CVE Notifier

CVE-2026-37152 CWE-? N/A

CVE-2026-37152

TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root access.

MITRE n/a:n/a 15 Sep 2026

CVE-2026-25827 CWE-? N/A

CVE-2026-25827

An issue was discovered in Keyfactor SignServer before 7.6.0. A number of properties were identified to not have any restrictions to what path they can be set to by an admin user. Setting these properties to specific fil…

MITRE n/a:n/a 15 Sep 2026

CVE-2026-25826 CWE-? N/A

CVE-2026-25826

An issue was discovered in Keyfactor SignServer before 7.6.0. The attribute ATTRIBUTESFILE in PKCS11CryptoToken can be set to a readable file but not an accepted file (i.e., recognized with attributes). In this case, an …

MITRE n/a:n/a 15 Sep 2026

CVE-2026-25825 CWE-? N/A

CVE-2026-25825

An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a use…

MITRE n/a:n/a 15 Sep 2026

CVE-2025-66974 CWE-? N/A

CVE-2025-66974

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service (DoS) or connection to an attacker-controlled device via supplying a…

MITRE n/a:n/a 15 Sep 2026

CVE-2026-90842 CWE-313 3.7

PHPGurukul Blood Donor Management System Login_Model.php cleartext storage in file

A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Login_Model.php. This manipulation of the argument…

cve.org PHPGurukul:Blood · Donor · Management 14 Sep 2026

CVE-2026-90841 CWE-89 7.3

PHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Repor…

cve.org PHPGurukul:Blood · Donor · Management 14 Sep 2026

CVE-2026-90840 CWE-287 7.3

PHPGurukul Blood Donor Management System Admin Controllers Dashboard.php __construct improper authentication

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipu…

cve.org PHPGurukul:Blood · Donor · Management 14 Sep 2026

CVE-2026-90835 CWE-79 3.5

michaelliao itranswarp Page Content Rendering Markdown.java Markdown.toHtml cross site scripting

A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Rendering. This manipulation causes cross site scri…

cve.org michaelliao:itranswarp 14 Sep 2026

CVE-2026-90831 CWE-119 5.3

GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption…

cve.org GNU:Binutils 14 Sep 2026

CVE-2026-90830 CWE-476 5.3

GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereferen…

cve.org GNU:Binutils 14 Sep 2026

CVE-2026-75945 CWE-459 2.6

A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.

A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.

cve.org Arista · Networks:EOS 14 Sep 2026