CVE-2026-67544

The Heym workflow engine is vulnerable to Remote Code Execution (RCE) in versions prior to 0.0.71 . The root cause is the lack of sandboxing, AST validation, or role gates when handling the playwrightCode field in a Playwright node. The engine accepts an arbitrary Python code string, writes it to...

CVE-2026-67543

Prior to version 0.0.70 , the heym platform suffered from insufficient isolation for untrusted code. While the python_tool_executor.py component correctly mandates a Docker sandbox, the sibling component, skill_python_executor.py, executes skill Python via a local backend subprocess without Docke...

CVE-2026-121527

The software Fortinet FortiClientEMS is affected by an execution with unnecessary privileges vulnerability [CWE-250]. Specifically, versions 7.4.3 through 7.4.7 , 7.4.0 through 7.4.1 , and all versions of 7.2 are impacted. This flaw allows an authenticated local attacker with administrative privi...

CVE-2026-126218

An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] exists in FortiManager versions 8.0.0 through 8.0.1 , 7.6.0 through 7.6.7 , and 7.4.0 through 7.4.11 . This flaw may allow a remote authenticated attacker with admin permissions to elevate their privileges to root by send...

CVE-2026-126166

Fortinet FortiMail is affected by an argument injection vulnerability (CWE-88) in versions 8.0.0 through 8.0.2 , 7.6.0 through 7.6.6 , 7.4.0 through 7.4.8 , and all versions of 7.2 . The root cause is the improper neutralization of argument delimiters in a command, which can be exploited via craf...

CVE-2026-126169

Fortinet FortiMail versions 8.0.0 through 8.0.2, 7.6.0 through 7.6.6, 7.4.0 through 7.4.8, and all versions of 7.2 are affected by an argument injection vulnerability (CWE-88). The root cause is the improper neutralization of argument delimiters in a command. An authenticated remote attacker with...

CVE-2026-126168

Fortinet FortiMail versions 8.0.0 through 8.0.2, 7.6.0 through 7.6.6, 7.4.0 through 7.4.8, and all versions of 7.2 are affected by an Argument Injection (CWE-88) vulnerability. The root cause is an improper neutralization of argument delimiters in a command. This allows an authenticated remote at...

CVE-2026-126167

A command injection vulnerability exists in FortiMail (versions 8.0.0-8.0.2, 7.6.0-7.6.6, 7.4.0-7.4.8, and all 7.2 versions). The root cause is the improper neutralization of special elements used in a command. An authenticated remote attacker with domain admin or admin privileges can send crafte...

CVE-2026-126152

FortiMail is affected by an Authorization Bypass Through User-Controlled Key vulnerability (CWE-639). This flaw allows an authenticated remote attacker to send crafted HTTP requests to the webmail and administrative interfaces . Successful exploitation may enable the attacker to delete arbitrary ...

CVE-2026-126158

FortiMail versions 8.0.0 through 8.0.1 are vulnerable to an OS command injection vulnerability (CWE-78 ) due to improper neutralization of special elements used in an OS command. An authenticated administrator can exploit this via specially crafted HTTP requests to execute unauthorized code or co...

CVE-2026-126145

Fortinet FortiMail is affected by an OS command injection vulnerability [CWE-78]. This flaw allows an authenticated administrator with system-time read-write access to execute unauthorized code or commands with root privileges. The vulnerability impacts the following versions: FortiMail 8.0.0 thr...

EUVD-2026-124027

blueprintUE Self-Hosted Edition before 4.3.7 contains an insecure default configuration in its Docker Compose examples that sets MYSQLALLOWEMPTYPASSWORD=yes in database.env and publishes MariaDB on port 3306. Unauthenticated attackers reaching the Docker host on port 3306 can log in as root witho...

CVE-2026-126812

blueprintUE Self-Hosted Edition versions before 4.3.7 are vulnerable due to an insecure default configuration in the Docker Compose examples. The database.env file sets MYSQL_ALLOW_EMPTY_PASSWORD=yes while publishing MariaDB on port 3306 . This allows unauthenticated attackers with network access...

CVE-2026-0330 PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama

A remote code execution RCE vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges. The security risk posed by this issue is significantly minimized by restricting access to the...

CVE-2026-0330

A remote code execution (RCE) vulnerability exists in Palo Alto Networks PAN-OS software specifically affecting Panorama . An authenticated administrator with network access can exploit this flaw to execute arbitrary code with root privileges . Cloud NGFW, Prisma® Access, and standalone PAN-OS fi...

EUVD-2026-123779

A remote code execution RCE vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges. The security risk posed by this issue is significantly minimized by restricting access to the...

EUVD-2026-123775

Webmin through 2.670 contains a users file injection vulnerability in acl/certissue.cgi that allows authenticated Webmin users to inject lines by supplying unvalidated certificate DN fields containing newlines. Attackers can end a DN field with a backslash and newline to add a second root entry...

CVE-2026-126781

Webmin versions through 2.670 are vulnerable to a users file injection vulnerability within the acl/cert_issue.cgi component. The root cause is the processing of unvalidated certificate DN fields which do not properly neutralize newline characters . By supplying a backslash and newline, an authen...

EUVD-2026-123774

Webmin through 2.670 contains a privilege escalation vulnerability in acl/savegroup.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules...

CVE-2026-126780

Webmin versions up to and including 2.670 are susceptible to a privilege escalation vulnerability within the acl/save_group.cgi component. The root cause is the improper handling of the mod parameter, which allows delegated administrators to submit arbitrary module lists. An attacker with access ...