News & Sicurezza

CVE ID : CVE-2026-1198 Published : Feb. 26, 2026, 12:15 p.m. | 4 hours, 54 minutes ago Description : SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected]_u06. Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Vulnerability in Omega-PSIR software Vulnerability in Omega-PSIR software CVE ID CVE-2026-1434 Publication date 26 February 2026 Vendor Politechnika Warszawska Product Omega-PSIR Vulnerable versions From 4.5.9 through 4.6.6 Vulnerability ... Read more Published Date: Feb 26, 2026 (2 days, 21 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1434

Five Eyes warn: Patch your Cisco SD-WAN or risk root takeover The Five Eyes intelligence alliance is urgently warning defenders to patch two Cisco Catalyst SD-WAN vulnerabilities used in attacks. First discovered by the Australian Signals Directorate (ASD), all ... Read more Published Date: Feb 26, 2026 (2 days, 6 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20127 CVE-2022-20775

Vulnerability in Simple.ERP software Vulnerability in Simple.ERP software CVE ID CVE-2026-1198 Publication date 26 February 2026 Vendor Simple SA Product Simple.ERP Vulnerable versions All before [email protected]_u06 Vulnerability type (CWE) I ... Read more Published Date: Feb 26, 2026 (2 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1198

CVE ID : CVE-2025-64999 Published : Feb. 26, 2026, 11:16 a.m. | 5 hours, 54 minutes ago Description : Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicious JavaScript into the Synthetic Monitoring HTML logs, which can then be accessed via a crafted phishing link. Severity: 7.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Critical Claude Code Vulnerabilities Enables Remote Code Execution Attacks Claude Code Vulnerabilities A critical security flaw in Anthropic’s Claude Code demonstrates how threat actors can exploit repository configuration files to execute malicious code and steal sensitive ... Read more Published Date: Feb 26, 2026 (1 day, 21 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2636 CVE-2026-21852 CVE-2025-59536

27 Years old Telnet Vulnerability Enables Attackers to Gain Root Access 27 Years old Telnet Enables Attackers Gain Root Access A newly confirmed vulnerability in the telnet daemon (telnetd) in GNU Inetutils has revived a 27-year-old security flaw, allowing attackers to ga ... Read more Published Date: Feb 26, 2026 (1 day, 20 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2636 CVE-2026-24061 CVE-1999-0073

NCSC verwacht grootschalig misbruik van kritiek Cisco-lek: 'patch zo snel mogelijk' Het Nationaal Cyber Security Centrum (NCSC) verwacht grootschalig misbruik van een kritieke kwetsbaarheid in Cisco Catalyst SD-WAN Controller en Cisco Catalyst SD-WAN Manager en roept organisaties op ... Read more Published Date: Feb 26, 2026 (1 day, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20127

PoC Released for Windows Vulnerability That Allows Attackers to Cause Unrecoverable BSOD Crashes A proof-of-concept (PoC) exploit has been publicly released for CVE-2026-2636, a newly documented vulnerability in Windows’ Common Log File System (CLFS) driver that allows any low-privileged, unprivi ... Read more Published Date: Feb 26, 2026 (1 day, 16 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2636 CVE-2025-29824 CVE-2024-6768 CVE-2023-28252 CVE-2022-37969

Major Security Overhaul for Apache Superset: Five Vulnerabilities Patched Apache Superset is a modern data exploration and data visualization platform. Superset can replace or augment proprietary business intelligence tools for many teams. Furthermore, Superset integrates w ... Read more Published Date: Feb 26, 2026 (1 day, 9 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-23984 CVE-2026-23983 CVE-2026-23982 CVE-2026-23980 CVE-2026-23969 CVE-2026-2441 CVE-2026-1603 CVE-2025-1735 CVE-2025-6491 CVE-2025-48912 CVE-2024-55633

CVE ID : CVE-2026-28138 Published : Feb. 26, 2026, 9:16 a.m. | 7 hours, 54 minutes ago Description : Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28132 Published : Feb. 26, 2026, 9:16 a.m. | 7 hours, 54 minutes ago Description : Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews allows Code Injection.This issue affects WooCommerce Photo Reviews: from n/a through Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...