The vulnerability in the web interface of D-Link DAP-1360 wireless access points allows a intruder to execute arbitrary code.

The vulnerability of the web interface for managing microprogrammed wireless access points from D-Link DAP-1360 is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted...

PT-2026-98216

Name of the Vulnerable Software and Affected Versions Honeywell PD45 Industrial Printer versions F10.19.010040 through F10.22.030744 Description An unauthenticated Remote Code Execution RCE issue exists in the HTTPS web management interface. This is caused by an arbitrary file upload flaw that...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libkcapi (UTSA-2026-124529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124529 advisory. A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle...

CVE-2026-17413: Improper Validation of Array Index

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the RTAS firmware-to-OS interface. An attacker with administrator-level root access to a logical partition can send a...

CVE-2026-96898: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor Upload Interface. The manipulation of the argument pathtype results in path traversal. It is possible to launch the atta...

PT-2026-98236

Name of the Vulnerable Software and Affected Versions Honeywell PD45 Industrial Printer versions prior to F10.22.030745 Description An authenticated remote code execution issue exists in the web management interface due to an arbitrary file write in the Intermec Fingerprint Command Interface. An...

PT-2026-98136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nl80211 wireless configuration interface where the system fails to properly validate the size of the High Efficiency HE operation element in beacons. Specifically,...

PT-2026-97812

Name of the Vulnerable Software and Affected Versions IBM OPENBMC versions FW1120.00 through FW1120.01 IBM OPENBMC versions FW1110.00 through FW1110.31 IBM OPENBMC versions FW1060.00 through FW1060.81 Description A flaw exists in the BMC firmware management interface. A host system can trigger a...

CVE-2026-96739 SEMCMS KindEditor Upload upload_json.php cross site scripting

A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...

CVE-2026-96739

A cross-site scripting (XSS) vulnerability exists in SEMCMS versions up to 4.2 . The flaw is located within the KindEditor Upload Interface component, specifically affecting the functionality of the /Edit/php/upload_json.php file. The issue arises from the improper handling of the imgFile argumen...

CVE-2026-96739 SEMCMS KindEditor Upload upload_json.php cross site scripting

A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...

CVE-2026-91775

LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface...

CVE-2026-86867

Cinnamon's Kotaemon all versions up to and including v0.12.0 multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in libs/ktem/ktem/pages/chat/control.py that load a Conversation record by its ID...

EUVD-2026-85427

LimeSurvey fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface...

CVE-2026-91775 LimeSurvey Community Edition 7.0.14 - Reflected XSS through unescaped LSS survey-import warnings

LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface...

CVE-2026-91775

LimeSurvey Community Edition 7.0.14 is vulnerable to Reflected XSS because it fails to safely encode attacker-controlled content from a crafted .lss survey file . The vulnerability occurs specifically when the application displays import warnings , allowing an attacker to execute scripts in the a...

CVE-2026-91775 LimeSurvey Community Edition 7.0.14 - Reflected XSS through unescaped LSS survey-import warnings

LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface...

CVE-2026-91775 LimeSurvey Community Edition 7.0.14 - Reflected XSS through unescaped LSS survey-import warnings

LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface...

Security Bulletin: This Power System update is being released to address CVE-2026-19492

Summary Power Systems Firmware is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing sensitive data belonging to the hypervisor or other guest partitions hosted on the...

Security Bulletin: This Power System update is being released to address CVE-2026-17511

Summary Power Systems Firmware is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a...