<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/cna-root/INCIBE/recent</id>
  <title>Most recent vulnerabilities from the INCIBE CNA root</title>
  <updated>2026-08-27T23:19:18.057572+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Latest vulnerabilities published by the CNAs operating under the INCIBE root of the CVE Program.</subtitle>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81931</id>
    <title>CVE-2026-81931 (Secur0)</title>
    <updated>2026-08-27T19:33:27.288000+00:00</updated>
    <content>Unrestricted upload of file with dangerous type in Prospero Flow CRM product photo allows stored cross-site scripting</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81931"/>
    <summary>Unrestricted upload of file with dangerous type in Prospero Flow CRM product photo allows stored cross-site scripting</summary>
    <published>2026-08-27T19:33:27.288000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81677</id>
    <title>CVE-2026-81677 (INCIBE)</title>
    <updated>2026-08-27T12:09:27.729000+00:00</updated>
    <content>Multiple Vulnerabilities in TOOOLS' iSquad</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81677"/>
    <summary>Multiple Vulnerabilities in TOOOLS' iSquad</summary>
    <published>2026-08-27T12:09:27.729000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81676</id>
    <title>CVE-2026-81676 (INCIBE)</title>
    <updated>2026-08-27T12:08:54.658000+00:00</updated>
    <content>Multiple Vulnerabilities in TOOOLS' iSquad</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81676"/>
    <summary>Multiple Vulnerabilities in TOOOLS' iSquad</summary>
    <published>2026-08-27T12:08:54.658000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81675</id>
    <title>CVE-2026-81675 (INCIBE)</title>
    <updated>2026-08-27T12:07:48.303000+00:00</updated>
    <content>Multiple Vulnerabilities in TOOOLS' iSquad</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81675"/>
    <summary>Multiple Vulnerabilities in TOOOLS' iSquad</summary>
    <published>2026-08-27T12:07:48.303000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81674</id>
    <title>CVE-2026-81674 (INCIBE)</title>
    <updated>2026-08-27T12:06:35.814000+00:00</updated>
    <content>Multiple Vulnerabilities in TOOOLS' iSquad</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81674"/>
    <summary>Multiple Vulnerabilities in TOOOLS' iSquad</summary>
    <published>2026-08-27T12:06:35.814000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81673</id>
    <title>CVE-2026-81673 (INCIBE)</title>
    <updated>2026-08-27T12:05:44.611000+00:00</updated>
    <content>Multiple Vulnerabilities in TOOOLS' iSquad</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81673"/>
    <summary>Multiple Vulnerabilities in TOOOLS' iSquad</summary>
    <published>2026-08-27T12:05:44.611000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81672</id>
    <title>CVE-2026-81672 (INCIBE)</title>
    <updated>2026-08-27T11:53:35.259000+00:00</updated>
    <content>Multiple Vulnerabilities in TOOOLS' iSquad</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81672"/>
    <summary>Multiple Vulnerabilities in TOOOLS' iSquad</summary>
    <published>2026-08-27T11:53:35.259000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-12587</id>
    <title>CVE-2026-12587 (INCIBE)</title>
    <updated>2026-08-26T12:20:52.212000+00:00</updated>
    <content>Embedded credentials in Virtuagym</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-12587"/>
    <summary>Embedded credentials in Virtuagym</summary>
    <published>2026-08-26T12:20:52.212000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-12600</id>
    <title>CVE-2026-12600 (INCIBE)</title>
    <updated>2026-08-25T10:57:57.486000+00:00</updated>
    <content>Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-12600"/>
    <summary>Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder</summary>
    <published>2026-08-25T10:57:57.486000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-78365</id>
    <title>CVE-2026-78365 (Secur0)</title>
    <updated>2026-08-24T12:49:36.802000+00:00</updated>
    <content>IDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modification</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-78365"/>
    <summary>IDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modification</summary>
    <published>2026-08-24T12:49:36.802000+00:00</published>
  </entry>
</feed>
