<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/cna-root/THA-PSIRT/recent</id>
  <title>Most recent vulnerabilities from the THA-PSIRT CNA root</title>
  <updated>2026-08-18T17:18:56.855493+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Latest vulnerabilities published by the CNAs operating under the THA-PSIRT root of the CVE Program.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-9007</id>
    <title>CVE-2026-9007 (TCS-CERT)</title>
    <updated>2026-07-15T15:41:34.362000+00:00</updated>
    <content>Reflected XSS in HCL Notes</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-9007"/>
    <summary>Reflected XSS in HCL Notes</summary>
    <published>2026-07-15T15:41:34.362000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-13014</id>
    <title>CVE-2026-13014 (THA-PSIRT)</title>
    <updated>2026-07-13T09:42:45.431000+00:00</updated>
    <content>Remote Code Execution vulnerability in "Suspicious" application</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-13014"/>
    <summary>Remote Code Execution vulnerability in "Suspicious" application</summary>
    <published>2026-07-13T09:42:45.431000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-6805</id>
    <title>CVE-2026-6805 (THA-PSIRT)</title>
    <updated>2026-05-07T09:45:42.841000+00:00</updated>
    <content>Vulnerability on Cryptobox external sharing feature</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-6805"/>
    <summary>Vulnerability on Cryptobox external sharing feature</summary>
    <published>2026-05-07T09:45:42.841000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-6501</id>
    <title>CVE-2026-6501 (TCS-CERT)</title>
    <updated>2026-05-04T14:26:50.552000+00:00</updated>
    <content>Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup.

This issue affects jOpenDocument: 1.5.</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-6501"/>
    <summary>Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup.

This issue affects jOpenDocument: 1.5.</summary>
    <published>2026-05-04T14:26:50.552000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-6500</id>
    <title>CVE-2026-6500 (TCS-CERT)</title>
    <updated>2026-05-04T14:16:41.970000+00:00</updated>
    <content>Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data.

This issue affects OpenConcerto: 1.7.5.</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-6500"/>
    <summary>Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data.

This issue affects OpenConcerto: 1.7.5.</summary>
    <published>2026-05-04T14:16:41.970000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-6499</id>
    <title>CVE-2026-6499 (TCS-CERT)</title>
    <updated>2026-05-04T14:08:03.764000+00:00</updated>
    <content>Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries.

This issue affects OpenConcerto: 1.7.5.</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-6499"/>
    <summary>Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries.

This issue affects OpenConcerto: 1.7.5.</summary>
    <published>2026-05-04T14:08:03.764000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-5794</id>
    <title>CVE-2026-5794 (THA-PSIRT)</title>
    <updated>2026-04-28T17:09:55.609000+00:00</updated>
    <content>Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-5794"/>
    <summary>Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout</summary>
    <published>2026-04-28T17:09:55.609000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-3457</id>
    <title>CVE-2026-3457 (THA-PSIRT)</title>
    <updated>2026-03-27T09:05:48.226000+00:00</updated>
    <content>Stored XSS vulnerability in Sentinel ACC</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-3457"/>
    <summary>Stored XSS vulnerability in Sentinel ACC</summary>
    <published>2026-03-27T09:05:48.226000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-0872</id>
    <title>CVE-2026-0872 (THA-PSIRT)</title>
    <updated>2026-02-13T08:53:05.621000+00:00</updated>
    <content>Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-0872"/>
    <summary>Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon</summary>
    <published>2026-02-13T08:53:05.621000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-2344</id>
    <title>CVE-2026-2344 (TCS-CERT)</title>
    <updated>2026-02-11T14:53:20.753000+00:00</updated>
    <content>Stored XSS on Plunet BusinessManager</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-2344"/>
    <summary>Stored XSS on Plunet BusinessManager</summary>
    <published>2026-02-11T14:53:20.753000+00:00</published>
  </entry>
</feed>
