General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2026-0798 | Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repo… | Low (3.5) | 2026-01-22 | General Purpose |
| CVE-2025-9289 | A Cross-Site Scripting (XSS) vulnerability was identified in a parameter in Omada Controllers due to improper input san… | Unknown | 2026-01-22 | General Purpose |
| CVE-2025-14751 | A low-privileged user can bypass account credentials without confirming the user's current authentication state, which … | Unknown | 2026-01-22 | General Purpose |
| CVE-2025-14750 | The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally co… | Unknown | 2026-01-22 | General Purpose |
| CVE-2025-22234 | The fix applied in CVE-2025-22228 inadvertently broke the timing attack mitigation implemented in DaoAuthenticationProv… | Medium (5.3) | 2026-01-22 | General Purpose |