CVE-2026-107079

Not scored yetLast modified Oct 22, 2026

Description

An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 22, 2026
Last modified
Oct 22, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-107087.5This vulnerability enables large‑scale data harvesting without requiring app‑specific secrets. A single request to a minimal leaderboard comCVE-2026-1070819.8SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.pCVE-2026-1070828.8Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac_hide and CVE-2026-1070839.8SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_CVE-2026-107084Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_hiCVE-2026-107097.8A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxCVE-2026-10714.4The Carta Online plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, CVE-2026-107107.8A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtCVE-2026-1071029.3This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controlsCVE-2026-1071039.3This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. ACVE-2026-1071049.3This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenCVE-2026-107118.8Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. CafePlus allows A
CVE-2026-107079: Unscored | Vulnix