Authorization Bypass Through User-Controlled Key vulnerability (CVE-2026-40127) has been found in OutSystems Lifetime software.

Heap-based Buffer Overflow vulnerability (CVE-2026-8997) has been found in vifm software.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-25606 to CVE-2026-25608) found in STER software.

Cross-site Scripting vulnerability (CVE-2026-6841) has been found in Request Tracker software.

CERT Polska has received a report about 5 vulnerabilities (from CVE-2026-42096 to CVE-2026-42100) found in Sparx Systems products: Pro Cloud Server and Enterprise Architect.

CERT Polska has received a report about 3 vulnerabilities (CVE-2026-7182, CVE-2026-41552 and CVE-2026-41553) found in DHTMLX software.

Unrestricted Upload of File with Dangerous Type vulnerability (CVE-2026-44088) has been found in SzafirHost software.

Cross-site Scripting vulnerability (CVE-2026-21730) has been found in Verba software.

Cross-site Scripting vulnerability (CVE-2026-1630) has been found in WEBCON BPS software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2025-68420 and CVE-2025-68421) found in Comarch ERP Optima software.