EUVD-2026-51664

Decidim is a participatory democracy framework. From 0.31.1 before 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, a participant can directly load /admin/demographics/questions/editquestions and reach the demographics questionnaire editor without the required administrator authorization. The...

CVE-2026-26710

CVE-2026-26710 affects code-projects Simple Food Order System v1.0 with a SQL Injection vulnerability in /food/routers/edit-orders.php. The issue is documented across multiple connected sources, which identify the vulnerability as SQL Injection and indicate a high-severity impact (CVSS v3.1: 9.8,...

Open Redirect

kibana is vulnerable to open redirect. The vulnerability exists due to flawed router path checks which allows an attacker to redirect the user to an arbitrary website...