48781 matches found
EUVD-2026-57194
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker ...
CVE-2026-70468
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker ...
CVE-2026-70468
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker ...
CVE-2026-70468
CVE-2026-70468 affects Fortinet FortiManager and FortiManager Cloud versions listed (7.6.1; 7.4.3–7.4.5; 7.2.5–7.2.9). The issue is an authentication bypass that enables improper access control via an attack path described as an alternate path or channel. Impact is rated HIGH for confidentiality,...
CVE-2026-70466
Technical details about CVE-2026-70466 are not publicly available in the provided documents. Monitor Fortinet advisories for updates on affected FortiWeb versions, impact scope, and remediation.
EUVD-2026-57192
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via...
iscsi-initiator-utils security, bug fix, and enhancement update
An update is available for iscsi-initiator-utils. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The iscsi-initiator-utils packages provide the server daemon f...
RLSA-2026:53845 Important: iscsi-initiator-utils security, bug fix, and enhancement update
The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol IP networks...
CVE-2026-73241
A vulnerability in FreeRDP's server-side RDSTLS allows remote, unauthenticated attackers to bypass authentication. By sending a crafted capabilities PDU instead of the expected authentication request, an attacker can gain an authenticated session without valid credentials. Mitigation Do not enabl...
OPENSUSE-SU-2026:21573-1 Security update for himmelblau
This update for himmelblau fixes the following issues: Update to version 2.3.14+git0.e23b4c54. Security issues fixed: - CVE-2026-45784: incorrect sizing of output buffers in CipherCtxRef::cipherupdateinplace when used with AES key-wrap-with-padding ciphers can lead to attacker-controlled heap...
Security Bulletin:Vulnerability in libcurl affects IBM Netezza Appliance
Summary The libcurl package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-7168 Vulnerability Details CVEID:CVE-2026-7168 DESCRIPTION: Successfully using libcurl to do a transfer over a specific HTTP proxy proxyA with Digest authentication and th...
GHSA-VWF4-M7J8-WCJF
creationtimestamp| type| source ---|---|--- 2026-08-12 08:00:05+00:00| seen| Telegram/ZtTgk35S8DFYm2bUVjFVqqtPnGYEzTcbCUrks9IGhgQhA 2026-08-13 00:00:43+00:00| published-proof-of-concept| Telegram/ZtTgk35S8DFYm2bUVjFVqqtPnGYEzTcbCUrks9IGhgQhA 2026-08-16 20:29:14+00:00| seen|...
WordPress Social Login, Passkeys, Magic Link & Email OTP - Passwordless Login by VentraConnect plugin <= 1.4.3 - Unauthenticated Authentication Bypass via Spotify OAuth Callback vulnerability
WordPress Social Login, Passkeys, Magic Link & Email OTP - Passwordless Login by VentraConnect plugin = 1.4.3 - Unauthenticated Authentication Bypass via Spotify OAuth Callback vulnerability discovered by Civitasmass in WordPress Plugin Passwordless Login by VentraConnect versions = 1.4.3...
RLSA-2026:53844 Important: iscsi-initiator-utils security, bug fix, and enhancement update
The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol IP networks...
iscsi-initiator-utils security, bug fix, and enhancement update
An update is available for iscsi-initiator-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The iscsi-initiator-utils packages provide the server daemon fo...
CVE-2026-19073
The Order Sync with Zendesk for WooCommerce WordPress plugin (before version 2.2.3) exposes an unauthenticated REST API endpoint that does not verify ownership of the queried account or perform capability checks. An attacker who knows or enumerates a customer’s email can retrieve that customer’s ...
CVE-2026-18046
The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on the REST route that stores its geolocation service license key, so the route falls back to an authentication-only gate, allowing any authenticated user such as a...
EUVD-2026-57084
The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on its consent-settings REST routes, so they fall back to an authentication-only gate, allowing any authenticated user such as a subscriber to update the Cookie Consent...
CVE-2026-18961
The Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect plugin for WordPress is vulnerable to Authentication Bypass via Unverified Provider Email in all versions up to, and including, 1.4.3. This is due to the plugin trusting the unverified email field returned by...
