CVE-2026-61518 ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...

CVE-2026-70857

creationtimestamp| type| source ---|---|--- 2026-08-19 17:45:07+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70859

creationtimestamp| type| source ---|---|--- 2026-08-19 17:45:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 15:07:23+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtr2wkpx2y23...

CVE-2026-61193

creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70672

creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:33+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60992

creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-24 09:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtsxbqnj762x...

CVE-2026-60994

creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:16+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-61042

creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 02:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtpqzgk4j42u...

CVE-2026-61288

creationtimestamp| type| source ---|---|--- 2026-08-19 17:21:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-61290

creationtimestamp| type| source ---|---|--- 2026-08-19 17:21:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-73879

creationtimestamp| type| source ---|---|--- 2026-08-19 17:21:01+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60903

creationtimestamp| type| source ---|---|--- 2026-08-19 17:20:47+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60906

creationtimestamp| type| source ---|---|--- 2026-08-19 17:20:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-73890

creationtimestamp| type| source ---|---|--- 2026-08-19 17:20:14+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-62620

creationtimestamp| type| source ---|---|--- 2026-08-19 17:20:00+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-62628

creationtimestamp| type| source ---|---|--- 2026-08-19 17:19:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60944

creationtimestamp| type| source ---|---|--- 2026-08-19 17:19:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-49392

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 and 5.0.0-beta3, DB::getFile and DB::searchFile in src/syscheckd/src/db/src/file.cpp concatenate a monitored file path into SQLite row filters. On non-Windows systems,...

CVE-2026-60707

creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:46+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtqltqxgvm2f...

CVE-2026-71158

creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...