#euvd — Public Fediverse posts

🚨 EUVD-2026-28261

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: nocobase
🏢 Vendor: nocobase
📅 Updated: 2026-05-07

📝 NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.39, the queryParentSQL() function in the core database package constructs a recursive CTE query by joining nodeIds with st...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28261

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28318

📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: nocobase
🏢 Vendor: nocobase
📅 Updated: 2026-05-07

📝 NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.39, the checkSQL() validation function that blocks dangerous SQL keywords (e.g., pg_read_file, LOAD_FILE, dblink) is appli...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28318

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28310

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: mathjs
🏢 Vendor: josdejong
📅 Updated: 2026-05-07

📝 Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0, arbitrary JavaScript can be executed via the expression parser of mathjs. This issue has been patched in version 15.2.0.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28310

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28316

📊 Score: 9.3/10 (CVSS v3.1)
📦 Product: fabric
🏢 Vendor: Hyperledger, Hyperledger
📅 Updated: 2026-05-07

📝 Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to 2.2.26, Channel.java implements readObject() and exposes deSerializeChannel() which call Obj...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28316

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28342

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: Cryptobox, Cryptobox
🏢 Vendor: Ercom
📅 Updated: 2026-05-07

📝 Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28342

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28338

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Royal Elementor Addons
🏢 Vendor: wproyal
📅 Updated: 2026-05-07

📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons allows Stored XSS.

This issue affects Royal Elementor Addons: from n/a before 1.7.1053.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28338

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28340

📊 Score: 4.7/10 (CVSS v3.1)
📦 Product: ZXCLOUD iRAI
🏢 Vendor: ZTE
📅 Updated: 2026-05-07

📝 A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28340

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28334

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: YITH WooCommerce Wishlist
🏢 Vendor: YITH
📅 Updated: 2026-05-07

📝 Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects YITH WooCommerce Wishlist: from n/a through 4.12.0.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28334

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28336

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: PDF Poster
🏢 Vendor: bPlugins
📅 Updated: 2026-05-07

📝 Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects PDF Poster: from n/a through 2.4.1.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28336

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28330

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Royal Elementor Addons
🏢 Vendor: wproyal
📅 Updated: 2026-05-07

📝 Missing Authorization vulnerability in WProyal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Royal Elementor Addons: from n/a before 1.7.1053.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28330

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28332

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Happy Addons for Elementor
🏢 Vendor: wedevs
📅 Updated: 2026-05-07

📝 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data.

This issue affects Happy Addons for Elementor: from n/a through 3.20.8.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28332

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-209718

📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: WPGraphQL
🏢 Vendor: WPGraphQL
📅 Updated: 2026-05-07

📝 Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery.

This issue affects WPGraphQL: from n/a through 2.5.3.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209718

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-209716

📊 Score: 7.6/10 (CVSS v3.1)
📦 Product: Team Member
🏢 Vendor: wpmart
📅 Updated: 2026-05-07

📝 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMart Team Member allows Blind SQL Injection.

This issue affects Team Member: from n/a through 8.5.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209716

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-209714

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Bus Ticket Booking with Seat Reservation
🏢 Vendor: Magepeople inc.
📅 Updated: 2026-05-07

📝 Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Bus Ticket Booking with Se...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209714

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-209712

📊 Score: 5.9/10 (CVSS v3.1)
📦 Product: WEN Logo Slider
🏢 Vendor: WEN Themes
📅 Updated: 2026-05-07

📝 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WEN Themes WEN Logo Slider allows DOM-Based XSS.

This issue affects WEN Logo Slider: from n/a through 3.4.0.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209712

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-55567

📊 Score: 8.0/10 (CVSS v3.1)
📦 Product: FL MGUARD DELTA TX/TX, TC MGUARD RS2000 4G VPN, FL MGUARD CORE TX (+33 more)
🏢 Vendor: PHOENIX CONTACT
📅 Updated: 2026-05-07

📝 A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-55567

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28329

📊 Score: 5.7/10 (CVSS v3.1)
📦 Product: ZXCLOUD iRAI
🏢 Vendor: ZTE
📅 Updated: 2026-05-07

📝 ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.contains a DLL hija...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28329

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2025-209708

📊 Score: 8.1/10 (CVSS v3.1)
📦 Product: Hitachi Virtual Storage Platform One Block 26, Hitachi Virtual Storage Platform One Block 24, Hitachi Virtual Storage Platform One Block 28 (+1 more)
🏢 Vendor: Hitachi
📅 Updated: 2026-05-07

📝 OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209708

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28327

📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: libreoffice, libreoffice
🏢 Vendor: The Document Foundation
📅 Updated: 2026-05-07

📝 Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters.

This issue affects LibreOffice: from 26.2 before 26.2.3, from 25.8 before 25.8.7.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28327

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28326

📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: MongoDB Server
🏢 Vendor: MongoDB Inc.
📅 Updated: 2026-05-07

📝 An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view.

When resolving a view, the server inspects the aggregation pipeline to determine whether it begins with an Atlas Search stage. For ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28326

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28315

📊 Score: 5.0/10 (CVSS v3.1)
📦 Product: istio, istio
🏢 Vendor: istio
📅 Updated: 2026-05-07

📝 Istio is an open platform to connect, manage, and secure microservices. Prior to versions 1.28.6 and 1.29.2, when a RequestAuthentication resource is created with a jwksUri pointing to an internal service, istiod makes an unauthenticated HTTP GET request ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28315

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28319

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: BetterDocs Pro
🏢 Vendor: betterdocs
📅 Updated: 2026-05-07

📝 The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the `get_current_letter_docs` and `docs_sort_by_letter` AJAX actions in all versions up to, and including, 3.7.0. This is due to the `limit` POST parameter being interpolate...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28319

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28321

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: Slider Revolution
🏢 Vendor: Revolution Slider
📅 Updated: 2026-05-07

📝 The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Upload in versions 7.0.0 to 7.0.10 via the '_get_media_url' and '_check_file_path' function. This is due to insufficient file type validation. This makes it possib...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28321

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28323

📊 Score: 8.1/10 (CVSS v3.1)
📦 Product: WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance
🏢 Vendor: davidanderson
📅 Updated: 2026-05-07

📝 The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion du...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28323

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28312

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: yeswiki
🏢 Vendor: YesWiki
📅 Updated: 2026-05-07

📝 YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerability in tools/bazar/services/EntryManager.php at line 704. The $data['id_fiche'] value (sourced from $_POST['id_fiche']) is concatenated d...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28312

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28304

📊 Score: 3.7/10 (CVSS v3.1)
📦 Product: Tor
🏢 Vendor: torproject
📅 Updated: 2026-05-07

📝 Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28304

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28308

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
🏢 Vendor: wpmudev
📅 Updated: 2026-05-07

📝 The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.53.0. This is due to the listen_for_saving_export_schedule() function in library/cl...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28308

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28306

📊 Score: 3.7/10 (CVSS v3.1)
📦 Product: Tor
🏢 Vendor: torproject
📅 Updated: 2026-05-07

📝 Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28306

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28302

📊 Score: 3.7/10 (CVSS v3.1)
📦 Product: Tor
🏢 Vendor: torproject
📅 Updated: 2026-05-07

📝 Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28302

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-28298

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: OpenEXR, OpenEXR, OpenEXR
🏢 Vendor: AcademySoftwareFoundation
📅 Updated: 2026-05-07

📝 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to bef...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28298

#cybersecurity #infosec #euvd #cve #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.97/10 (Medium)
📈 Vulnerabilities: 156
⬇️ Min: 2.0 | ⬆️ Max: 10.0

📅 Date: 2026-05-05

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.97/10 (Medium)
📈 Vulnerabilities: 156
⬇️ Min: 2.0 | ⬆️ Max: 10.0

📅 Date: 2026-05-05

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.97/10 (Medium)
📈 Vulnerabilities: 156
⬇️ Min: 2.0 | ⬆️ Max: 10.0

📅 Date: 2026-05-05

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.97/10 (Medium)
📈 Vulnerabilities: 156
⬇️ Min: 2.0 | ⬆️ Max: 10.0

📅 Date: 2026-05-05

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟠 Average Score: 7.07/10 (High)
📈 Vulnerabilities: 159
⬇️ Min: 2.3 | ⬆️ Max: 10.0

📅 Date: 2026-05-04

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟠 Average Score: 7.07/10 (High)
📈 Vulnerabilities: 159
⬇️ Min: 2.3 | ⬆️ Max: 10.0

📅 Date: 2026-05-04

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟠 Average Score: 7.07/10 (High)
📈 Vulnerabilities: 159
⬇️ Min: 2.3 | ⬆️ Max: 10.0

📅 Date: 2026-05-04

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟠 Average Score: 7.07/10 (High)
📈 Vulnerabilities: 159
⬇️ Min: 2.3 | ⬆️ Max: 10.0

📅 Date: 2026-05-04

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.11/10 (Medium)
📈 Vulnerabilities: 36
⬇️ Min: 2.3 | ⬆️ Max: 8.7

📅 Date: 2026-05-03

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.11/10 (Medium)
📈 Vulnerabilities: 36
⬇️ Min: 2.3 | ⬆️ Max: 8.7

📅 Date: 2026-05-03

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.11/10 (Medium)
📈 Vulnerabilities: 36
⬇️ Min: 2.3 | ⬆️ Max: 8.7

📅 Date: 2026-05-03

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.11/10 (Medium)
📈 Vulnerabilities: 36
⬇️ Min: 2.3 | ⬆️ Max: 8.7

📅 Date: 2026-05-03

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Weekly CVSS Summary

🟡 Average Score: 6.72/10 (Medium)
📈 Vulnerabilities: 809
⬇️ Min: -1.0 | ⬆️ Max: 10.0

📅 Period: 2026-04-26 - 2026-05-02

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Weekly CVSS Summary

🟡 Average Score: 6.72/10 (Medium)
📈 Vulnerabilities: 809
⬇️ Min: -1.0 | ⬆️ Max: 10.0

📅 Period: 2026-04-26 - 2026-05-02

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Weekly CVSS Summary

🟡 Average Score: 6.72/10 (Medium)
📈 Vulnerabilities: 809
⬇️ Min: -1.0 | ⬆️ Max: 10.0

📅 Period: 2026-04-26 - 2026-05-02

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Weekly CVSS Summary

🟡 Average Score: 6.72/10 (Medium)
📈 Vulnerabilities: 809
⬇️ Min: -1.0 | ⬆️ Max: 10.0

📅 Period: 2026-04-26 - 2026-05-02

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.64/10 (Medium)
📈 Vulnerabilities: 75
⬇️ Min: 4.3 | ⬆️ Max: 9.8

📅 Date: 2026-05-02

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.64/10 (Medium)
📈 Vulnerabilities: 75
⬇️ Min: 4.3 | ⬆️ Max: 9.8

📅 Date: 2026-05-02

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.64/10 (Medium)
📈 Vulnerabilities: 75
⬇️ Min: 4.3 | ⬆️ Max: 9.8

📅 Date: 2026-05-02

#cybersecurity #infosec #euvd #cvss #vulnerability

📊 EUVD Daily CVSS Summary

🟡 Average Score: 6.64/10 (Medium)
📈 Vulnerabilities: 75
⬇️ Min: 4.3 | ⬆️ Max: 9.8

📅 Date: 2026-05-02

#cybersecurity #infosec #euvd #cvss #vulnerability