EUVD-2026-42726

Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to...

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings from ZeroBEC. "The campaign did not depend on a fake Microsoft password page. It used a...

MINI-7FCH-2HFV-W542

Bulletin has no description...

MINI-V35R-JXXX-C9XJ

Bulletin has no description...

MINI-48RF-R93P-6RR5

Bulletin has no description...

MINI-924M-863H-MG3H

Bulletin has no description...

MINI-M2GF-G466-P6QM

Bulletin has no description...

CGA-MX8C-522M-4MH9

Bulletin has no description...

CGA-RV5M-8PH3-P28W

Bulletin has no description...

MINI-87PP-RRC4-GWHP

Bulletin has no description...

MINI-Q88R-WRC5-HQGC

Bulletin has no description...

MINI-3V38-6X52-529M

Bulletin has no description...

MINI-FW69-F6QM-7GCQ

Bulletin has no description...

MINI-W455-XW8X-W2M3

Bulletin has no description...

MINI-QJ2C-PX82-57QP

Bulletin has no description...

MINI-G23R-93C9-3HPR

Bulletin has no description...

MINI-66MW-MWHR-G2G4

Bulletin has no description...

MINI-R25M-JJR9-7F5M

Bulletin has no description...

MINI-MQ2G-49CW-5HVC

Bulletin has no description...

MINI-26CG-944G-C9XJ

Bulletin has no description...