EUVD-2026-78592

XWiki Platform is a generic wiki platform. From 13.4-rc-1 until 16.10.17, 17.4.10, 17.10.4, and 18.1.0-rc-1, the Live Data edit REST API allows a user who can edit a page to change that page's rights without executing the normal document-saving authorization checks. The user can grant script righ...

The vulnerability of integrated web servers of SIMATIC devices stems from insufficient protection of the web page structure, allowing attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of integrated Web servers on SIMATIC devices is related to insufficient protection of the web page structure when certain parts of the device’s configuration are modified using SNMP. Exploiting this vulnerability allows a perpetrator with access to the vulnerable system to...