ImageIO Component Privilege Escalation

The vulnerability of the ImageIO component in the Oracle Java SE software platform, as well as in Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

Oracle Java SE JSE Unauthenticated Access Disclosure

The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

RHEL 10 : libsoup3 (RHSA-2026:71389)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71389 advisory. Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup,...

Linux Distros Unpatched Vulnerability : CVE-2026-93786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's default ACL and the requested creation mode. Do not mutat...

Fortinet FortiManager Workflow session email approval process bypass (FG-IR-26-171)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-171 advisory. - An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10...

PT-2026-97952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds OOB access issue exists in the PCI power control component for tc9563. The problem occurs when parsing the integrated Ethernet MAC Endpoint node under DSP3. Because the...

WSO2 Multiple Products Path Traversal Vulnerability

WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution...

Security update for distribution (important)

openSUSE security update: security update for distribution ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21898-1 Rating: important References: bsc1268884 bsc1276677 bsc1277966 bsc1278997 bsc1279219 bsc1279316 Cross-References: CVE-2026-37236...

Trusted Model Environment for Private Semantic Computations

A private semantic computation primitive enables parties to privately compute over structured and unstructured data that requires understanding its semantics, context, and relationships. Standard cryptographic primitives e.g., multiparty computation do not readily support such computation...

CVE-2026-85057: Improper Access Control

ZITADEL is an open source identity management platform. From 3.0.0 until 3.4.13 and 4.16.1, ZITADEL Actions V1 enables the goja Node-compatible require registry without restricting its filesystem source loader. An organization Action author with ORGOWNER, org.action.write, and org.flow.write...

CVE-2026-78313: Improper Access Control

Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

PT-2026-98252

Name of the Vulnerable Software and Affected Versions Dell Rugged Control Center RCC versions prior to 5.2.206 Description An improper authorization issue exists where a low privileged attacker with local access could potentially exploit the flaw to achieve elevation of privileges. Recommendation...

CVE-2026-56792: Improper Authentication

Dell Rugged Control Center RCC, versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-96750: Improper Control of Generation of Code

MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a user opens the shell from that database's view. A user with privileges to create databases on a server that a Compass user connects to may, under specific conditions, have...

CVE-2026-79758: Improper Access Control

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.8.0 until 2.5.1, authenticated Termix users can access the server-stats API without per-host authorization. GET /status returns statuses for hosts the requester cannot access, GET...

PT-2026-104933

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpi ds terminate control method Fix use-after-free issue in acpi ds terminate control method by clearing references to method locals and arguments...

PT-2026-97641

Name of the Vulnerable Software and Affected Versions kvcache-ai mooncake versions 0.3.12 through 0.3.14-rc1 Description Improper access controls exist within the MountSegment Request Processing component, specifically affecting the ScopedSegmentAccess::MountSegment function in the segment.cpp...

Security Component Unauthorized Access

The vulnerability of the Security component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker operating remotely to gain...

Oracle Java SE Libraries DoS

The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to cause service interruptio...

CVE-2026-93805

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate rx/tx MLME callback frame lengths before access cfg80211rxmlmemgmt and cfg80211txmlmemgmt call tracepoints before rejecting frames shorter than the frame-control field. After that, they only require len =...