CVE-2026-49844 vulnerabilities

Vulnerabilities for packages: opensearch, druid, zipkin, hadoop-fips, airbyte-platform-fips, apache-tika, apache-pulsar, elasticsearch, thingsboard, apache-activemq-artemis, strimzi-kafka-operator, kafka-bridge-fips, flink-kubernetes-operator, kayenta, traccar, wazuh-indexer, nacos-docker, hono,...

CVE-2026-71311 vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-8V25-V8P6-QF7V vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-54572 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-73643 vulnerabilities

Vulnerabilities for packages: renovate, kubeflow-pipelines...

CVE-2026-73569 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

No d...

CVE-2026-64887

Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1...

CVE-2026-19908

PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The...

CVE-2026-17182

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments...

CVE-2026-17079

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...

CVE-2026-17175

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...

CVE-2026-16905

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

Exploit for Injection in Budibase

CVE-2026-31816 — Budibase Authentication Bypass → RCE !CVE...

MINI-3WW8-2QHG-W6RM

Bulletin has no description...

CVE-2026-71571

Technical details are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2026-19910

PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...

CVE-2026-19910 PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability

PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...

CVE-2026-19910

CVE-2026-19910 affects PAX Technology Q80, specifically the Application Installer. The flaw is a signature verification bypass in the installer, allowing a network-adjacent attacker (no authentication, high attack complexity) to execute arbitrary code with root privileges by installing a signed-b...

CVE-2026-19910 PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability

PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...