BELL-CVE-2026-43423 CVE-2026-43423 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43431 CVE-2026-43431 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43440

Bulletin has no description...

BELL-CVE-2026-43404

Bulletin has no description...

BELL-CVE-2026-43402

Bulletin has no description...

BELL-CVE-2026-43418 CVE-2026-43418 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43389 CVE-2026-43389 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43396

Bulletin has no description...

BELL-CVE-2026-43358

Bulletin has no description...

BELL-CVE-2025-71296

Bulletin has no description...

BELL-CVE-2026-43286

Bulletin has no description...

BELL-CVE-2025-71298

Bulletin has no description...

BELL-CVE-2025-71301

Bulletin has no description...

BELL-CVE-2026-43290

Bulletin has no description...

BELL-CVE-2025-71299

Bulletin has no description...

BELL-CVE-2026-43321 CVE-2026-43321 does not affect BellSoft software

Bulletin has no description...

CVE-2026-8208

Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing interpretation of a user provided .zip as PHP. Successful exploitation requires Teacher or higher privileges. Exploitation could result in...

CVE-2026-42310 Pillow: PDF Parsing Trailer Infinite Loop (DoS)

Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This issue has been patched in version 12.2.0...

CVE-2026-8207

Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c431e25fdc874adece5d2dc7e408e9aa2d1abadb/modules/Tracking/graphing.phpL145 feature. Successful exploitation requires Teacher or high...

CVE-2026-8208

Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing interpretation of a user provided .zip as PHP. Successful exploitation requires Teacher or higher privileges. Exploitation could result in...