PATCHBAY / PUBLICThreat News
Appearance
Color mode

Stronger text, borders, and focus indicators. Works with either color mode.

Online

THE LATEST / SECURITY & VULNERABILITIES

Threat News

Recent vulnerabilities and security advisories, straight from the source.

The complete recent NVD stream, including unscored entries. All entries link to the original publisher.

For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.

16,843 stories · Past 30 days · Newest first

Subscribe to this view · RSS
Source updates

Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.

  1. NVD

    CVE-2026-26244 — A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can…

    High · CVSS 4.0 7.1 · Assessor: [email protected]

    A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later

    CVE-2026-26244
    Read original (opens in a new tab)
  2. NVD

    CVE-2026-26243 — A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they ca…

    High · CVSS 4.0 7.2 · Assessor: [email protected]

    A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.6 and later Qsync Central 5.1.0.2 and later Qsync Central 5.2.0.4 and later

    CVE-2026-26243
    Read original (opens in a new tab)
  3. NVD

    CVE-2026-19864 — Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials co…

    Medium · CVSS 4.0 5.6 · Assessor: [email protected]

    Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session is persisted to a session data store, the password may consequently be written to persistent storage in plaintext. An attacker with sufficient privileges to read the persisted session data may obtain the plaintext passwords of authenticated users.

    CVE-2026-19864
    Read original (opens in a new tab)
  4. NVD

    CVE-2026-19863 — An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contai…

    Critical · CVSS 4.0 9.3 · Assessor: [email protected]

    An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the authenticator using an unanchored substring match when identifying the login page. If the login path appears later within a protected request path, the request may be treated as the login page and its authentication or role requirement replaced with ALLOWED. Exploitation requires the protected resource path to contain the configured login pa…

    CVE-2026-19863
    Read original (opens in a new tab)
  5. NVD

    CVE-2026-18662 — In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints wi…

    Medium · CVSS 4.0 6.9 · Assessor: [email protected]

    In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per Jakarta Servlet Spec. Resulting in later http-method-omission sets overriding previous constraints with the same http-method-omission set.

    CVE-2026-18662
    Read original (opens in a new tab)
  7. NVD

    CVE-2026-18659 — In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakart…

    Medium · CVSS 4.0 6.9 · Assessor: [email protected]

    In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can be bypassed by using substrings of the defined HTTP Methods.

    CVE-2026-18659
    Read original (opens in a new tab)
  8. NVD

    CVE-2026-96614 — "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker…

    Medium · CVSS 4.0 5.1 · Assessor: [email protected]

    "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.

    CVE-2026-96614
    Read original (opens in a new tab)
  10. NVD

    CVE-2026-77711 — When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authent…

    High · CVSS 4.0 8.2 · Assessor: [email protected]

    When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The client mistakenly interprets the 407 as coming from the proxy, so it re-sends the request with the `Proxy-Authentication` header, which arrives to the server, that now has access to the proxy credentials.

    CVE-2026-77711
    Read original (opens in a new tab)
  11. NVD

    CVE-2026-76184 — In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control t…

    High · CVSS 4.0 8.2 · Assessor: [email protected]

    In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than normalizing the path to `/evil`, and will therefore follow the redirect sending the `Authorization` header for `/secure` to `/evil`. This also mean that the attacker must have an evil application deployed on the same domain as the target.

    CVE-2026-76184
    Read original (opens in a new tab)
  12. NVD

    CVE-2026-76182 — In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `ind…

    Medium · CVSS 4.0 6.9 · Assessor: [email protected]

    In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when applied to the template becomes `index?p=/s&a=1`, which is interpreted as 2 query parameters: `p=/s` and `a=1`, rather than just one query parameter `p` whose value is `/s&a=1`.

    CVE-2026-76182
    Read original (opens in a new tab)
  13. NVD

    CVE-2026-75559 — The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information m…

    Medium · CVSS 4.0 6.9 · Assessor: [email protected]

    The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.

    CVE-2026-75559
    Read original (opens in a new tab)
  14. NVD

    CVE-2026-72528 — "Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specia…

    Medium · CVSS 4.0 5.1 · Assessor: [email protected]

    "Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack.

    CVE-2026-72528
    Read original (opens in a new tab)
  15. NVD

    CVE-2026-63315 — WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access…

    High · CVSS 4.0 8.2 · Assessor: [email protected]

    WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100.

    CVE-2026-63315
    Read original (opens in a new tab)
  16. NVD

    CVE-2026-63314 — WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.

    CVE-2026-63314
    Read original (opens in a new tab)
  17. NVD

    CVE-2026-35088 — Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary fil…

    High · CVSS 4.0 8.2 · Assessor: [email protected]

    Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life telephone exchanges: - CCT-1668 (CCT1CPU) - MAC-6400 - CXS-0424 These products were discontinued in 2011 and 2012 and and will not receive updates. These products require a hardware update in order to receive a software update…

    CVE-2026-35088
    Read original (opens in a new tab)
  18. NVD

    CVE-2026-18661 — In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritativ…

    High · CVSS 4.0 8.8 · Assessor: [email protected]

    In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed `@ServletSecurity` annotation, and `web.xml` defined `security-constraint` on the same `url-pattern` were not being applied if the `web.xml` had more than 1 `url-pattern` for a servlet, and had a `security-constraint` applying to only some of those `url-pattern` definitions.

    CVE-2026-18661
    Read original (opens in a new tab)
  19. NVD

    CVE-2026-16438 — Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite vers…

    Critical · CVSS 4.0 9.4 · Assessor: [email protected]

    Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, and MobileHMI 10.97.3 and pri…

    CVE-2026-16438
    Read original (opens in a new tab)
  20. NVD

    CVE-2026-16437 — Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prio…

    High · CVSS 4.0 7.1 · Assessor: [email protected]

    Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.…

    CVE-2026-16437
    Read original (opens in a new tab)
  21. NVD

    CVE-2026-16436 — Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prio…

    Critical · CVSS 4.0 9.2 · Assessor: [email protected]

    Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.…

    CVE-2026-16436
    Read original (opens in a new tab)
  22. NVD

    CVE-2026-109855 — undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is ena…

    High · CVSS 3.1 7.5 · Assessor: ce714d77-add3-4f53-aff5-83d477b104bb

    undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the underlying HTTP/2 stream is left open with no error listener. When a malicious server then destroys the connection, the orphaned stream emits an unhandled error and the Node.js process exits. A remote, unauthenticated server…

    CVE-2026-109855
    Read original (opens in a new tab)
  24. NVD

    CVE-2026-104618 — On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created wo…

    Medium · CVSS 4.0 6.9 · Assessor: [email protected]

    On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.

    CVE-2026-104618
    Read original (opens in a new tab)

Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.