Do Son Dolibarr ERP faces a critical 9.4 CVSS RCE flaw (CVE-2026-23500) in its PDF conversion logic. Unsanitized commands allow full system takeover. Upgrade to 23.0!
ERP
Apache patched a Critical RCE flaw (CVE-2025-59118) in OFBiz ERP that allows remote attackers to upload arbitrary files with dangerous types. A reflected XSS flaw was also fixed.
Oracle issued an emergency alert for a critical flaw (CVE-2025-61884) in E-Business Suite. The bug allows unauthenticated remote access to sensitive EBS resources.
Oracle issued an emergency alert for a Critical RCE flaw (CVE-2025-61882) in E-Business Suite that requires no authentication.