CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the libimpl-ril library, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
In the libimpl-ril library, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
In the fastDial service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the fastDial service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the fastDial service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.
In the fastDial service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the telephony service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the telephony service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In telephony service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the telephony service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

