CERT Polska has received a report about 3 vulnerabilities (CVE-2026-7182, CVE-2026-41552 and CVE-2026-41553) found in DHTMLX software.

Unrestricted Upload of File with Dangerous Type vulnerability (CVE-2026-44088) has been found in SzafirHost software.

Cross-site Scripting vulnerability (CVE-2026-21730) has been found in Verba software.

Cross-site Scripting vulnerability (CVE-2026-1630) has been found in WEBCON BPS software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2025-68420 and CVE-2025-68421) found in Comarch ERP Optima software.

Integer Overflow vulnerability (CVE-2026-8295) has been found in simdjson library.

Missing Authentication for Critical Function vulnerability (CVE-2026-5029) has been found in Code Runner MCP Server software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-6909 and CVE-2026-6956) found in ATutor software.

OS Command Injection vulnerability (CVE-2025-13605) has been found in 3onedata GW1101-1D(RS-485)-TB-P modbus gateways.

Cross-site Scripting vulnerability (CVE-2026-1493) has been found in LEX Baza Dokumentów software.