V

VulDB Updates

https://vuldb.com/?rss.updates (RSS订阅地址)

CVE-2026-45086 | Decidim up to 0.31.4/0.32.0.rc1 Demographics Questionnaire Editor edit_questions improper authorization

A vulnerability described as <a href="https://vuldb.com/kb/risk">critical</a> has been identified in <a href="https://vuldb.com/product/decidim">Decidim up to 0.31.4/0.32.0.rc1</a>. This impacts an unknown function of the file <em>/admin/demographics/questions/edit_questions</em> of the component <em>Demographics Questionnaire Editor</em>. The manipulation results in improper authorization. This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-45086">CVE-2026-45086</a>. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

2026/9/9
阅读更多

CVE-2026-52232 | FS S3150-8T2F Switch 2.2.0D Build 118101 Logo ASP /logo.asp cross site scripting (EUVD-2026-51655)

A vulnerability labeled as <a href="https://vuldb.com/kb/risk">problematic</a> has been found in <a href="https://vuldb.com/product/fs:s3150-8t2f_switch">FS S3150-8T2F Switch 2.2.0D Build 118101</a>. The impacted element is an unknown function of the file <em>/logo.asp</em> of the component <em>Logo ASP Component</em>. Executing a manipulation can lead to cross site scripting. This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-52232">CVE-2026-52232</a>. It is possible to launch the attack remotely. No exploit is available.

2026/9/9
阅读更多

CVE-2026-38710 | Cudy TR1200/TR3000 2.4.15/2.4.21 system.setclock command injection (EUVD-2026-51646)

A vulnerability classified as <a href="https://vuldb.com/kb/risk">very critical</a> has been found in <a href="https://vuldb.com/product/cudy:tr1200">Cudy TR1200 and TR3000 2.4.15/2.4.21</a>. The impacted element is the function <code>system.setclock</code>. The manipulation leads to command injection. This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2026-38710">CVE-2026-38710</a>. It is possible to initiate the attack remotely. There is no exploit available.

2026/9/9
阅读更多

CVE-2026-53551 | free5GC up to 1.4.4 AUSF net/url.Parse supiOrSuci input validation (EUVD-2026-51628)

A vulnerability marked as <a href="https://vuldb.com/kb/risk">critical</a> has been reported in <a href="https://vuldb.com/product/free5gc">free5GC up to 1.4.4</a>. Impacted is the function <code>net/url.Parse</code> of the component <em>AUSF</em>. Performing a manipulation of the argument <em>supiOrSuci</em> results in improper input validation. This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-53551">CVE-2026-53551</a>. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

2026/9/9
阅读更多

CVE-2026-55825 | Contao up to 5.7.6 VirtualFilesystem resolve jobUuid authorization

A vulnerability was found in <a href="https://vuldb.com/product/contao">Contao up to 5.7.6</a>. It has been rated as <a href="https://vuldb.com/kb/risk">problematic</a>. Affected by this issue is the function <code>VirtualFilesystem::resolve</code> of the component <em>VirtualFilesystem</em>. The manipulation of the argument <em>jobUuid</em> leads to authorization bypass. This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-55825">CVE-2026-55825</a>. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

2026/9/9
阅读更多

CVE-2026-55824 | Contao up to 5.3.46/5.7.6 Crawler improper authorization (EUVD-2026-51613)

A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">problematic</a>, has been found in <a href="https://vuldb.com/product/contao">Contao up to 5.3.46/5.7.6</a>. The affected element is an unknown function of the component <em>Crawler</em>. The manipulation leads to improper authorization. This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-55824">CVE-2026-55824</a>. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

2026/9/9
阅读更多

CVE-2026-53505 | globo.com Thumbor up to 7.7.x proportion resource consumption

A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> was found in <a href="https://vuldb.com/product/globo">globo.com Thumbor up to 7.7.x</a>. Impacted is the function <code>proportion</code>. Executing a manipulation can lead to resource consumption. This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-53505">CVE-2026-53505</a>. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

2026/9/9
阅读更多

CVE-2026-53504 | globo.com Thumbor up to 7.7.x Convolution Filter incorrect regex

A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> has been found in <a href="https://vuldb.com/product/globo">globo.com Thumbor up to 7.7.x</a>. This issue affects some unknown processing of the component <em>Convolution Filter</em>. Performing a manipulation results in incorrect regular expression. This vulnerability is known as <a href="https://vuldb.com/cve/CVE-2026-53504">CVE-2026-53504</a>. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

2026/9/9
阅读更多

CVE-2026-53503 | globo.com Thumbor up to 7.7.x Convolution Filter _convolution.c input validation

A vulnerability described as <a href="https://vuldb.com/kb/risk">problematic</a> has been identified in <a href="https://vuldb.com/product/globo">globo.com Thumbor up to 7.7.x</a>. This vulnerability affects unknown code of the file <em>thumbor/ext/filters/_convolution.c</em> of the component <em>Convolution Filter</em>. Such manipulation leads to improper input validation. This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2026-53503">CVE-2026-53503</a>. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

2026/9/9
阅读更多

CVE-2026-53502 | globo.com Thumbor up to 7.7.x file_loader path traversal

A vulnerability marked as <a href="https://vuldb.com/kb/risk">critical</a> has been reported in <a href="https://vuldb.com/product/globo">globo.com Thumbor up to 7.7.x</a>. This affects an unknown part of the component <em>file_loader</em>. This manipulation causes path traversal. This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-53502">CVE-2026-53502</a>. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

2026/9/9
阅读更多

推荐订阅

Threat Intelligence

Cofense

Google Android Security Bulletins

Adobe Security Bulletins and Advisories

VirusTotal Blog