CVE Vulnerabilities - 14 August 2026

An attacker can execute any system command without a password, potentially stealing sensitive data or taking control of the system. This is a serious issue because it affects the security of sensitive...

An attacker can exploit a weakness in the Haiwell IoT Cloud HMI Gateway, potentially allowing them to access sensitive areas of the system. This could lead to unauthorized changes or data theft. Updat...

Versions of the SiYuan note‑taking software up to 3.7.2 contain a flaw where specially crafted text can manipulate the program’s database commands. An attacker who can enter a search term or create a ...

Versions of the SiYuan note‑taking tool up to 3.7.2 let a user enter specially crafted text that can trick the system into running its own commands. This could allow someone to view or change any note...

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 have a security issue. A hacker could potentially take control of your system if they exploit this flaw. Update to the latest version to fix the issue.

Adobe Security Center is at risk of attackers executing unauthorized commands on its system. This could lead to sensitive data exposure or system compromise. Adobe should be notified to patch the issu...

Adobe Security Center has a vulnerability that allows attackers to execute arbitrary commands on the system if a malicious file is uploaded. This could potentially lead to system compromise or data th...

A security flaw in Tenable Security Center's report generation feature could allow an authorized user to execute malicious code on the system. This could lead to unauthorized access or data compromise...

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 have a security weakness that could allow an attacker to access sensitive information without a password. This could happen if an attacker knows the rig...

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by a vulnerability that could allow an attacker to execute malicious code on your system. This is a serious risk because an attacker could ...

An attacker can upload, read, or delete sensitive data without a password. This is a security risk because it allows unauthorized access to user memories. To fix this, update the mcp-memory-service to...

Metacat's data sharing software, used by researchers, has a security weakness that allows hackers to access and manipulate sensitive data without a password. This puts protected information at risk. T...

Emlog website builders are at risk of having their configuration files overwritten and new administrator accounts created if an attacker submits malicious data to the install.php page. This is a conce...

A security flaw in Wishlist Member plugin for WordPress versions up to 3.34.1 allows attackers to take over any WordPress account, including administrator accounts, by manipulating a specific paramete...

Older versions of OpenSSH may allow a server to bypass security checks when its host key is changed. This is a security risk for users who connect to servers with OpenSSH. To stay secure, update to Op...

Prospero Flow CRM's employee onboarding process in older versions uses a default password for all employees, making it easy for unauthorized users to access employee accounts if they know the email ad...

The Joomla icagenda.com extension has a security flaw that allows attackers to execute unauthorized database queries without logging in. This can lead to sensitive data exposure and unauthorized actio...

A security flaw in Google's QUIC protocol allows an attacker to pretend to be a trusted server, potentially stealing sensitive information. This affects QUIC and HTTP/3 clients, but not when using ses...

Red Hat OpenStack Platform 16.2 has an issue with its API that allows unauthorized users to access certain features. This could allow an attacker to perform actions without proper authorization, poten...

Red Hat Hardened Images are affected by a security risk where unvalidated input can lead to arbitrary code execution. This affects the security of systems using these images. Users should apply the la...

The Pillow image‑processing library used in many Python applications has a flaw that could let an attacker execute unwanted code when processing crafted image files. This could affect any system that ...

Semaphore UI's web interface for managing DevOps tools is affected. An attacker can execute arbitrary server commands by manipulating a project's git URL. Update Semaphore UI to version 2.18.17 or 2.1...

Semaphore UI's web interface for managing DevOps tools has a security issue that allows a malicious user to run arbitrary system commands on the server. This could potentially allow an attacker to acc...

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 have a security issue. An attacker with remote access and valid credentials could exploit this to gain unauthorized access to the system. Update to the ...

Cockpit CMS versions 2.14.0 and earlier have a security flaw in their video processing feature. An attacker with permission to upload files can exploit this flaw to execute unauthorized system command...