CERT Polska has received a report about 11 vulnerabilities (CVE-2025-15540 and from CVE-2025-69236 to CVE-2025-69243 and from CVE-2025-69245 to CVE-2025-69246) found in Raytha software.

CERT Polska has received reports about 2 vulnerabilities (CVE-2025-11500 and CVE-2025-15587) found in multiple tinycontrol devices (tcPDU and LAN Controllers: LK3.5, LK3.9 and LK4).

Weak Token Encoding vulnerability (CVE-2026-0809) has been found in Streamsoft Prestiż software.

Path Traversal vulnerability (CVE-2026-3013) has been found in Coppermine Photo Gallery software.

Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-1468) has been found in QuickCMS software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2025-12462 and CVE-2025-14532) found in DobryCMS software.

CERT Polska has received reports about 8 vulnerabilities found in CGM CLININET and CGM NETRAAD software.

SQL Injection vulnerability (CVE-2025-15498) has been found in Pro3W CMS software.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-24350 to CVE-2026-24352) found in PluXml CMS software.

Reflected XSS vulnerability (CVE-2026-1434) has been found in Omega-PSIR software.