CVE-2026-62940

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides including security-critical keys like security.privileged and raw.lxc are applied without any project restriction enforcemen...

CVE-2026-59654 Apache CloudStack: DoS caused by database connections leak

Missing Release of Resource after Effective Lifetime vulnerability in Apache CloudStack's scoped global configuration functionality. It affects different modules and plugins of the CloudStack management server, including Quota, Host-HA, etc., and may lead to eventual denial of service DoS scenari...

CVE-2026-59780 Apache CloudStack: LDAP provider configuration disclosure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's LDAP authentication plugin while listing LDAP providers. LDAP configurations can be listed by any authenticated user with access to the listLdapConfigurations API. By default, this API is available to...

CVE-2026-59780 Apache CloudStack: LDAP provider configuration disclosure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's LDAP authentication plugin while listing LDAP providers. LDAP configurations can be listed by any authenticated user with access to the listLdapConfigurations API. By default, this API is available to...

WordPress Quiz And Survey Master plugin < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR vulnerability

Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Quiz And Survey Master versions 11.2.4...

RLSA-2026:57462 Important: curl security, bug fix, and enhancement update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: curl: Insecure connection establishment due to TLS configuration mismatch CVE-2026-8286 Bug Fixes and Enhancements:...

Exploit for Missing Authentication for Critical Function in Nginxui Nginx_Ui

CVE-2026-33032 Safe check reads nginx status bash py...

PT-2026-79398

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth...

CVE-2026-16575: Exposure of Sensitive Information to an Unauthorized Actor

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not restrict access to per-vendor commission configuration returned by one of its unauthenticated store REST endpoints, allowing any unauthenticated user to disclose a vendor's commission type...

Kibana 8.x < 8.19.20 / 9.x < 9.4.5 Multiple Vulnerabilities (ESA-2026-87 / ESA-2026-88)

The version of Kibana installed on the remote host is 8.x prior to 8.19.20, or 9.x prior to 9.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-87 and ESA-2026-88 advisories. - A lower privileged user who holds only the privilege to read agent policies can...

ROS-20260821-73-0026

The vulnerability in the SoundWire driver’s qcom.c file in the Linux operating system lies in the access to memory beyond the permissible buffer data size limits, due to violations of resource configuration agreements. Exploiting this vulnerability can allow an attacker to compromise the...

PT-2026-79449

Name of the Vulnerable Software and Affected Versions Hydra versions prior to 1.3.4 Description The hydra.utils.instantiate function resolves and calls Python objects selected by configuration through the resolve target function in hydra/ internal/instantiate/ instantiate2.py. This allows...

AlmaLinux 8 : curl (ALSA-2026:57462)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:57462 advisory. curl: curl: Insecure connection establishment due to TLS configuration mismatch CVE-2026-8286 Bug Fixes and Enhancements: Regression of AlmaLinux-73788. The .9...

openSUSE 16: libpython3_13-1_0 / libpython3_13-1_0-x86-64-v3 / libpython3_13t1_0 / etc (openSUSE-SU-2026:21595-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21595-1 advisory. - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. - CVE-2025-15367: control characters...

RockyLinux 8 : curl (RLSA-2026:57462)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:57462 advisory. curl: curl: Insecure connection establishment due to TLS configuration mismatch CVE-2026-8286 Bug Fixes and Enhancements: Regression of Rocky Linux-73788. The .9...

MINI-7GP4-H3XM-2XC4

Bulletin has no description...

CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

CVE-2026-77022

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptestssid of the component SSID Configuration. The manipulation of the argument ssid results in stack-based buffer overflow. The...

EUVD-2026-63473

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptestssid of the component SSID Configuration. The manipulation of the argument ssid results in stack-based buffer overflow. The...

CVE-2026-77022 Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptestssid of the component SSID Configuration. The manipulation of the argument ssid results in stack-based buffer overflow. The...