https://db.gcve.eu/cna-root/icscert/recent 2026-08-27T23:19:18.420399+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Latest vulnerabilities published by the CNAs operating under the icscert root of the CVE Program. https://db.gcve.eu/vuln/cve-2026-79988 2026-08-27T15:36:18.188000+00:00 Authenticated RCE through Twig sandbox escape

Authenticated RCE through Twig sandbox escape

2026-08-27T15:36:18.188000+00:00 https://db.gcve.eu/vuln/cve-2026-64896 2026-08-27T14:42:33.253000+00:00 T2000 open debug port

T2000 open debug port

2026-08-27T14:42:33.253000+00:00 https://db.gcve.eu/vuln/cve-2026-66155 2026-08-27T11:56:48.418000+00:00 A vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), Element maps-ng V49 (All versions < V49.16.1). The si-map component does not properly neutralize user-controllable input of the points property that is used to render the tooltip label of map pins. This could allow an attacker to craft a malicious URL that, when loaded by a victim and the map pin is hovered over, executes arbitrary script code within the victim's browser session.

A vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), Element maps-ng V49 (All versions < V49.16.1). The si-map component does not properly neutralize user-controllable input of the points property that is used to render the tooltip label of map pins. This could allow an attacker to craft a malicious URL that, when loaded by a victim and the map pin is hovered over, executes arbitrary script code within the victim's browser session.

2026-08-27T11:56:48.418000+00:00 https://db.gcve.eu/vuln/cve-2026-81625 2026-08-27T09:06:44.122000+00:00 Stack buffer overflow in Greenbone OS and openvas-scanner

Stack buffer overflow in Greenbone OS and openvas-scanner

2026-08-27T09:06:44.122000+00:00 https://db.gcve.eu/vuln/cve-2026-19398 2026-08-27T02:00:16.449000+00:00 “unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) request with an oversized length value.Refer to the '  Security Update for ASUS FA507NV / FA507NU BIOS   ' section on the ASUS Security Advisory for more information.

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) request with an oversized length value.Refer to the '  Security Update for ASUS FA507NV / FA507NU BIOS   ' section on the ASUS Security Advisory for more information.

2026-08-27T02:00:16.449000+00:00 https://db.gcve.eu/vuln/cve-2026-75960 2026-08-26T13:20:19.920000+00:00 Insufficiently Protected Credentials in Rently Smart Home

Insufficiently Protected Credentials in Rently Smart Home

2026-08-26T13:20:19.920000+00:00 https://db.gcve.eu/vuln/cve-2026-15203 2026-08-26T05:36:02.006000+00:00 Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software

Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software

2026-08-26T05:36:02.006000+00:00 https://db.gcve.eu/vuln/cve-2026-63587 2026-08-25T08:55:12.442000+00:00 SMS Password Authorization Bypass via Failed Attempt Counter

SMS Password Authorization Bypass via Failed Attempt Counter

2026-08-25T08:55:12.442000+00:00 https://db.gcve.eu/vuln/cve-2026-63586 2026-08-25T08:54:55.934000+00:00 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

2026-08-25T08:54:55.934000+00:00 https://db.gcve.eu/vuln/cve-2026-34491 2026-08-24T17:24:25.732000+00:00 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1.

2026-08-24T17:24:25.732000+00:00