HAX CMS 24.x - Stored Cross-Site Scripting (XSS)

Craft CMS 5.6.16 - RCE

GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation

phpMyFAQ 4.0.16 - Improper Authorization

GeographicLib v2.5.1 - stack buffer overflow

OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)

OpenKM 6.3.12 - Multiple

GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)

JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution

FacturaScripts 2025.43 - XSS

Xibo CMS 4.3.0 - RCE via SSTI

Fedora - Local Privilege Escalation

LangChain Core 1.2.4 - SSTI/RCE

Atlona ATOMERX21 - Authenticated Command Injection

Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation

WordPress Plugin 5.2.0 - Broken Access Control

AVAST Antivirus 25.11 - Unquoted Service Path

Posted by Thomas Weber | CyberDanube via Fulldisclosure on Apr 14

CyberDanube Security Research 20260408-1
-------------------------------------------------------------------------------
title| Multiple Vulnerabilities
product| Siemens SICAM A8000 CP-8050/CP-8031/CP-8010/CP-8012
vulnerable version| <=V25.30
fixed version| V26.10
CVE number| CVE-2026-27664
impact| High
homepage| https://siemens.com/
found|...

Posted by Thomas Weber | CyberDanube via Fulldisclosure on Apr 14

CyberDanube Security Research 20260408-0
-------------------------------------------------------------------------------
title| Remote Operation Denial of Service
product| Siemens SICAM A8000 CP-8050/CP-8031/CP-8010/CP-8012
vulnerable version| <=V25.30
fixed version| V26.10
CVE number| CVE-2026-27663
impact| Medium
homepage| https://siemens.com/...

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 14

SEC Consult Vulnerability Lab Security Advisory < 20260414-0 >
=======================================================================
title: Improper Enforcement of Locked Accounts in WebUI (SSO)
            product: Kiuwan SAST on-premise (KOP) & cloud/SaaS
 vulnerable version: <2.8.2509.4
      fixed version: 2.8.2509.4
         CVE number: CVE-2026-24069
             impact: medium...