PT-2026-25563

A vulnerability was detected in JawherKl node-api-postgres up to 2.5. This impacts the function User.getAll of the file models/user.js. The manipulation of the argument sort results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. The vendor was...

Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution

Veeam has released security updates to address multiple critical vulnerabilities in its Backup & Replication software that, if successfully exploited, could result in remote code execution. The vulnerabilities are as follows - CVE-2026-21666 CVSS score: 9.9 - A vulnerability that allows an...

SUSE SLES15 / openSUSE 15 Security Update : postgresql16 (SUSE-SU-2026:0882-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0882-1 advisory. Update to version 16.13 bsc1258754. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' m...

CVE-2026-32248 Parse Server: Account takeover via operator injection in authentication data identifier

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.12 and 8.6.38, an unauthenticated attacker can take over any user account that was created with an authentication provider that does not validate the format of the user...

EUVD-2026-11597

A vulnerability allowing a Backup Viewer to perform remote code execution RCE as the postgres user...

CVE-2026-21708

A vulnerability allowing a Backup Viewer to perform remote code execution RCE as the postgres user...

CVE-2026-21708

A vulnerability allowing a Backup Viewer to perform remote code execution RCE as the postgres user...

CVE-2026-21708

CVE-2026-21708 : In Veeam Backup & Replication, a vulnerability allows a Backup Viewer to perform remote code execution (RCE) with the privileges of the PostgreSQL user. Affected are 12.x versions prior to 12.3.2.4465; CVE-21708 is also addressed in 13.0.1.2067 (alongside other fixes). The connec...

CVE-2026-21708

A vulnerability allowing a Backup Viewer to perform remote code execution RCE as the postgres user...

CVE-2026-21708

A vulnerability allowing a Backup Viewer to perform remote code execution RCE as the postgres user...

Vulnerabilities fixed in Veeam Backup & Replication

Veeam has fixed vulnerabilities in Veeam Backup & Replication. The vulnerabilities allow an authenticated domain user to remotely execute code on the backup server, which can lead to unauthorized control of backup operations. This issue is present in the backup server environment and can be...

PT-2026-25006

Name of the Vulnerable Software and Affected Versions Veeam Backup and Recovery affected versions not specified Description A flaw exists that allows a Backup Viewer to execute code remotely as the postgres user. This issue has a CVSS score of 10.0 and is considered critical. The vulnerability...

Veeam Backup And Replication 安全漏洞

Veeam Backup and Replication is a backup and replication software developed by the American company Veeam. There is a security vulnerability in Veeam Backup and Replication, which stems from allowing backup administrators to execute remote code as the postgres user...

CVE-2026-31871 Parse Server has a SQL Injection via dot-notation sub-key name in `Increment` operation on PostgreSQL

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.5 and 8.6.31, a SQL injection vulnerability exists in the PostgreSQL storage adapter when processing Increment operations on nested object fields using dot notation e.g.,...

SQL Injection

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to SQL Injection in the PostgreSQL storage adapter when processing Increment operations on nested object fields using dot...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: skopeo, pulumi, nsc, restic, cluster-autoscaler, crossplane-provider-aws-sqs, yunikorn-k8shim, controller-gen, clickhouse-operator, redka, s5cmd, helm, rabbitmq-cluster-operator, actions-runner-controller, crossplane-provider-aws-cloudwatchlogs, aws-sigv4-proxy,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: skopeo, pulumi, nsc, restic, cluster-autoscaler, crossplane-provider-aws-sqs, yunikorn-k8shim, controller-gen, clickhouse-operator, redka, s5cmd, helm, rabbitmq-cluster-operator, actions-runner-controller, crossplane-provider-aws-cloudwatchlogs, aws-sigv4-proxy,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: skopeo, pulumi, nsc, restic, cluster-autoscaler, crossplane-provider-aws-sqs, yunikorn-k8shim, controller-gen, clickhouse-operator, redka, s5cmd, helm, rabbitmq-cluster-operator, actions-runner-controller, crossplane-provider-aws-cloudwatchlogs, aws-sigv4-proxy,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: k8s-driver-manager-fips, nri-redis-fips, buildah, containerd, minio, prometheus-operator-fips, kserve-modelmesh-serving, kubernetes-csi-external-provisioner, prometheus-pgbouncer-exporter, atlantis-fips, thanos-fips, argo-cd, argocd-image-updater,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: k8s-driver-manager-fips, nri-redis-fips, buildah, containerd, gitlab-cng, minio, prometheus-operator-fips, kserve-modelmesh-serving, kubernetes-csi-external-provisioner, prometheus-pgbouncer-exporter, atlantis-fips, thanos-fips, runc-fips, argo-cd,...