5768 matches found
EUVD-2026-72023
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...
CVE-2026-86206 Access control filter bypass allows unauthorised access to APIs
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...
CVE-2026-86207
An authentication bypass in N-central 2026.3 HF 3 leads to authentication bypass in internal only APIs...
EUVD-2026-72022
An authentication bypass in N-central 2026.3 HF 3 leads to authentication bypass in internal only APIs...
CVE-2026-86207 Authentication bypass leads to unauthorised access to N-central
An authentication bypass in N-central 2026.3 HF 3 leads to authentication bypass in internal only APIs...
CVE-2026-86207
N-central versions prior to 2026.3 HF 3 are affected by an authentication bypass in internal-only APIs , which can lead to unauthorised access to the platform. The vulnerability carries a CVSS 4.0 base score of 7.7 (HIGH) , with network attack vector, low complexity, low privileges required, and ...
PT-2026-86447
Name of the Vulnerable Software and Affected Versions N-central versions prior to 2026.3 HF3 N-central versions prior to 2026.4 Description An issue in the internal API access control filter allows unauthorized access to internal APIs. Recommendations Update to version 2026.3 HF3. Update to versi...
PT-2026-86448
🚨 CVE-2026-86207 - critical 🚨 N-able N-central - Authentication Bypass An authentication bypass in N-central 2026.3 HF 3 leads to authentication bypass in... 👾 https://t.co/BDWCBNCGsg @pdnuclei NucleiTemplates cve...
Astra Linux – Vulnerability found in Python 3.11, Python 3.7, and Python 2.7
The ‘zipfile’ module does not check the validity of the offset value specified in the ZIP64 End of Central Directory EOCD Locator record. Instead, the ZIP64 EOCD record is assumed to be the previous record in the ZIP archive. This behavior could be exploited to create ZIP archives that are...
SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs
A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion set makes use of seven remote access tool RAT families, five of which have never been previously documented: DriveSilkRAT, CookiETagRAT, NomadRAT,...
CVE-2026-71193
A flaw was found in OpenStack Designate. When the AttributeFilter scheduler is enabled with multiple DNS pools, an authenticated tenant can bypass zone ownership checks by scheduling a zone to a different pool. The database uniqueness constraint on zone names is pool-scoped, and the...
EUVD-2026-58786
LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...
CVE-2026-18403
LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...
CVE-2026-18403 LimeSurvey Community Edition 7.0.5 - Authenticated SQL injection in CPDB
LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...
Security Updates for Microsoft Dynamics 365 Business Central (August 2026)
The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an information disclosure vulnerability due to missing authorization. An authenticated, remote attacker can exploit this, to disclose potentially sensitive information. Note that Nessus...
CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
CVE-2026-12571
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
...
CVE-2026-40375
CVE-2026-40375 affects Microsoft Dynamics Business Central. Missing authorization could allow an authorized attacker to disclose information over a network. The NVD records a CVSSv3.1 base score of 6.5 (MEDIUM) with Network impact, low attack complexity, and low privileges required; confidentiali...
