CVEs published by TWCERT/CC

CVEs published by TWCERT/CC (CVE Numbering Authority). 8 tracked.

CVE-2026-18191 CRITICAL 9.8 VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote at
CVE-2026-18452 CRITICAL 10.0 DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability
CVE-2026-18192 MEDIUM 6.5 VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote atta
CVE-2026-19426 HIGH 8.2 POS System developed by FitSoft has a Missing Authentication vulnerability
CVE-2026-19425 CRITICAL 9.8 Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability
CVE-2026-19424 HIGH 7.5 Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability
CVE-2026-114220 CRITICAL 9.1 NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability
CVE-2026-114219 HIGH 7.4 NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability