Threat Intelligence Database

SiteGuard Server Edition by EG Secure Solutions Inc. contains an OS command injection vulnerability. No specific affected versions or technical details are provided. There is no information about available patches or exploits in the wild.

SAP released critical security patches in February 2026 addressing multiple vulnerabilities in CRM, S/4HANA, and NetWeaver platforms. Two critical flaws include a code injection vulnerability in the Scripting Editor component allowing arbitrary SQL execution, and a missing authorization check in NetWeaver Application Server ABAP enabling unauthorized remote function calls. No known exploits are reported in the wild. The vulnerabilities could compromise confidentiality, integrity, and availability of enterprise systems. Organizations using SAP ERP and CRM, especially in Europe, should promptly apply these patches to prevent potential operational disruption or data breaches.

CriticalVulnerabilityGermanyFranceNetherlands+5

CVE-2026-94370 is a medium severity vulnerability in Qt for MCUs versions 2.12.1 and 2.12.2. It involves a double free condition caused by improper handling of string memory ownership when converting std::string text to the internal Qt Quick Ultralite string type. This defect can lead to heap memory corruption, including double free, invalid free, or use-after-free errors.

CVE-2026-110459 is an improper access control vulnerability in Ubiquiti Inc's UniFi Protect AI Key. An attacker with network access could exploit this flaw to obtain sensitive information, make unauthorized changes, and cause a denial of service on the device. The vulnerability affects versions prior to 2.2.8. It has a high severity rating with a CVSS score of 8.6.

CVE-2026-110458 is a low severity path traversal vulnerability in Ubiquiti Inc's UniFi Protect AI Key. An attacker with network access could exploit this flaw under certain conditions to create or truncate files on the affected device. The vulnerability does not impact confidentiality or availability but can affect integrity by modifying files. No known exploits are reported in the wild. The affected versions are all versions from 0 up to but not including 2.2.8.

Rakuten Mobile's Rakuten Mini smartphones use AOSP test keys for Android Verified Boot (AVB), allowing installation of crafted system images with physical device access. This weak credential usage compromises device integrity and security.

CVE-2026-110457 is a low-severity path traversal vulnerability in Ubiquiti Inc's UniFi Protect AI Key. An attacker with network access and under certain conditions could exploit this flaw to read file information on the device. The vulnerability affects versions from 0 up to but not including 2.2.8. There is no indication of known exploits in the wild or an official patch available at this time.

CVE-2026-110456 is an improper access control vulnerability in Ubiquiti Inc's UniFi Protect AI Key. A malicious actor with network access could exploit this flaw under certain conditions to access internal resources through the device. The vulnerability has a medium severity rating with a CVSS score of 5.3. It affects versions from 0 up to but not including 2.2.8. No known exploits are reported in the wild, and no official patch information is provided.

CVE-2026-110455 is an improper input validation vulnerability in Ubiquiti Inc's UniFi Protect AI Key. An attacker with network access could exploit this flaw to perform command injection on the affected device. The vulnerability affects versions from 0 up to but not including 2.2.8. It has a high severity with a CVSS score of 8.1. No official patch or remediation details are provided in the available data.

CVE-2026-110454 is an improper access control vulnerability in Ubiquiti Inc's UniFi Protect AI Key. An attacker with network access could exploit this flaw to gain unauthorized access to internal resources via the device. The vulnerability has a medium severity rating with a CVSS score of 5.3. It affects versions from 0 up to but not including 2.2.8. There are no known exploits in the wild and no vendor-provided patch information is available at this time.