EUVD-2026-2887

BOOTP Turbo 2.0.0.1253 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to execute arbitrary code with elevated LocalSystem privileges during system startup or reboot...

EUVD-2026-2907

Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without user interaction. Attackers can craft a malicious webpage that automatically submits a form to change router remote access settings to port 8080 without the user's consent...

EUVD-2026-3019

EUVD-2026-3019...

EUVD-2026-2560

The Testimonials Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject...

EUVD-2026-2587

EUVD-2026-2587...

EUVD-2026-2596

EUVD-2026-2596...

ECHO-8C4E-D922-13F7 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

EUVD-2026-2188

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

MINI-GFJ7-C6GH-425C

Bulletin has no description...

CGA-HW4W-PXH2-8C54

Bulletin has no description...

EUVD-2026-1731

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release version 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, LTS2023 release versions 7.10.1.0 through 7.10.1.70, contain an Improper Neutralization...

CGA-67CP-QP5V-884V

Bulletin has no description...

EUVD-2026-1174

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

MINI-FHGX-3QX6-VWRR

Bulletin has no description...

EUVD-2026-0169

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0590

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0633

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0668

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the...

EUVD-2025-205146

In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in skmemraiseallocated. syzbot reported 0 a null-ptr-deref in skgetrmem0 while using IPPROTOUDPLITE 0x88: 14:25:52 executing program 1: r0 = socket$inet60xa, 0x80002, 0x88 We had a similar...

EUVD-2025-204837

CMSimple 5.2 contains a stored cross-site scripting vulnerability in the Filebrowser External input field that allows attackers to inject malicious JavaScript. Attackers can place unfiltered JavaScript code that executes when users click on Page or Files tabs, enabling persistent script injection...