CERT Polska has received a report about 2 vulnerabilities (CVE-2026-6909 and CVE-2026-6956) found in ATutor software.

OS Command Injection vulnerability (CVE-2025-13605) has been found in 3onedata GW1101-1D(RS-485)-TB-P modbus gateways.

Cross-site Scripting vulnerability (CVE-2026-1493) has been found in LEX Baza Dokumentów software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-42248 and CVE-2026-42249) found in Ollama software.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-40550 to CVE-2026-40552) found in mpGabinet software.

Cross-site Scripting vulnerability (CVE-2026-4313) has been found in AdaptiveGRC software.

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability (CVE-2026-5958) has been found in GNU sed software.

Incorrect Authorization vulnerability (CVE-2025-13480) has been found in Fudo Enterprise software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-40458, CVE-2026-40459) found in PAC4J software.

Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-5131) has been found in GREENmod software.