CERT Polska

Vulnerabilities in CGM CLININET software

CERT Polska — Fri, 23 Oct 2026 11:55:00 +0100

CERT Polska has received a report about 11 vulnerabilities (CVE-2025-30043 and from CVE-2025-30045 to CVE-2025-30047, from CVE-2025-30049 to CVE-2025-30054 and CVE-2025-58403) found in CGM CLININET software.

Vulnerability in MTW CleanShot X software

CERT Polska — Thu, 22 Oct 2026 14:55:00 +0100

Deserialization of Untrusted Data vulnerability (CVE-2026-16477) has been found in MTW CleanShot X software.

Vulnerability in NordVPN software

CERT Polska — Fri, 16 Oct 2026 09:55:00 +0100

Incorrect Authorization vulnerability (CVE-2026-106030) has been found in NordVPN software.

Vulnerability in Sparx Systems Enterprise Architect software

CERT Polska — Thu, 15 Oct 2026 12:55:00 +0100

Improper restriction of XML external entity reference vulnerability (CVE-2026-88794) has been found in Sparx Systems Enterprise Architect software.

Vulnerabilities in Slican telephone exchanges

CERT Polska — Thu, 15 Oct 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35088, CVE-2026-63314 and CVE-2026-63315) found in Slican telephone exchanges.

Vulnerability in Payload CMS software

CERT Polska — Tue, 13 Oct 2026 11:55:00 +0100

SQL Injection vulnerability (CVE-2026-63316) has been found in Payload CMS software.

Vulnerability in Ollama software

CERT Polska — Thu, 08 Oct 2026 11:55:00 +0100

Relative Path Traversal vulnerability (CVE-2026-103663) has been found in Ollama software.

Vulnerabilities in GNU Aspell software

CERT Polska — Tue, 06 Oct 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-75818 to CVE-2026-75820) found in GNU Aspell software.

Vulnerability in gotop software

CERT Polska — Fri, 02 Oct 2026 11:55:00 +0100

Local Argument Injection vulnerability (CVE-2026-91784) has been found in cjbassi/gotop software.

Vulnerabilities in YunoHost-Apps sogo_yhn software

CERT Polska — Wed, 30 Sep 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-74864 and CVE-2026-74865) found in YunoHost-Apps sogo_yhn software.

Vulnerability in Quick.Cart software

CERT Polska — Tue, 29 Sep 2026 14:55:00 +0100

Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-41875) has been found in Quick.Cart software.

Vulnerability in MyPresta Google Merchant Center Feed software

CERT Polska — Tue, 29 Sep 2026 13:55:00 +0100

External control of file name or path vulnerability (CVE-2026-85520) has been found in MyPresta Google Merchant Center Feed software.

Vulnerability in Ghostscript software

CERT Polska — Tue, 29 Sep 2026 12:10:00 +0100

Untrusted Search Path vulnerability (CVE-2026-19547) has been found in Ghostscript software.

Vulnerability in Das U-Boot software

CERT Polska — Tue, 29 Sep 2026 11:55:00 +0100

Out-of-bounds write vulnerability (CVE-2026-15390) has been found in DENX Software Engineering Das U-Boot software.

Vulnerabilities in Dayforce ESS Excelity software

CERT Polska — Mon, 28 Sep 2026 15:15:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-73640 to CVE-2026-73642) found in Dayforce ESS Excelity software.

Vulnerabilities in Kaon AR2140 routers

CERT Polska — Mon, 28 Sep 2026 14:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-52748 and CVE-2026-52749) found in Kaon AR2140 routers.

Vulnerabilities in F&F Filipowski mH-DEVELOPER devices

CERT Polska — Mon, 28 Sep 2026 11:55:00 +0100

CERT Polska has received a report about 7 vulnerabilities (from CVE-2026-82928 to CVE-2026-82930 and CVE-2026-82932, CVE-2026-82933, CVE-2026-82935 and CVE-2026-82936) found in F&F Filipowski mH-DEVELOPER devices.

Vulnerability in WEBCON BPS software

CERT Polska — Wed, 23 Sep 2026 13:55:00 +0100

Authorization bypass through User-Controlled key vulnerability (CVE-2026-92419) has been found in WEBCON BPS software.

Inside a multi stage toll fraud operation targeting Poland

Kacper Ratajczak — Wed, 23 Sep 2026 12:00:00 +0200

CERT Polska uncovered a toll fraud operation targeting Polish users through deceptive Meta advertisements and malicious applications distributed via Google Play. We preserved 1235 ads, linked 852 to 17 applications through code or infrastructure, reconstructed the complete execution chain, and observed live premium SMS and carrier billing tasking.

MikroTrick: technical analysis, disclosure process, and the use of LLM agents

Sławomir Rozbicki — Tue, 22 Sep 2026 16:00:00 +0200

We describe the technical details of the MikroTrick chain, which combines the CVE-2026-67279 and CVE-2026-86060 vulnerabilities and, when chained, allowed full takeover of a device without authentication. We explain the mechanics of the attacks observed in the wild, the coordinated disclosure of both vulnerabilities, and the practical role of LLM agents in the RouterOS research.

Vulnerabilities in WNC T-Mobile 5G Box IDU routers

CERT Polska — Wed, 16 Sep 2026 12:55:00 +0100

CERT Polska has received a report about 6 vulnerabilities (CVE-2026-58146, CVE-2026-58147 and from CVE-2026-40854 to CVE-2026-40857) found in firmware of WNC T-Mobile 5G Box IDU routers.

Vulnerabilities in Alior Bank "raty" module for PrestaShop

CERT Polska — Mon, 14 Sep 2026 15:55:00 +0100

CERT Polska has received a report about 2 SQL Injection vulnerabilities (CVE-2026-7848 and CVE-2026-15600) found in Alior Bank "raty" module for PrestaShop.

Vulnerability in drEryk Gabinet software

CERT Polska — Thu, 10 Sep 2026 11:55:00 +0100

Use of Hard-coded Credentials vulnerability (CVE-2026-17038) has been found in drEryk Gabinet software.

Vulnerabilities in Mikrotik RouterOS software

CERT Polska — Sat, 05 Sep 2026 15:05:00 +0200

CERT Polska has found 6 vulnerabilities (from CVE-2026-67276 to CVE-2026-67279, CVE-2026-67281 and CVE-2026-86060) in Mikrotik RouterOS software.

Critical vulnerabilities in MikroTik RouterOS are being actively exploited. Immediate update recommended

CERT Polska — Sat, 05 Sep 2026 15:00:00 +0200

The CERT Polska team has identified and coordinated the disclosure of six vulnerabilities in MikroTik RouterOS, including two critical ones. The vulnerabilities are already being actively exploited to take over devices whose SSH service is accessible from the internet. We recommend immediately updating devices to the patched versions and verifying the configuration for signs of compromise.

Vulnerability in OptimiDoc Server (On-Premise) software

CERT Polska — Thu, 03 Sep 2026 11:55:00 +0100

Plaintext Storage of a Password vulnerability (CVE-2026-15933) has been found in OptimiDoc Server (On-Premise) software.

Vulnerabilities in dool software

CERT Polska — Thu, 27 Aug 2026 14:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-56651 and CVE-2026-56652) found in dool software.

Vulnerability in GNU wget software

CERT Polska — Tue, 25 Aug 2026 15:55:00 +0100

Denial of Service vulnerability (CVE-2026-16599) has been found in GNU wget software.

Vulnerabilities in KAON PG5298A/PG5298B routers

CERT Polska — Mon, 24 Aug 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2025-63080 and CVE-2026-6017) found in KAON PG5298A/PG5298B routers.

Vulnerabilities in ATutor software

CERT Polska — Thu, 20 Aug 2026 11:55:00 +0100

CERT Polska has received a report about 13 vulnerabilities (from CVE-2026-64960 to CVE-2026-64972) found in ATutor software.

Vulnerabilities in nnn software

CERT Polska — Wed, 19 Aug 2026 11:55:00 +0100

CERT Polska has received a report about 4 vulnerabilities (from CVE-2026-65609 to CVE-2026-65612) found in nnn software.

Vulnerability in Carbone software

CERT Polska — Tue, 18 Aug 2026 11:55:00 +0100

Improper handling of highly compressed data (data amplification) vulnerability (CVE-2026-18929) has been found in Carbone software.

Vulnerability in OutSystems Service Center software

CERT Polska — Mon, 17 Aug 2026 11:55:00 +0100

DOM-based Cross-site Scripting vulnerability (CVE-2026-40126) has been found in OutSystems Service Center software.

Vulnerability in Magnolia CMS software

CERT Polska — Mon, 10 Aug 2026 14:55:00 +0100

Stored Cross-Site Scripting vulnerability (CVE-2026-18478) has been found in Magnolia CMS software.

Vulnerability in entr software

CERT Polska — Mon, 10 Aug 2026 12:55:00 +0100

Heap-based buffer overflow vulnerability (CVE-2026-18370) has been found in eradman entr software.

Vulnerabilities in GNU cpio software

CERT Polska — Mon, 10 Aug 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-66484 to CVE-2026-66486) found in GNU cpio software.

Vulnerabilities in GNU Emacs software

CERT Polska — Mon, 10 Aug 2026 10:55:00 +0100

CERT Polska has received a report about 4 vulnerabilities (from CVE-2026-71391 to CVE-2026-71394) found in GNU Emacs software.

Follow-Up Report of the December 2025 Energy Sector Incident

CERT Polska — Sat, 08 Aug 2026 18:00:00 +0100

During the attacks against Poland's energy sector in late 2025, a second combined heat and power plant was also affected. We are publishing a report detailing an investigation that lasted more than three months and led to the discovery of a previously unobserved attack vector involving a private APN.

Vulnerabilities in PHP Jabbers scripts

CERT Polska — Fri, 31 Jul 2026 13:55:00 +0100

CERT Polska has received a report about 5 vulnerabilities (from CVE-2025-67649 to CVE-2025-67651 and from CVE-2026-46593 to CVE-2026-46594) found in PHP Jabbers scripts.

Vulnerabilities in MWDB Core software

CERT Polska — Wed, 29 Jul 2026 15:55:00 +0100

Two vulnerabilities (CVE-2026-66723 and CVE-2026-66724) were found in CERT.PL MWDB Core software.

Vulnerability in Streamsoft Business Intelligence software

CERT Polska — Wed, 29 Jul 2026 14:55:00 +0100

Plaintext Storage of a Password vulnerability (CVE-2026-50641) has been found in Streamsoft Business Intelligence software.

Vulnerability in Quick.CMS software

CERT Polska — Wed, 29 Jul 2026 13:55:00 +0100

SQL Injection vulnerability (CVE-2026-33385) has been found in OpenSolution Quick.CMS software.

Vulnerability in diff-so-fancy software

CERT Polska — Wed, 29 Jul 2026 11:55:00 +0100

Improper Encoding or Escaping of Output vulnerability (CVE-2026-50642) has been found in diff-so-fancy software.

Vulnerabilities in GNU Bison software

CERT Polska — Wed, 29 Jul 2026 09:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-56389 and CVE-2026-56390) found in GNU Bison software.

Vulnerability in Quick.Cart software

CERT Polska — Tue, 28 Jul 2026 12:55:00 +0100

Plaintext Storage of a Password vulnerability (CVE-2026-41874) has been found in OpenSolution Quick.Cart software.

Vulnerabilities in Quick.CMS software

CERT Polska — Tue, 28 Jul 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-63301 to CVE-2026-63303) found in OpenSolution Quick.CMS software.

Vulnerabilities in proCertum SmartSign software

CERT Polska — Mon, 27 Jul 2026 12:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-57916 and CVE-2026-57917) found in proCertum SmartSign software.

Vulnerability in DaveGamble cJSON library

CERT Polska — Mon, 27 Jul 2026 11:55:00 +0100

Integer overflow vulnerability (CVE-2026-16554) has been found in DaveGamble cJSON library.

Vulnerability in Apereo CAS Client software

CERT Polska — Fri, 24 Jul 2026 11:55:00 +0100

Improper certificate validation vulnerability (CVE-2026-15243) has been found in Apereo CAS Client software.

Vulnerabilities in GNU coreutils software

CERT Polska — Fri, 24 Jul 2026 09:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-56391 and CVE-2026-56392) found in GNU coreutils software.

Vulnerability in GNU diffutils software

CERT Polska — Wed, 22 Jul 2026 14:55:00 +0100

Integer Overflow vulnerability (CVE-2026-53910) has been found in GNU diffutils software.

Vulnerability in Open Mercato software

CERT Polska — Wed, 22 Jul 2026 11:55:00 +0100

Denial of Service via unsafe regex vulnerability (CVE-2026-16270) has been found in Open Mercato software.

Vulnerabilities in Windu CMS software

CERT Polska — Mon, 20 Jul 2026 14:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-57309 to CVE-2026-57311) found in Windu CMS software.

Vulnerabilities in ICU Scandinavia Boomerang software

CERT Polska — Wed, 15 Jul 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-46458 and CVE-2026-46459) found in ICU Scandinavia Boomerang software.

Vulnerability in 4real ThemisNETPanel software

CERT Polska — Mon, 13 Jul 2026 14:55:00 +0100

Unauthenticated Remote Code Execution (CVE-2026-6847) has been found in 4real ThemisNETPanel software.

Vulnerabilities in GNU gawk software

CERT Polska — Mon, 13 Jul 2026 11:55:00 +0100

CERT Polska has received a report about 4 vulnerabilities (from CVE-2026-40467 to CVE-2026-40469 and CVE-2026-40553) found in GNU gawk software.

Vulnerability in BitWizard mtr software

CERT Polska — Fri, 10 Jul 2026 12:55:00 +0100

Out-of-bounds read vulnerability (CVE-2026-14461) has been found in BitWizard mtr software.

Vulnerabilities in R-SOFT DMS software

CERT Polska — Fri, 10 Jul 2026 11:55:00 +0100

CERT Polska has received a report about 5 vulnerabilities (from CVE-2026-41876 to CVE-2026-41880) found in R-SOFT DMS software.

Vulnerability in SOPlanning software

CERT Polska — Thu, 09 Jul 2026 11:55:00 +0100

SQL Injection vulnerability (CVE-2026-50644) has been found in SOPlanning software.

Vulnerabilities in GNU patch software

CERT Polska — Thu, 09 Jul 2026 09:05:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-56288 and CVE-2026-56289) found in GNU patch software.

Vulnerabilities in OpenIDC liboauth2 software

CERT Polska — Thu, 02 Jul 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-54430 and CVE-2026-54431) found in OpenIDC liboauth2 software.

Vulnerabilities in MyComplianceOffice MCO software

CERT Polska — Wed, 01 Jul 2026 11:55:00 +0100

CERT Polska has received a report about 8 vulnerabilities (from CVE-2026-53902 to CVE-2026-53909) found in MyComplianceOffice MCO software.

Vulnerabilities in KTM System e-BOK software

CERT Polska — Tue, 30 Jun 2026 15:55:00 +0100

CERT Polska has received a report about 4 vulnerabilities (from CVE-2026-35095 to CVE-2026-35098) found in KTM System e-BOK software.

Vulnerabilities in fzf software

CERT Polska — Tue, 30 Jun 2026 14:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-53432 and CVE-2026-53433) found in fzf software.

Vulnerabilities in Redeight CMS software

CERT Polska — Tue, 30 Jun 2026 12:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-53690 to CVE-2026-53692) found in Redeight CMS software.

Vulnerability in Raytha CMS software

CERT Polska — Tue, 30 Jun 2026 11:55:00 +0100

SQL Injection vulnerability (CVE-2026-12076) has been found in Raytha CMS software.

Vulnerability in libxml2 software

CERT Polska — Mon, 29 Jun 2026 14:20:00 +0100

Stack-based Buffer Overflow vulnerability (CVE-2026-11979) has been found in libxml2 software.

Vulnerability in SzafirHost software

CERT Polska — Mon, 29 Jun 2026 13:55:00 +0100

Unrestricted Upload of File with Dangerous Type vulnerability (CVE-2026-13165) has been found in SzafirHost software.

Vulnerabilities in gzip software

CERT Polska — Mon, 29 Jun 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-41991 and CVE-2026-41992) found in gzip software.

Vulnerability in DRIMO CMS software

CERT Polska — Tue, 23 Jun 2026 12:55:00 +0100

Reflected Cross-site Scripting vulnerability (CVE-2026-11772) has been found in DRIMO CMS software.

Vulnerability in Totolink EX1200L router software

CERT Polska — Tue, 23 Jun 2026 11:55:00 +0100

Stack-based Buffer Overflow vulnerability (CVE-2026-44089) has been found in Totolink EX1200L router software.

Vulnerabilities in UBB.threads software

CERT Polska — Thu, 18 Jun 2026 13:55:00 +0100

CERT Polska has received a report about 6 vulnerabilities (from CVE-2026-54219 to CVE-2026-54224) found in UBB.threads software.

Vulnerabilities in LMS software

CERT Polska — Thu, 18 Jun 2026 12:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-40455 to CVE-2026-40457) found in LMS (LAN Management System) software.

Vulnerability in 8cc compiler

CERT Polska — Thu, 18 Jun 2026 11:55:00 +0100

Out-of-bounds Read vulnerability (CVE-2026-50643) has been found in 8cc compiler.

Vulnerability in jansi library

CERT Polska — Tue, 16 Jun 2026 11:55:00 +0100

Heap-based Buffer Overflow vulnerability (CVE-2026-8484) has been found in jansi library.

Vulnerability in Responsive FileManager software

CERT Polska — Mon, 15 Jun 2026 12:55:00 +0100

Remote Code Execution via Unrestricted File Upload vulnerability (CVE-2026-5482) has been found in Responsive FileManager software.

Vulnerability in Quick.CMS software

CERT Polska — Mon, 15 Jun 2026 11:55:00 +0100

Deserialization of Untrusted Data vulnerability (CVE-2026-11860) has been found in Quick.CMS software.

UNC1151/Ghostwriter phishing campaign targeting Gmail accounts

CERT Polska — Fri, 12 Jun 2026 12:00:00 +0100

Recently, we have been observing attacks by the UNC1151/Ghostwriter group targeting Gmail accounts. This group has been regularly attacking the mailboxes of Polish citizens for several years, although in the past these attacks focused on other email providers. The techniques used evolve over time, but the core theme of the messages and their objective remain unchanged.

Vulnerability in Golem OEE MES software

CERT Polska — Thu, 11 Jun 2026 11:55:00 +0100

Path Traversal vulnerability (CVE-2026-8464) has been found in Golem OEE MES software.

Vulnerability in Aix-DB software

CERT Polska — Wed, 10 Jun 2026 11:55:00 +0100

Missing Authentication for Critical Function vulnerability (CVE-2026-8335) has been found in Aix-DB software.

Vulnerabilities in Logseq software

CERT Polska — Tue, 09 Jun 2026 14:55:00 +0100

CERT Polska has received a report about 4 vulnerabilities (CVE-2026-9279 and from CVE-2026-47899 to CVE-2026-47901) found in Logseq software.

Vulnerabilities in school-management-system software

CERT Polska — Wed, 03 Jun 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-47324 and CVE-2026-47325) found in school-management-system software.

Vulnerabilities in Wirtualna Uczelnia software

CERT Polska — Tue, 02 Jun 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-34906 and CVE-2026-34907) found in Wirtualna Uczelnia software.

Vulnerability in KS-SOMED software

CERT Polska — Mon, 01 Jun 2026 13:55:00 +0100

Use of Hard-coded Credentials vulnerability (CVE-2026-42251) has been found in KS-SOMED software.

Vulnerabilities in SOPlanning software

CERT Polska — Mon, 01 Jun 2026 09:55:00 +0100

CERT Polska has received a report about 7 vulnerabilities (from CVE-2026-40543 to CVE-2026-40549) found in SOPlanning software.

Vulnerabilities in QuickCMS software

CERT Polska — Fri, 29 May 2026 15:15:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-33384 and CVE-2026-33386) found in QuickCMS software.

Vulnerability in Kidsview application

CERT Polska — Thu, 28 May 2026 14:55:00 +0100

Authentication Bypass vulnerability (CVE-2026-8990) has been found in Kidsview software.

Vulnerability in bzip2 software

CERT Polska — Thu, 28 May 2026 13:15:00 +0100

Out-of-bounds Write vulnerability (CVE-2026-42250) has been found in bzip2 software.

Vulnerability in D-Link DWR-X1820 router

CERT Polska — Thu, 28 May 2026 12:55:00 +0100

Use of Weak Credentials vulnerability (CVE-2026-4377) has been found in DWR-X1820 router.

Vulnerabilities in Slican telephone exchanges software

CERT Polska — Wed, 27 May 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35087, CVE-2026-35089 and CVE-2026-35090) found in Slican telephone exchanges software.

Vulnerability in Szafir SDK software

CERT Polska — Mon, 25 May 2026 15:55:00 +0100

Improper Certificate Verification vulnerability (CVE-2026-9058) has been found in Szafir SDK software.

Vulnerability in Kenik cameras software

CERT Polska — Mon, 25 May 2026 12:55:00 +0100

Path Traversal vulnerability (CVE-2026-7766) has been found in Kenik cameras software.

Vulnerability in Lifetime software

CERT Polska — Mon, 25 May 2026 11:55:00 +0100

Authorization Bypass Through User-Controlled Key vulnerability (CVE-2026-40127) has been found in OutSystems Lifetime software.

Vulnerability in vifm software

CERT Polska — Fri, 22 May 2026 14:55:00 +0100

Heap-based Buffer Overflow vulnerability (CVE-2026-8997) has been found in vifm software.

Vulnerabilities in STER software

CERT Polska — Fri, 22 May 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-25606 to CVE-2026-25608) found in STER software.

Autonomous fuzzing process under LLM supervision

CERT Polska — Thu, 21 May 2026 13:37:00 +0100

The CCN project is co-financed by the European Regional Development Fund and the State Budget under the European Funds for Digital Development Programme 2021-2027.

Fuzzing is an automated software testing technique that involves feeding random or deliberately malformed input data to detect bugs and security vulnerabilities. For years it has …

Vulnerability in Request Tracker software

CERT Polska — Thu, 21 May 2026 11:55:00 +0100

Cross-site Scripting vulnerability (CVE-2026-6841) has been found in Request Tracker software.

Vulnerabilities in Sparx Systems products

CERT Polska — Tue, 19 May 2026 10:55:00 +0100

CERT Polska has received a report about 5 vulnerabilities (from CVE-2026-42096 to CVE-2026-42100) found in Sparx Systems products: Pro Cloud Server and Enterprise Architect.

Vulnerabilities in DHTMLX software

CERT Polska — Fri, 15 May 2026 12:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (CVE-2026-7182, CVE-2026-41552 and CVE-2026-41553) found in DHTMLX software.

Vulnerability in SzafirHost software

CERT Polska — Fri, 15 May 2026 11:55:00 +0100

Unrestricted Upload of File with Dangerous Type vulnerability (CVE-2026-44088) has been found in SzafirHost software.