PT-2026-106224

Name of the Vulnerable Software and Affected Versions Feehi CMS version 2.1.1 Description Incorrect Access Control allows a low-privilege backend administrator with administrator-update permission to change the password of the built-in super administrator account. This occurs because the server...

EUVD-2026-92783

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not...

CVE-2026-95263

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not...

CVE-2026-95263

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not...

CVE-2026-95263

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control (CWE-284). A low-privilege backend administrator possessing administrator-update permissions can modify the password of the built-in super administrator account. This is possible because the server fails to enforce protections for the supe...

CVE-2026-10171

The CVE-2026-10171 affects code-projects Online Music Site 1.0, specifically the AdminUpdateAlbum.php endpoint. The vulnerability arises from manipulating the ID argument, enabling SQL injection in an unknown part of the file, with remote exploitation reported. The exploit is publicly disclosed. ...

PT-2025-31676 · Freshrss · Freshrss

Name of the Vulnerable Software and Affected Versions: FreshRSS versions 1.26.1 and below Description: FreshRSS is a free, self-hostable RSS aggregator. An authenticated administrator user can execute arbitrary code on the FreshRSS server by modifying the update URL to one they control, and gain...

Visual Studio 2022 version 17.0.3 update

Visual Studio 2022 version 17.0.3 security update. This update applies to all affected editions of Visual Studio 2022 version lower than 17.0.3 on the Current channel. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the clie...

Parcel Tracker eCourier < 1.0.2 - Plugin's Settings Update via CSRF

The plugin did not properly check for CSRF, allowing attackers to make a logged in administrator update the plugin's settings PoC...

Visual Studio 2022 version 17.6.10 update

This security update applies to all editions of Visual Studio 2022, and will update client machines on the LTSC channel to version 17.6.10. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update t...

Visual Studio 2022 version 17.4.15 update

This security update applies to all editions of Visual Studio 2022, and will update client machines on the LTSC channel to version 17.4.15. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update t...

Visual Studio 2022 version 17.0.18 update

This security update applies to all editions of Visual Studio 2022, and will update client machines on the LTSC channel to version 17.0.18. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update t...

Visual Studio 2022 version 17.8.12 update

This security update applies to all editions of Visual Studio 2022, and will update client machines on the LTSC channel to version 17.8.12. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update t...

Visual Studio 2022 version 17.11.5 update

This security update applies to all editions of Visual Studio 2022, and will update client machines on the Current channel to version 17.11.5. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the updat...

Visual Studio 2022 version 17.8.8 update

This security update applies to all editions of Visual Studio 2022, and will update client machines on the LTSC channel to version 17.8.8. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update to...

Visual Studio 2022 version 17.8.9 update

This security update applies to all editions of Visual Studio 2022, and will update client machines on the LTSC channel to version 17.8.9. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update to...

Visual Studio 2022 version 17.10.8 update

This security update applies to all editions of Visual Studio 2022, and will update client machines on the LTSC channel to version 17.10.8. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update t...

Visual Studio 2019 version 16.9.0 to 16.9.23 update

This security update applies to all editions of Visual Studio 2019 between versions 16.9.0 and 16.9.22, and will update client machines to version 16.9.23. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order...

Visual Studio 2019 version 16.11.23 update

This security update applies to all editions of Visual Studio 2019 between versions 16.0.0 and 16.11.22, and will update client machines to version 16.11.23. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in orde...

Visual Studio 2022 version 17.4.4 update

This security update applies to all editions of Visual Studio 2022, and will update client machines on either the Current or LTSC channels to version 17.4.4. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in orde...