Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-68959
High · 8.5
CWE-25 Aug 25, 2026
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this…
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726.
CVE-2026-23877
Medium · 4.3
CWE-25 Jan 19, 2026
Directory Traversal & Filesystem can be accessed by a non-admin user
Swing Music is a self-hosted music player for local audio files. Prior to version 2.1.4, Swing Music's `list_folders()` function in the `/folder/dir-browser` endpoint is vulnerable to directory traversal attacks. Any authenticated user (including non-admin) can browse arbitrary directories on the server filesystem. Version 2.1.4 fixes the issue.
CVE-2025-58286
Medium · 5.5
CWE-25 Oct 11, 2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.