Cyber Threat Dashboard

Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.

2870Items

1859Last 7 days

550Today

1114Critical + high

12/10/2026 23:34Last collection

MediumVulnerability CVE-2026-109396

CVE-2026-109396 — Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula injection vulnerability that allows unauthe…

Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula injection vulnerability that allows unauthenticated visitors to inject spreadsheet formulas by supplying crafted registration, checkout or newsletter fie…

CVSS 4.2

NVD · CVE récentes12/10/2026 18:17CWE-1236

MediumVulnerability CVE-2026-93581

CVE-2026-93581 — User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from…

User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channe…

CVSS 6.1

NVD · CVE récentes12/10/2026 09:16CWE-1236

MediumVulnerability CVE-2026-108579

CVE-2026-108579 — OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers…

OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send trac…

CVSS 4.2

NVD · CVE récentes10/10/2026 18:16CWE-1236