vulnerability@ncsc.ch
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS vulnerability@ncsc.ch
03
assessed vulnerabilities (218)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-14933US | — | — | ||
Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.7 and 8.0 through 8.39.2, on on-premises and cloud deployments, allows an unauth… | ||||
| CVE-2026-9589US | —OT elevated | — | ||
Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through 8.36.1-hotfix.0, on on-premises and cloud deployment… | ||||
| CVE-2026-108121US | — | — | ||
Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's
SME Server version 11.0rc1-215, allowing an attacker with hig… | ||||
| CVE-2026-108120US | — | — | ||
Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of
koozali's SME Server version 11.0rc1-215 allowing an unauthenti… | ||||
| CVE-2026-104811US | — | — | ||
DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to e… | ||||
| CVE-2026-104810US | — | — | ||
This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerabili… | ||||
| CVE-2026-104809US | —OT elevated | — | ||
DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The load… | ||||
| CVE-2026-104808US | — | — | ||
DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resultin… | ||||
| CVE-2026-104807US | — | — | ||
DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into the… | ||||
| CVE-2026-104806US | — | — | ||
DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory.
The specific flaw exists within the Maint… | ||||
| CVE-2026-104805US | —OT elevated | — | ||
DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary… | ||||
| CVE-2026-104706US | — | — | ||
DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://<ip>:8443 via menus Administration -> Vie… | ||||
| CVE-2026-104721US | — | — | ||
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an
MDC-based discriminator val… | ||||
| CVE-2026-104733US | — | — | ||
User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter in SASL-PLAIN mechanism. | ||||
| CVE-2026-84832US | — | — | ||
SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled data in a privileged REST import workflow without adequate validation. An attacker with a privileged AP… | ||||
| CVE-2026-84831US | —OT elevated | — | ||
SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password fo… | ||||
| CVE-2026-84830US | — | — | ||
SEPPmail Secure Email Gateway before 15.0.7 contains a command injection vulnerability that allows authenticated administrators to execute commands with elevated privileges. | ||||
| CVE-2026-14208US | — | — | ||
Remote Utilities Host <=7.7.3.0 sets insecure ACLs on all DLL files in the installation directory (C:\Program Files (x86)\Remote Utilities - Host\), granting FULL CONTROL (F) to th… | ||||
| CVE-2026-19880US | — | — | ||
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an
MDC-based discriminator val… | ||||
| CVE-2026-16459US | —OT elevated | — | ||
Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via… | ||||