Everything InfoSec Ledger has reported about NVD: 3 stories, newest first. Part of our Vulnerabilities coverage.
A severe flaw in Adobe Experience Manager 6.5 allows attackers to inject scripts via forms, potentially hijacking user sessions and escalating privileges.
Unauthenticated attackers can exploit CVE-2026-109573 to access secrets in phpMyFAQ versions prior to 4.1.9, according to the National Vulnerability Database record.
The National Vulnerability Database rates CVE-2026-93927 as critical, highlighting a severe deserialization flaw in Axiomthemes Veto versions up to 1.6.0 that permits object injection attacks.