🚨 EUVD-2026-12663
📊 Score: n/a
📦 Product: IOS, macOS, macOS (+1 more)
🏢 Vendor: Apple
📅 Updated: 2026-03-17
📝 A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2. Processing maliciously crafted web content may ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12663
🚨 EUVD-2025-208811
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Sterling B2B Integrator, Sterling B2B Integrator, Sterling B2B Integrator (+1 more)
🏢 Vendor: IBM
📅 Updated: 2026-03-17
📝 IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow an unauthenticate...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-208811
🚨 EUVD-2026-12661
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: Sterling B2B Integrator, Sterling B2B Integrator, Sterling B2B Integrator (+1 more)
🏢 Vendor: IBM
📅 Updated: 2026-03-17
📝 IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote unauthenticated att...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12661
🚨 EUVD-2026-12665
📊 Score: 9.8/10 (CVSS v3.1)
📦 Product: Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-03-17
📝 Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component: Desktop). The supported version that is affec...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12665
🚨 EUVD-2026-12667
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Cloud Foundry
🏢 Vendor: Cloudfoundry
📅 Updated: 2026-03-17
📝 Unprotected internal endpoints in Cloud Foundry Capi Release 1.226.0 and below, and CF Deployment v54.9.0 and below on all platforms allows any user who has bypassed the firewall to potentially replace droplets and therefore applications allowing ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12667
🚨 EUVD-2026-12669
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: glpi
🏢 Vendor: glpi-project
📅 Updated: 2026-03-17
📝 GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, a malicious actor with knowledge of a user's credentials can bypass MFA and steal their account. Version 11.0.6 fixes the issue.
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12669
🚨 EUVD-2026-12671
📊 Score: 7.1/10 (CVSS v3.1)
📦 Product: glpi-inventory-plugin
🏢 Vendor: glpi-project
📅 Updated: 2026-03-17
📝 The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, non sanitized user input can lend to an SQL injection from reports, with adequate rights. This vulner...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12671
🚨 EUVD-2026-12659
📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: IdentityServer
🏢 Vendor: Duende
📅 Updated: 2026-03-17
📝 A vulnerability was determined in Duende IdentityServer 4. The affected element is an unknown function of the file /connect/authorize of the component Token Renewal Endpoint. This manipulation of the argument id_token_hint causes improper authenticatio...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12659
🚨 EUVD-2026-12647
📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: Edimax GS-5008PL
🏢 Vendor: EDIMAX Technology Co., Ltd.
📅 Updated: 2026-03-17
📝 Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption. Attackers on the same network can intercept management traffic to capture adminis...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12647
🚨 EUVD-2026-12649
📊 Score: 5.1/10 (CVSS v3.1)
📦 Product: Edimax GS-5008PL
🏢 Vendor: EDIMAX Technology Co., Ltd.
📅 Updated: 2026-03-17
📝 Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrative actions by inducing logged-in administrators to visit mali...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12649
EUVD Bot
