National Vulnerability Database

Everything Patch Herald has reported about National Vulnerability Database: 2 stories, newest first. Part of our Vulnerabilities coverage.

TMS Amelia 2.4.10 SQL Injection (CVE-2026-108497) Lets Attackers Manipulate Databases

A severe flaw in the TMS Amelia booking plugin allows database manipulation. No patch has been confirmed for versions through 2.4.10 yet.

Oct 15, 2026

A severe vulnerability in Adobe Commerce and Magento Open Source allows attackers to inject malicious scripts into customer forms.

Oct 13, 2026