PT-2025-26260 · Microsoft · Dynamics 365 Fasttrack Implementation Assets

Name of the Vulnerable Software and Affected Versions: Dynamics 365 FastTrack Implementation Assets affected versions not specified Description: The issue concerns the exposure of private personal information to unauthorized actors in Dynamics 365 FastTrack Implementation Assets, allowing attacke...

PT-2025-26249 · Unknown · Phpgurukul Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID19 Testing Management System 2021 Description: A problematic issue affects the processing of the file /search-report-result.php, where the manipulation of the argument q leads to cross-site scripting. This issue may be initiat...

PT-2025-26228 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12 Description: The issue allows a privileged user to modify configuration files, enabling the upload of a malicious autoupdate file to execute arbitrary commands. Recommendations: For...

PT-2025-26236 · Unknown +1 · Webassembly Wabt +1

Name of the Vulnerable Software and Affected Versions: WebAssembly wabt versions up to 1.0.37 Description: A vulnerability was found in WebAssembly wabt, classified as problematic. The function OnDataCount of the file src/interp/binary-reader-interp.cc is affected, leading to resource consumption...

PT-2025-26237 · Unknown +1 · Webassembly Wabt +1

Name of the Vulnerable Software and Affected Versions: WebAssembly wabt versions up to 1.0.37 Description: A vulnerability was found in WebAssembly wabt, affecting the function GetFuncOffset of the file src/interp/binary-reader-interp.cc. The manipulation leads to use after free. It is possible t...

PT-2025-27045

Name of the Vulnerable Software and Affected Versions: Linksys WRT1900ACS, EA7200, EA7450, and EA7500 versions up to 20250619 Description: A critical vulnerability exists in Linksys routers due to a stack-based buffer overflow. The issue is located in the SetDefaultConnectionService function with...

PT-2025-26131 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel, specifically the ext2 filesystem. It involves adding more validity checks for inode counts to prevent crashes on corrupted filesystems. The checks...

PT-2025-26174 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4 Description: The issue is related to cross-site request...

PT-2025-26207 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.2 Description: A SQL Injection issue was identified in the id parameter of the "/WeGIA/controle/control.php" endpoint, allowing attackers to manipulate SQL queries and access sensitive database information, such as...

PT-2025-26200 · Unknown · Openlist Frontend

Name of the Vulnerable Software and Affected Versions: OpenList Frontend versions prior to 4.0.0-rc.4 Description: A stored XSS vulnerability exists in the file preview/browsing feature of the application. This occurs when files with a .py extension containing JavaScript code wrapped in tags are...

PT-2025-25777 · Funnelkit · Recover Woocommerce Cart Abandonment

Name of the Vulnerable Software and Affected Versions: Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit versions up to, and including, 3.5.3 Description: The issue is related to a missing capability check on the install or activate addon plugins...

PT-2025-26189 · Versa +1 · Versa Director +1

Name of the Vulnerable Software and Affected Versions: Versa Director SD-WAN orchestration platform affected versions not specified Description: The issue affects the Versa Director SD-WAN orchestration platform, which utilizes the Cisco NCS application service. Active and Standby Directors...

PT-2025-26206 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.2 Description: The issue is related to an OS Command Injection flaw in the "/html/configuracao/debug info.php" endpoint. The branch parameter is not properly sanitized before being concatenated and executed in a...

PT-2025-28942

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration Suite versions prior to 9.0.0 Patch 46 Zimbra Collaboration Suite versions 10.0.x prior to 10.0.15 Zimbra Collaboration Suite versions 10.1.x prior to 10.1.9 Description: The software is susceptible to a denial of service...

PT-2025-25934 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0+ Description: A vulnerability in the Linux kernel has been identified, where the assumption in disable kprobe is incorrect, leading to an attempt to disarm an already disarmed kprobe and triggering a WARN...

PT-2025-26010 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.0 Description: A bug in the Linux kernel has been resolved, which was causing an address sanitizer warning in raid status. The warning occurred when using a kernel with the address sanitizer and running a...

PT-2025-25863 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-rc4-00208-g69cb6c6556ad Description: A vulnerability in the Linux kernel has been resolved. The issue was discovered through automatic kernel fuzzing, which led to a warning about an invalid pipe directio...

PT-2025-25894 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A possible race condition, specifically a use-after-free issue, has been identified in the Linux kernel. This issue arises due to a lack of synchronization between the upper layer...

PT-2025-25880 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified where the iforce close function waits at wait event interruptible with dev-mutex held, blocking input disconnect device from input...

Fuji Electric Smart Editor

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all...