CVE tracker
312 subscribers
4.42K links
News monitoring: @irnewsagency

Main channel: @orgsecuritygate

Site: SecurityGate.org
Download Telegram
CVE-2025-70063 - PHPGurukul Hospital Management System IDOR

CVE ID : CVE-2025-70063
Published : Feb. 18, 2026, 7:21 p.m. | 54 minutes ago
Description : The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference (IDOR) vulnerability. The application fails to verify that the requested 'viewid' parameter belongs to the currently authenticated patient. This allows a user to access the confidential medical records of other patients by iterating the 'viewid' integer.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-70064 - PHPGurukul Hospital Management System Privilege Escalation

CVE ID : CVE-2025-70064
Published : Feb. 18, 2026, 7:21 p.m. | 54 minutes ago
Description : PHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability. A low-privileged user (Patient) can directly access the Administrator Dashboard and all sub-modules (e.g., User Logs, Doctor Management) by manually browsing to the /admin/ directory after authentication. This allows any self-registered user to takeover the application, view confidential logs, and modify system data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-22860 - Rack has a Directory Traversal via Rack:Directory

CVE ID : CVE-2026-22860
Published : Feb. 18, 2026, 7:21 p.m. | 54 minutes ago
Description : Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory`’s path check used a string prefix match on the expanded path. A request like `/../root_example/` can escape the configured root if the target path starts with the root string, allowing directory listing outside the intended root. Versions 2.2.22, 3.1.20, and 3.2.5 fix the issue.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-2660 - FascinatedBox lily lily_symtab.c shorthash_for_name use after free

CVE ID : CVE-2026-2660
Published : Feb. 18, 2026, 7:21 p.m. | 54 minutes ago
Description : A vulnerability was identified in FascinatedBox lily up to 2.3. Affected by this issue is the function shorthash_for_name of the file src/lily_symtab.c. The manipulation leads to use after free. Local access is required to approach this attack. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-2662 - FascinatedBox lily lily_emitter.c count_transforms out-of-bounds

CVE ID : CVE-2026-2662
Published : Feb. 18, 2026, 7:32 p.m. | 44 minutes ago
Description : A weakness has been identified in FascinatedBox lily up to 2.3. This vulnerability affects the function count_transforms of the file src/lily_emitter.c. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-2663 - Alixhan xh-admin-backend Database Query query sql injection

CVE ID : CVE-2026-2663
Published : Feb. 18, 2026, 7:32 p.m. | 44 minutes ago
Description : A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-0874 - CATPART File Parsing Out-of-Bounds Write

CVE ID : CVE-2026-0874
Published : Feb. 18, 2026, 7:38 p.m. | 38 minutes ago
Description : A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-0875 - MODEL File Parsing Out-of-Bounds Write

CVE ID : CVE-2026-0875
Published : Feb. 18, 2026, 7:39 p.m. | 37 minutes ago
Description : A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-23491 - InvoicePlane has Unauthenticated Path Traversal in Guest Controller

CVE ID : CVE-2026-23491
Published : Feb. 18, 2026, 7:52 p.m. | 24 minutes ago
Description : InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. a path traversal vulnerability exists in the `get_file` method of the `Guest` module's `Get` controller in InvoicePlane up to and including through 1.6.3. The vulnerability allows unauthenticated attackers to read arbitrary files on the server by manipulating the input filename. This leads to the disclosure of sensitive information, including configuration files with database credentials. Version 1.6.4 fixes the issue.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-2665 - huanzi-qch base-admin JSP Parser SysFileController.java upload unrestricted upload

CVE ID : CVE-2026-2665
Published : Feb. 18, 2026, 8:02 p.m. | 14 minutes ago
Description : A vulnerability was detected in huanzi-qch base-admin up to 57a8126bb3353a004f3c7722089e3b926ea83596. Impacted is the function Upload of the file SysFileController.java of the component JSP Parser. Performing a manipulation of the argument File results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-2666 - mingSoft MCMS Template Archive uploadTemplate.do unrestricted upload

CVE ID : CVE-2026-2666
Published : Feb. 18, 2026, 8:02 p.m. | 14 minutes ago
Description : A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the component Template Archive Handler. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-27182 - Saturn Remote Mouse Server UDP Command Injection RCE

CVE ID : CVE-2026-27182
Published : Feb. 18, 2026, 10:16 p.m. | 2 hours, 1 minute ago
Description : Saturn Remote Mouse Server contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending specially crafted UDP JSON frames to port 27000. Attackers on the local network can send malformed packets with unsanitized command data that the service forwards directly to OS execution functions, enabling remote code execution under the service account.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-2648 - Google Chrome PDFium Heap Buffer Overflow Vulnerability

CVE ID : CVE-2026-2648
Published : Feb. 18, 2026, 10:16 p.m. | 2 hours, 1 minute ago
Description : Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-2649 - Google Chrome V8 Integer Overflow Vulnerability

CVE ID : CVE-2026-2649
Published : Feb. 18, 2026, 10:16 p.m. | 2 hours, 1 minute ago
Description : Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-2650 - Google Chrome Heap Buffer Overflow

CVE ID : CVE-2026-2650
Published : Feb. 18, 2026, 10:16 p.m. | 2 hours, 1 minute ago
Description : Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-2669 - Rongzhitong Visual Integrated Command and Dispatch Platform User delete access control

CVE ID : CVE-2026-2669
Published : Feb. 18, 2026, 10:16 p.m. | 2 hours, 1 minute ago
Description : A vulnerability was determined in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This impacts an unknown function of the file /dm/dispatch/user/delete of the component User Handler. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-2670 - Advantech WISE-6610 Background Management openvpn_apply os command injection

CVE ID : CVE-2026-2670
Published : Feb. 18, 2026, 10:16 p.m. | 2 hours, 1 minute ago
Description : A vulnerability was identified in Advantech WISE-6610 1.2.1_20251110. Affected is an unknown function of the file /cgi-bin/luci/admin/openvpn_apply of the component Background Management. Such manipulation of the argument delete_file leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 8.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-2672 - Tsinghua Unigroup Electronic Archives System downLoad download path traversal

CVE ID : CVE-2026-2672
Published : Feb. 18, 2026, 10:16 p.m. | 2 hours, 1 minute ago
Description : A security flaw has been discovered in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is the function Download of the file /Search/Subject/downLoad. Performing a manipulation of the argument path results in path traversal. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-24126 - Weblate has an argument injection in management console

CVE ID : CVE-2026-24126
Published : Feb. 18, 2026, 11:05 p.m. | 1 hour, 12 minutes ago
Description : Weblate is a web based localization tool. Prior to 5.16.0, the SSH management console did not validate the passed input while adding the SSH host key, which could lead to an argument injection to `ssh-add`. Version 5.16.0 fixes the issue. As a workaround, properly limit access to the management console.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-25926 - Notepad++ has an Untrusted Search Path

CVE ID : CVE-2026-25926
Published : Feb. 18, 2026, 11:07 p.m. | 1 hour, 10 minutes ago
Description : Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability (CWE-426) exists in versions prior to 8.9.2 when launching Windows Explorer without an absolute executable path. This may allow execution of a malicious explorer.exe if an attacker can control the process working directory. Under certain conditions, this could lead to arbitrary code execution in the context of the running application. Version 8.9.2 patches the issue.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-12811 - Cloud Suite and Privilege Access Service– HTTP request smuggling vulnerability

CVE ID : CVE-2025-12811
Published : Feb. 18, 2026, 11:16 p.m. | 1 hour, 1 minute ago
Description : Improper Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Delinea Inc. Cloud Suite and Privileged Access Service. If you're not using the latest Server Suite agents, this fix requires that you upgrade to Server Suite 2023.1 (agent 6.0.1) or later. * If you cannot upgrade to Release 2023.1 (agent version 6.0.1) or later, you can choose one of the following versions: * Server Suite release 2023.0.5 (agent version 6.0.0-158) * Server Suite release 2022.1.10 (agent version 5.9.1-337)
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...