CVE Vulnerabilities - 22 September 2026

The Adobe Experience Manager Forms JEE component in version 6.5 (including the LTS release) can be tricked into executing code that an attacker provides, without needing any user to click anything. Th...

Adobe Campaign Classic can be tricked into running code that the attacker supplies, without needing any user to click anything. This could let an attacker take actions on the system as the logged‑in u...

Adobe Campaign Classic can be tricked into running any code an attacker supplies, and it works without any user clicking or opening anything. The code runs with the same rights as the currently logged...

Adobe Campaign Classic may allow an attacker to make the server send its own network requests, potentially reaching internal systems or gaining higher privileges. This can happen without any user clic...

The core libraries of RTI Connext Professional versions up to 7.7.0.1 contain a flaw that can let specially crafted data overwrite memory on the computer running the software. This could cause the app...

The MCP Atlassian service used with Confluence and Jira accepted any non‑empty token, meaning a network client could send requests without proving its identity. Those requests would run with the opera...

Adobe Campaign Classic can be tricked into running any program as the logged‑in user, and it does not require the user to click anything. This could let an attacker take actions inside your marketing ...

Adobe Campaign Classic can be tricked into running code that an attacker provides, without any user clicking anything. This could let the attacker perform actions on the system as the logged‑in user. ...

Adobe Campaign Classic can be tricked into running any code the attacker provides, without needing the user to click anything. This could let an attacker take actions on the system as if they were the...

Adobe Campaign Classic can be tricked into running any code the attacker chooses, without needing a user to click anything. This could let a malicious person take actions on the system as the logged‑i...

Adobe Campaign Classic can be tricked into running any program the attacker chooses, using the rights of the logged‑in user. This can happen without any user clicking anything, giving the attacker dir...

Older firmware on Lantronix SLC8000, EMG8500, EMG7500, SLB882 and related models lets anyone without a login upload files and read configuration data through the web interface. This is because the dev...

The on‑premises VeloCloud Orchestrator from Arista does not properly check some input it receives. An attacker on the network could trick it into running privileged functions, potentially viewing, cha...

The web interface of Gigatech PDV5701 version 1.0.31_240305_112640 does not require users to log in before showing the main page. This means anyone on the network can connect to the device and view or...

The IBM Financial Transaction Manager running on Red Hat OpenShift may let a signed‑in attacker read confidential information because it does not correctly check symbolic links. This could expose fina...

The IBM DataStage component of Cloud Pak for Data version 5.4.0.0 can be tricked by a user who has a valid login into the system to run any operating‑system command they choose. This could let an atta...

Both the desktop version of Adobe Connect and its Android mobile app let a low‑privilege attacker send specially crafted data that causes the system to run its own database commands. This can let the ...

Versions of plone.app.portlets before the recent updates allow a user who can edit a Classic portlet to insert malicious code that the server will execute. This could let an ordinary user gain the sam...

Adobe Campaign Classic can be tricked into running malicious commands without any user interaction. Even a low‑privilege attacker could make the system execute their own code, potentially taking contr...

Adobe Campaign Classic can be tricked into sending requests to other systems inside your network. An attacker with limited rights could use this to view or control internal services they normally coul...

Adobe Campaign Classic can be tricked by a user with limited rights to contact other parts of your internal network, allowing that user to gain higher access than intended. This can happen without any...

Adobe Campaign Classic can be tricked into running malicious commands placed in its database queries. An attacker with limited access could exploit this to execute code on the server without any user ...

Adobe Campaign Classic does not correctly validate data it receives, allowing a low‑privilege attacker to execute arbitrary code without any user interaction. This can give the attacker the same right...

Older versions of Lantronix SLC8000, SLC9000, EMG8500, EMG7500, SLB882 and SLCx‑03/02 allow anyone who can log into the device’s command line to send overly long data that overruns memory and runs the...

Certain Lantronix SLC8000, SLC9000, EMG8500, EMG7500, SLB882, SLCx‑03 and SLCx‑02 units let anyone who can log in to the command line send overly long data that can take control of the device. This co...