Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

Vulnerability	Exploitation status	Fix	Provider	Affected product	Published	Severity

`CVE-2026-115294`Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion	Exploitation statusNot exploited	FixYes	ProviderElastic	Affected productKibana	Published11/03/2026	SeverityHigh
`CVE-2026-115293`Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure	Exploitation statusNot exploited	FixYes	ProviderElastic	Affected product
`CVE-2026-115292`Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure	Exploitation statusNot exploited	FixYes	ProviderElastic	Affected product
`CVE-2026-115290`Uncontrolled Recursion in Elasticsearch Leading to Denial of Service	Exploitation statusNot exploited	FixYes	ProviderElastic	Affected product
`CVE-2026-115289`Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure	Exploitation statusNot exploited	FixYes	ProviderElastic	Affected product
`CVE-2026-119521`WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot confirmed	FixYes	Providercozmoslabs	Affected product
`CVE-2026-119495`WordPress Better Search plugin <= 4.5.2 - Broken Access Control vulnerability	Exploitation statusNot exploited	FixYes	ProviderWebberZone	Affected productBetter Search
`CVE-2026-121261`phpMyAdmin ShapeFile SHP File loadFromFile infinite loop	Exploitation statusActively exploited	FixNo	ProviderphpMyAdmin	Affected product
`CVE-2026-121259`Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator	Exploitation statusNot confirmed	FixYes	ProviderRed Hat	Affected product
`CVE-2026-109594`CVE-2026-109594	Exploitation statusNot exploited	FixNo	ProviderSonicWall	Affected productGlobal Management System (GMS)
`CVE-2026-121604`wlroots before 0.20.2 Out-of-Bounds Read via read_surface_class() in xwm.c	Exploitation statusNot confirmed	FixYes	Providerwlroots	Affected productwlroots
`CVE-2026-121603`Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL Handler	Exploitation statusNot exploited	FixYes	Providersolanum-ircd	Affected product
`CVE-2026-121602`Solanum before commit 2ce64de Heap Buffer Overflow via JOIN and SJOIN	Exploitation statusNot exploited	FixYes	Providersolanum-ircd	Affected productsolanum
`CVE-2026-121588`TeXlyre from 0.11.0 before 0.13.5 Stored XSS via Recipe Icon Import	Exploitation statusNot confirmed	FixYes	ProviderTeXlyre	Affected producttexlyre
`CVE-2026-121587`Coolify before 4.1.1 Application Name Enumeration via Manual Webhook Endpoints	Exploitation statusNot confirmed	FixYes	Providercoollabsio	Affected productcoolify
`CVE-2026-109593`CVE-2026-109593	Exploitation statusNot exploited	FixNo	ProviderSonicWall	Affected productGlobal Management System (GMS)
`CVE-2026-28336`SolarWinds Dameware Command Injection Vulnerability	Exploitation statusNot exploited	FixYes	ProviderSolarWinds	Affected product
`CVE-2026-28335`SolarWinds Dameware Buffer Overflow Vulnerability	Exploitation statusNot exploited	FixYes	ProviderSolarWinds	Affected product
`CVE-2026-119674`mongorestore may restore encoded collection names into an unintended collection	Exploitation statusNot exploited	FixYes	ProviderMongoDB	Affected product
`CVE-2026-28327`SolarWinds Dameware DLL Hijacking Vulnerability	Exploitation statusNot exploited	FixYes	ProviderSolarWinds	Affected product
`CVE-2026-103916`Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory	Exploitation statusNot exploited	FixYes	ProviderDocker	Affected product
`CVE-2026-119673`mongofiles may write outside the working directory through a symlink	Exploitation statusNot exploited	FixYes	ProviderMongoDB	Affected product
`CVE-2026-119672`mongofiles may disclose GridFS content to standard output through a stored filename	Exploitation statusNot exploited	FixYes	ProviderMongoDB	Affected product
`CVE-2026-119675`mongorestore may bypass collection guards through a system.buckets prefix	Exploitation statusNot exploited	FixYes	ProviderMongoDB	Affected product
`CVE-2026-118505`AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource	Exploitation statusNot exploited	FixYes	Providerteam-alembic	Affected product
`CVE-2026-119215`AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account	Exploitation statusNot exploited	FixYes	Providerteam-alembic	Affected product
`CVE-2026-114582`Server-side request forgery via SpatialReference string input	Exploitation statusNot exploited	FixYes	Providerdjangoproject	Affected productDjango
`CVE-2026-113733`Password hash disclosure to "view only" admin users with custom user models	Exploitation statusNot exploited	FixYes	Providerdjangoproject	Affected productDjango
`CVE-2026-113593`Potential exposure of private data via empty and missing Vary headers	Exploitation statusNot exploited	FixYes	Providerdjangoproject	Affected productDjango
`CVE-2026-111362`Server-side request forgery via crs member of GeoJSON geometries	Exploitation statusNot exploited	FixYes	Providerdjangoproject	Affected productDjango
`CVE-2026-111211`Potential log injection via unescaped geometry form values	Exploitation statusNot exploited	FixYes	Providerdjangoproject	Affected productDjango
`CVE-2026-108147`Potential memory exhaustion in MultiPartParser via base64-encoded file upload	Exploitation statusNot exploited	FixYes	Providerdjangoproject	Affected productDjango
`CVE-2026-120758`NULL Pointer Dereference in H5HL_unprotect via Corrupted File	Exploitation statusNot exploited	FixYes	ProviderThe HDF Group	Affected productHDF5
`CVE-2026-65168`CVE-2026-65168	Exploitation statusNot exploited	FixNo	ProviderNVIDIA	Affected productSlurm
`CVE-2026-65165`CVE-2026-65165	Exploitation statusNot exploited	FixNo	ProviderNVIDIA	Affected productSlurm
`CVE-2026-65140`CVE-2026-65140	Exploitation statusNot exploited	FixNo	ProviderNVIDIA	Affected productSlurm
`CVE-2026-65139`CVE-2026-65139	Exploitation statusNot exploited	FixNo	ProviderNVIDIA	Affected productSlurm
`CVE-2026-120757`Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse	Exploitation statusNot exploited	FixYes	ProviderThe HDF Group	Affected productHDF5
`CVE-2026-65138`CVE-2026-65138	Exploitation statusNot exploited	FixNo	ProviderNVIDIA	Affected productSlurm
`CVE-2026-65109`CVE-2026-65109	Exploitation statusNot exploited	FixNo	ProviderNVIDIA	Affected productSlurm
`CVE-2026-121578`CVE-2026-121578	Exploitation statusActively exploited	FixNo	ProviderAmidaware	Affected productTactical RMM
`CVE-2026-120756`Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize	Exploitation statusActively exploited	FixYes	ProviderThe HDF Group	Affected product
`CVE-2026-121260`Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection	Exploitation statusActively exploited	FixNo	ProviderZiroom	Affected productZHOME A0101
`CVE-2026-120755`Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter	Exploitation statusNot exploited	FixYes	ProviderThe HDF Group	Affected product
`CVE-2026-118487`Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParser	Exploitation statusActively exploited	FixYes	ProviderEclipse Foundation	Affected product
`CVE-2026-119741`rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions	Exploitation statusNot exploited	FixYes	ProviderRsyncProject	Affected product
`CVE-2026-121564`Silent loss of messages when merging overlapping chat exports in whatstk	Exploitation statusNot exploited	FixYes	Providerlucasrodes	Affected productwhatstk
`CVE-2026-120754`Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter	Exploitation statusNot exploited	FixYes	ProviderThe HDF Group	Affected product
`CVE-2026-97350`Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows	Exploitation statusNot exploited	FixYes	ProviderSecurepoint	Affected product
`CVE-2026-65108`CVE-2026-65108	Exploitation statusNot exploited	FixNo	ProviderNVIDIA	Affected productSlurm