Weekly Vulnerability Roundup — October 19 to 25, 2026

nikhil-bhalerao hotel and lodge management system

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit

tecrail responsive filemanager

In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.

tenda it7-lcs firmware

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<

PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php. — Update the PrestaShop dpdfrance module to version 6.1.3 or higher to patch the SQL Injection vulnerability in ajax.php.

PrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::initContent(). — Upgrade the PrestaShop cdesigner module to version 3.1.9 or later to fix the SQL Injection vulnerability.

Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12, the patch introduced to mitigate DB2 JDBC deserialization remote code execution attacks only b — Upgrade Dataease to a version beyond 2.10.12 to ensure proper mitigation of the DB2 JDBC deserialization vulnerability.

Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12 the H2 data source implementation (H2.java) does not verify that a provided JDBC URL starts wit — Update Dataease to a version past 2.10.12 to address the H2 data source deserialization vulnerability.

MapServer is a system for developing web-based GIS applications. Prior to 8.4.1, the XML Filter Query directive PropertyName is vulnerably to Boolean-based SQL injection. It seems like expression chec — Upgrade MapServer to version 8.4.1 or newer to resolve the Boolean-based SQL injection vulnerability in the XML Filter Query directive PropertyName.

DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// — Update DataEase to a version beyond 2.10.14 to implement robust filtering for LDAP connections and prevent potential bypasses.

Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI i — Upgrade DataEase to a version past 2.10.14 to ensure proper filtering and secure establishment of JDBC connections, preventing deserialization attacks.

A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` layer. Specifically, the `_raise_for_lambda_deseriali — Update Keras to a version beyond 3.14.0, or avoid using the `Lambda` layer with untrusted inputs, to prevent arbitrary code execution via deserialization.

Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, when uploading a JPEG, a user can specify an optional password to accompany the JPEG. This password is then di — Upgrade Aperi'Solve to a version beyond 3.2.0 to mitigate the command injection vulnerability when processing JPEG files with passwords.

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, nginx-ui exposes a backup restore endpoint (POST /api/restore) that is completely unauthenticated during the first 10 — Update Nginx UI to version 2.3.8 or higher to secure the backup restore endpoint and prevent unauthorized file uploads and code execution.

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution. — Update the iCagenda extension for Joomla to the latest patched version to prevent arbitrary file uploads and subsequent PHP code execution.

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that — Upgrade the Joomla Page Builder CK extension to version 3.6.0 or newer to remediate the unauthenticated file upload vulnerability.