Vulnerabilities
Vulnerability in KAMSOFT ZSIRep CLIENT library
Improper Certificate Validation vulnerability (CVE-2026-113618) has been found in KAMSOFT ZSIRep CLIENT library.
CERT Polska
29 stories · RSS feed for this view
Vulnerabilities
Vulnerabilities in Request Tracker and RT for Incident Response software
During its own research, CERT Polska has found 3 XSS vulnerabilities (from CVE-2026-105454 to CVE-2026-105456) in Request Tracker (RT) and RT for Incident Response software (RTIR).
Vulnerabilities
Vulnerabilities in Płatnik software
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-110970 to CVE-2026-110972) found in Płatnik software.
Vulnerabilities
Vulnerabilities in ARKETEAM Protectel software
CERT Polska has received a report about 5 vulnerabilities (from CVE-2025-68391 to CVE-2025-68395) found in ARKETEAM Protectel software.
Vulnerabilities
Vulnerabilities in Zimbra Collaboration software
During its own research, CERT Polska has found 2 XSS vulnerabilities (CVE-2026-66911 and CVE-2026-66912) in Zimbra Collaboration software.
Vulnerabilities
Vulnerabilities in Szafir software
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-93570, CVE-2026-93571 and CVE-2026-106036) found in Szafir software.
Vulnerabilities
Vulnerability in Wing FTP Server software
Path Traversal vulnerability (CVE-2026-105420) has been found in Wing FTP Server software.
Vulnerabilities
Vulnerability in KGS Software tia Viewer software
Stored Cross-Site Scripting vulnerability (CVE-2026-105987) has been found in KGS Software tia Viewer software.
Vulnerabilities
Vulnerabilities in twofactor_gauthenticator plugin for Roundcube
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-107145 to CVE-2026-107147) found in twofactor_gauthenticator plugin for Roundcube.
Vulnerabilities
Vulnerabilities in boneIO products
CERT Polska has received a report about 11 vulnerabilities (from CVE-2026-77052 to CVE-2026-77062) found in boneIO products.
Vulnerabilities
Vulnerabilities in CGM CLININET software
CERT Polska has received a report about 11 vulnerabilities (CVE-2025-30043 and from CVE-2025-30045 to CVE-2025-30047, from CVE-2025-30049 to CVE-2025-30054 and CVE-2025-58403) found in CGM CLININET software.
Vulnerabilities
Vulnerability in MTW CleanShot X software
Deserialization of Untrusted Data vulnerability (CVE-2026-16477) has been found in MTW CleanShot X software.
Vulnerabilities
Vulnerability in NordVPN software
Incorrect Authorization vulnerability (CVE-2026-106030) has been found in NordVPN software.
Vulnerabilities
Vulnerability in Sparx Systems Enterprise Architect software
Improper restriction of XML external entity reference vulnerability (CVE-2026-88794) has been found in Sparx Systems Enterprise Architect software.
Vulnerabilities
Vulnerabilities in Slican telephone exchanges
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35088, CVE-2026-63314 and CVE-2026-63315) found in Slican telephone exchanges.
Vulnerabilities
Vulnerability in Payload CMS software
SQL Injection vulnerability (CVE-2026-63316) has been found in Payload CMS software.
Vulnerabilities
Vulnerability in Ollama software
Relative Path Traversal vulnerability (CVE-2026-103663) has been found in Ollama software.
Vulnerabilities
Vulnerabilities in GNU Aspell software
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-75818 to CVE-2026-75820) found in GNU Aspell software.
Vulnerabilities
Vulnerability in gotop software
Local Argument Injection vulnerability (CVE-2026-91784) has been found in cjbassi/gotop software.
Vulnerabilities
Vulnerabilities in YunoHost-Apps sogo_yhn software
CERT Polska has received a report about 2 vulnerabilities (CVE-2026-74864 and CVE-2026-74865) found in YunoHost-Apps sogo_yhn software.
Vulnerabilities
Vulnerability in Quick.Cart software
Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-41875) has been found in Quick.Cart software.
Vulnerabilities
Vulnerability in MyPresta Google Merchant Center Feed software
External control of file name or path vulnerability (CVE-2026-85520) has been found in MyPresta Google Merchant Center Feed software.
Vulnerabilities
Vulnerability in Ghostscript software
Untrusted Search Path vulnerability (CVE-2026-19547) has been found in Ghostscript software.
Vulnerabilities
Vulnerability in Das U-Boot software
Out-of-bounds write vulnerability (CVE-2026-15390) has been found in DENX Software Engineering Das U-Boot software.
Vulnerabilities
Vulnerabilities in Dayforce ESS Excelity software
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-73640 to CVE-2026-73642) found in Dayforce ESS Excelity software.
Vulnerabilities
Vulnerabilities in Kaon AR2140 routers
CERT Polska has received a report about 2 vulnerabilities (CVE-2026-52748 and CVE-2026-52749) found in Kaon AR2140 routers.
Vulnerabilities
Vulnerabilities in F&F Filipowski mH-DEVELOPER devices
CERT Polska has received a report about 7 vulnerabilities (from CVE-2026-82928 to CVE-2026-82930 and CVE-2026-82932, CVE-2026-82933, CVE-2026-82935 and CVE-2026-82936) found in F&F Filipowski mH-DEVELOPER devices.
Vulnerabilities
Vulnerability in WEBCON BPS software
Authorization bypass through User-Controlled key vulnerability (CVE-2026-92419) has been found in WEBCON BPS software.
Inside a multi stage toll fraud operation targeting Poland
CERT Polska uncovered a toll fraud operation targeting Polish users through deceptive Meta advertisements and malicious applications distributed via Google Play. We preserved 1235 ads, linked 852 to 17 applications…