EUVD-2026-60168

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information disclosure or privilege escalation via IMAP command injection...

PT-2026-76642

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.6.18 Roundcube Webmail versions 1.7.x prior to 1.7.3 Description An issue exists where mail search and LITERAL+ byte-count desynchronization can occur. This condition allows for IMAP command injection, whi...

CVE-2026-50772

An issue in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function...

CVE-2026-50771

Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...

CVE-2026-50772

An issue in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function...

PT-2026-76744

An issue in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function...

CVE-2026-50772

An issue in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function...

PT-2026-76742

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request...

EUVD-2026-60354

An issue in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function...

CVE-2026-50770

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request...

CVE-2026-50772

Squirro Cognitive Search versions below 3.14.2 contain a flaw in the password reset function allowing unauthenticated remote attackers to execute arbitrary code, rated CVSS 9.8 Critical. A proof-of-concept exploit is available at https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50772; up...

EUVD-2026-60356

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request...

EUVD-2026-60355

Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...

CVE-2026-50770

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request...

CVE-2026-50770

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request...

PT-2026-76656

Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description An Uncontrolled Search Path Element issue exists where a low privileged attacker with local access could potentially exploit the flaw to achieve elevation of privileges. An uncontrolled...

CVE-2026-50771

Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...

PT-2026-76695

In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint...

CVE-2026-50770

Squirro Cognitive Search before v.3.14.2 is vulnerable to privilege escalation via a crafted request, rated CVSS 9.8 (critical). No exploit code or in-the-wild exploitation is documented; affected deployments should upgrade to v3.14.2 or later.

CVE-2026-50771

A stored/reflected XSS vulnerability exists in Squirro Cognitive Search versions below 3.14.2, exploitable through the Email Notification, Create Evaluation Sets, and HTML Editor functions. No authentication is required, though user interaction is needed. CVSS 6.1 (MEDIUM) reflects low confidenti...