CVE-2026-54206

CVE-2026-54206 affects Tobit Laboratories AG TeamDavid’s Webbox. The issue is a server-side inclusion/SSRF via the pathname parameter in the sending functionality, which can be set to UNC paths (e.g., \Server\Share). The server processes these paths without validation, causing outbound connection...

CVE-2025-22406

CVE-2025-22406 relates to Google Android’s Bluetooth stack, specifically the function bnepu_check_send_packet in bnep_utils.cc . The issue is described as a use-after-free that could enable code execution and local privilege escalation with no additional privileges or user interaction . Multiple ...