Use of Weak Credentials vulnerability (CVE-2026-4377) has been found in DWR-X1820 router.

CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35087, CVE-2026-35089 and CVE-2026-35090) found in Slican telephone exchanges software.

Improper Certificate Verification vulnerability (CVE-2026-9058) has been found in Szafir SDK software.

Path Traversal vulnerability (CVE-2026-7766) has been found in Kenik cameras software.

Authorization Bypass Through User-Controlled Key vulnerability (CVE-2026-40127) has been found in OutSystems Lifetime software.

Heap-based Buffer Overflow vulnerability (CVE-2026-8997) has been found in vifm software.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-25606 to CVE-2026-25608) found in STER software.

Cross-site Scripting vulnerability (CVE-2026-6841) has been found in Request Tracker software.

CERT Polska has received a report about 5 vulnerabilities (from CVE-2026-42096 to CVE-2026-42100) found in Sparx Systems products: Pro Cloud Server and Enterprise Architect.

CERT Polska has received a report about 3 vulnerabilities (CVE-2026-7182, CVE-2026-41552 and CVE-2026-41553) found in DHTMLX software.