Daily vulnerability watch

Security News

Latest CVE and advisory summaries, rewritten for quick scanning with credit to the original sources.

Security News
High Severity

CVE-2026-46334 high vulnerability summary

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line parsing logic. A SIP request with Content-T...

Tenable Newest CVEs Read
Security News
Medium Severity

CVE-2026-18856 medium vulnerability summary

A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the function procImporterAdminCheckXmlFile of the file modules/importer/importer.admin.controller.php of the component Data Import Module. Th...

Tenable Newest CVEs Read
Security News
Medium Severity

CVE-2026-18859 medium vulnerability summary

A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack m...

Tenable Newest CVEs Read
Security News
High Severity

CVE-2026-18895 high vulnerability summary

A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulation of the argument cipher results in stack-based buffer o...

Tenable Newest CVEs Read
Security News
Medium Severity

CVE-2026-18896 medium vulnerability summary

A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead...

Tenable Newest CVEs Read
Security News
High Severity

CVE-2026-18897 high vulnerability summary

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to sta...

Tenable Newest CVEs Read
Security News
Critical Severity

CVE-2026-18907 critical vulnerability summary

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.

Tenable Newest CVEs Read
Security News
High Severity

CVE-2026-18898 high vulnerability summary

A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument timestart results in stack-based buffer ov...

Tenable Newest CVEs Read
Security News
Medium Severity

CVE-2026-20494 medium vulnerability summary

In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not neede...

Tenable Newest CVEs Read
Security News
High Severity

CVE-2026-20495 high vulnerability summary

In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exp...

Tenable Newest CVEs Read
Security News
Medium Severity

CVE-2026-20496 medium vulnerability summary

In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not...

Tenable Newest CVEs Read
Security News
High Severity

CVE-2026-20497 high vulnerability summary

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is no...

Tenable Newest CVEs Read