Incorrect Authorization vulnerability (CVE-2026-106030) has been found in NordVPN software.

Improper restriction of XML external entity reference vulnerability (CVE-2026-88794) has been found in Sparx Systems Enterprise Architect software.

CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35088, CVE-2026-63314 and CVE-2026-63315) found in Slican telephone exchanges.

SQL Injection vulnerability (CVE-2026-63316) has been found in Payload CMS software.

Relative Path Traversal vulnerability (CVE-2026-103663) has been found in Ollama software.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-75818 to CVE-2026-75820) found in GNU Aspell software.

Local Argument Injection vulnerability (CVE-2026-91784) has been found in cjbassi/gotop software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-74864 and CVE-2026-74865) found in YunoHost-Apps sogo_yhn software.

Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-41875) has been found in Quick.Cart software.

External control of file name or path vulnerability (CVE-2026-85520) has been found in MyPresta Google Merchant Center Feed software.