Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of May 11, 2026

The provided text details multiple high-severity vulnerabilities across various software products. ACL Analytics has an arbitrary code execution flaw allowing attackers to use the EXECUTE function. GitBucket suffers from an unauthenticated remote code execution vulnerability related to secret token generation. WordPress plugins, including Peugeot Music and WP Super Edit, have file upload vulnerabilities. Ecommerce Systempay has a weak cryptography issue susceptible to key brute-forcing. iDS6 DSSPro bypasses CAPTCHA security, and libbabl has a double-free detection issue. Python jsonpickle allows remote code execution through deserialization. Several products, including Zechat, Joomla! extensions, and Nordex Wind Turbine Web Server, are vulnerable to SQL injection. Atomic Alarm Clock has a stack overflow, while HS Brand Logo Slider enables unrestricted file uploads. Additionally, VX Search and Allok splitters also have buffer overflow vulnerabilities.