Security Vulnerabilities - CVEs Published In February 2026
Vulnerability of improper criterion security check in the card module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score
5.9
EPSS Score
0.0
Published
2026-02-06
A vulnerability was found in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /ramonsys/enrollment/controller.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.
CVSS Score
5.5
EPSS Score
0.0
Published
2026-02-06
A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /ramonsys/facultyloading/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score
5.5
EPSS Score
0.0
Published
2026-02-06
Address read vulnerability in the communication module.
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score
6.8
EPSS Score
0.0
Published
2026-02-06
Out-of-bounds write vulnerability in the DFX module.
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score
6.0
EPSS Score
0.0
Published
2026-02-06
Address read vulnerability in the HDC module.
Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
CVSS Score
4.8
EPSS Score
0.0
Published
2026-02-06
Buffer overflow vulnerability in the HDC module.
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score
6.9
EPSS Score
0.0
Published
2026-02-06
Permission control vulnerability in the HDC module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score
6.3
EPSS Score
0.0
Published
2026-02-06
CVE-2026-21643
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
Known exploited
CVSS Score
9.8
EPSS Score
0.431
Published
2026-02-06
Type confusion vulnerability in the camera module.
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score
4.0
EPSS Score
0.0
Published
2026-02-06