CVE-2026-54568

Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.0.0 until 3.0.6, a client connected to the UFO WebSocket server as a DEVICE could call DEVICEINFOREQUEST with another device's targetid and receive that device's server-side systeminfo through...

EUVD-2025-25453

Malicious code in bioql PyPI...

Code injection

HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users...