CVE-2026-52484

An issue in MitraStar GPT-2742GX4X5v6-SV GLg2.5100XNT0b233 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi component...

EUVD-2026-78943

An issue in MitraStar GPT-2742GX4X5v6-SV GLg2.5100XNT0b233 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi component...

CVE-2026-79410

Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods...

CVE-2026-79410

Webkul Bagisto v2.4.9 is vulnerable to a vulnerability where improper validation of the quantity parameter in the add-to-cart path allows authenticated attackers to manipulate order totals. By providing a negative quantity , an attacker can reduce the total order amount below the legitimate price...

CVE-2026-79411

The Webkul Bagisto 2.4.9 software is vulnerable to vertical privilege escalation due to an incorrect privilege assignment in the admin user-management component. The user-update endpoint (route admin.settings.users.update, UserController::update()) fails to verify if an actor is permitted to gran...

CVE-2026-79425

An authenticated Server-Side Request Forgery SSRF in the /adminapi/file/onlineupload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request...

PT-2026-93179

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the child...

PT-2026-93123

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.4.0 through 9.5.2 Description Concrete CMS fails to escape colliding page paths before rendering them in the location panel's duplicate-path confirmation dialog. The check endpoint returns the submitted path unmodified ...

PT-2026-92432

Name of the Vulnerable Software and Affected Versions SD-WAN Orchestrator affected versions not specified Description An authenticated remote attacker with read-only privileges can cause the exposure of sensitive configuration information by sending a specially crafted request to the cache...

PT-2026-92437

Name of the Vulnerable Software and Affected Versions EdgeConnect SD-WAN Gateways affected versions not specified Description A privilege escalation issue exists in the API of EdgeConnect SD-WAN Gateways. This flaw allows a remote authenticated user with low privileges to gain administrative acce...

PT-2026-92393

Concrete CMS before 9.5.3 did not enforce a per-page authorization check when reordering pages from the sitemap. In the sitemap Explore dashboard controller, the send to top and send to bottom reorder tasks ran after only a generic sitemap-access check; the controller loaded the page named by the...

PT-2026-92159

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation affected versions not specified Description An authenticated user can embed arbitrary JavaScript code into the Web UI. This stored cross-site scripting issue allows for the alteration of intended...

PT-2026-92158

Name of the Vulnerable Software and Affected Versions IBM Business Automation Workflow affected versions not specified Description An authenticated attacker can trigger restricted import actions because of missing authorization controls in both containerized and traditional deployments...

PT-2026-92135

Name of the Vulnerable Software and Affected Versions Confluence Data Center version 7.4.0 Confluence Data Center version 7.13.0 Confluence Data Center version 8.5.0 Confluence Data Center version 8.9.0 Confluence Data Center version 9.0.1 Confluence Data Center version 9.1.0 Confluence Data Cent...

PT-2026-92137

Name of the Vulnerable Software and Affected Versions Confluence Data Center version 8.9.0 Confluence Data Center version 9.0.1 Confluence Data Center version 9.1.0 Confluence Data Center version 9.2.0 Confluence Data Center version 9.3.1 Confluence Data Center version 9.4.0 Confluence Data Cente...

PT-2026-92123

Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled expose POST /api/cloudinary-generate-signature, whose handler in cloudinary/src/getGenerateSignature.ts passes...

PT-2026-92062

Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where get pdf path re-downloads targets with Python requests without egress validation. Authenticated attackers can supply URLs that redirect to internal addresses or use DNS rebinding to acce...

PT-2026-92055

Flowise before 3.1.4 fails to validate baseURL parameters in chat-model nodes, allowing authenticated users to redirect requests to arbitrary hosts. Attackers with chatflows:create or chatflows:update permissions can exfiltrate LLM provider API keys by redirecting requests to cloud metadata...

PT-2026-92116

Name of the Vulnerable Software and Affected Versions OneNav version 1.2.4 Description An authenticated administrator can trigger an arbitrary file deletion by submitting a non-HTML upload filename that matches an existing file in the application's working directory. This occurs within the...

CVE-2026-91947: Concurrent Execution using Shared Resource with Improper Synchronization

FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock. Authenticated clients can race AUDIN channel closure messages against DRDYNVC data parsing to trigger heap-use-after-fre...