EUVD-2026-60176

Missing Authorization vulnerability in Dolusoft Software Technologies Sonlogger allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sonlogger: from v6.6.6 before 6.7.4.8...

EUVD-2026-60113

opensslencrypt before 1.4.0 contains an authentication bypass vulnerability in the verifyapitoken function that accepts any non-empty Bearer token string without validation. Attackers can upload arbitrary public keys, enumerate all keys, and revoke keys belonging to any user by providing any Bear...

EUVD-2026-60076

Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-60075

Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-60074

Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-60073

Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-60072

UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-60071

Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-60070

Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-60069

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-60068

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-60067

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-60058

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens...

EUVD-2026-60350

Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...

EUVD-2026-60444

An issue in Tneda W20E v.16.01.0.62782 allows a remote attacker to execute arbitrary code via the urlneedlogin function...

EUVD-2026-60449

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

EUVD-2026-59945

stoatchat before 0.15.0 contains a permission bypass vulnerability in the messagefetch route that checks only ViewChannel permission instead of requiring ReadMessageHistory. Attackers with ViewChannel access but ReadMessageHistory denied can retrieve individual message content by ID, bypassing th...

EUVD-2026-59941

Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a attribute and s specification GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQL WHERE clauses without parameterization or escaping. An...

EUVD-2026-59812

A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /checkout.php. Performing a manipulation of the argument amount1 results in cross site scripting. The attack can be initiated remotely. The exploit has...

EUVD-2026-59732

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in isosockgetname Accessing isopisk-conn requires locksock, which is not held here. Fix by adding the lock/release...