CERT Polska has received a report about 11 vulnerabilities (CVE-2025-30043 and from CVE-2025-30045 to CVE-2025-30047, from CVE-2025-30049 to CVE-2025-30054 and CVE-2025-58403) found in CGM CLININET software.

Deserialization of Untrusted Data vulnerability (CVE-2026-16477) has been found in MTW CleanShot X software.

Incorrect Authorization vulnerability (CVE-2026-106030) has been found in NordVPN software.

Improper restriction of XML external entity reference vulnerability (CVE-2026-88794) has been found in Sparx Systems Enterprise Architect software.

CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35088, CVE-2026-63314 and CVE-2026-63315) found in Slican telephone exchanges.

SQL Injection vulnerability (CVE-2026-63316) has been found in Payload CMS software.

Relative Path Traversal vulnerability (CVE-2026-103663) has been found in Ollama software.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-75818 to CVE-2026-75820) found in GNU Aspell software.

Local Argument Injection vulnerability (CVE-2026-91784) has been found in cjbassi/gotop software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-74864 and CVE-2026-74865) found in YunoHost-Apps sogo_yhn software.