Threat database

Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access.

Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access.

Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.

Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account.

The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

The Signed Video Framework contained a  buffer overflow issue which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected.

The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account.

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.

CVE-2026-66447 is a critical unauthenticated SQL Injection vulnerability affecting the nickboss WordPress File Upload plugin versions up to and including 5.1.7. This flaw allows remote attackers to inject SQL commands without authentication, potentially leading to high confidentiality impact and limited availability impact. No official patch or remediation guidance has been provided yet.

OMICRON StationScout before version 3.05 has a cryptographic timing side-channel vulnerability in its backend authentication. This flaw may allow unauthenticated attackers to forge valid credentials, bypass authentication and authorization, and impersonate legitimate clients. Successful exploitation can lead to full access to system configuration, enabling modification or unauthorized changes to system parameters and injection of network traffic.

OMICRON StationGuard version 4.00 has an improper input validation vulnerability in its IEC 61850 Sampled Values frame processing. A specially crafted Sampled Values frame can cause the affected process to terminate, disrupting alert processing for this traffic type. The overall system and other traffic processing remain unaffected. The process automatically restarts after termination, and the failure is immediately reported to the user. The vulnerability has a low severity score and no known exploits in the wild.

OMICRON StationGuard before version 4.10 has a cryptographic timing side-channel vulnerability in its backend authentication mechanism. This flaw may allow an unauthenticated attacker to forge valid credentials, bypass authentication and authorization, and impersonate legitimate clients. Successful exploitation grants full access to system configuration, enabling unauthorized modification or reset of system parameters.

CVE-2026-18909 is a stack-based buffer overflow vulnerability in ELAN Microelectronics Corp.'s ELAN Smart-Pad driver on Windows, specifically in ETD.sys and ETDSMBus.sys. The flaw occurs during Intel SMBus recovery when ETDSMBus.sys fails to enforce an upper bound on a hardware-derived report count, allowing an out-of-range value to be used as a loop counter for a stack buffer copy in ETD.sys without size validation. A local attacker with standard user privileges can trigger a kernel crash (BSOD) causing denial of service. This affects versions up to and including 24.21.52.3. No patch or official remediation has been confirmed yet.

CVE-2026-16022 is an OS command injection vulnerability in @oblique/cli version 15.4.0. The vulnerability arises because the CLI constructs shell commands using string concatenation and executes them with execSync(), inserting a user-controlled project name without proper sanitization. This allows an attacker to execute arbitrary operating system commands by supplying a crafted project name when invoking the CLI.

CVE-2026-0516 is a medium severity vulnerability in SonicWall SonicOS involving improper neutralization of HTTP headers. This flaw allows a remote attacker to manipulate the Host header, potentially redirecting firewall management users to arbitrary web domains. No specific affected versions or patches have been disclosed yet.

Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: before 6.4.115.

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions.