Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Galeno Sistemi CVE-2026-112171
An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of, or disclosure of database data.
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit -
Galeno Sistemi CVE-2026-112170
The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit -
Galeno Sistemi CVE-2026-112169
Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credentia
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit -
Galeno Sistemi CVE-2026-112168
The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets.
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit