Out-of-bounds Read vulnerability (CVE-2026-50643) has been found in 8cc compiler.

Heap-based Buffer Overflow vulnerability (CVE-2026-8484) has been found in jansi library.

Remote Code Execution via Unrestricted File Upload vulnerability (CVE-2026-5482) has been found in Responsive FileManager software.

Deserialization of Untrusted Data vulnerability (CVE-2026-11860) has been found in Quick.CMS software.

Recently, we have been observing attacks by the UNC1151/Ghostwriter group targeting Gmail accounts. This group has been regularly attacking the mailboxes of Polish citizens for several years, although in the past these attacks focused on other email providers. The techniques used evolve over time, but the core theme of the messages and their objective remain unchanged.

Path Traversal vulnerability (CVE-2026-8464) has been found in Golem OEE MES software.

Missing Authentication for Critical Function vulnerability (CVE-2026-8335) has been found in Aix-DB software.

CERT Polska has received a report about 4 vulnerabilities (CVE-2026-9279 and from CVE-2026-47899 to CVE-2026-47901) found in Logseq software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-47324 and CVE-2026-47325) found in school-management-system software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-34906 and CVE-2026-34907) found in Wirtualna Uczelnia software.