EUVD-2026-35365

Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-41981

CVE-2026-41981 describes an out-of-bounds write in the IPC module. The vulnerability stems from a memory-bounds issue in the IPC component, with impact stated as availability. The CVSSv3.1 vector (LOCAL, LOW privileges, NO user interaction, LOW attack complexity) yields a base score of 5.3 (MEDIU...

CVE-2026-41981

Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-35364

Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-41985

UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2026-41985

UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2026-41985

Technical details about CVE-2026-41985 are not publicly available in the provided documents. Monitor for updates from Huawei advisories and NVD/CVE listings for affected products, impact, and remediation.

EUVD-2026-35357

UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2026-41984

Technical details about CVE-2026-41984 are not publicly available in the provided documents. Monitor for updates from the listed vendor references.

EUVD-2026-35356

UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2026-41983

Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability...

GHSA-Q723-847Q-5G8G Spring Framework Predictable Session ID in WebSocket Module

IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 throug...

com.foreach.across.modules:bootstrap-ui-module (2.1.1.release), com.foreach.across.modules:dynamic-forms-module (0.0.2.release) +181 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.3.20.release)

org.springframework:spring-webmvc MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.foreach.across.modules:bootstrap-ui-module 2.1.1.release -...

CVE-2026-41979

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality...

CVE-2026-41978

Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41980

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41975

Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity...

EUVD-2026-35341

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41980

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41980

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...