EUVD-2026-88813

Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console...

TIBCO Security Advisory: September 29, 2026 - TIBCO Administrator - CVE-2026-4034

TIBCO Administrator Injection Vulnerability Original release date: September 29, 2026 Last revised: --- CVE-2026-4034 Source: TIBCO Software Inc. Description Multiple Injection vulnerability has been discovered in TIBCO Administrator. Refer below for further details Products Affected TIBCO...

CVE-2026-4034: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console...

CVE-2026-98013

A flaw was found in the Linux kernel. A local user with network administration privileges, including within a user namespace, can cause a Denial of Service DoS by configuring the Flow Queue Proportional Integral controller Enhanced FQ-PIE packet scheduler with an excessively low quantum value and...

CVE-2026-101081

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

EUVD-2026-88345

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-101081 D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-101081

The D-Link DI-8400 running firmware version 16.07 is vulnerable to a stack-based buffer overflow in the Web Administration Service . The flaw exists within the menu_nat_more_asp function of the menu_nat_more.asp file, where manipulating the opt argument can trigger the overflow. This vulnerabilit...

CVE-2026-101081 D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-101081: Stack-based Buffer Overflow

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-63207

Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator can obtain stored integration credentials in cleartext through the integration administration API. Certain responses do not consistently mask sensitive fields, so configured...

CVE-2026-63207

The open-source helpdesk system Zammad versions 7.0.3 and 7.1.1 is vulnerable to sensitive information exposure. An authenticated administrator can exploit the integration administration API to obtain stored integration credentials in cleartext . The root cause is that certain API responses fail ...

CVE-2026-63207 Zammad: Sensitive Information Exposure in Integration Administration API

Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator can obtain stored integration credentials in cleartext through the integration administration API. Certain responses do not consistently mask sensitive fields, so configured...

CVE-2026-63207 Zammad: Sensitive Information Exposure in Integration Administration API

Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator can obtain stored integration credentials in cleartext through the integration administration API. Certain responses do not consistently mask sensitive fields, so configured...

CVE-2026-63207 Zammad: Sensitive Information Exposure in Integration Administration API

Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator can obtain stored integration credentials in cleartext through the integration administration API. Certain responses do not consistently mask sensitive fields, so configured...

CVE-2026-63207: Exposure of Sensitive Information to an Unauthorized Actor

Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator can obtain stored integration credentials in cleartext through the integration administration API. Certain responses do not consistently mask sensitive fields, so configured...

DRUPAL-CONTRIB-2026-181

This module enables you to provide information and options about cookie usage. The module does not sufficiently filter input submitted through the Cookiecuttr administration form. This could allow specially crafted values to be stored and later rendered without adequate sanitization, resulting in...

CVE-2026-5696 Multiple vulnerabilities in the Microweber administration panel

Reflected Cross-Site Scripting XSS in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/settings’ endpoint in the administration panel. A successful exploit allows an attacker to trick an authenticated user into executing malicious JavaScript code in their browser. This...

CVE-2026-5696 Multiple vulnerabilities in the Microweber administration panel

Reflected Cross-Site Scripting XSS in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/settings’ endpoint in the administration panel. A successful exploit allows an attacker to trick an authenticated user into executing malicious JavaScript code in their browser. This...

CVE-2026-5695 Multiple vulnerabilities in the Microweber administration panel

Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users to upload files to the server without restrictions. An attacker could exploit this flaw to execute malicious code remotely demonstrated by uploading the EICAR test file, which...