General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2025-68911 | Missing Authorization vulnerability in solacewp Solace solace allows Exploiting Incorrectly Configured Access Control S… | Medium (6.5) | 2026-01-22 | General-Purpose |
| CVE-2025-68909 | Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogistic blogistic allows Using Malicious… | Critical (9.9) | 2026-01-22 | General-Purpose |
| CVE-2025-68908 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability i… | High (8.1) | 2026-01-22 | General-Purpose |
| CVE-2025-68907 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Hostme v2 h… | High (7.5) | 2026-01-22 | General-Purpose |
| CVE-2025-68906 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jegtheme JNews - … | High (7.1) | 2026-01-22 | General-Purpose |