PT-2026-111607

Name of the Vulnerable Software and Affected Versions obsidian-tc versions prior to 1.3.1 Description Bridge tools do not consistently apply the read access-control list ACL to every returned field. Specifically, the tasks filter tool exposes group counts derived from denied notes, the makemd que...

CVE-2026-22678 Webmin < 2.641 Stored XSS via System and Server Status

Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary JavaScript in the browser context of administrators by injecting...