CVE-2026-28548: Improper Privilege Management

Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-28547: Access of Uninitialized Pointer

Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28546: Heap-based Buffer Overflow

Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28542: Improper Handling of Exceptional Conditions

Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28552: Out-of-bounds Write

Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28550: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28545: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28544: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28543: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28541: Undefined Security Weakness

Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28540: Improper Neutralization of Null Byte or NUL Character

Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-28538: Path Traversal: '../filedir'

Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28537: Double Free

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-66319: Undefined Security Weakness

Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2026-28536: Authentication Bypass by Primary Weakness

Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2026-2418: Undefined Security Weakness

The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be authenticated as any user such as admin by simply knowing the email...

CVE-2026-28137: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Reflected XSS.This issue affects MediCenter - Health Medical Clinic: from n/a through = 14.9...

CVE-2026-28128: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This issue affects Verse: from n/a through = 1.7.0...

CVE-2026-28126: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sizam RH Frontend Publishing Pro rh-frontend allows Reflected XSS.This issue affects RH Frontend Publishing Pro: from n/a through 4.3.4...

CVE-2026-28117: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through = 2.9...