CVE Vulnerabilities - 7 July 2026

ColdFusion versions 2025.9 and earlier are at risk of allowing attackers to execute malicious code on a server without needing user interaction. This means that an attacker could potentially take cont...

Incus, a container management software, can be tricked into allowing malicious images to read and write files on the host system. This could potentially allow an attacker to execute malicious code on ...

A vulnerability in Incus allows attackers to write files to arbitrary locations on the host system by creating a specially crafted image. This can potentially lead to unauthorized command execution. T...

A vulnerability in Incus's S3 protocol upload endpoint allows attackers to create arbitrary files on the host, potentially leading to unauthorized command execution. This affects Incus users who rely ...

A malicious image can read and write any file on the host, potentially allowing an attacker to execute any command. This is a serious security risk, and users should be cautious when importing images ...

A vulnerability in Incus's backup compression feature allows attackers to write arbitrary files on the host, potentially leading to unauthorized access. This issue affects Incus's backup compression f...

Incus has a security issue that allows a malicious user to bypass project restrictions and execute arbitrary commands on the server with root privileges. This is a serious problem because it could all...

A malicious image server can write files to any location on the Incus server, potentially allowing an attacker to execute commands as root. This is due to a weakness in how Incus handles image downloa...

A security issue in Coolify's terminal feature allows team members with limited access to run server commands on other team members' servers. This could lead to unintended changes or data loss. To fix...

A previous version of Coolify allowed authorized users to copy resources into accounts they shouldn't have access to. This means they could potentially access or modify sensitive information. Update t...

Coolify, a server management tool, had a security flaw that allowed authorized users to access and execute commands on parts of the system they shouldn't have. This was fixed in version 4.0.0-beta.471...

Fire-Boltt smartwatches with certain firmware versions may allow unauthorized access to their functions. This means that someone with the right tools and information could potentially control or acces...

The Trueview Security Camera's password validation is faulty, allowing unauthorized access. This is particularly concerning because the camera's firmware contains hardcoded administrator credentials, ...

Old versions of the Perl DBI library can crash if a SQL query has too many placeholders, potentially causing system instability. This is a significant issue because it can happen unexpectedly and disr...

Perl's DBI database interface is vulnerable to a data overflow when handling SQL statements with a very large number of placeholders. This could potentially allow an attacker to crash the system or ex...

The mem0 OpenMemory API allows unauthenticated access to user memories, which could lead to private data exposure or denial-of-service. This vulnerability affects the openmemory/api component of mem0....

Old versions of Perl's DBI module can crash when preparing SQL statements with an extremely large number of placeholders. This is a security risk because it can allow an attacker to cause the system t...

An attacker can execute arbitrary code with root privileges on your system. This can happen if you're using the 9router package and it's running as root. To fix this, update to the latest version of 9...

The 9router software does not properly check permissions for certain API requests, allowing an attacker to execute commands with root privileges and potentially take control of the system. This vulner...

A security weakness in Portal for ArcGIS versions 12.1 and earlier allows an unauthorized attacker to take control of a user's account. This affects Windows, Linux, and Kubernetes systems. To protect ...

Esri Portal for ArcGIS versions 12.1 and earlier have a security issue that allows attackers to access certain parts of the system without a password. This is a concern for organizations that use this...

Dell PowerProtect Data Domain software versions 7.7.1.0 through 8.7 have a security flaw that allows an unauthorized attacker to access the system remotely. This poses a significant risk, as an attack...

Dell PowerProtect Data Domain, a data management system, contains a vulnerability that allows an unauthorized attacker to gain full access to the system. This could lead to sensitive data being compro...

A weakness in Debian's OpenSSL certificate validation affects Apache servers. This means that an attacker could potentially create a fake certificate that would be accepted as legitimate by a Debian-b...

Old versions of Perl's Module::Load module can load unauthorized modules, allowing attackers to execute malicious code. This affects Perl applications that use Module::Load. To fix this, update to Mod...