CVE-2026-120199 | LearnHouse up to 1.1.0 Assignment API user_id improper authorization (EUVD-2026-114720)
A vulnerability, which was classified as problematic, has been found in LearnHouse up to 1.1.0. Impacted is an unknown function
Read MoreMonth: October 2026
CVE-2026-120205 | Thelia up to 3.0.x Customer getSummary name cross site scripting (EUVD-2026-114726)
A vulnerability, which was classified as problematic, was found in Thelia up to 3.0.x. The affected element is the function
Read MoreCVE-2026-120206 | Thelia up to 3.1.x Back Office setToggleVisibilityAction/updatePositionAction cross-site request forgery (EUVD-2026-114727)
A vulnerability has been found in Thelia up to 3.1.x and classified as problematic. The impacted element is the function
Read MoreCVE-2026-120207 | lia Page Module up to 2.0.3 Delete Routes cross-site request forgery (EUVD-2026-114728)
A vulnerability was found in lia Page Module up to 2.0.3 and classified as problematic. This affects an unknown function
Read MoreCVE-2026-120223 | Oray Pugongying X5 Pro up to 7.6.1 Session ID session.lua session_get _user random values
A vulnerability was found in Oray Pugongying X5 Pro up to 7.6.1. It has been classified as problematic. This impacts
Read MoreCVE-2026-120224 | Oray Pugongying X5 Pro up to 7.6.1 API Authorization run_apis_by_json/run_async_task improper authorization
A vulnerability was found in Oray Pugongying X5 Pro up to 7.6.1. It has been declared as very critical. Affected
Read MoreCVE-2026-120225 | Oray Pugongying X5 Pro up to 7.6.1 /etc/openwrt_release config_restore_ex filename path traversal
A vulnerability was found in Oray Pugongying X5 Pro up to 7.6.1. It has been rated as very critical. Affected
Read MoreCVE-2026-120226 | Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 P2P SDK P2PAPI_Connect input buffer overflow
A vulnerability categorized as problematic has been discovered in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32. Affected by this issue is the
Read More
Binance CEO says 90 percent of stolen assets have been ‘replenished’
After hackers stole a shocking $6.3 billion from Binance customers in a record-breaking crypto heist, the company’s CEO says that
Read More
Amatera infostealer
Az ESET elemzése szerint az Amatera nevű adatlopó kártevő vezette a vállalat információlopó programokra vonatkozó észlelési statisztikáját Latin-Amerikában 2026 első felében. A
Read More