8.7

CVSS4.0

CVE-2026-2904 - UTT HiPER 810G ConfigExceptAli strcpy buffer overflow

A vulnerability was determined in UTT HiPER 810G 1.7.7-171114. This affects the function strcpy of the file /goform/ConfigExceptAli. Executing a manipulation can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

📅 Published: Feb. 22, 2026, 12:32 a.m. 🔄 Last Modified: Feb. 22, 2026, 12:32 a.m.

4.8

CVSS4.0

CVE-2026-2903 - skvadrik re2c ast.cc check_and_merge_special_rules null pointer dereference

A flaw has been found in skvadrik re2c up to 4.4. Impacted is the function check_and_merge_special_rules of the file src/parse/ast.cc. This manipulation causes null pointer dereference. The attack can only be executed locally. The exploit has been published and may be used. Patch name: febeb977936f…

📅 Published: Feb. 22, 2026, 12:32 a.m. 🔄 Last Modified: Feb. 22, 2026, 12:32 a.m.

5.1

CVSS4.0

CVE-2026-2898 - funadmin Backend Endpoint AuthCloudService.php getMember deserialization

A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloud_account results in deserialization. The attack may be performed from remo…

📅 Published: Feb. 22, 2026, 12:02 a.m. 🔄 Last Modified: Feb. 22, 2026, 12:02 a.m.

4.8

CVSS4.0

CVE-2026-2897 - funadmin Backend index.html cross site scripting

A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the file app/backend/view/index/index.html of the component Backend Interface. The manipulation of the argument Value leads to cross site scripting. The attack is possible to be carrie…

📅 Published: Feb. 22, 2026, 12:02 a.m. 🔄 Last Modified: Feb. 22, 2026, 12:02 a.m.

6.9

CVSS4.0

CVE-2026-2896 - funadmin Configuration Ajax.php setConfig improper authorization

A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php of the component Configuration Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been …

📅 Published: Feb. 21, 2026, 11:32 p.m. 🔄 Last Modified: Feb. 21, 2026, 11:32 p.m.
Load More Vulnerability
avatar

Mehmet Ince

@mdisec

CVE stats coming here

avatar

Nuri Çilengir

@ncilengir

CVE stats coming here

avatar

@aydinnyunus

CVE stats coming here

avatar

Onurcan Genç

@onurcangnc

CVE stats coming here

avatar

Seyit Sigirci

@h3xecute

CVE stats coming here

avatar

Ali İltizar

@iltosec

CVE stats coming here

avatar

@b3rsec

CVE stats coming here

avatar

@furkank

CVE stats coming here

avatar

kutaysec

@kutaysec

CVE stats coming here