CVE-2026-34400

Alerta (monitoring tool) prior to 9.1.0 is affected by a SQL injection in the Query string search API (q=) due to interpolating user input into SQL via f-strings. The issue can impact query construction in PostgreSQL, and has been patched in version 9.1.0. Public references across multiple feeds ...

CVE-2025-53899

CVE-2025-53899 affects Kiteworks MFT prior to version 9.1.0. The back-end suffers from an incorrectly specified destination in a communication channel, which could allow an attacker with administrative privileges to intercept upstream communication and potentially escalate privileges. The issue i...

CVE-2025-65966

CVE-2025-65966 affects OneUptime. In version 9.0.5598, a low-permission user can create new accounts via a direct API request, bypassing the intended UI restrictions. The issue is mitigated by upgrading to version 9.1.0 (patched). No exploit details are provided beyond the existence of a direct A...