Microsoft February 2026 Security Updates

Microsoft January 2026 Security Updates

Microsoft December 2025 Security Updates

Microsoft December 2025 Early Security Updates

Microsoft November 2025 Security Updates

Microsoft October 2025 Security Updates

Microsoft September 2025 Security Updates

Microsoft August 2025 Security Updates

Microsoft August Early 2025 Security Updates

Microsoft July 2025 Security Updates

Microsoft June 2025 Security Updates

Microsoft June Early 2025 Security Updates

Microsoft May 2025 Security Updates

Microsoft May Early 2025 Security Updates

Microsoft April 2025 Security Updates

Microsoft March 2025 Security Updates

Microsoft March 2025 Early Security Updates

Microsoft February 2025 Security Updates

Microsoft February 2025 Early Security Updates

Microsoft January 2025 Security Updates

Microsoft January 2025 Early Security Updates

Microsoft December 2024 Security Updates

Microsoft November 2024 Security Updates

Microsoft October 2024 Security Updates

Microsoft September 2024 Security Updates

Microsoft August 2024 Security Updates

Microsoft July 2024 Security Updates

Microsoft June 2024 Security Updates

Microsoft May 2024 Security Updates

Microsoft April 2024 Security Updates

Microsoft March 2024 Security Updates

Microsoft February 2024 Security Updates

Microsoft January 2024 Security Updates

customer_relationship_management

Missing Authorization

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.

An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, including the ability to execute arbitrary SQL statements.

Exploitation of Thunderbolt Protection Flaws

Firmware Corruption

Exploitation for Defense Evasion

Modify Authentication Process

smartermail

Authentication Bypass Using an Alternate Path or Channel

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An unauthenticated attacker can supply a target administrator username and a new password to reset the account, resulting in full administrative compromise of the SmarterMail instance. NOTE: SmarterMail system administrator privileges grant the ability to execute operating system commands via built-in management functionality, effectively providing administrative (SYSTEM or root) access on the underlying host.

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An unauthenticated attacker can supply a target administrator username and a new password to reset the account, resulting in full administrative compromise of the SmarterMail instance.

SmarterMail

SmarterTools

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An unauthenticated attacker can supply a target administrator username and a new password to reset the account, resulting in full administrative compromise of the SmarterMail instance. SmarterMail system administrator privileges grant the ability to execute operating system commands via built-in management functionality, effectively providing administrative (SYSTEM or root) access on the underlying host.

Directory Indexing

File and Directory Discovery

fortisandbox

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to execute commands via crafted requests.

An Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, and FortiSandbox 4.0 all versions may allow an unauthenticated attacker to execute commands via crafted requests.

XSS Using MIME Type Mismatch

DOM-Based XSS

Reflected XSS

Stored XSS

Cross-Site Scripting (XSS)

AJAX Footprinting

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ergosis Security Systems Computer Industry and Trade Inc. ZEUS PDKS allows SQL Injection.This issue affects ZEUS PDKS: from <1.0.5.10 through 10022026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ergosis Security Systems Computer Industry and Trade Inc. ZEUS PDKS. This vulnerability allows SQL Injection attacks. The affected versions are ZEUS PDKS from earlier than 1.0.5.10 through 10022026.

Command Line Execution through SQL Injection

Object Relational Mapping Injection

SQL Injection through SOAP Parameter Tampering

Expanding Control over the Operating System from the Database

SQL Injection

Blind SQL Injection

ac8_firmware

Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

A vulnerability was detected in Tenda AC8 16.03.33.05. Affected is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet of the component httpd. The manipulation of the argument shareSpeed results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

A buffer overflow vulnerability was detected in Tenda AC8 firmware version 16.03.33.05. The vulnerability exists in the httpd component, specifically in the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. The manipulation of the shareSpeed argument results in a classic buffer overflow condition.

Buffer Overflow via Environment Variables

Overflow Buffers

Buffer Manipulation

Client-side Injection-induced Buffer Overflow

Filter Failure through Buffer Overflow

MIME Conversion

Overflow Binary Resource File

Buffer Overflow via Symbolic Links

Overflow Variables and Tags

Buffer Overflow via Parameter Expansion

Buffer Overflow in an API Call

Buffer Overflow in Local Command-Line Utilities

String Format Overflow in syslog()

Forced Integer Overflow

polarion

A vulnerability has been identified in Polarion V2404 (All versions < V2404.5), Polarion V2410 (All versions < V2410.2). The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by creating specially crafted document titles that are later viewed by other users of the application.

shiro

Authentication Bypass by Alternate Name

Authentication Bypass by Alternate Name vulnerability in Apache Shiro.

This issue affects Apache Shiro: before 2.0.7.

Users are recommended to upgrade to version 2.0.7, which fixes the issue.

The issue only effects static files. If static files are served from a case-insensitive filesystem,
such as default macOS setup, static files may be accessed by varying the case of the filename in the request.
If only lower-case (common default) filters are present in Shiro, they may be bypassed this way.

Shiro 2.0.7 and later has a new parameters to remediate this issue
shiro.ini: filterChainResolver.caseInsensitive = true
application.propertie: shiro.caseInsensitive=true

Shiro 3.0.0 and later (upcoming) makes this the default.

Authentication Bypass by Alternate Name vulnerability in Apache Shiro versions before 2.0.7. This vulnerability affects static file handling on case-insensitive filesystems (such as default macOS setup). When static files are served from case-insensitive filesystems and only lowercase filters are configured in Shiro, attackers may bypass authentication filters by varying the case of the filename in requests to access protected static files.

bugzilla.redhat.com

netweaver_application_server_abap

abap_platform

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the application.

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This is a missing authorization vulnerability that bypasses normal access controls.

Search CVEs by ID

Trending Vulnerabilities

Latest Patch Tuesday Reports

February 2026 Patch Tuesday: 10 Critical Vulnerabilities Amid 59 CVEs

January 2026 Patch Tuesday: 8 Critical Vulnerabilities Amid 113 CVEs

December 2025 Patch Tuesday: 10 Critical Vulnerabilities Amid 64 CVEs

Browse

Be the first to know about critical vulnerabilities