Exploit for Path Traversal in Checkpoint Multi-Domain_Security_Management

Check Point Security Management Unauthenticated RCE — Vulnerab...

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0183

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922

A permission bypass vulnerability exists in the CPM component due to a confused deputy issue. This flaw could allow for local escalation of privilege with System execution privileges required. Exploitation of this vulnerability does not require user interaction. Affected Google Pixel devices can ...

EUVD-2026-78965

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0183

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0183

A confused deputy vulnerability in CPM allows for a possible local information disclosure . Exploitation of this flaw requires System execution privileges , but does not require user interaction. No specific exploit details or remediation steps are provided in the documents.

EUVD-2026-79150

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0183

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92316

Name of the Vulnerable Software and Affected Versions CPM affected versions not specified Description A permission bypass exists due to a confused deputy, which is a security issue where a privileged entity is tricked by a less privileged entity into performing an action it is not authorized to d...

CVE-2026-0183: Unintended Proxy or Intermediary

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922: Unintended Proxy or Intermediary

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Length parity checks were performed before switching to 16-bit mode. The commit fc96ec826bce “spi: fsl-cpm: Use 16-bit mode for large transfers with even size” failed to ensure that the size of the data transfer was...

PUB-A-510475578

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-510831894

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-513139951

In CPM, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-62589

creationtimestamp| type| source ---|---|--- 2026-08-19 17:45:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 09:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtqiihr73c2u...

CVE-2026-13335

The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpmpoint' Post Meta in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...