EUVD-2026-4496

EUVD-2026-4496...

EUVD-2026-4497

EUVD-2026-4497...

EUVD-2026-4495

EUVD-2026-4495...

EUVD-2026-4507

EUVD-2026-4507...

EUVD-2026-4506

EUVD-2026-4506...

EUVD-2026-4499

EUVD-2026-4499...

EUVD-2026-4504

EUVD-2026-4504...

EUVD-2026-4500

EUVD-2026-4500...

EUVD-2026-4503

EUVD-2026-4503...

EUVD-2026-4502

EUVD-2026-4502...

EUVD-2026-4501

EUVD-2026-4501...

EUVD-2026-4498

EUVD-2026-4498...

EUVD-2026-4505

EUVD-2026-4505...

PT-2026-4512

Name of the Vulnerable Software and Affected Versions PDF Complete Corporate Edition version 4.1.45 Description The software contains an unquoted service path issue in the pdfcDispatcher service. This allows local attackers to potentially execute arbitrary code. Exploitation involves leveraging t...

EUVD-2026-4223

An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This unauthenticated endpoint returns a list of cashier accounts, including names, email addresses, usernames, and passwords hashed using MD5. As MD5 ...

EUVD-2026-4231

An issue was discovered in Free5gc NRF 1.4.0. In the access-token generation logic of free5GC, the AccessTokenScopeCheck function in file internal/sbi/processor/accesstoken.go bypasses all scope validation when the attacker uses a crafted targetNF value. This allows attackers to obtain an access...

EUVD-2026-4236

Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their scope...

EUVD-2026-4247

Null pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in function HandleDeletePoliciesPolAssoId...

EUVD-2026-4278

Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...

EUVD-2026-4310

An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a publicly accessible client-side JavaScript resource...