Reflected Cross-site Scripting vulnerability (CVE-2026-11772) has been found in DRIMO CMS software.

Stack-based Buffer Overflow vulnerability (CVE-2026-44089) has been found in Totolink EX1200L router software.

CERT Polska has received a report about 6 vulnerabilities (from CVE-2026-54219 to CVE-2026-54224) found in UBB.threads software.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-40455 to CVE-2026-40457) found in LMS (LAN Management System) software.

Out-of-bounds Read vulnerability (CVE-2026-50643) has been found in 8cc compiler.

Heap-based Buffer Overflow vulnerability (CVE-2026-8484) has been found in jansi library.

Remote Code Execution via Unrestricted File Upload vulnerability (CVE-2026-5482) has been found in Responsive FileManager software.

Deserialization of Untrusted Data vulnerability (CVE-2026-11860) has been found in Quick.CMS software.

Recently, we have been observing attacks by the UNC1151/Ghostwriter group targeting Gmail accounts. This group has been regularly attacking the mailboxes of Polish citizens for several years, although in the past these attacks focused on other email providers. The techniques used evolve over time, but the core theme of the messages and their objective remain unchanged.

Path Traversal vulnerability (CVE-2026-8464) has been found in Golem OEE MES software.