Progress MOVEit Transfer < 2025.0.7 / 2025.1.x < 2025.1.3 Multiple Vulnerabilities

The version of Progress MOVEit Transfer installed on the remote host is prior to 2025.0.7 or 2025.1.x prior to 2025.1.3. It is, therefore, affected by multiple vulnerabilities, including: - Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer...

PT-2026-73227

Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-76710

The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on cmd socknotifyev drivers/modem/vendor standalone/wncm14a2a.c. The response line is linearized into a fixed 40-byte stack buffer via net buf linearize, which caps the copy at 39 bytes and returns out len = 39. The two...

PT-2026-76623

openssl encrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of openssl encrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

PT-2026-76792

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

CVE-2026-67926

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

EUVD-2026-60357

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

CVE-2026-50769

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

CVE-2026-50769

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

CVE-2026-67926

JeecgBoot v3.9.2's AI Chat Module accepts a "files" parameter without proper validation, enabling a remote unauthenticated attacker to upload and execute arbitrary code, yielding full confidentiality, integrity, and availability compromise (CVSS 9.8 critical). No patch version or in-the-wild expl...

PT-2026-76776

ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, PATCH /api/v1/article/:id accepts the inherited path toString.call and passes it through the utility module to apos.util.set and apos.util.get, allowing an authenticated editor to overwrite the shared...

PT-2026-76796

hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the nint...

PT-2026-76781

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore passes the attacker-controlled module attribute from serialized PropertyPythonObject XML directly to PyImport ImportModule while restoring a...

Unity Linux 20.1070e Security Update: edk2 (UTSA-2026-099522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099522 advisory. Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...

Unity Linux 20.1070e Security Update: pam (UTSA-2026-099450)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099450 advisory. Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in modules/pamuserdb/pamuserdb...

Unity Linux 20.1070e Security Update: nfs-utils (UTSA-2026-099540)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099540 advisory. A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned t...

The vulnerability of the apparmor module in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the apparmor module in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nft_add_set_elem() function in the net/netfilter/nf_tables_api.c kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nftaddsetelem function in the net/netfilter/nftablesapi.c kernel module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100733 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: clear the svc scheduler ptr early on edit ipvseditservice while unbinding the old scheduler...

The vulnerability of the mt7925_mac_write_txwi_80211() function in the drivers/net/wireless/mediatek/mt76/mt7925/mac.c file of the wireless adapter driver module from mediatek’s Linux kernel, which allows a hacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the mt7925macwritetxwi80211 function in the drivers/net/wireless/mediatek/mt76/mt7925/mac.c file of the wireless adapter driver module from mediatek’s Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could...