Skip to content
Threat Feed
Subscribe

Vendor

Tribulant Software

2 briefs RSS
critical advisory

Tribulant Software Newsletters: Deserialization of Untrusted Data (CVE-2026-94075)

A Deserialization of Untrusted Data vulnerability exists in Tribulant Software Newsletters (newsletters-lite) from version n/a through 4.18.1, allowing Object Injection.

PoC
1c
critical advisory

Tribulant Software Newsletters SQL injection (CVE-2026-111402)

Tribulant Software Newsletters newsletters-lite contains an 'Improper Neutralization of Special Elements used in an SQL Command' (SQL Injection) vulnerability.

PoC Newsletters
1c