News & Sicurezza

CVE ID : CVE-2026-2093 Published : Feb. 10, 2026, 7:16 a.m. | 1 hour, 5 minutes ago Description : Docpedia developed by Flowring has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-12063 Published : Feb. 10, 2026, 7:16 a.m. | 1 hour, 5 minutes ago Description : An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permissions. Severity: 5.7 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-12757 Published : Feb. 10, 2026, 6:15 a.m. | 2 hours, 6 minutes ago Description : An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to. Severity: 4.6 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-13064 Published : Feb. 10, 2026, 6:15 a.m. | 2 hours, 6 minutes ago Description : A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible if the admin uses a client that have been tampered with. Severity: 4.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-11547 Published : Feb. 10, 2026, 6:15 a.m. | 2 hours, 6 minutes ago Description : AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user. Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-11142 Published : Feb. 10, 2026, 6:15 a.m. | 2 hours, 6 minutes ago Description : The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator- or administrator- privileged service account. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-0996 Published : Feb. 10, 2026, 6:15 a.m. | 2 hours, 6 minutes ago Description : The Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AI Form Builder module in all versions up to, and including, 6.1.14 due to a combination of missing authorization checks, a leaked nonce, and insufficient input sanitization. The vulnerability allows Subscriber-level users to trigger AI form generation via a protected endpoint. When prompted, AI services will typically return bare JavaScript code (without tags), which bypasses the plugin's sanitization. This stored JavaScript executes whenever anyone views the generated form, making it possible for authenticated attackers with Subscriber-level access and above to inject arbitrary web scripts that will execute in the context of any user accessing the form. Severity: 6.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-25980 Published : Feb. 10, 2026, 5:16 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-25979 Published : Feb. 10, 2026, 5:16 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-25981 Published : Feb. 10, 2026, 5:16 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-25978 Published : Feb. 10, 2026, 5:16 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-25975 Published : Feb. 10, 2026, 5:16 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...