<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/cna-root/CISA/recent</id>
  <title>Most recent vulnerabilities from the CISA CNA root</title>
  <updated>2026-08-27T23:19:19.063956+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Latest vulnerabilities published by the CNAs operating under the CISA root of the CVE Program.</subtitle>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81934</id>
    <title>CVE-2026-81934 (cisa-cg)</title>
    <updated>2026-08-27T19:40:15.141000+00:00</updated>
    <content>Redis TLS pending-data list use-after-free</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81934"/>
    <summary>Redis TLS pending-data list use-after-free</summary>
    <published>2026-08-27T19:40:15.141000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-79988</id>
    <title>CVE-2026-79988 (Hackrate)</title>
    <updated>2026-08-27T15:36:18.188000+00:00</updated>
    <content>Authenticated RCE through Twig sandbox escape</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-79988"/>
    <summary>Authenticated RCE through Twig sandbox escape</summary>
    <published>2026-08-27T15:36:18.188000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-64896</id>
    <title>CVE-2026-64896 (jci)</title>
    <updated>2026-08-27T14:42:33.253000+00:00</updated>
    <content>T2000 open debug port</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-64896"/>
    <summary>T2000 open debug port</summary>
    <published>2026-08-27T14:42:33.253000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-66155</id>
    <title>CVE-2026-66155 (siemens)</title>
    <updated>2026-08-27T11:56:48.418000+00:00</updated>
    <content>A vulnerability has been identified in Element maps-ng V47 (All versions &lt; V47.12.3), Element maps-ng V48 (All versions &lt; V48.11.3), Element maps-ng V49 (All versions &lt; V49.16.1). The si-map component does not properly neutralize user-controllable input of the points property that is used to render the tooltip label of map pins.&#13;
This could allow an attacker to craft a malicious URL that, when loaded by a victim and the map pin is hovered over, executes arbitrary script code within the victim's browser session.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-66155"/>
    <summary>A vulnerability has been identified in Element maps-ng V47 (All versions &lt; V47.12.3), Element maps-ng V48 (All versions &lt; V48.11.3), Element maps-ng V49 (All versions &lt; V49.16.1). The si-map component does not properly neutralize user-controllable input of the points property that is used to render the tooltip label of map pins.&#13;
This could allow an attacker to craft a malicious URL that, when loaded by a victim and the map pin is hovered over, executes arbitrary script code within the victim's browser session.</summary>
    <published>2026-08-27T11:56:48.418000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81625</id>
    <title>CVE-2026-81625 (CERTVDE)</title>
    <updated>2026-08-27T09:06:44.122000+00:00</updated>
    <content>Stack buffer overflow in Greenbone OS and openvas-scanner</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81625"/>
    <summary>Stack buffer overflow in Greenbone OS and openvas-scanner</summary>
    <published>2026-08-27T09:06:44.122000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-19398</id>
    <title>CVE-2026-19398 (ASUS)</title>
    <updated>2026-08-27T02:00:16.449000+00:00</updated>
    <content>“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) request with an oversized length value.Refer to the ' 
Security Update for ASUS FA507NV / FA507NU BIOS   ' section on the ASUS Security Advisory for more information.</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-19398"/>
    <summary>“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) request with an oversized length value.Refer to the ' 
Security Update for ASUS FA507NV / FA507NU BIOS   ' section on the ASUS Security Advisory for more information.</summary>
    <published>2026-08-27T02:00:16.449000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-75960</id>
    <title>CVE-2026-75960 (icscert)</title>
    <updated>2026-08-26T13:20:19.920000+00:00</updated>
    <content>Insufficiently Protected Credentials in Rently Smart Home</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-75960"/>
    <summary>Insufficiently Protected Credentials in Rently Smart Home</summary>
    <published>2026-08-26T13:20:19.920000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-15203</id>
    <title>CVE-2026-15203 (Danfoss)</title>
    <updated>2026-08-26T05:36:02.006000+00:00</updated>
    <content>Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-15203"/>
    <summary>Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software</summary>
    <published>2026-08-26T05:36:02.006000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-75498</id>
    <title>CVE-2026-75498 (cisa-cg)</title>
    <updated>2026-08-25T16:37:43.725000+00:00</updated>
    <content>Webkul QloApps SQL injection</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-75498"/>
    <summary>Webkul QloApps SQL injection</summary>
    <published>2026-08-25T16:37:43.725000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-75497</id>
    <title>CVE-2026-75497 (cisa-cg)</title>
    <updated>2026-08-25T16:37:10.271000+00:00</updated>
    <content>Webkul QloApps SQL injection</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-75497"/>
    <summary>Webkul QloApps SQL injection</summary>
    <published>2026-08-25T16:37:10.271000+00:00</published>
  </entry>
</feed>
