EUVD-2026-88686

An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...

Viidure Dashcam Android Application

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to access, modify, or delete sensitive user data and critical system files, potentially compromising the operation of the entire platform. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

CVE-2026-102247

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

EUVD-2026-88620

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

CVE-2026-102247

A vulnerability exists in FastAdmin versions 1.6.1.20250430 and 1.6.5.20260602 within the Database Management component. The flaw is located in an unknown function of the application/database.php file, which can be manipulated to result in execution with unnecessary privileges . This attack can b...

CVE-2026-102247 FastAdmin Database Management database.php unnecessary privileges

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

CVE-2026-102247 FastAdmin Database Management database.php unnecessary privileges

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

CLEANSTART-2026-MW15719 Netty is a network application framework for development of protocol servers and clients

Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...

CLEANSTART-2026-IP93838 Netty is a network application framework for development of protocol servers and clients

Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...

CLEANSTART-2026-DP99437 Netty is a network application framework for development of protocol servers and clients

Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...

PT-2026-102441

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

CVE-2026-102759: Improper Validation of Integrity Check Value

NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In nxsecureverifymac, a decrypted application record whose length equals the negotiated MAC size is treated as valid and returns success after advancing the receive sequence number. The...

CVE-2026-102247: Execution with Unnecessary Privileges

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

Amazon Linux 2 : python-tornado (ALAS-2026-3925)

The version of python-tornado installed on the remote host is prior to 4.2.1-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3925 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses...

Linux Distros Unpatched Vulnerability : CVE-2026-102635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in...

PT-2026-102683

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 ImageMagick versions prior to 6.9.13-57 Description An uninitialized heap memory disclosure exists in the GIF decoder's application extension handler within coders/gif.c. A remote attacker can use special...

Important: python-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape.py without passing maxnumfields. RequestHandler.execute in tornado/web.py parses the...

CVE-2026-8067: Missing Authorization

An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...

PT-2026-102752

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw exists in the soup uri decode data uri function, which incorrectly treats base64 data-URI payloads as NUL-terminated strings when calling g base64 decode inplace. If the percent-decode...

CVE-2026-102555: Out-of-bounds Read

A flaw was found in libsoup. The soupuridecodedatauri function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling gbase64decodeinplace. If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the si...