CVE-2026-65213 is an OS command injection vulnerability in the SMCI MBD-X12SPI product. It allows an IPMI authenticated administrator to execute arbitrary commands as the operating system root user on the Baseboard Management Controller (BMC). This vulnerability has a medium severity rating with a CVSS score of 6.6. The affected version is exactly 01.07.20. No public exploits or patches are currently reported.
CVE-2026-65211 is an improper authentication vulnerability in the SMCI MBD-X12SPI product. It allows an authenticated IPMI Administrator to read and write arbitrary Baseboard Management Controller (BMC) physical memory, potentially leading to code execution on the BMC operating system. This vulnerability has a high severity with a CVSS score of 7.2.
CVE-2026-65210 is a vulnerability in the SMCI MBD-X12SPI product that allows an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem. This access goes beyond the intended IPMI management role, potentially exposing sensitive information. The vulnerability affects version 01.07.20 of the product. The CVSS score is 4.9, indicating a medium severity level.
CVE-2026-65220 is a high-severity vulnerability in the SMCI MBD-X12SPI product involving a logic flaw in the BMC IPMI implementation. This flaw allows an attacker with limited privileges to send specially crafted RAKP+ messages to escalate their account to administrator privileges. The vulnerability affects version 01.07.20 of the product. No public exploits or known active exploitation have been reported. The CVSS 3.1 score is 8.8, indicating a significant risk due to network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability.
CVE-2026-18450 is a critical vulnerability in SMCI X12SPI where the Baseboard Management Controller (BMC) fails to properly enforce integrity and encryption requirements for IPMI commands. This flaw allows an attacker to craft malicious packets that can execute arbitrary commands on an active session without authentication.
CVE-2026-18449 is a vulnerability in SMCI X12SPI version 01.07.20 where the Baseboard Management Controller (BMC) fails to properly enforce integrity and encryption for IPMI commands. This flaw allows an attacker to craft malicious packets that can execute arbitrary commands on an active session without requiring privileges or user interaction. The vulnerability has a high severity rating with a CVSS score of 7.5.
CVE-2026-111461 is an OS command injection vulnerability in the Moxa OnCell G3150A-LTE Series devices. It occurs when the SMS management functionality is enabled and configured. A remote attacker with required privileges can exploit insufficient input validation in this functionality to execute arbitrary commands on the device. The vulnerability has a high severity with a CVSS score of 7.5.
CVE-2026-111460 is a vulnerability in the Moxa OnCell G3150A-LTE Series involving a hard-coded cryptographic key. An unauthenticated remote attacker could potentially obtain this key material and impersonate devices that have not regenerated their keys, risking confidentiality and integrity of management communications. The vulnerability affects version 1.0.0 of the product. The CVSS 4.0 score is 7.7, indicating a high severity. No patch or remediation information is provided.
A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.
Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a device code. An authenticated remote attacker holding a restricted API key-derived session could claim an attacker-controlled device code and obtain a full read-write session valid for up to 365 days, bypassing the original token's scope and lifetime restrictions. This did not bypass two-factor authentication or directly disclose plaintext secrets.
This Red Hat security advisory addresses multiple vulnerabilities in the rhc client tool and daemon, which connects systems to Red Hat hosted services for system and subscription management. The update includes fixes for numerous issues primarily in Golang components such as crypto/tls, net/http, crypto/x509, and others. Vulnerabilities include denial of service, privilege escalation, incorrect certificate validation, cross-site scripting, and man-in-the-middle attack vectors. The advisory rates the overall security impact as Important and provides links to detailed CVE pages for each issue. The update targets Red Hat Enterprise Linux 8.8 variants.
A cross-site scripting (XSS) vulnerability exists in the chat.php file of the MD-MAFUJUL-HASAN Online-Payroll-Management-System up to commit a8902bf64575e325f6d6bf93a55f7bd273ec58cd. The vulnerability arises from manipulation of the ID argument and can be exploited remotely. The project has not yet responded to the issue report, and no fixed versions or patches are currently available. The vulnerability has a low severity score of 3.5 (CVSS 3.1).
A vulnerability in code-projects Simple Content Management System 1.0 allows remote attackers to bypass authorization by manipulating the 'addnews' argument in the /web/admin/welcome.php file. This flaw affects the Admin Interface component and can lead to unauthorized actions. The vulnerability has a high severity score and public exploit code is available.
A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8197510c0910f759e06ee67251e5. Affected by this vulnerability is an unknown functionality of the file chat.php. Executing a manipulation of the argument ID can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.