CVE-2026-94490

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: In the versions that have this feature, they are an admin-gated, admin-defined, by-design shell-command feature that is not an exploitable injection.

Published

Sep 22, 2026

Last Modified

Oct 13, 2026

Status

Rejected

• CVE-2026-94485Next.js is a React framework for building full-stack web app…5.3
• CVE-2026-94486Next.js is a React framework for building full-stack web app…5.4
• CVE-2026-94487Unauthenticated Cross Site Request Forgery (CSRF) in Publish…8.1
• CVE-2026-94488Telegram Desktop before 6.9.4 allows XSS in the HTML exporte…8.2
• CVE-2026-94489Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-9449A vulnerability was identified in code-projects Employee Man…6.3
• CVE-2026-94491A weakness has been identified in Yonyou KSOA 9.0. This affe…7.3
• CVE-2026-94492A security vulnerability has been detected in Yonyou U8cloud…6.3
• CVE-2026-94493A vulnerability was detected in Gigatech PDV5701 1.0.31_2403…10
• CVE-2026-94494jshERP through 3.6 contains a tenant isolation bypass vulner…5
• CVE-2026-94495jshERP through 3.6 fails to properly validate user privilege…7.1
• CVE-2026-94496jshERP through 3.6 fails to validate caller permissions in r…8.3