CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
YzmCMS v6.3 is affected by a broken access control vulnerability that allows unauthorized access to users' personal home pages without login. The issue arises from missing authentication checks before accessing the home page, enabling attackers to view other users' pages while not logged in.
Występuje podatność CWE-287: Niewłaściwa autoryzacja, która może umożliwić atakującemu dowolną zmianę zachowania UPS, gdy klucz zostanie ujawniony i użyty do przesłania złośliwego oprogramowania. Dotyczy to rodziny APC Smart-UPS, w tym serii SMT, SMC, SCL, SMX oraz SRT.
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.
In Spring Cloud Gateway versions prior to 3.1.1+ and 3.0.7+, applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
The vulnerability in Printix Secure Cloud Print Management up to version 1.3.1106.0 incorrectly uses privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITasks.PersistentRegistryData. This allows privilege escalation or unauthorized system changes.
A remote code execution (RCE) vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709 via the oal_wan6_setIpAddr function. An unauthenticated attacker can execute arbitrary code on the device.
A command injection vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709 via the component oal_setIp6DefaultRoute. An attacker can remotely execute arbitrary system commands without authentication.
A command injection vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709. The flaw resides in the oal_startPing component.
A sandbox escape vulnerability in Zepl Notebooks before 2021-10-25 allows users to escape the running context sandbox after launching Remote Code Execution from the Notebook, gaining access to internal Zepl assets including cloud metadata services.
It was discovered that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
In versions prior to 0.8.5, 0.9.4, 0.10.0, and 0.10.1 of the Go library github.com/gravitl/netmaker, a hard-coded cryptographic key was used.
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
O2OA version 6.4.7 contains a remote code execution (RCE) vulnerability via the /x_program_center/jaxrs/invoke endpoint. An attacker can send a specially crafted request to execute arbitrary code on the server.
A Remote Command Execution (RCE) vulnerability exists in D-Link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers (all hardware revisions) via the DDNS function in the ncc2 binary file. All listed models have reached End of Life (EOL)/End of Service Life (EOS), so the issue will not be patched.
Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation does not require user interaction and could result in arbitrary code execution.
In xmlparse.c in Expat (aka libexpat) before 2.4.5, attackers can insert namespace-separator characters into namespace URIs.
In xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
Emerson Dixell XWEB-500 products are vulnerable to arbitrary file write in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi. An unauthenticated attacker can write any file on the target system, leading to denial of service and potentially remote code execution.
In Apache APISIX, an attacker can abuse the batch-requests plugin to bypass the IP restriction of the Admin API. A default configuration (with default API key) is vulnerable to remote code execution; even after changing the admin key or port, there is still a risk of bypassing the IP restriction of the data panel due to a bug in the client IP check.
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause denial of service (DoS). See the Details section of the advisory for more information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS