Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

Vulnerability	Exploitation status	Fix	Provider	Affected product	Published	Severity

`CVE-2026-65107`CVE-2026-65107	Exploitation statusNot exploited	FixNo	ProviderNVIDIA	Affected productSlurm	Published11/03/2026	SeverityMedium
`CVE-2026-73328`Volmarg Personal Management System through 2.1.0 Unrestricted File Upload RCE via /upload/send/	Exploitation statusNot exploited	FixYes	ProviderVolmarg	Affected product
`CVE-2026-121562`CTFd 3.1.0 before 3.8.7 Information Disclosure via /api/v1/teams Endpoint	Exploitation statusNot confirmed	FixYes	ProviderCTFd	Affected productCTFd
`CVE-2026-121561`Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads	Exploitation statusNot confirmed	FixYes	ProviderHumanSignal	Affected productlabel-studio
`CVE-2026-121560`LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/posts	Exploitation statusNot exploited	FixYes	Providerlogchimp	Affected productlogchimp
`CVE-2026-121559`GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User Cloning	Exploitation statusNot exploited	FixYes	Providerglpi-project	Affected product
`CVE-2026-121558`AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via project_id	Exploitation statusNot confirmed	FixYes	ProviderRicky-7-Yan	Affected product
`CVE-2026-121557`WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwoot	Exploitation statusNot confirmed	FixYes	Providerwppconnect	Affected product
`CVE-2026-121556`FastBee through 2.1.0 IDOR via /iot/product By-ID Endpoints	Exploitation statusNot exploited	FixYes	Providerbeecue	Affected productFastBee
`CVE-2026-121555`Foxel through 2.4.0 Unauthenticated File Read via /api/fs/stream and /api/fs/thumb	Exploitation statusNot exploited	FixYes	ProviderDrizzleTime	Affected product
`CVE-2026-121554`cordova-plugin-advanced-http 1.5.0 through 3.3.1 Cookie Leak via Cross-Origin Redirects	Exploitation statusNot confirmed	FixYes	Providersilkimen	Affected product
`CVE-2026-121553`Cotonti through 1.0.0 Predictable Validation Tokens via md5(microtime())	Exploitation statusNot confirmed	FixYes	Providercotonti	Affected product
`CVE-2026-121552`domain-admin before 1.6.79 Missing Authorization via getGroupUserList	Exploitation statusActively exploited	FixYes	Providerdromara	Affected product
`CVE-2026-121551`PostfixAdmin through 4.0.5 Stored XSS via TOTP Exception Description	Exploitation statusNot exploited	FixYes	Providerpostfixadmin	Affected productpostfixadmin
`CVE-2026-121550`nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling	Exploitation statusNot confirmed	FixYes	Providerjarun	Affected productnnn
`CVE-2026-121549`nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins	Exploitation statusNot confirmed	FixYes	Providerjarun	Affected product
`CVE-2026-121548`nnn through 5.3 OS Command Injection via togglex Plugin	Exploitation statusActively exploited	FixYes	Providerjarun	Affected productnnn
`CVE-2026-121547`dysk before 3.8.2 Terminal Escape Sequence Injection via Mount Metadata	Exploitation statusNot exploited	FixYes	ProviderCanop	Affected productdysk
`CVE-2026-121546`ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following	Exploitation statusNot confirmed	FixYes	ProviderNovik	Affected productruTorrent
`CVE-2026-121545`Dreeve before 5.8.0 Missing Authentication in Strava Webhook POST Handler	Exploitation statusNot confirmed	FixYes	Providerrobiningelbrecht	Affected productdreeve
`CVE-2026-121544`Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers	Exploitation statusActively exploited	FixYes	Providerkoodo-reader	Affected productkoodo-reader
`CVE-2026-121543`smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation	Exploitation statusNot exploited	FixYes	Providera466350665	Affected product
`CVE-2026-121455`DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save	Exploitation statusNot confirmed	FixYes	Providerdbgate	Affected product
`CVE-2026-121454`Padloc through 4.3.0 Missing SCIM Token Validation via SCIM GET Requests	Exploitation statusNot confirmed	FixYes	Providerpadloc	Affected productpadloc
`CVE-2026-121453`SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint	Exploitation statusNot exploited	FixYes	Providerdataease	Affected productSQLBot
`CVE-2026-121452`bbs-go through 4.4.6 Improper TLS Certificate Validation in SMTP Email Service	Exploitation statusNot exploited	FixYes	Providermlogclub	Affected productbbs-go
`CVE-2026-121451`AB Download Manager before 1.11.2 Arbitrary File Write via /start-headless-download CSRF	Exploitation statusNot confirmed	FixYes	Provideramir1376	Affected product
`CVE-2026-121450`CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID	Exploitation statusNot confirmed	FixYes	ProviderPAICNI	Affected productCFNext
`CVE-2026-118488`Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client	Exploitation statusActively exploited	FixYes	ProviderEclipse Foundation
`CVE-2026-100493`CVE-2026-100493	Exploitation statusNot exploited	FixNo	ProviderAMD	Affected productAMD Compressionator SDK
`CVE-2026-40652`CVE-2026-40652	Exploitation statusNot exploited	FixNo	ProviderAMD	Affected productAMD Compressionator SDK
`CVE-2026-40661`CVE-2026-40661	Exploitation statusNot exploited	FixNo	ProviderAMD	Affected productAMD Compressionator SDK
`CVE-2026-40660`CVE-2026-40660	Exploitation statusNot exploited	FixNo	ProviderAMD	Affected productAMD Compressionator SDK
`CVE-2026-40659`CVE-2026-40659	Exploitation statusNot exploited	FixNo	ProviderAMD	Affected productAMD Compressionator SDK
`CVE-2026-43603`CVE-2026-43603	Exploitation statusNot exploited	FixNo	ProviderAMD	Affected productAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
`CVE-2026-110265`runZero search SQL injection	Exploitation statusNot exploited	FixYes	ProviderrunZero	Affected productPlatform
`CVE-2026-118489`CachingWebClient shares user-specific HTTP responses across users via the shared cache tier	Exploitation statusNot exploited	FixYes	ProviderEclipse Foundation
`CVE-2026-118527`CVE-2026-118527	Exploitation statusKEV	FixNo	ProviderIvanti	Affected productConnect Secure
`CVE-2026-121449`Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook	Exploitation statusActively exploited	FixYes	ProviderFinsys	Affected productdockhand
`CVE-2026-121448`Dockhand before 1.0.54 Path Traversal via Stack Environment Routes	Exploitation statusNot exploited	FixYes	ProviderFinsys	Affected productdockhand
`CVE-2026-121447`svg-sanitizer before 1.1.0 XSS via animateTransform on Safari	Exploitation statusNot confirmed	FixYes	Providerdarylldoyle	Affected productsvg-sanitizer
`CVE-2026-121446`svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes	Exploitation statusNot confirmed	FixYes	Providerdarylldoyle	Affected productsvg-sanitizer
`CVE-2026-121445`svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS Stripping	Exploitation statusActively exploited	FixYes	Providerdarylldoyle	Affected product
`CVE-2026-121444`svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph	Exploitation statusNot exploited	FixYes	Providerdarylldoyle	Affected product
`CVE-2026-121443`svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag	Exploitation statusNot confirmed	FixYes	Providerdarylldoyle	Affected productsvg-sanitizer
`CVE-2026-121442`Frappe HRMS before 15.61.0 Permission Bypass via Expense Claim Advances API	Exploitation statusNot confirmed	FixYes	Providerfrappe	Affected product
`CVE-2026-121441`Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 wasi-http Request Smuggling	Exploitation statusNot exploited	FixYes	Providerbytecodealliance	Affected product
`CVE-2026-121440`Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 Forwarded Trailers Header Filter Bypass	Exploitation statusNot exploited	FixYes	Providerbytecodealliance	Affected product
`CVE-2026-121439`Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 HTTP Response Splitting via wasi-http	Exploitation statusNot confirmed	FixYes	Providerbytecodealliance	Affected product
`CVE-2026-121438`Mistune before 3.3.3 Denial of Service via Balanced Bracket Link Parsing	Exploitation statusNot confirmed	FixYes	Providerlepture	Affected product