Published Advisories
The following is a list of all publicly disclosed vulnerabilities discovered by Security Risk Advisors researchers.
All security vulnerabilities that are acquired by Security Risk Advisors are handled according to the SRA Disclosure Policy.
After the vendor has issued a patch or fix publicly and is within the timeframe agreed upon, SRA will release a public advisory disclosing its findings along with a timeframe from disclosure to advisory publish.
| Name | CVE ID | Vulnerability Type | Affects |
|---|---|---|---|
| VSee Clinic | CVE-2026-13381 | Insecure Direct Object Reference in File API Allows Unauthorized File Access and Deletion | VSee Clinic from 7.1.26 before 7.1.26.1. VSee Clinic API from 1.3.0 before 1.3.0.1. |
| VSee Clinic | CVE-2026-13380 | Cleartext SFTP Credentials in Unauthenticated HTTP Responses | VSee Clinic from 7.1.26 before 7.1.26.1. VSee Clinic API from 1.3.0 before 1.3.0.1. |
| Sangoma Switchvox SMB | CVE-2026-9588 | Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB | Sangoma Switchvox SMB from 8.3 (104997) before 8.4.0.2. |
| Sangoma Switchvox SMB | CVE-2026-9587 | Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal | Sangoma Switchvox SMB from 8.3 (104997) before 8.4.0.2. |
| Sangoma Switchvox SMB | CVE-2026-9586 | Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB | Sangoma Switchvox SMB from 8.3 (104997) before 8.4.0.2. |
| Sangoma Switchvox SMB | CVE-2026-9585 | Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web Portal | Sangoma Switchvox SMB from 8.3 (104997) before 8.4.0.2. |
| Ellucian Advance | CVE-2026-6881 | Authenticated SQL Injection Enables Unauthorized Access to Sensitive Information in Ellucian Advance Web and Legacy Advance | Ellucian Advanced Web before AWA-2022-ORA-17. Ellucian Legacy Advance before AWA-2022-ORA-17. |
| Milner ImageDirector Capture | CVE-2025-58744 | Hard-Coded Default Credentials Enable Document Archive Decryption in Milner ImageDirector Capture | Milner ImageDirector Capture from 7.0.9 but before 7.6.3.25808. Versions prior to 7.0.9 may also be affected. |
| Milner ImageDirector Capture | CVE-2025-58743 | Insecure Encryption Algorithm Enables Brute-Force of Database Credentials in Milner ImageDirector Capture | Milner ImageDirector Capture from 7.0.9 but before 7.6.3.25808. Versions prior to 7.0.9 may also be affected. |
| Milner ImageDirector Capture | CVE-2025-58742 | Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture | Milner ImageDirector Capture from 7.0.9 but before 7.6.3.25808. Versions prior to 7.0.9 may also be affected. |
| Milner ImageDirector Capture | CVE-2025-58741 | Insecure Masked Credential Fields Enable Database Credential Access in Milner ImageDirector Capture | Milner ImageDirector Capture from 7.0.9 but before 7.6.3.25808. Versions prior to 7.0.9 may also be affected. |
| Milner ImageDirector Capture | CVE-2025-58740 | Hardcoded Encryption Key Enables Database Credential Access in Milner ImageDirector | Milner ImageDirector Capture from 7.0.9 but before 7.6.3.25808. Versions prior to 7.0.9 may also be affected. |
| Brivo Access Control Systems | CVE-2023-6260 | Web UI OS Command Injection | Versions from 5.2.4 but before 6.2.4.3. Versions prior to 5.2.4 may also be affected. |
| Brivo Access Control Systems | CVE-2023-6259 | Local Access to Sensitive Data | Models ACS100, ACS300. Models ACS6000 and ACSSDC may also be affected. |