Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 5.3 CVE-2026-12212

hcengineering Huly Platform RPC operations.ts getMailboxSecret access control_CVE-2026-12212

A vulnerability has been found in hcengineering Huly Platform up to 0.7.0. Affected is the function getMailboxSecret of the file server/account/src...

hcengineering Huly Platform 0.1 CVE
MEDIUM 5.1 CVE-2026-12223

Yealink SIP-T46U Web FastCGI Service tftpuploadiperf mod_webd.TFTPUploadIperf command injection_CVE-2026-12223

A vulnerability was identified in Yealink SIP-T46U 108.86.0.118. Affected by this vulnerability is the function mod_webd.TFTPUploadIperf of the fil...

Yealink SIP-T46U 108.86.0.118 CVE
MEDIUM 5.3 CVE-2026-12219

Yealink SIP-T46U Web FastCGI Service start mod_diagnose.CommandShellByType command injection_CVE-2026-12219

A flaw has been found in Yealink SIP-T46U 108.86.0.118. The impacted element is the function mod_diagnose.CommandShellByType of the file /api/diagn...

Yealink SIP-T46U 108.86.0.118 CVE
MEDIUM 5.1 CVE-2026-12211

Intelbras iNVU 7016 FT Web syslog path traversal_CVE-2026-12211

A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26. This impacts an unknown function of the file /RPC2_Loadfile/sys...

Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26 CVE
MEDIUM 5.3 CVE-2026-12210

universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery_CVE-2026-12210

A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function of the component utcp-gql/utcp-...

universal-tool-calling-protocol python-utcp 1.1.0 CVE
MEDIUM 6.9 CVE-2026-12209

RubyLouvre avalon Template Filter index.js prototype pollution_CVE-2026-12209

A security vulnerability has been detected in RubyLouvre avalon up to 2.2.10. The impacted element is an unknown function of the file src/filters/i...

RubyLouvre avalon 2.2.0 CVE
MEDIUM 6.9 CVE-2026-12208

jsonata-js jsonata Function Binding Frame System jsonata.js createFrame prototype pollution_CVE-2026-12208

A weakness has been identified in jsonata-js jsonata up to 2.2.0. The affected element is the function createFrame of the file src/jsonata.js of th...

jsonata-js jsonata 2.0 CVE
MEDIUM 6.9 CVE-2026-12198

Microweber API Endpoint thumbnail_img userfiles_path path traversal_CVE-2026-12198

A weakness has been identified in Microweber up to 2.0.20. This affects the function userfiles_path of the file /api_nosession/thumbnail_img of the...

n/a Microweber 2.0.0 CVE
MEDIUM 4.8 CVE-2026-12201

IObit Malware Fighter DLL permission_CVE-2026-12201

A flaw has been found in IObit Malware Fighter up to 13.2.0. Affected by this vulnerability is an unknown functionality of the component DLL Handle...

IObit Malware Fighter 13.0 CVE
MEDIUM 6.9 CVE-2026-12200

Ritlabs TinyWeb Server Header libeay32.dll.html stack-based overflow_CVE-2026-12200

A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32. This impacts an unknown function in the library libeay32....

Ritlabs TinyWeb Server 1.0 CVE