Erlang/OTP DoS

The vulnerability of the Erlang/OTP software platform is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Cisco Secure Email and Web Manager DoS

The vulnerability of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2026-88263

XikeStor Layer3 switches have a missing-authentication flaw that allows an unauthenticated attacker to download configuration data over the network. The retrieved data may contain network configurations and passwords , enabling an attacker to operate the switch improperly or use it as a jump host...

CVE-2026-88263: Missing Authentication for Critical Function

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host...

PT-2026-93335

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host...

N-able N-central Authentication Bypass

The vulnerability of the authentication mechanism of the N-able N-central platform for monitoring and managing IT infrastructure is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the getNimbusConf process. An attacker can obtain sensitive configuration data, including authentication payloads and keystore or truststore passwords, by making unauthorized requests to the...

CVE-2026-0305

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected...

CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected...

EUVD-2026-75259

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected...

PT-2026-89281

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected...

Prisma Access Agent: Information Disclosure Vulnerability on Linux

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected. Work around: No known workarounds or...

ROS-20260907-73-0042

The vulnerability in Erlang is related to incorrect input of configuration data. Exploitation of this vulnerability can be carried out remotely...

Linux kernel ebtables Heap Buffer Overflow DoS

The vulnerability of the compatmtwfromuser function in the net/bridge/netfilter/ebtables.c module, which is part of the Linux kernel’s networking functions, is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

Linux Kernel BPF Buffer Overflow DoS

The vulnerability of the bpfprogtestrunskb function in the net/bpf/testrun.c module, which implements networking functions in the Linux kernel, is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

MongoDB Privilege Escalation

The vulnerability of the updateUser command in the MongoDB database management system is related to incorrect input of configuration data. Exploiting this vulnerability allows a malicious actor to increase their privileges remotely...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

CVE-2026-51622: Improper Access Control

Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WAN configuration data via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

Cisco Catalyst SD-WAN Configuration Input Compromise

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

EUVD-2026-62959

In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure containers, and read or modify connection and configuration data through the Representational State Transfer REST API. The missing authorization ...