CVE-2026-98806

A flaw was found in the Linux kernel's octeontx2-pf network driver. When Data Center Bridging DCB is enabled, the driver assumes traffic queue mapping structures are always initialized, which is not the case for System Data Path SDP virtual functions. This issue leads to a NULL pointer dereferenc...

CVE-2026-41545

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...

CVE-2026-34015

A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...

CVE-2026-26243

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2026-41545

The QuMagie application is affected by a relative path traversal vulnerability. An attacker who has obtained an administrator account can exploit this flaw to access and read the contents of unexpected files or system data . The vulnerability has been addressed in QuMagie version 2.9.1 and later....

EUVD-2026-101979

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...

CVE-2026-41545 WebSocket timelapse path traversal and command injection

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...

CVE-2026-34015

A path traversal vulnerability (CWE-22) exists in the upload.php component of Video Station . An authenticated remote attacker with a user account can exploit this flaw to read the contents of unexpected files or system data. The vulnerability is mitigated in Video Station version 5.8.8 and later...

EUVD-2026-101976

A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...

CVE-2026-26243 Arbitrary Folder Deletion in Qsync Central 5.0.0.5

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

EUVD-2026-101971

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2026-41544

A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.10 and...

CVE-2026-39993

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...

CVE-2026-24718

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

CVE-2025-66272

A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...

CVE-2025-66275

A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...

EUVD-2026-101880

A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.10 and...

EUVD-2026-101879

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...

CVE-2026-39993

A relative path traversal vulnerability exists in Download Station (specifically mentioned in the context of the Addon/Search addon Parameter ). A remote attacker with a valid user account can exploit this flaw to read unexpected files or system data . The vulnerability has been addressed in Down...

CVE-2026-24718

A path traversal vulnerability affects Qsync Central in the qsyncsrv.cgi component. If a remote attacker obtains a user account, they can exploit this flaw to read unexpected files or system data . The vulnerability has been addressed in versions 5.0.0.7 , 5.1.0.3 , 5.2.0.5 , and 5.3.0.2 and late...