CVE-2026-43857

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service...

CVE-2026-43857

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service...

EUVD-2026-104859

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service...

CVE-2026-43857

Technical details regarding the specific software, component, or root cause for CVE-2026-43857 are not publicly available in the provided documents. The description only states that a remote authenticated attacker could achieve arbitrary code execution with service privileges. Monitor for further...

CVE-2026-43856

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...

CVE-2026-43856

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...

CVE-2026-43856

A stack-based buffer overflow vulnerability exists in the FileProcess::CheckDir function. This flaw could allow a remote authenticated attacker to achieve arbitrary code execution by providing a path longer than 1024 bytes . No specific software vendor or version is explicitly identified in the p...

EUVD-2026-104857

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...

EUVD-2026-104856

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...

WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by Intrudify in WordPress Plugin Royal Elementor Addons versions = 1.7.1068...

CVE-2026-113404

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server...

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 CVSS v4 score: 8.4, could allow an attacker to place a specially-crafted DLL in a directory the...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.39 security and extras update

Red Hat OpenShift Container Platform release 4.21.39 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build

A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...

Important: Red Hat Security Advisory: postgresql:18 security update

An update for the postgresql:18 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-113404 Uniong｜WebITR - Insecure Deserialization

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server...

CVE-2026-113404 Uniong｜WebITR - Insecure Deserialization

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server...

EUVD-2026-104808

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server...

CVE-2026-113404

The software WebITR , developed by Uniong , contains an Insecure Deserialization vulnerability (CWE-502). Authenticated remote attackers can exploit this by utilizing a hard-coded cryptographic key to craft and submit malicious serialized data. Successful exploitation allows the attacker to achie...

Important: Red Hat Security Advisory: postgresql:16 security update

An update for the postgresql:16 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...