<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 15 Nov 2026 21:15:15 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-12507 — Authenticated remote code execution</title>
      <link>https://db.gcve.eu/vuln/cve-2026-12507</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Zohocorp AssetExplorer, Zohocorp ServiceDesk Plus, Zohocorp ServiceDesk Plus MSP, Zohocorp SupportCenter Plus&lt;/p&gt;
&lt;p&gt;Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Zohocorp AssetExplorer, Zohocorp ServiceDesk Plus, Zohocorp ServiceDesk Plus MSP, Zohocorp SupportCenter Plus&lt;/p&gt;
&lt;p&gt;Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-12507</guid>
    </item>
  </channel>
</rss>
