News & Sicurezza

CVE ID : CVE-2026-1227 Published : Feb. 11, 2026, 1:45 p.m. | 38 minutes ago Description : CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclosure of local files, interaction within the EBO system, or denial of service conditions when a local user uploads a specially crafted TGML graphics file to the EBO server from Workstation. Severity: 7.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

MSHTML Framework 0-Day Vulnerability Let Attackers Security Feature over Network MSHTML Framework 0-Day Vulnerability Microsoft has released an urgent security patch for a critical zero-day vulnerability (CVE-2026-21513) affecting the MSHTML Framework, which was actively exploited ... Read more Published Date: Feb 11, 2026 (19 hours, 31 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-21513

CVE ID : CVE-2026-2337 Published : Feb. 11, 2026, 1:28 p.m. | 55 minutes ago Description : A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of the user.This issue affects Plunet BusinessManager: 10.15.1. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Over 60 Software Vendors Issue Security Fixes Across OS, Cloud, and Network Platforms It's Patch Tuesday, which means a number of software vendors have released patches for various security vulnerabilities impacting their products and services. Microsoft issued fixes for 59 flaws, incl ... Read more Published Date: Feb 11, 2026 (19 hours, 32 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-32467 CVE-2025-32007 CVE-2025-30513 CVE-2025-27940 CVE-2025-27572 CVE-2026-0509 CVE-2026-0488 CVE-2026-25049

Missing Authentication for Critical Function, Improper Access Control vulnerability in Dinosoft Business Solutions Dinosoft ERP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Dinosoft ERP: from < 3.0.1 through 11022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVE ID : CVE-2025-8025 Published : Feb. 11, 2026, 1:15 p.m. | 1 hour, 8 minutes ago Description : Missing Authentication for Critical Function, Improper Access Control vulnerability in Dinosoft Business Solutions Dinosoft ERP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Dinosoft ERP: from Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-68406 Published : Feb. 11, 2026, 1:15 p.m. | 1 hour, 8 minutes ago Description : A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later Severity: 1.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-22894 Published : Feb. 11, 2026, 1:15 p.m. | 1 hour, 8 minutes ago Description : A path traversal vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5190 and later Severity: 1.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-66278 Published : Feb. 11, 2026, 1:15 p.m. | 1 hour, 8 minutes ago Description : A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5190 and later Severity: 1.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-66277 Published : Feb. 11, 2026, 1:15 p.m. | 1 hour, 8 minutes ago Description : A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3350 build 20251216 and later QuTS hero h5.3.2.3354 build 20251225 and later QuTS hero h5.2.8.3350 build 20251216 and later Severity: 9.2 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-66274 Published : Feb. 11, 2026, 1:15 p.m. | 1 hour, 8 minutes ago Description : A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: QuTS hero h5.3.2.3354 build 20251225 and later Severity: 1.2 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-62856 Published : Feb. 11, 2026, 1:15 p.m. | 1 hour, 8 minutes ago Description : A path traversal vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5190 and later Severity: 1.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...