News & Sicurezza

CVE ID :CVE-2026-8673 Published : May 22, 2026, 1:18 p.m. | 1 hour, 1 minute ago Description :Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks. This issue affects Avantra: before 25.3.0. Severity: 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-8672 Published : May 22, 2026, 1:17 p.m. | 1 hour, 2 minutes ago Description :Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-8671 Published : May 22, 2026, 1:15 p.m. | 1 hour, 4 minutes ago Description :Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure. This issue affects Avantra: before 25.3.0. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-32746 Published : May 22, 2026, 1:13 p.m. | 1 hour, 6 minutes ago Description :Dell PowerFlex Manager, version(s) Severity: 4.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-8670 Published : May 22, 2026, 1:12 p.m. | 1 hour, 6 minutes ago Description :Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1. Severity: 9.6 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-32747 Published : May 22, 2026, 1:02 p.m. | 1 hour, 17 minutes ago Description :Dell PowerFlex Manager, version(s) Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Kritieke Ubiquiti-lekken geven aanvaller toegang tot UniFi OS-apparaten Netwerkfabrikant Ubiquiti heeft updates uitgerold voor vijf kwetsbaarheden waardoor aanvallers toegang tot UniFi OS-apparaten kunnen krijgen. De impact van drie beveiligingslekken is beoordeeld met ee ... Read more Published Date: May 22, 2026 (2 days, 19 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-34909 CVE-2026-34908 CVE-2026-33000

CVE ID :CVE-2025-32749 Published : May 22, 2026, 12:48 p.m. | 1 hour, 31 minutes ago Description :Dell PowerFlex Manager, version(s) Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-44417 Published : May 22, 2026, 12:17 p.m. | 2 hours, 2 minutes ago Description :The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that another path in the code might lead to code execution capabilities, if untrusted users are allowed to configure JMS for Apache CXF. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-44618 Published : May 22, 2026, 12:17 p.m. | 2 hours, 2 minutes ago Description :Insecure XML parser configuration in Apache CXF's WS-Transfer module may allow attackers to perform XXE attacks. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-44930 Published : May 22, 2026, 12:16 p.m. | 2 hours, 3 minutes ago Description :An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitrary certificates from the repository. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Vulnerabilities in STER software Vulnerabilities in STER software CVE ID CVE-2026-25606 Publication date 22 May 2026 Vendor Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy Product STER Vulnerable versions All before 9. ... Read more Published Date: May 22, 2026 (2 days, 19 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-25608 CVE-2026-25607 CVE-2026-25606