Vuldb Updates

A vulnerability has been found in Mozilla Firefox up to 140.13/153/153 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component WebExtensions. Performing a manipulation results in improper isolation or compartmentalization. This vulnerability is identified as CVE-2026-74960. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Mozilla Firefox. It has been classified as problematic. The impacted element is an unknown function of the component Graphics. This manipulation causes information disclosure. This vulnerability is registered as CVE-2026-74948. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability identified as problematic has been detected in Murrelektronik Xelity 2.1.0. The impacted element is an unknown function of the component Web GUI. Performing a manipulation results in information exposure through error message. This vulnerability is cataloged as CVE-2026-8173. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability marked as problematic has been reported in DJI Air 3, Air 3S, Avata 2, Avata 360, Flip, Mavic 3, Mavic 3 Classic, Mavic 3 Pro, Mavic 4 Pro, Mini 2, Mini 3, Mini 3 Pro, Mini 4 Pro, Mini 5 Pro, Neo and Neo 2. This impacts an unknown function of the file /blackbox/upgrade/ of the component FTP Service. The manipulation leads to hard-coded credentials. This vulnerability is documented as CVE-2026-78251. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in Red Hat Multicluster Engine for Kubernetes. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component Open Cluster Management. Performing a manipulation results in improper certificate validation. This vulnerability was named CVE-2026-4740. The attack needs to be approached locally. There is no available exploit.

A vulnerability identified as critical has been detected in Baylan Measuring Instruments Industry and Trade Smart Meter Management Application. This affects an unknown function. The manipulation leads to missing authentication. This vulnerability is documented as CVE-2026-15706. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability was found in DJI Air 3, Air 3S, Avata 2, Avata 360, Flip, Mavic 3, Mavic 3 Classic, Mavic 3 Pro, Mavic 4 Pro, Mini 2, Mini 3, Mini 3 Pro, Mini 4 Pro, Mini 5 Pro, Neo and Neo 2. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component DUML Protocol. Performing a manipulation results in missing encryption of sensitive data. This vulnerability is cataloged as CVE-2026-77812. The attack must be initiated from a local position. There is no exploit available.

A vulnerability labeled as problematic has been found in DJI Neo, Neo 2, Flip, Air 3, Air 3S, Avata 2, Avata 360, Mavic 3, Mavic 3 Classic, Mavic 3 Pro, Mavic 4 Pro, Mini 2, Mini 3, Mini 3 Pro, Mini 4 Pro and Mini 5 Pro. This affects an unknown function. Executing a manipulation can lead to information disclosure. This vulnerability is registered as CVE-2026-78255. It is possible to launch the attack remotely. No exploit is available.

A vulnerability identified as critical has been detected in joomlack.fr Page Builder CK Extension up to 3.6.4. The impacted element is an unknown function of the component Styles Model. Performing a manipulation results in sql injection. This vulnerability is known as CVE-2026-74254. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability described as critical has been identified in joomlack Page Builder CK Extension up to 3.6.4. Affected is the function loadStyles of the component Frontend Page Model. The manipulation results in sql injection. This vulnerability is reported as CVE-2026-77994. The attack can be launched remotely. No exploit exists.

A vulnerability classified as problematic has been found in joomlack.fr Page Builder CK Extension up to 3.6.4. Affected by this vulnerability is an unknown functionality. This manipulation of the argument iscontenttype causes cross site scripting. This vulnerability appears as CVE-2026-77993. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as very critical was found in DJI Air 3, Air 3S, Avata 2, Avata 360, Flip, Mavic 3, Mavic 3 Classic, Mavic 3 Pro, Mavic 4 Pro, Mini 2, Mini 3, Mini 3 Pro, Mini 4 Pro, Mini 5 Pro, Neo and Neo 2. Affected by this issue is some unknown functionality of the component DUML Command Interface. Such manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-78306. The attack may be launched remotely. There is no exploit available.

A vulnerability described as critical has been identified in Apple macOS. Affected by this issue is some unknown functionality of the component ppp. The manipulation results in memory corruption. This vulnerability is identified as CVE-2022-42840. The attack is only possible with local access. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability labeled as critical has been found in Apple iOS and iPadOS up to 16.1.2. This vulnerability affects unknown code of the component ppp. Executing a manipulation can lead to memory corruption. This vulnerability is registered as CVE-2022-42840. The attack needs to be launched locally. No exploit is available. The affected component should be upgraded.

A vulnerability has been found in Apple macOS and classified as problematic. This vulnerability affects unknown code of the component App Access. This manipulation causes enforcement of behavioral workflow. This vulnerability is tracked as CVE-2022-42838. The attack is restricted to local execution. No exploit exists. The affected component should be upgraded.

A vulnerability was found in Apple watchOS up to 9.1 and classified as critical. This vulnerability affects unknown code of the component iTunes Store. Such manipulation leads to improper input validation. This vulnerability is uniquely identified as CVE-2022-42837. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in Apple macOS. It has been classified as critical. Impacted is an unknown function of the component iTunes Store. The manipulation leads to improper input validation. This vulnerability is traded as CVE-2022-42837. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. It has been classified as critical. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. This vulnerability is registered as CVE-2026-78143. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. This vulnerability is documented as CVE-2026-78144. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability described as problematic has been identified in CTFd up to 3.8.4. The affected element is the function _is_safe_url of the file CTFd/utils/validators/__init__.py. Such manipulation of the argument Next leads to open redirect. This vulnerability is uniquely identified as CVE-2026-78145. The attack can be launched remotely. Moreover, an exploit is present. Upgrading the affected component is recommended.