EUVD-2026-103332

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows unauthenticated attackers to confirm registered display names and emails via a distinct HTTP 409 response. Attackers can submit guest comments to the comment create endpoint with...

CLSA-2026-1792195755 TuxCare security update for create-next-app (1 CVE)

TuxCare rebuilt create-next-app to address 1 CVE. Fixed in 16.0.6-tuxcare.4...

CLSA-2026-1792195750 TuxCare security update for create-next-app (9 CVEs)

TuxCare rebuilt create-next-app to address 9 CVEs. Fixed in 16.0.6-tuxcare.7...

CLSA-2026-1792195746 TuxCare security update for create-next-app (9 CVEs)

TuxCare rebuilt create-next-app to address 9 CVEs. Fixed in 14.2.35-tuxcare.5...

CLSA-2026-1792195745 TuxCare security update for create-next-app (2 CVEs)

TuxCare rebuilt create-next-app to address 2 CVEs. Fixed in 12.3.7-tuxcare.8...

CLSA-2026-1792195727 TuxCare security update for create-next-app (13 CVEs)

TuxCare rebuilt create-next-app to address 13 CVEs. Fixed in 13.5.11-tuxcare.14...

CLSA-2026-1792195719 TuxCare security update for create-next-app (1 CVE)

TuxCare rebuilt create-next-app to address 1 CVE. Fixed in 15.5.26-tuxcare.1...

CLSA-2026-1792195718 TuxCare security update for create-next-app (1 CVE)

TuxCare rebuilt create-next-app to address 1 CVE. Fixed in 15.5.24-tuxcare.1...

CLSA-2026-1792195717 TuxCare security update for create-next-app (1 CVE)

TuxCare rebuilt create-next-app to address 1 CVE. Fixed in 15.5.23-tuxcare.1...

CLSA-2026-1792195716 TuxCare security update for create-next-app (1 CVE)

TuxCare rebuilt create-next-app to address 1 CVE. Fixed in 15.5.25-tuxcare.1...

PT-2026-116458

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.9 phpMyFAQ versions prior to 4.2.0-beta Description An account enumeration issue allows unauthenticated attackers to confirm registered display names and emails. By submitting guest comments to the comment create...

EUVD-2026-103154

ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, ZoneMinder interpolates an unvalidated monitor Device field into shell commands in PHP and Perl control paths when an authenticated user with monitor-create or monitor-edit...

CVE-2026-30971 ZoneMinder: Authenticated RCE via command injection in monitor Device Path

ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, ZoneMinder interpolates an unvalidated monitor Device field into shell commands in PHP and Perl control paths when an authenticated user with monitor-create or monitor-edit...

CVE-2026-30971

ZoneMinder, an open-source CCTV software application, is vulnerable to Remote Code Execution (RCE) via command injection in versions prior to 1.39.2, 1.38.2, and 1.36.40. The root cause is the interpolation of an unvalidated monitor Device field into shell commands within PHP and Perl control pat...

CVE-2026-30971 ZoneMinder: Authenticated RCE via command injection in monitor Device Path

ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, ZoneMinder interpolates an unvalidated monitor Device field into shell commands in PHP and Perl control paths when an authenticated user with monitor-create or monitor-edit...

CVE-2026-86047

A flaw was found in MariaDB, which can lead to SQL injection and privilege escalation. The SHOW CREATE SERVER and SHOW CREATE USER commands, as well as the mariadb-dump utility, do not properly quote identifiers and values when serializing SQL data. An authenticated, low-privileged attacker can...

CVE-2026-86047

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...

CVE-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...

CVE-2026-86047

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...

CVE-2026-86047

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...