CVE-2026-35474

WeGIA Web Manager for charitable institutions has an open redirect vulnerability prior to version 3.6.9: the redirect parameter is taken directly from $_GET without URL validation or a whitelist, then used in a Location header. The issue is fixed in 3.6.9. Connected sources (Red Hat, NVD, CVE lis...

CVE-2026-26999

CVE-2026-26999 (Traefik) : A TLS handshake handling flaw on TCP routers may cause handshake stalls. When Traefik processes a TLS connection on a TCP router, the read deadline used for protocol sniffing can be cleared before the TLS handshake completes. If a TLS handshake read error occurs, the co...