26022 matches found
CVE-2026-85201
In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Interface FIFO. A workload granted Control Interface access can specify an excessive message length, causing an unbounded...
CVE-2026-85201
In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Interface FIFO. A workload granted Control Interface access can specify an excessive message length, causing an unbounded...
EUVD-2026-72325
Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...
CVE-2026-77698 Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...
CVE-2026-77698 Privilege Escalation
Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...
CVE-2026-77698
ManageEngine Endpoint Central by Zohocorp, in versions prior to 11.5.2605.01 , is affected by a local privilege escalation vulnerability triggered through the Agent upgrade process. An attacker with low local privileges and user interaction can escalate their access, resulting in low impact to co...
PT-2026-86676
In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Interface FIFO. A workload granted Control Interface access can specify an excessive message length, causing an unbounded...
PT-2026-88187
These are all security issues fixed in the amazon-ssm-agent-3.3.5226.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-88192
These are all security issues fixed in the google-guest-agent-20260903.00-1.1 package on the GA media of openSUSE Tumbleweed...
Staying on the Attack Path: Structured State for Long-Horizon Automated Penetration Testing
Large language model LLM based agents are increasingly applied to cybersecurity tasks such as vulnerability discovery and automated penetration testing. On long-horizon security tasks, however, such agents remain limited by context forgetting and intent drift: early critical facts and causal...
CVE-2026-77698: Improper Privilege Management
Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...
OPENSUSE-SU-2026:11694-1 amazon-ssm-agent-3.3.5226.0-1.1 on GA media
These are all security issues fixed in the amazon-ssm-agent-3.3.5226.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-86664
Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...
LOYTEC L-IP BACnet/IP Routers Cross-site Scripting (CVE-2026-12496)
An unauthenticated remote attacker can inject and store malicious JavaScript in the OPC XML-DA server statistics page /webui/statistics/opcsrv of a LOYTEC L-IP BACnet/IP router by sending a crafted 'User-Agent' header in a POST request to the device's '/da' endpoint. The script executes in an...
LOYTEC L-IP BACnet/IP Routers Unchecked Input for Loop Condition (CVE-2026-55731)
The SNMP agent of a LOYTEC L-IP BACnet/IP router does not bound the loop condition it derives from an SNMP GETNEXT request's OID. An unauthenticated remote attacker can send a crafted GETNEXT request containing an oversized OID component to drive the agent into a long-running loop, exhausting CPU...
The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from an improper definition of the link before accessing a file. This allows attackers to delete system files and cause service failures.
The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, stems from an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow a malicious actor to delete system files and cause service...
The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, relates to the ability to bypass authentication through spoofing. This allows attackers to carry out spoofing attacks.
The vulnerability of the Prisma Access Agent, a user-level remote access agent, relates to the bypassing of authentication processes through spoofing techniques. Exploiting this vulnerability allows attackers to carry out spoofing attacks...
The vulnerability of the user remote access agent for corporate resources and Prisma Access applications lies in the violation of data protection mechanisms, allowing attackers to bypass unauthorized access protections.
The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security measures against unauthorized access...
The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from an uncontrolled search path element, allowing attackers to escalate their privileges.
The vulnerability of the Prisma Access Agent, a user remote access agent, relates to an uncontrolled element of the search path. Exploiting this vulnerability can allow attackers to enhance their privileges...