https://vulnerability.circl.lu/cna-root/ENISA/recent Most recent vulnerabilities from the ENISA CNA root 2026-08-18T17:18:58.769676+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Latest vulnerabilities published by the CNAs operating under the ENISA root of the CVE Program. https://vulnerability.circl.lu/vuln/cve-2026-18929 CVE-2026-18929 (CERT-PL) 2026-08-18T09:11:38.105000+00:00 Resource Exhaustion in Carbone Resource Exhaustion in Carbone 2026-08-18T09:11:38.105000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-75531 CVE-2026-75531 (CIRCL) 2026-08-17T21:00:12.848000+00:00 Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora 2026-08-17T21:00:12.848000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-75529 CVE-2026-75529 (CIRCL) 2026-08-17T20:52:42.520000+00:00 Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora 2026-08-17T20:52:42.520000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-40126 CVE-2026-40126 (CERT-PL) 2026-08-17T12:03:38.685000+00:00 DOM-based Cross-Site Scripting in OutSystems Service Center DOM-based Cross-Site Scripting in OutSystems Service Center 2026-08-17T12:03:38.685000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-74767 CVE-2026-74767 (CIRCL) 2026-08-15T21:56:44.562000+00:00 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb 2026-08-15T21:56:44.562000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-74764 CVE-2026-74764 (CIRCL) 2026-08-15T21:39:09.862000+00:00 Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora 2026-08-15T21:39:09.862000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-59109 CVE-2026-59109 (ENISA) 2026-08-13T16:40:01.751000+00:00 Zalktis: SQL injection via partner-controlled fields in imported e-invoices Zalktis: SQL injection via partner-controlled fields in imported e-invoices 2026-08-13T16:40:01.751000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-73432 CVE-2026-73432 (CIRCL) 2026-08-12T14:40:15.966000+00:00 Stored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookup Stored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookup 2026-08-12T14:40:15.966000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-73431 CVE-2026-73431 (CIRCL) 2026-08-12T14:32:56.538000+00:00 Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookup Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookup 2026-08-12T14:32:56.538000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-73405 CVE-2026-73405 (CIRCL) 2026-08-12T14:15:58.039000+00:00 Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup 2026-08-12T14:15:58.039000+00:00