17574 matches found
PT-2026-46339
Unauthenticated Local File Inclusion in Snow Club = 1.1 versions...
PT-2026-46374
Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...
PT-2026-46340
Unauthenticated Local File Inclusion in Especio = 1.0 versions...
PT-2026-46350
Unauthenticated Local File Inclusion in Kelly Young = 1.1.0 versions...
PT-2026-46341
Unauthenticated Local File Inclusion in Food Drop = 1.3 versions...
PT-2026-46376
Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...
PT-2026-46372
Unauthenticated Local File Inclusion in Spike = 1.2 versions...
PT-2026-46328
Unauthenticated PHP Object Injection in Reisen = 1.4.1 versions...
PT-2026-46363
Unauthenticated Local File Inclusion in Printo = 1.11 versions...
PT-2026-46369
Unauthenticated Local File Inclusion in Choreo = 1.6 versions...
PT-2026-46378
Unauthenticated Local File Inclusion in Line Agency = 1.3.1 versions...
PT-2026-46359
Unauthenticated Local File Inclusion in Medeus = 1.14 versions...
CVE-2026-10860: Incorrect Authorization
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
PT-2026-46368
Unauthenticated Local File Inclusion in Skyward = 1.10 versions...
CVE-2026-42318
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.0.7, low privilege users with access to planning can delete any object in GLPI. Upgrade to 11.0.7 or 10.0.25 to receive a patch. As a workaround, disable delete rights for User'...
CVE-2026-42318
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.0.7, low privilege users with access to planning can delete any object in GLPI. Upgrade to 11.0.7 or 10.0.25 to receive a patch. As a workaround, disable delete rights for User'...
CVE-2026-42318
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.0.7, low privilege users with access to planning can delete any object in GLPI. Upgrade to 11.0.7 or 10.0.25 to receive a patch. As a workaround, disable delete rights for User'...
EUVD-2026-34095
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.0.7, low privilege users with access to planning can delete any object in GLPI. Upgrade to 11.0.7 or 10.0.25 to receive a patch. As a workaround, disable delete rights for User'...
CVE-2026-42318
GLPI versions affected: 9.5.0 and prior to 10.0.25, and prior to 11.0.7. The issue allows low-privilege users with access to the Planning feature to delete any object in GLPI. The root cause details are not explicitly described beyond exploitation via the Planning endpoint. Impact is the potentia...