Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.6 CVE-2026-10983

CVE-2026-10983_CVE-2026-10983

Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandb...

Google Chrome 149.0.7827.53 CVE
CRITICAL 9 CVE-2026-45750

Termix Vulnerable to Arbitrary Command Execution in File Manager_CVE-2026-45750

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/...

Termix-SSH Termix < 2.3.2 CVE
CRITICAL 9.8 CVE-2026-45748

Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection_CVE-2026-45748

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /ssh/tunnel/connect` endpoi...

Termix-SSH Termix < 2.3.2 CVE
CRITICAL 9 CVE-2026-45746

Termix Vulnerable to Arbitrary Command Execution via Session Hijacking_CVE-2026-45746

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Mana...

Termix-SSH Termix < 2.3.2 CVE
CRITICAL 9.9 CVE-2026-45744

Termix has an OS Command Injection in File Manager resolvePath endpoint_CVE-2026-45744

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/...

Termix-SSH Termix < 2.3.2 CVE
CRITICAL 9.3 CVE-2025-71318

NetMan 204 Missing Authentication for Administrative Functions_CVE-2025-71318

NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly reque...

Riello UPS NetMan 204 CVE
CRITICAL 9.3 CVE-2025-71317

NetMan 204 Hard-coded Backdoor Credentials_CVE-2025-71317

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticat...

Riello UPS NetMan 204 CVE
CRITICAL 9.3 CVE-2026-46496

HAX CMS: Stored XSS via ‘‘ component allows arbitrary JavaScript execution and token theft_CVE-2026-46496

HAX CMS helps manage microsite universe with PHP or NodeJs backends. A stored cross-site scripting (XSS) vulnerability exists in versions prior to ...

haxtheweb haxcms-nodejs < 26.0.0 CVE
CRITICAL 9.4 CVE-2026-46399

Authenticated Remote Code Execution via File Overwrite_CVE-2026-46399

HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0 has an authenticated file o...

haxtheweb haxcms-nodejs < 26.0.0 CVE
CRITICAL 9.3 CVE-2026-46396

HAX CMS has a stored XSS via