CVE Vulnerability Advisory Database

[Affected Scope] N-able N-central versions prior to 2026.3.1.14

[Impact] Unauthenticated remote attackers can execute arbitrary code with high privileges and fully compromise the system by sending specially crafted requests

[Mitigation] Immediately upgrade N-central to version 2026.3.1.14 or later, and restrict external access until patched

[Affected Scope] PaperCut MF and PaperCut NG print management solutions

[Impact] Attackers capable of manipulating system configuration parameters can execute arbitrary Java bytecode under the security context of the PaperCut server process

[Mitigation] Apply the official vendor security patches immediately and restrict access to database configuration utilities

[Affected Scope] Web management interface of PaperCut MF and PaperCut NG.

[Impact] Unauthenticated remote attackers can trigger backend actions and modify system configurations before access validation checks complete, potentially leading to Remote Code Execution (RCE).

[Mitigation] Apply the official vendor security patches immediately and restrict external access to the web management ports (default 9191, 9192).

[Affected Scope] Gitea versions prior to 1.27.1

[Impact] Unauthenticated remote attackers can install malicious Git hooks via the diffpatch API, leading to arbitrary system command execution with Gitea server privileges.

[Mitigation] Immediately upgrade Gitea instances to version 1.27.1 or later, and disable Git Hook functionality in the configuration.

[Affected Scope] TrueConf Server versions 5.3.0 to 5.3.9, 5.4.0 to 5.4.9, 5.5.0 to 5.5.5, and earlier

[Impact] An unauthenticated remote attacker can bypass sandbox isolation and execute arbitrary code on the host system by sending a crafted script via TCP port 4307.

[Mitigation] Immediately upgrade TrueConf Server to the latest patched version and restrict network access to TCP port 4307 using firewalls.

[Affected Scope] TrueConf Server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier

[Impact] Remote unauthorized attackers can execute arbitrary scripts and compromise the server by calling undocumented functions via TCP port 4307 without authentication

[Mitigation] Immediately upgrade TrueConf Server to the latest secure version and restrict external network access to TCP port 4307

[Affected Scope] NetScaler ADC and Gateway versions 14.1 (prior to 73.32) and 13.1 (prior to 63.21)

[Impact] Potential for administrative privilege gain and Remote Code Execution (RCE) via authentication bypass

[Mitigation] Apply official Citrix patches and restrict Management Interface (NSIP) access

[Affected Scope] macOS systems running versions prior to Sequoia 15.7.9, Sonoma 14.8.9, Tahoe 26.6.1/26.7, or Golden Gate 27 with Screen Sharing or VNC services enabled

[Impact] A remote attacker on the network can bypass authentication mechanisms to establish an unauthorized Screen Sharing session without valid credentials, gaining full GUI-level control over the target system

[Mitigation] Immediately apply the latest macOS security updates, or disable 'Screen Sharing' and 'Remote Management' services until patches can be deployed

[Affected Scope] On-premises deployments of VeloCloud Orchestrator (VCO)

[Impact] Unauthenticated remote attackers can access privileged internal functionalities and execute arbitrary OS commands (CWE-78), leading to complete compromise of the orchestrator's confidentiality, integrity, and availability

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external network access to the orchestrator management interface

[Affected Scope] Check Point Security Management Servers and SmartConsole instances exposed to the internet without Trusted Clients restrictions configured

[Impact] Unauthenticated remote attackers can obtain a valid application login token, granting them full administrative privileges to modify security policies and configurations

[Mitigation] Apply the official vendor patches immediately, restrict internet access to the Management Server, and configure Trusted Clients IP restrictions

[Affected Scope] WordPress versions 6.9.x before 6.9.5, and 7.0.x before 7.0.2

[Impact] Unauthenticated attackers can exploit a REST API batch endpoint route confusion vulnerability, chaining it with the WP_Query SQL Injection (CVE-2026-60137) to compromise the database and achieve Remote Code Execution (RCE)

[Mitigation] Immediately upgrade WordPress core to patched versions (6.9.5, 7.0.2, or later), or temporarily disable the REST API batch endpoint and apply WAF rules

[Affected Scope] IBM Langflow OSS versions 1.0.0 through 1.10.0 in default deployments

[Impact] Unauthenticated attackers can obtain superuser tokens and execute arbitrary Python code, leading to full system compromise

[Mitigation] Immediately upgrade to the latest patched version, disable auto-login, and restrict network access to the application

[Affected Scope] All versions of Adobe Commerce and Magento Open Source prior to APSB26-73.

[Impact] Remote Code Execution (RCE) via malicious file upload, leading to full server compromise and potential data exfiltration.

[Mitigation] Apply official Adobe security patches (APSB26-73) immediately and restrict execution permissions in upload directories.

[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface

[Impact] Remote unauthenticated attackers can force the appliance to make requests to unintended internal or external locations, potentially leading to internal network compromise or RCE

[Mitigation] Apply the official firmware updates immediately and restrict external access to the management interface

[Affected Scope] Microsoft SharePoint Server on-premises deployments

[Impact] Unauthenticated remote attackers can bypass security features over the network to access sensitive data or escalate privileges

[Mitigation] Apply the official Microsoft security updates immediately and restrict external network exposure until patched

[Affected Scope] Microsoft SharePoint Server deployments

[Impact] Unauthorized remote attackers can execute arbitrary code over the network and fully compromise the system

[Mitigation] Apply the official Microsoft security updates immediately and restrict external network exposure

[Affected Scope] Microsoft SharePoint Server deployments

[Impact] Unauthenticated remote attackers can execute arbitrary code over the network and fully compromise the host server

[Mitigation] Apply the official Microsoft security updates immediately, and restrict network access to SharePoint endpoints until patched

[Affected Scope] Joomla Balbooa Forms extension versions prior to 2.4.1

[Impact] Unauthenticated attackers can upload arbitrary executable files (such as PHP), leading to full Remote Code Execution (RCE) and complete compromise of the web server

[Mitigation] Immediately upgrade the Balbooa Forms extension to version 2.4.1 or higher, and disable script execution in upload directories

[Affected Scope] Adobe ColdFusion versions 2025.9, 2023.20 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code in the context of the current user, with active exploitation confirmed in the wild

[Mitigation] Immediately apply the official Adobe security patches (APSB26-68) and restrict access to sensitive endpoints

[Affected Scope] Joomla Page Builder CK extension versions prior to 3.6.0

[Impact] Unauthenticated attackers can upload arbitrary executable files (such as PHP), leading to full remote code execution (RCE) and complete compromise of the web server

[Mitigation] Immediately upgrade the Page Builder CK extension to version 3.6.0 or higher