MINI-9478-6VHP-9556

Bulletin has no description...

MINI-4CC9-73CR-7QGH

Bulletin has no description...

MINI-6J6H-8QH9-MHQW

Bulletin has no description...

MINI-WRRC-5PQ9-64H8

Bulletin has no description...

MINI-HVP2-8M4C-3G57

Bulletin has no description...

MINI-FHPC-5FR6-7X5V

Bulletin has no description...

MINI-2G4F-282W-WXHG

Bulletin has no description...

MINI-XG77-75Q7-RQRX

Bulletin has no description...

MINI-M74Q-VQX8-FV9P

Bulletin has no description...

MINI-QGF9-747Q-83QP

Bulletin has no description...

MINI-V8R8-PV65-6WWC

Bulletin has no description...

MINI-H367-8CFR-F3M9

Bulletin has no description...

MINI-X699-J8Q8-W2RH

Bulletin has no description...

MINI-7C24-H36R-GVRV

Bulletin has no description...

MINI-P7JX-4C28-9X5X

Bulletin has no description...

CVE-2026-73048

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getRefIDsByFileAnnotationID endpoint that returns block identifiers citing PDF annotations without publish-access filtering. Attackers can extract block identifiers from restricted documents by supplying annotati...

CVE-2026-19870

Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...

EUVD-2026-58621

Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...

Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in Jackson Data Binding, Jackson Core, Postgresql, Scram Client, Apache MINA SSHD, Jansi Vulnerability Details CVEID:CVE-2026-59888 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and...

EUVD-2026-58634

Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAVROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from...