EUVD-2026-84039

InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, the POST /api/machine/pk/restart/ endpoint in src/backend/InvenTree/machine/api.py uses IsAuthenticatedOrReadScope without requiring the ADMIN role used by other machine management operations. Any authenticated user who lack...

CVE-2024-33515

Unauthenticated Denial-of-Service DoS vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service...

Fresenius Kabi Agilia Connect Infusion System 资源管理错误漏洞

The Fresenius Kabi Agilia Connect Infusion System is an infusion system from Fresenius Kabi, a German company, that is vulnerable to a resource management error that could be exploited by an attacker to interrupt the normal operation of the device. normal operation of the device...