CVE-2026-78556

A vulnerability exists in Industrial Edge App Publisher (all versions prior to V1.27.9 ) due to improper server certificate validation during TLS connections. This flaw enables a Man-in-the-Middle (MitM) attack, allowing an attacker to intercept and relay communications or spoof a trusted entity ...

CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

CVE-2026-72895

A vulnerability exists in several SIMATIC IPC models, specifically SIMATIC IPC BX-21A (versions < V31.01.13), SIMATIC IPC RW-543A (versions < V1.1.4), and SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (versions

CVE-2026-59241

A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions V8.0 Update 11, SIMATIC WinCC V8.1 All versions V8.1 Update 7. The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an...

CVE-2026-44415

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in...

CVE-2026-44415

Affected systems fail to properly restrict access to internal APIs and paths for authenticated users. This vulnerability, associated with CWE-35 (Path Traversal) , allows an authenticated remote attacker to access sensitive internal information. In a worst-case scenario, this access could be leve...

CVE-2026-109110

A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was...

CVE-2026-109114

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper...

CVE-2026-109115

A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects some unknown processing of the file User/forgot3.php of the component Password Reset. Performing a manipulation of the argument email/password results in sql...

CVE-2026-109144

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but...

EUVD-2026-98376

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but...

CVE-2026-109116 AdithyaYelloju Restaurant-Management-System Order Management mysqli_query authorization

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be...

CVE-2026-109116 AdithyaYelloju Restaurant-Management-System Order Management mysqli_query authorization

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be...

CVE-2026-109116 AdithyaYelloju Restaurant-Management-System Order Management mysqli_query authorization

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be...

CVE-2026-109115 AdithyaYelloju Restaurant-Management-System Password Reset forgot3.php sql injection

A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects some unknown processing of the file User/forgot3.php of the component Password Reset. Performing a manipulation of the argument email/password results in sql...

CVE-2026-109109

A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTPCOOKIE/X-Cmd results in stack-based buffer overflow. It is...

CVE-2026-109114

The AdithyaYelloju Restaurant-Management-System (up to commit 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c) contains an improper authentication vulnerability in the Login Form component, specifically affecting the User/login.php file. Manipulation of the email/passwd arguments allows for remote unaut...

CVE-2026-109114 AdithyaYelloju Restaurant-Management-System Login Form login.php improper authentication

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper...

EUVD-2026-98326

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper...

EUVD-2026-98325

A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was...