Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.8 THN:7F11D34D85C...

LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution_THN:7F11D34D85C05B63F6528DCA8958A644

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifnUd6CRFC-YdhoEDgmNoLtKUYjbZvqQJOETqK59Zd5Pk_epd9uGMfPCrujB3grOrajNxMls_p7TWQwnyCxF...

N/A N/A THN
HIGH 8.7 CVE-2026-11535

CVE-2026-11535_CVE-2026-11535

The authentication mechanism of a certain function in the PcSuite has a defect, which may result in information leakage within the range of a Bluet...

vivo PcSuite Versions below 6.2.5 CVE
HIGH 8.7 CVE-2026-12059

Cellopoint｜CelloOS – Improper Access Control_CVE-2026-12059

The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass ...

Cellopoint CelloOS CVE
HIGH 7.1 CVE-2026-48613

CVE-2026-48613_CVE-2026-48613

SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowin...

phpBB phpBB 3.3.8 CVE
HIGH 8 CVE-2026-48612

CVE-2026-48612_CVE-2026-48612

Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and cause a victim’s account ...

phpBB phpBB 3.3.0 CVE
HIGH 8.1 CVE-2026-48610

CVE-2026-48610_CVE-2026-48610

Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in cert...

Ubiquiti Inc UDM CVE
HIGH 8.6 CVE-2026-47368

CVE-2026-47368_CVE-2026-47368

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data ...

Ubiquiti Inc UniFi OS Server CVE
HIGH 7.2 CVE-2026-47366

CVE-2026-47366_CVE-2026-47366

Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated admi...

phpBB phpBB 3.3.0 CVE
HIGH 8.7 CVE-2026-45169

Idira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input Processing_CVE-2026-45169

Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnerability. Un...

CyberArk Software, a Palo Alto Networks Company PAM SH Vault 14.0 CVE
HIGH 7.5 CVE-2026-44892

Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size_CVE-2026-44892

Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, the default configuration ...

netty netty >= 4.2.0.Final, < 4.2.15.Final CVE