Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 6.5 CVE-2026-26379

CVE-2026-26379_CVE-2026-26379

An issue in Koha v.25.11 and before allows a remote attacker to execute arbitrary code via the Z39.50 configuration module

n/a n/a n/a CVE
MEDIUM 5.4 CVE-2026-26378

CVE-2026-26378_CVE-2026-26378

Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file upload function in Invoice ...

n/a n/a n/a CVE
MEDIUM 6.5 CVE-2026-26824

CVE-2026-26824_CVE-2026-26824

libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sect...

n/a n/a n/a CVE
MEDIUM 6.8 CVE-2026-7764

Out-of-bounds read in morse.ko Vendor IE processing_CVE-2026-7764

An out-of-bounds read vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.12 allows ...

Morse Micro HaLowLink 2 CVE
HIGH 7.5 CVE-2026-8829

HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities_CVE-2026-8829

HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities c...

OALDERS HTML::Entities CVE
CRITICAL 9.6 CVE-2026-8037

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF_CVE-2026-8037

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary c...

Progress Software LoadMaster V7.2.60.0 CVE
HIGH 8.7 CVE-2026-45433

Hardcoded Cryptographic Key Vulnerability in GX Earth ONT Models_CVE-2026-45433

This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacke...

GX INDIA GX Earth 2022 version E2022 - 3.1.2A CVE
MEDIUM 6.3 CVE-2026-43926

FOSSBilling’s password reset confirmation endpoint lacks rate limiting_CVE-2026-43926

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the password reset confirmation endpoint `/client/...

FOSSBilling FOSSBilling < 0.8.0 CVE
MEDIUM 5.7 CVE-2026-40605

Tautulli Vulnerable to Authenticated Path Traversal in Cache Deletion API_CVE-2026-40605

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.1, a path traversal vulnerability in the cache...

Tautulli Tautulli < 2.17.1 CVE
MEDIUM 5.1 CVE-2026-10861

MISP post-login open redirect via pre_login_requested_url_CVE-2026-10861

An open redirect vulnerability existed in MISP UsersController::routeafterlogin() because the value stored in the pre_login_requested_url session k...

misp misp CVE