Multiple software products have been identified with high-severity vulnerabilities, many of which are SQL injection flaws. These vulnerabilities allow attackers to potentially inject malicious code or bypass security measures. Fortra GoAnywhere MFT has a deserialization vulnerability enabling command injection. Spring Cloud Gateway is susceptible to Spring Environment property modification under specific conditions. Tenda AC1206 routers suffer from a stack-based buffer overflow. WordPress theme "Goza" allows for unauthorized file uploads, potentially leading to remote code execution. NVIDIA Triton Inference Server is vulnerable to remote code execution due to its Python backend. Several other products, including Dover Fueling Solutions devices and BGS Interactive's SINAV.LINK, also have SQL injection vulnerabilities. BMC Control-M/Agent has authentication bypass vulnerabilities, and Dyad is vulnerable to arbitrary code execution. Linkr lacks manifest verification, leading to potential file injection and remote code execution. Finally Jinjava, and Chaos Controller Manager have vulnerabilities allowing for remote code execution and complete cluster takeover.