🟠 CVE-2025-71063 - High (8.2)

Errands before 46.2.10 does not verify TLS certificates for CalDAV servers.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71063/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0507 - High (8.4)

Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If pro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0507/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

FYI: Es gibt einen Micropatch für die CredsSSP-Schwachstelle CVE-2025-47987 für Windows-Systeme, die von MS keine Updates mehr bekommen.

https://borncity.com/blog/2026/01/13/0patch-micropatch-fuer-credssp-schwachstelle-cve-2025-47987/

🔴 CVE-2026-22783 - Critical (9.6)

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to 2.4.24, the DFIR-IRIS datastore file management system has a vulnerability where mass assignment of the file_local_name fie...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22783/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22804 - High (8)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 to 1.9.0, Stored Cross-Site Scripting (XSS) vulnerability exists in the Termix File Manager component. The application fails t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22804/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-68472 - High (8.1)

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload API lets any caller read arbitrary files from the server filesystem and move them into ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68472/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-67147 - Critical (9.8)

Multiple SQL Injection vulnerabilities exist in amansuryawanshi Gym-Management-System-PHP 1.0 via the 'name', 'email', and 'comment' parameters in (1) submit_contact.php, the 'username' and 'pass_key' parameters in (2) secure_login.php, and the 'l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67147/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-22794 - Critical (9.6)

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the server uses the Origin value from the request headers as the email link baseUrl without validation. If an attacker controls the Origin, password reset...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22794/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0506 - High (8.1)

Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an RFC function to execute form routines (FORMs) in the ABAP system. Successful exploitation could allow the at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0506/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22788 - High (8.2)

WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Prior to 1.19, the WebErpMesV2 application exposes multiple sensitive API endpoints without authentication middleware. An unauthenticated remote attacker can...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22788/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack