In SQLite in affected versions a medium severity vulnerability CVE-2025-41771 was detected. This vulnerability allows an authenticated attacker to perform a SQL injection. To address this issue, users should upgrade SQLite to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-41771.
Read more DatabaseIn Apache Airflow versions before 22.3.0 a medium severity vulnerability CVE-2026-68868 was detected. This vulnerability allows an attacker to resolve another team’s Connection or Variable, obtaining its credentials in full. To address this issue, users should upgrade Apache Airflow to version 22.3.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-68868.
Read more Data AnalyticsIn Cotton Cloud component for Joomla versions earlier than 2.0.3 a medium severity vulnerability CVE-2026-67284 was detected. This vulnerability allows authenticated users to perform unauthorized file operations on files owned by other users. To address this issue, users should upgrade Cotton Cloud to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-67284.
Read more CMSIn Fabrik component for Joomla versions before 4.6.8 a critical severity vulnerability CVE-2026-67282 was detected. This vulnerability allows an unauthenticated attacker to execute arbitrary code. To address this issue, users should upgrade Fabrik to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-67282.
Read more CMSIn Wallet System for WooCommerce component for WooCommerce versions before 2.7.10 a medium severity vulnerability CVE-2026-15045 was detected. This vulnerability allows authenticated customers to arbitrarily reduce their own order total without paying the merchant. To address this issue, users should upgrade Wallet System for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15045.
Read more E-commerceIn Kibana versions up to 8.16.2.a medium severity vulnerability CVE-2026-78581 was detected. This vulnerability allows an authenticated attacker to access or modify AI Assistant conversations they do not own, leading to unauthorized data modification and potential information disclosure. This occurs due to an Authorization Bypass Through User-Controlled Key (CWE-639) flaw. By referencing another user’s AI Assistant conversation identifier, an attacker can bypass Access Control Lists (ACLs) and interact with that conversation (CAPEC-1). However, successful exploitation requires the attacker to obtain or guess this specific, hard-to-guess identifier. To address this issue, users should upgrade Kibana to a patched version Elastic Kibana versions 8.16.3 and 8.17.2.. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-78581.
Read more Data Analytics