allow you to set forums private. You can control what user roles can view, edit, delete, and post to each forum. You can also give each forum a list of users who have administrative access on that forum AKA moderators. This module requires the...