MINI-MJGQ-WHQR-Q4W2

Bulletin has no description...

MINI-XVGC-RQ86-JJV9

Bulletin has no description...

MINI-H4F9-WH6V-6XJX

Bulletin has no description...

MINI-2X76-2C3F-VPHJ

Bulletin has no description...

MINI-G6RW-V6M2-CRC4

Bulletin has no description...

MINI-FC75-JPJ7-VWM3

Bulletin has no description...

CVE-2026-15305

The CVE affects TYPO3 CMS versions 14.2.0–14.3.5. Root cause: MimeTypeValidator is registered during form building before concrete form definition properties are applied, so the server-side enforcement of allowedMimeTypes is bypassed and users can upload files with arbitrary MIME types via FileUp...

CGA-8FJF-9H72-4VFP

Bulletin has no description...

RHSA-2026:38751 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2026:38750 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

MINI-XH53-P6XW-2CRH

Bulletin has no description...

MINI-68MP-44WF-3X7G

Bulletin has no description...

ECHO-6A06-58A4-E150

Bulletin has no description...

ECHO-AF51-DF70-C8C4

Bulletin has no description...

CVE-2026-13699 Databroker 0.6.1 PublishValue missing data_point panic

In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional datapoint field in PublishValueRequest. When a request contains a valid signalid but omits datapoint, the server directly calls unwrap on request.datapoint,...

CVE-2026-13699 Databroker 0.6.1 PublishValue missing data_point panic

In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional datapoint field in PublishValueRequest. When a request contains a valid signalid but omits datapoint, the server directly calls unwrap on request.datapoint,...

CVE-2026-13699

In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional datapoint field in PublishValueRequest. When a request contains a valid signalid but omits datapoint, the server directly calls unwrap on request.datapoint,...

EUVD-2026-43634

In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional datapoint field in PublishValueRequest. When a request contains a valid signalid but omits datapoint, the server directly calls unwrap on request.datapoint,...

DEBIAN-CVE-2026-61627

Bulletin has no description...

CVE-2026-11802

The FoodBook Lite - Online Food Ordering System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.6. The registration function, accessible via the wpajaxnoprivregistrationaction AJAX action, lacks any nonce verification or capability check, and...