<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Israel National Cyber Directorate (INCD) — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/incd" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Israel National Cyber Directorate (INCD) (incd).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/incd.png</url>
      <title>Israel National Cyber Directorate (INCD) — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-45452 · 8.3 HIGH — Unitronics - CWE-134 Use of Externally-Controlled format string</title>
      <link>https://vulnogram.org/CVE-2026-45452</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-45452</guid>
      <description>Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.</description>
      <category>High</category>
      <pubDate>Thu, 15 Oct 2026 15:25:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-45451 · 8.3 HIGH — Unitronics - CWE-287: Improper Authentication</title>
      <link>https://vulnogram.org/CVE-2026-45451</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-45451</guid>
      <description>: Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.</description>
      <category>High</category>
      <pubDate>Thu, 15 Oct 2026 15:23:55 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-45450 · 8.3 HIGH — Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer</title>
      <link>https://vulnogram.org/CVE-2026-45450</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-45450</guid>
      <description>: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLog…</description>
      <category>High</category>
      <pubDate>Thu, 15 Oct 2026 15:21:41 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-45449 · 8.3 HIGH — Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command (&apos;OS Command Injection&apos;)</title>
      <link>https://vulnogram.org/CVE-2026-45449</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-45449</guid>
      <description>: Improper Neutralization of Special Elements used in an OS Command (&apos;OS Command Injection&apos;) vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (…</description>
      <category>High</category>
      <pubDate>Thu, 15 Oct 2026 15:18:59 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-108925 · 6.1 MEDIUM 🌩️ — Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)</title>
      <link>https://vulnogram.org/CVE-2026-108925</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-108925</guid>
      <description>Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2. https://g…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Sun, 11 Oct 2026 18:11:27 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-59508 · 5.9 MEDIUM 🌩️ — Interuse i-Bos CWE-89: Improper Neutralization of Special Elements used in an SQL Command (&apos;SQL Injection&apos;)</title>
      <link>https://vulnogram.org/CVE-2026-59508</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-59508</guid>
      <description>Improper neutralization of special elements used in an SQL command (&apos;SQL injection&apos;) vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Sun, 11 Oct 2026 17:51:21 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-59507 · 9.3 CRITICAL 🌩️ — Priority –   CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control</title>
      <link>https://vulnogram.org/CVE-2026-59507</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-59507</guid>
      <description>: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Aug 2026 09:44:23 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-59506 · 9.3 CRITICAL 🌩️ — Priority –   CWE-306: Missing Authentication for Critical Function</title>
      <link>https://vulnogram.org/CVE-2026-59506</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-59506</guid>
      <description>: Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions witho…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Aug 2026 09:41:12 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-59505 · 8.6 HIGH 🌩️ — Priority - CWE-284: Improper Access Control</title>
      <link>https://vulnogram.org/CVE-2026-59505</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-59505</guid>
      <description>: Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Aug 2026 09:36:41 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-59504 · 9.1 CRITICAL 🌩️ — Priority –   CWE-602: Client-Side Enforcement of Server-Side Security</title>
      <link>https://vulnogram.org/CVE-2026-59504</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-59504</guid>
      <description>: Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions wi…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Aug 2026 09:33:50 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-59503 · 9.1 CRITICAL 🌩️ — Priority –  CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor</title>
      <link>https://vulnogram.org/CVE-2026-59503</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-59503</guid>
      <description>: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Aug 2026 09:30:47 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-59502 · 5.3 MEDIUM 🌩️ — Priority - CWE-203: Observable Discrepancy</title>
      <link>https://vulnogram.org/CVE-2026-59502</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-59502</guid>
      <description>: Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Aug 2026 09:27:45 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-59501 · 8.2 HIGH 🌩️ — Priority –   CWE-284: Improper Access Control</title>
      <link>https://vulnogram.org/CVE-2026-59501</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-59501</guid>
      <description>: Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Aug 2026 09:24:10 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-59500 · 10 CRITICAL 🌩️ — Priority - CWE-287: Improper Authentication</title>
      <link>https://vulnogram.org/CVE-2026-59500</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-59500</guid>
      <description>: Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Aug 2026 09:18:37 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-59499 · 8.6 HIGH 🌩️ — Priority –  CWE-200: Exposure of Sensitive Information to an Unauthorized Actor</title>
      <link>https://vulnogram.org/CVE-2026-59499</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-59499</guid>
      <description>: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).. This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions).: Al…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 13 Aug 2026 09:12:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-45448 · 4.3 MEDIUM 🌩️ — ntopng - CWE-601: URL Redirection to Untrusted Site (&apos;Open Redirect&apos;)</title>
      <link>https://vulnogram.org/CVE-2026-45448</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-45448</guid>
      <description>CWE-601 URL redirection to untrusted site (&apos;open redirect&apos;)</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 14 May 2026 16:48:18 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-6923 · 3.8 LOW — Nuvoton - CWE-1300: Improper Protection of Physical Side Channels</title>
      <link>https://vulnogram.org/CVE-2026-6923</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-6923</guid>
      <description>A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.</description>
      <category>Low</category>
      <pubDate>Thu, 14 May 2026 16:14:33 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55065 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-55065</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55065</guid>
      <description>CWE-89 Improper Neutralization of Special Elements used in an SQL Command (&apos;SQL Injection&apos;)</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 01 Jan 2026 18:30:45 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55064 · 4.8 MEDIUM — Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or &apos;Cross-site Scripting&apos;)</title>
      <link>https://vulnogram.org/CVE-2025-55064</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55064</guid>
      <description>CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or &apos;Cross-site Scripting&apos;)</description>
      <category>Medium</category>
      <pubDate>Mon, 29 Dec 2025 17:23:31 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55063 · 4.8 MEDIUM — Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or &apos;Cross-site Scripting&apos;)</title>
      <link>https://vulnogram.org/CVE-2025-55063</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55063</guid>
      <description>CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or &apos;Cross-site Scripting&apos;)</description>
      <category>Medium</category>
      <pubDate>Mon, 29 Dec 2025 17:19:52 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55062 · 4.8 MEDIUM — Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or &apos;Cross-site Scripting&apos;)</title>
      <link>https://vulnogram.org/CVE-2025-55062</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55062</guid>
      <description>CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or &apos;Cross-site Scripting&apos;)</description>
      <category>Medium</category>
      <pubDate>Mon, 29 Dec 2025 17:18:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55061 · 8.8 HIGH — Priority - CWE-434 Unrestricted Upload of File with Dangerous Type</title>
      <link>https://vulnogram.org/CVE-2025-55061</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55061</guid>
      <description>CWE-434 Unrestricted Upload of File with Dangerous Type</description>
      <category>High</category>
      <pubDate>Mon, 29 Dec 2025 17:14:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55060 · 6.1 MEDIUM 🌩️ — Priority - CWE-601: URL Redirection to Untrusted Site (&apos;Open Redirect&apos;)</title>
      <link>https://vulnogram.org/CVE-2025-55060</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55060</guid>
      <description>CWE-601 URL Redirection to Untrusted Site (&apos;Open Redirect&apos;)</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 29 Dec 2025 17:11:10 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55059 · 4.8 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-55059</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55059</guid>
      <description>CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or &apos;Cross-site Scripting&apos;)</description>
      <category>Medium</category>
      <pubDate>Mon, 17 Nov 2025 17:36:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55058 · 4.5 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-55058</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55058</guid>
      <description>CWE-20 Improper Input Validation</description>
      <category>Medium</category>
      <pubDate>Mon, 17 Nov 2025 17:33:55 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55057 · 4.5 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-55057</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55057</guid>
      <description>Multiple CWE-352 Cross-Site Request Forgery (CSRF)</description>
      <category>Medium</category>
      <pubDate>Mon, 17 Nov 2025 17:31:23 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55056 · 4.8 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-55056</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55056</guid>
      <description>Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or &apos;Cross-site Scripting&apos;)</description>
      <category>Medium</category>
      <pubDate>Mon, 17 Nov 2025 17:28:28 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55055 · 6.8 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-55055</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55055</guid>
      <description>CWE-78 Improper Neutralization of Special Elements used in an OS Command (&apos;OS Command Injection&apos;)</description>
      <category>Medium</category>
      <pubDate>Mon, 17 Nov 2025 17:25:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55054 · 6.1 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-55054</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55054</guid>
      <description>CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or &apos;Cross-site Scripting&apos;)</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 09 Sep 2025 19:14:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55053 · 6.5 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-55053</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55053</guid>
      <description>CWE-328: Use of Weak Hash</description>
      <category>Medium</category>
      <pubDate>Tue, 09 Sep 2025 19:10:49 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55052 · 4.3 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-55052</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55052</guid>
      <description>CWE-200 Exposure of Sensitive Information to an Unauthorized Actor</description>
      <category>Medium</category>
      <pubDate>Tue, 09 Sep 2025 19:06:18 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55051 · 10 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-55051</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55051</guid>
      <description>CWE-1392: Use of Default Credentials</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 09 Sep 2025 19:01:43 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55050 · 9.8 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-55050</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55050</guid>
      <description>CWE-1242: Inclusion of Undocumented Features</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 09 Sep 2025 18:56:59 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55049 · 9.1 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-55049</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55049</guid>
      <description>Use of Default Cryptographic Key (CWE-1394)</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 09 Sep 2025 18:52:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55048 · 9.8 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-55048</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55048</guid>
      <description>Multiple CWE-78</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 09 Sep 2025 18:45:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-55047 · 8.4 HIGH</title>
      <link>https://vulnogram.org/CVE-2025-55047</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-55047</guid>
      <description>CWE-798 Use of Hard-coded Credentials</description>
      <category>High</category>
      <pubDate>Tue, 09 Sep 2025 18:40:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-46391 · 6.5 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-46391</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-46391</guid>
      <description>CWE-284: Improper Access Control</description>
      <category>Medium</category>
      <pubDate>Wed, 06 Aug 2025 11:00:08 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-46390 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-46390</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-46390</guid>
      <description>CWE-204: Observable Response Discrepancy</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 06 Aug 2025 10:55:50 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-46389 · 6.5 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-46389</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-46389</guid>
      <description>CWE-620: Unverified Password Change</description>
      <category>Medium</category>
      <pubDate>Wed, 06 Aug 2025 10:51:32 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-46388 · 4.3 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-46388</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-46388</guid>
      <description>CWE-200 Exposure of Sensitive Information to an Unauthorized Actor</description>
      <category>Medium</category>
      <pubDate>Wed, 06 Aug 2025 10:47:56 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-46387 · 8.8 HIGH</title>
      <link>https://vulnogram.org/CVE-2025-46387</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-46387</guid>
      <description>CWE-639 Authorization Bypass Through User-Controlled Key</description>
      <category>High</category>
      <pubDate>Wed, 06 Aug 2025 10:43:49 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-46386 · 8.8 HIGH</title>
      <link>https://vulnogram.org/CVE-2025-46386</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-46386</guid>
      <description>CWE-639 Authorization Bypass Through User-Controlled Key</description>
      <category>High</category>
      <pubDate>Wed, 06 Aug 2025 10:14:19 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-46385 · 8.6 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-46385</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-46385</guid>
      <description>CWE-918 Server-Side Request Forgery (SSRF)</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Sun, 20 Jul 2025 14:42:32 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-46384 · 8.8 HIGH</title>
      <link>https://vulnogram.org/CVE-2025-46384</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-46384</guid>
      <description>CWE-434 Unrestricted Upload of File with Dangerous Type</description>
      <category>High</category>
      <pubDate>Sun, 20 Jul 2025 14:40:22 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-46383 · 6.1 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-46383</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-46383</guid>
      <description>CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or &apos;Cross-site Scripting&apos;)</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Sun, 20 Jul 2025 14:35:19 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-46382 · 5.3 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-46382</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-46382</guid>
      <description>CWE-200 Exposure of Sensitive Information to an Unauthorized Actor</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Sun, 20 Jul 2025 14:31:09 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-23183 · 6.1 MEDIUM 🌩️ — UBtech – CWE-601: URL Redirection to Untrusted Site (&apos;Open Redirect&apos;)</title>
      <link>https://vulnogram.org/CVE-2025-23183</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-23183</guid>
      <description>CWE-601: URL Redirection to Untrusted Site (&apos;Open Redirect&apos;)</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 22 May 2025 15:32:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-23182 · 4.3 MEDIUM — UBtech – CWE-203: Observable Discrepancy</title>
      <link>https://vulnogram.org/CVE-2025-23182</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-23182</guid>
      <description>CWE-203: Observable Discrepancy</description>
      <category>Medium</category>
      <pubDate>Thu, 22 May 2025 15:30:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-23181 · 8 HIGH — Ribbon Communications - CWE-250: Execution with Unnecessary Privileges</title>
      <link>https://vulnogram.org/CVE-2025-23181</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-23181</guid>
      <description>CWE-250: Execution with Unnecessary Privileges</description>
      <category>High</category>
      <pubDate>Tue, 29 Apr 2025 16:19:37 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-23180 · 8 HIGH — Ribbon Communications - CWE-250: Execution with Unnecessary Privileges</title>
      <link>https://vulnogram.org/CVE-2025-23180</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-23180</guid>
      <description>CWE-250: Execution with Unnecessary Privileges</description>
      <category>High</category>
      <pubDate>Tue, 29 Apr 2025 16:18:48 GMT</pubDate>
    </item>
  </channel>
</rss>
