CVE-2026-22640

An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. This vulnerability exists in the DELETE /api/org/users/ endpoint. The vulnerability can be exploited when: 1. An Organization administrator...

PHPMyWind SQL注入漏洞

PHPMyWind is an enterprise website building solution based on PHP and MySQL and compliant with W3C standards. A security vulnerability exists in PHPMyWind version v.5.6. A remote attacker can exploit this vulnerability to gain privileges via the delete function on the administrator management pag...