CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.
A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.
Simcenter Femap and Simcenter Nastran (versions before V2606) contain a stack overflow vulnerability while parsing specially crafted strings as arguments for one of the application binaries. This could allow an attacker to execute code in the context of the current process.
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process.
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
A vulnerability in Solid Edge SE2025 and SE2026 when parsing specially crafted PAR files. An out-of-bounds read occurs, which could allow an attacker to execute code in the context of the current process.
A use-after-free vulnerability in Solid Edge SE2025 and SE2026 when parsing specially crafted DFT files. It could allow an attacker to execute code in the context of the current process.
A use-after-free vulnerability in Solid Edge SE2025 and SE2026 when parsing specially crafted DFT files. It could allow an attacker to execute code in the context of the current process.
An out-of-bounds write vulnerability in Solid Edge SE2025 and SE2026 when parsing specially crafted DFT files. It could allow an attacker to execute code in the context of the current process.
An out-of-bounds read vulnerability in Solid Edge SE2025 and SE2026 when parsing specially crafted DFT files. It could allow an attacker to execute code in the context of the current process.
An SQL injection vulnerability in Koha (through 24.11.17, 25.05.12, 25.11.06, and 26.05.01) allows authenticated staff with the acquisition => order_receive permission to read arbitrary database contents via the orderby parameter in acqui/parcels.pl. The parameter is passed to C4::Acquisition::GetInvoices, which concatenates the direction token raw into the SQL ORDER BY clause without validation. Exploitation is blind (time-based) and allows extraction of patron PII, staff bcrypt password hashes, and two-factor secrets.
A stored SQL injection vulnerability in Koha (through 24.11.17, 25.05.12, 25.11.06, and 26.05.01) allows authenticated staff with the tools => items_batchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The value is stored verbatim and later interpolated without parameterization into a SQL query in C4::Items::ToggleNewStatus when the scheduled cron job executes. The injection allows reading the entire Koha database including patron PII and staff bcrypt password hashes.
A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the pin-from-URL feature. The feature passes the user-supplied URL directly to requests.get() without host or IP validation, and ALLOW_NEW_REGISTRATIONS defaults to true enabling anonymous triggering. An attacker can reach internal services or cloud metadata endpoints from the server.
A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user accounts via the POST /auth/profile/create endpoint. The endpoint is allowlisted from JWT verification, permitting unauthenticated account creation. An attacker can register an account and use it to access protected functionality on the server.
A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to obtain directory listings for arbitrary filesystem paths via the local-repository structure endpoint. The endpoint accepts an absolute filesystem path parameter and returns a directory listing without authentication, as WIKI_AUTH_MODE defaults to false. An attacker can enumerate sensitive directory contents on the host system.
A vulnerability in CSZ CMS 1.3.2 allows unauthenticated remote attackers to read all form submissions including PII via the admin form-submission viewer. The endpoint lacks authentication and the auth helper fails open.
A vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unauthenticated attackers to download invoice PDFs containing customer PII via the /download router. The router is publicly accessible and ObjectIds can be enumerated.
A vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by others. The permission check is missing a branch, allowing deletion.
A vulnerability in BadChoice Handesk (as of 2026-07-10) allows any authenticated agent to update tickets belonging to other teams via TicketsController@update. No authorization or team-scoped check is performed.
A vulnerability in BadChoice Handesk (as of 2026-07-10) allows any authenticated agent to overwrite lead records of other teams via LeadsController@update. No authorization check, and the Lead model is mass-assignable.