SQL Injection vulnerability (CVE-2025-8536) has been found in Studio Fabryka DobryCMS software.

XSS vulnerability (CVE-2025-9158) has been found in Best Practical Request Tracker software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2025-53701 and CVE-2025-53702) found in Vilar VS-IPC1002 software.

CERT Polska has received a report about 2 vulnerabilities (from CVE-2025-9980 to CVE-2025-9981) found in OpenSolution QuickCMS software.

SQL Injection vulnerability (CVE-2025-9339) has been found in SIMPLE.ERP software.

Use of Default Credentials vulnerability (CVE-2025-10678) has been found in NetBird VPN software.

Insufficient Session Expiration vulnerability (CVE-2025-3930) has been found in Strapi software.

CERT Polska has coordinated disclousure of 9 vulnerabilities (CVE-2025-7063, CVE-2025-7065 and from CVE-2025-8116 to CVE-2025-8122) found in PAD CMS software.

Improper Neutralization of NUL Character vulnerability (CVE-2025-9648) has been found in CivetWeb software.

Missing Authentication for Critical Function vulnerability (CVE-2025-9983) has been found in GALAYOU G2 software.