Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation

WordPress Plugin 5.2.0 - Broken Access Control

AVAST Antivirus 25.11 - Unquoted Service Path

Posted by Thomas Weber | CyberDanube via Fulldisclosure on Apr 14

CyberDanube Security Research 20260408-1
-------------------------------------------------------------------------------
title| Multiple Vulnerabilities
product| Siemens SICAM A8000 CP-8050/CP-8031/CP-8010/CP-8012
vulnerable version| <=V25.30
fixed version| V26.10
CVE number| CVE-2026-27664
impact| High
homepage| https://siemens.com/
found|...

Posted by Thomas Weber | CyberDanube via Fulldisclosure on Apr 14

CyberDanube Security Research 20260408-0
-------------------------------------------------------------------------------
title| Remote Operation Denial of Service
product| Siemens SICAM A8000 CP-8050/CP-8031/CP-8010/CP-8012
vulnerable version| <=V25.30
fixed version| V26.10
CVE number| CVE-2026-27663
impact| Medium
homepage| https://siemens.com/...

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 14

SEC Consult Vulnerability Lab Security Advisory < 20260414-0 >
=======================================================================
title: Improper Enforcement of Locked Accounts in WebUI (SSO)
            product: Kiuwan SAST on-premise (KOP) & cloud/SaaS
 vulnerable version: <2.8.2509.4
      fixed version: 2.8.2509.4
         CVE number: CVE-2026-24069
             impact: medium...

NetBT e-Fatura - Privilege Escalation

D-Link DIR-650IN - Authenticated Command Injection

React Server 19.2.0 - Remote Code Execution

RomM 4.4.0 - XSS_CSRF Chain

Jumbo Website Manager - Remote Code Execution

ZSH 5.9 - RCE

FortiWeb 8.0.2 - Remote Code Execution

7-Zip 24.00 - Directory Traversal

xibocms 3.3.4 - RCE

SQLite 3.50.1 - Heap Overflow

Microsoft MMC MSC EvilTwin - Local Admin Creation

Horilla v1.3 - RCE

is-localhost-ip 2.0.0 - SSRF

Fortinet FortiWeb v8.0.1 - Auth Bypass