A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5

Insufficient input validation in NETGEAR Orbi routers

Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping

Insufficient Input Handling in JNDI Operations of SAP Identity Management

RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in tapslip6 Utility

Metabase channel test endpoint can reach internal local addresses

PILOS affected by a CSRF via GET request allows unintentional termination of all active video conferences

Lychee cross-album password propagation on Album unlocking

wlc can skip SSL verification

Spectrum insecure deserialiation

Spectrum broken authorization scheme

Spectrum basic authentication in use

Spectrum session token in URL

Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver

AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value

pypdf has possible long runtimes for malformed startxref

pypdf has possible long runtimes for missing /Root object with large /Size values

OpenProject is Vulnerable to User Enumeration via User ID