https://vulnerability.circl.lu Latest vulnerabilities published by the CNAs operating under the jpcert root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Tue, 25 Aug 2026 15:39:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-59769 FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number. FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number. https://vulnerability.circl.lu/vuln/cve-2026-59769 Tue, 25 Aug 2026 07:43:10 +0000 https://vulnerability.circl.lu/vuln/cve-2026-67578 FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters. FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters. https://vulnerability.circl.lu/vuln/cve-2026-67578 Tue, 25 Aug 2026 07:42:26 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68959 SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726. SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726. https://vulnerability.circl.lu/vuln/cve-2026-68959 Tue, 25 Aug 2026 06:27:59 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68062 SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726. SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726. https://vulnerability.circl.lu/vuln/cve-2026-68062 Tue, 25 Aug 2026 06:27:54 +0000 https://vulnerability.circl.lu/vuln/cve-2026-66109 A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege. A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege. https://vulnerability.circl.lu/vuln/cve-2026-66109 Tue, 25 Aug 2026 06:27:50 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68960 A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected product installed and can receive UDP packets from that system. A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected product installed and can receive UDP packets from that system. https://vulnerability.circl.lu/vuln/cve-2026-68960 Tue, 25 Aug 2026 06:27:20 +0000 https://vulnerability.circl.lu/vuln/cve-2026-69665 SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege. SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege. https://vulnerability.circl.lu/vuln/cve-2026-69665 Tue, 25 Aug 2026 06:27:10 +0000 https://vulnerability.circl.lu/vuln/cve-2026-59561 Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal". Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal". https://vulnerability.circl.lu/vuln/cve-2026-59561 Mon, 24 Aug 2026 04:50:58 +0000 https://vulnerability.circl.lu/vuln/cve-2026-73537 Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component (WebView) running on the affected product, resulting in the displayed content being altered. Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component (WebView) running on the affected product, resulting in the displayed content being altered. https://vulnerability.circl.lu/vuln/cve-2026-73537 Fri, 21 Aug 2026 07:23:17 +0000 https://vulnerability.circl.lu/vuln/cve-2026-76137 Missing authentication for critical function vulnerability exists in VOCALOID6. Any process running under the same local user account as a running VOCALOID6 Editor instance may escalate privileges via a local named pipe. Missing authentication for critical function vulnerability exists in VOCALOID6. Any process running under the same local user account as a running VOCALOID6 Editor instance may escalate privileges via a local named pipe. https://vulnerability.circl.lu/vuln/cve-2026-76137 Fri, 21 Aug 2026 02:02:54 +0000