Microsoft February 2026 Security Updates

Microsoft January 2026 Security Updates

Microsoft December 2025 Security Updates

Microsoft December 2025 Early Security Updates

Microsoft November 2025 Security Updates

Microsoft October 2025 Security Updates

Microsoft September 2025 Security Updates

Microsoft August 2025 Security Updates

Microsoft August Early 2025 Security Updates

Microsoft July 2025 Security Updates

Microsoft June 2025 Security Updates

Microsoft June Early 2025 Security Updates

Microsoft May 2025 Security Updates

Microsoft May Early 2025 Security Updates

Microsoft April 2025 Security Updates

Microsoft March 2025 Security Updates

Microsoft March 2025 Early Security Updates

Microsoft February 2025 Security Updates

Microsoft February 2025 Early Security Updates

Microsoft January 2025 Security Updates

Microsoft January 2025 Early Security Updates

Microsoft December 2024 Security Updates

Microsoft November 2024 Security Updates

Microsoft October 2024 Security Updates

Microsoft September 2024 Security Updates

Microsoft August 2024 Security Updates

Microsoft July 2024 Security Updates

Microsoft June 2024 Security Updates

Microsoft May 2024 Security Updates

Microsoft April 2024 Security Updates

Microsoft March 2024 Security Updates

Microsoft February 2024 Security Updates

Microsoft January 2024 Security Updates

catalyst_sd-wan_manager

sd-wan_vmanage

Improper Authentication

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.

This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root&nbsp;user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.&nbsp;

Cisco Catalyst SD-WAN Manager

Cisco

A vulnerability in the peering authentication mechanism of Cisco Catalyst SD-WAN Controller (formerly SD-WAN vSmart) and Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) allows unauthenticated, remote attackers to bypass authentication and obtain administrative privileges. The vulnerability exists because the peering authentication mechanism is not working properly. An attacker can exploit this by sending crafted requests to an affected system.

Authentication Abuse

Authentication Bypass

Identity Spoofing

Fake the Source of Data

Exploiting Trust in Client

Utilizing REST's Trust in the System Resource to Obtain Sensitive Data

Session Hijacking

Token Impersonation

Upload a Web Shell to a Web Server

Adversary in the Middle (AiTM)

Abuse Elevation Control Mechanism

Application Access Token

Access Token Manipulation

Web Shell

Adversary-in-the-Middle

chrome

Use After Free

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

A use-after-free vulnerability exists in the CSS component of Google Chrome prior to version 145.0.7632.75. This memory safety flaw allows a remote attacker to execute arbitrary code inside the Chrome sandbox by crafting a malicious HTML page.

Google Chrome chrome-145.0.7632.75

langflow

Improper Control of Generation of Code ('Code Injection')

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.8.0, the CSV Agent node in Langflow hardcodes `allow_dangerous_code=True`, which automatically exposes LangChain’s Python REPL tool (`python_repl_ast`). As a result, an attacker can execute arbitrary Python and OS commands on the server via prompt injection, leading to full Remote Code Execution (RCE). Version 1.8.0 fixes the issue.

langflow-ai

The CSV Agent node in Langflow hardcodes `allow_dangerous_code=True`, which automatically exposes LangChain's Python REPL tool (`python_repl_ast`). This allows attackers to execute arbitrary Python and OS commands on the server via prompt injection, leading to full Remote Code Execution (RCE).

Code Injection

Leverage Executable Code in Non-Executable Files

Manipulating User-Controlled Variables

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed.
This issue was fixed in 6.30@A04.4_u06.

SIMPLE.ERP

Simple SA

SIMPLE.ERP is vulnerable to SQL Injection in the search functionality within the "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare and execute malicious database queries.

Command Line Execution through SQL Injection

Object Relational Mapping Injection

SQL Injection through SOAP Parameter Tampering

Expanding Control over the Operating System from the Database

SQL Injection

Blind SQL Injection

f453_firmware

Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

A vulnerability was determined in Tenda F453 1.0.0.3. Impacted is the function fromSetWifiGusetBasic of the file /goform/AdvSetWrlsafeset of the component httpd. This manipulation of the argument mit_ssid causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

F453

Tenda

A buffer overflow vulnerability exists in Tenda F453 firmware version 1.0.0.3. The vulnerability is located in the httpd component, specifically in the fromSetWifiGusetBasic function of the /goform/AdvSetWrlsafeset file. The mit_ssid argument is improperly validated, allowing out-of-bounds write operations. This is classified as an improper restriction of operations within memory buffer bounds.

Buffer Overflow via Environment Variables

Overflow Buffers

Buffer Manipulation

Client-side Injection-induced Buffer Overflow

Filter Failure through Buffer Overflow

MIME Conversion

Overflow Binary Resource File

Buffer Overflow via Symbolic Links

Overflow Variables and Tags

Buffer Overflow via Parameter Expansion

Buffer Overflow in an API Call

Buffer Overflow in Local Command-Line Utilities

String Format Overflow in syslog()

Forced Integer Overflow

wp_sms

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs WP SMS wp-sms allows SQL Injection.This issue affects WP SMS: from n/a through <= 6.9.12.

WP SMS

VeronaLabs

budibase

Improper Input Validation

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

Budibase is a low code platform for creating internal tools, workflows, and admin panels. Prior to version 3.30.4, an unsafe `eval()` vulnerability in Budibase's view filtering implementation allows any authenticated user (including free tier accounts) to execute arbitrary JavaScript code on the server. This vulnerability ONLY affects Budibase Cloud (SaaS) - self-hosted deployments use native CouchDB views and are not vulnerable. The vulnerability exists in `packages/server/src/db/inMemoryView.ts` where user-controlled view map functions are directly evaluated without sanitization. The primary impact comes from what lives inside the pod's environment: the `app-service` pod runs with secrets baked into its environment variables, including `INTERNAL_API_KEY`, `JWT_SECRET`, CouchDB admin credentials, AWS keys, and more. Using the extracted CouchDB credentials, we verified direct database access, enumerated all tenant databases, and confirmed that user records (email addresses) are readable. Version 3.30.4 contains a patch.

Unsafe eval() vulnerability in Budibase's view filtering implementation in versions prior to 3.30.4. The vulnerability exists in packages/server/src/db/inMemoryView.ts where user-controlled view map functions are directly evaluated without sanitization. This affects Budibase Cloud (SaaS) deployments only - self-hosted deployments using native CouchDB views are not vulnerable.

Server Side Include (SSI) Injection

Cross Zone Scripting

Double Encoding

Subverting Environment Variable Values

Format String Injection

LDAP Injection

Input Data Manipulation

Flash Injection

XSS Using MIME Type Mismatch

File Content Injection

Serialized Data with Nested Payloads

Oversized Serialized Data Payloads

XML Injection

Impair Command History Logging

Dynamic Linker Hijacking

Path Interception by PATH Environment Variable

Github Advisory

caddy

Incorrect Behavior Order: Validate Before Canonicalize

Incorrect Calculation of Multi-Byte String Length

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's FastCGI path splitting logic computes the split index on a lowercased copy of the request path and then uses that byte index to slice the original path. This is unsafe for Unicode because `strings.ToLower()` can change UTF-8 byte length for some characters. As a result, Caddy can derive an incorrect `SCRIPT_NAME`/`SCRIPT_FILENAME` and `PATH_INFO`, potentially causing a request that contains `.php` to execute a different on-disk file than intended (path confusion). In setups where an attacker can control file contents (e.g., upload features), this can lead to unintended PHP execution of non-.php files (potential RCE depending on deployment). Version 2.11.1 fixes the issue.

Caddy's FastCGI path splitting logic computes the split index on a lowercased copy of the request path and then uses that byte index to slice the original path. This is unsafe for Unicode because strings.ToLower() can change UTF-8 byte length for some characters. As a result, Caddy can derive an incorrect SCRIPT_NAME/SCRIPT_FILENAME and PATH_INFO, potentially causing a request that contains .php to execute a different on-disk file than intended (path confusion).

Search CVEs by ID

Trending Vulnerabilities

Latest Patch Tuesday Reports

February 2026 Patch Tuesday: 10 Critical Vulnerabilities Amid 61 CVEs

January 2026 Patch Tuesday: 8 Critical Vulnerabilities Amid 113 CVEs

December 2025 Patch Tuesday: 10 Critical Vulnerabilities Amid 64 CVEs

Browse

Be the first to know about critical vulnerabilities