CVE-2026-112939

A flaw was found in filelock. The SoftFileLock component can trust a forged process identifier PID in a lock marker file that an attacker can modify. A local attacker can exploit this flaw to cause an authorized process to act as a confused deputy, improperly removing an active lock marker and...

CVE-2026-45283 Nextcloud: Files Lock app allows users to lock and unlock files of other users

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.2, and 33.0.0 to before 33.0.1, the fileslock app did not properly validate the ownership of files when processing DAV lock and unlock requests. An authenticated user could lock or...

PT-2025-54429

Name of the Vulnerable Software and Affected Versions ZwiiCMS versions prior to 13.7.00 Description The software contains a denial-of-service issue in several administrative areas because of incorrect authorization checks and problems with how resources are handled. A user with limited access can...