Vuldb Updates

A vulnerability identified as problematic has been detected in Schneider Electric PowerLogic P7. Affected by this issue is some unknown functionality. Performing a manipulation results in reachable assertion. This vulnerability is known as CVE-2026-9718. Remote exploitation of the attack is possible. No exploit is available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Flowise. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v1/document-store/loader/process. The manipulation leads to file inclusion. This vulnerability is referenced as CVE-2025-71338. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability described as problematic has been identified in wolfSSL up to 5.9.1. The affected element is an unknown function of the component Configuration Handler. Executing a manipulation can lead to improper certificate validation. This vulnerability is registered as CVE-2026-7532. It is possible to launch the attack remotely. No exploit is available. A patch should be applied to remediate this issue.

A vulnerability identified as critical has been detected in Flowise up to 2.2.4. The affected element is an unknown function of the file /api/v1/attachments. Performing a manipulation of the argument chatflowId results in file inclusion. This vulnerability is identified as CVE-2025-71333. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in wolfSSL up to 5.9.1. It has been rated as problematic. The impacted element is an unknown function. Performing a manipulation results in integer underflow. This vulnerability was named CVE-2026-6678. The attack needs to be approached locally. There is no available exploit. It is suggested to install a patch to address this issue.

A vulnerability was found in DAVIDO Bytes::Random::Secure::Tiny up to 1.011 on Perl and classified as problematic. This affects an unknown function. Executing a manipulation can lead to incorrect usage of seeds in prng. This vulnerability is registered as CVE-2026-11702. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in DAVIDO Bytes::Random::Secure up to 0.29 on Perl. It has been classified as problematic. This impacts the function Bytes::Random::Secure of the component Functional Interface. The manipulation leads to incorrect usage of seeds in prng. This vulnerability is documented as CVE-2026-11625. The attack can be initiated remotely. There is not any exploit available.

A vulnerability has been found in Canonical lxd up to 6.8 and classified as problematic. This affects an unknown function of the file /dev/lxd of the component devLXDInstancePatchHandler. The manipulation leads to authorization bypass. This vulnerability is referenced as CVE-2026-12411. The attack can only be performed from a local environment. No exploit is available. The affected component should be upgraded.

A vulnerability classified as problematic was found in Erlang OTP up to 4.2.0/8.1/11.7.2/19.x/29.0.2. Affected by this issue is some unknown functionality in the library lib/ssl/src/dtls_server_connection.erl. Executing a manipulation of the argument random can lead to use of default cryptographic key. This vulnerability is registered as CVE-2026-54887. The attack requires access to the local network. No exploit is available. Upgrading the affected component is advised.

A vulnerability was found in Erlang OTP up to 29.0.2. It has been classified as critical. The affected element is an unknown function of the component ClientHello Handler. Performing a manipulation results in improper validation of specified quantity in input. This vulnerability is known as CVE-2026-55952. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, was found in Little Orbit GameFirst Anti-Cheat up to 2025-07-07. This affects an unknown function in the library GFAC_Sys_x64.sys. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2026-12167. An attack has to be approached locally. There is no exploit available.

A vulnerability marked as problematic has been reported in Erlang OTP up to 29.0.3. This impacts the function read_link in the library lib/ssh/src/ssh_sftpd.erl of the component SSH_FXP_REALPATH Handler. This manipulation causes observable response discrepancy. This vulnerability is tracked as CVE-2026-53422. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability has been found in SUSE libzypp up to 17.38.11 and classified as problematic. This issue affects some unknown processing of the file repomd.xml. This manipulation causes relative path traversal. This vulnerability appears as CVE-2026-44941. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability was found in SUSE Rancher up to 0.12.14/0.13.10/0.14.5/0.15.1 and classified as problematic. Impacted is an unknown function. Such manipulation leads to improper validation of specified type of input. This vulnerability is traded as CVE-2026-44935. Access to the local network is required for this attack to succeed. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as critical was found in Little Orbit GameFirst Anti-Cheat up to 2025-07-07. The affected element is an unknown function in the library GFAC_Sys_x64.sys of the component Kernel Mode. The manipulation results in write-what-where condition. This vulnerability is reported as CVE-2026-12168. The attack requires a local approach. No exploit exists.

A vulnerability, which was classified as problematic, has been found in Little Orbit GameFirst Anti-Cheat up to 2025-07-07. The impacted element is an unknown function in the library GFAC_Sys_x64.sys of the component Requests Handler. This manipulation causes null pointer dereference. This vulnerability appears as CVE-2026-12166. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in Cisco Evolved Programmable Network Manager up to 8.1.1 and classified as critical. Impacted is an unknown function of the component REST API Endpoint. Such manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2026-20155. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, was found in rtk-ai rtk 1.0.0. The affected element is the function execSync of the component Template String Handler. Executing a manipulation can lead to os command injection. This vulnerability is registered as CVE-2026-55249. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in rtk-ai rtk up to 0.31.x and classified as problematic. The impacted element is an unknown function of the file rtk/filters.toml of the component Filter Handler. The manipulation leads to insufficient verification of data authenticity. This vulnerability is documented as CVE-2026-45792. The attack needs to be performed locally. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in QOS.CH Sarl Logback-core up to 1.5.34/1.5.134. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component Configuration Handler. The manipulation leads to improper input validation. This vulnerability is referenced as CVE-2026-13006. The attack can only be performed from a local environment. No exploit is available. Upgrading the affected component is recommended.