Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2026-40743 | Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions. | Medium (6.5) | 2026-06-15 | Environment Specific |
| CVE-2026-40741 | Unauthenticated Broken Access Control in Redsys for WooCommerce Light <= 7.0.0 versions. | High (7.5) | 2026-06-15 | Environment Specific |
| CVE-2026-40732 | Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5 versions. | High (7.1) | 2026-06-15 | Environment Specific |
| CVE-2026-40727 | Sales Representative Arbitrary File Deletion in Groundhogg <= 4.4 versions. | High (7.7) | 2026-06-15 | Environment Specific |
| CVE-2026-39594 | Subscriber Broken Access Control in Ultra Addons for WPForms <= 1.0.11 versions. | Medium (6.4) | 2026-06-15 | Environment Specific |