🔓 CVEs & KEV
CVE-2026-75937 — Digi International IX Family — CVSS 9.4 — OS Command Injection in Digi Accelerated Linux (DAL OS)A specially crafted HT...
CVE-2026-95102 — Monta monta.app — CVSS 9.3 — Monta monta.app Missing Authentication for Critical FunctionWebSocket endpoin...
CVE-2026-82042 — UTMStack — CVSS 9.3 — UTMStack before 11.2.16 Authentication Bypass via InternalApiKeyFilterUTMStack bef...
CVE-2026-97363 — Monta monta.app — CVSS 8.7 — Monta monta.app Improper Restriction of Excessive Authentication AttemptsThe ...
CVE-2026-82045 — UTMStack — CVSS 7.1 — UTMStack before 11.2.16 JPQL Injection via searchPropertyValuesUTMStack before 11....
CVE-2026-97212 — Monta monta.app — CVSS 6.9 — Monta monta.app Insufficient Session ExpirationThe WebSocket backend uses cha...
CVE-2026-93474 — Monta monta.app — CVSS 6.9 — Monta monta.app Insufficiently Protected CredentialsCharging station authenti...
CVE-2026-82043 — UTMStack — CVSS 6.9 — UTMStack before 11.2.16 Account Enumeration via Password Reset EndpointUTMStack be...
CVE-2026-82041 — UTMStack — CVSS 6.5 — UTMStack before 11.2.16 Missing Authorization via Command WebSocketUTMStack before...
CVE-2026-82044 — UTMStack — CVSS 6.3 — UTMStack before 11.2.16 Server-Side Request Forgery via downloadPdfUTMStack before...
📋 ADVISORIES
- 📄 Source for Chrome 154 fixes critical WebGL out-of-bounds write allowing sandbox-escaping RCE (CVE-2026-103628) — issues.chromium.org