Authorization bypass through User-Controlled key vulnerability (CVE-2026-92419) has been found in WEBCON BPS software.

CERT Polska has received a report about 6 vulnerabilities (CVE-2026-58146, CVE-2026-58147 and from CVE-2026-40854 to CVE-2026-40857) found in firmware of WNC T-Mobile 5G Box IDU routers.

CERT Polska has received a report about 2 SQL Injection vulnerabilities (CVE-2026-7848 and CVE-2026-15600) found in Alior Bank "raty" module for PrestaShop.

Use of Hard-coded Credentials vulnerability (CVE-2026-17038) has been found in drEryk Gabinet software.

CERT Polska has found 6 vulnerabilities (from CVE-2026-67276 to CVE-2026-67279, CVE-2026-67281 and CVE-2026-86060) in Mikrotik RouterOS software.

Plaintext Storage of a Password vulnerability (CVE-2026-15933) has been found in OptimiDoc Server (On-Premise) software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-56651 and CVE-2026-56652) found in dool software.

Denial of Service vulnerability (CVE-2026-16599) has been found in GNU wget software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2025-63080 and CVE-2026-6017) found in KAON PG5298A/PG5298B routers.

CERT Polska has received a report about 13 vulnerabilities (from CVE-2026-64960 to CVE-2026-64972) found in ATutor software.