Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 6.3 CVE-2026-13587

seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow_CVE-2026-13587

A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the ...

seladb PcapPlusPlus 25.05 CVE
HIGH 8.7 CVE-2026-13583

Edimax EW-7478APC POST Request formUSBFolder buffer overflow_CVE-2026-13583

A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component...

Edimax EW-7478APC 1.04 CVE
HIGH 8.7 CVE-2026-13582

Edimax EW-7478APC POST Request formUSBAccount buffer overflow_CVE-2026-13582

A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component...

Edimax EW-7478APC 1.04 CVE
MEDIUM 5.3 CVE-2026-13581

Edimax EW-7478APC POST Request formStaDrvSetup os command injection_CVE-2026-13581

A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function formStaDrvSetup of the file /goform/formStaDrvSetup...

Edimax EW-7478APC 1.04 CVE
HIGH 8.7 CVE-2026-13580

Edimax EW-7478APC POST Request formQoS buffer overflow_CVE-2026-13580

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This affects the function formQoS of the file /goform/formQoS of the componen...

Edimax EW-7478APC 1.04 CVE
MEDIUM 6.5 CVE-2026-13437

CVE-2026-13437_CVE-2026-13437

Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user...

Devolutions PowerShell Universal 2026.2.0 CVE
MEDIUM 6 CVE-2026-13752

Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands_CVE-2026-13752

Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by s...

Snowflake Snowflake CLI 1.1.0 CVE
MEDIUM 4.1 CVE-2026-13751

Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load_CVE-2026-13751

Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement rea...

Snowflake Snowflake CLI 3.6.0 CVE
LOW 2.3 CVE-2026-13591

DeepMyst Mysti Contact Tracking ChannelBridge.ts _isTrackedConversation improper authorization_CVE-2026-13591

A weakness has been identified in DeepMyst Mysti 0.4.0. Affected is the function _isTrackedConversation of the file src/managers/ChannelBridge.ts o...

DeepMyst Mysti 0.4.0 CVE
MEDIUM 6.3 CVE-2026-13590

seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow_CVE-2026-13590

A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/he...

seladb PcapPlusPlus 25.05 CVE