EUVD-2026-0596

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0624

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0598

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0613

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0626

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0642

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0630

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0662

An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories. We have already fixed the vulnerability in the following version:...

EUVD-2026-0678

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following...

EUVD-2026-0685

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS...

EUVD-2026-0692

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS...

EUVD-2026-0715

A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/deluser.jsp of the component HTTP GET Parameter Handler. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has...

EUVD-2026-0719

A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agentworkreport.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The...

EUVD-2026-0726

EUVD-2026-0726...

EUVD-2026-0045

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...

Hacker Claims European Space Agency Breach, Selling 200GB of Data

This article has been updated with a tweet from the agency acknowledging that it is investigating these claims.…...

EUVD-2025-205907

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThinkUpThemes Melos allows Stored XSS.This issue affects Melos: from n/a through 1.6.0...

EUVD-2025-205871

A weakness has been identified in youlaitech vue3-element-admin up to 3.4.0. This issue affects some unknown processing of the file src/views/system/notice/index.vue of the component Notice Handler. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The...

Happy 16th Birthday, KrebsOnSecurity.com!

KrebsOnSecurity.com celebrates its 16th anniversary today! A huge "thank you" to all of our readers -- newcomers, long-timers and drive-by critics alike. Your engagement this past year here has been tremendous and truly a salve on a handful of dark days. Happily, comeuppance was a strong theme...

EUVD-2025-205401

Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for template repositories. This is also fixed for 11 LTS in 11.0.7 and later...