CVE-2026-2695

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

CVE-2026-2695 Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

CVE-2026-2695 Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

CVE-2026-2695

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

CVE-2026-2695: Improper Input Validation

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)

Summary A nil pointer dereference in server/auth/gatekeeper.go rbacAuthorization causes a panic denial of service for SSO users whose claims match a namespace-level RBAC rule but not an SSO-namespace rule, when SSODELEGATERBACTONAMESPACE=true. Details When getServiceAccountclaims, ssoNamespace...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws-fips, crossplane-provider-aws-appflow-fips, crossplane-provider-kubernetes-fips, crossplane-provider-aws-secretsmanager-fips, tetragon, gitlab-cng-fips, crossplane-provider-aws-cognitoidp-fips, gitlab-runner,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws-fips, crossplane-provider-aws-appflow-fips, crossplane-provider-kubernetes-fips, crossplane-provider-aws-secretsmanager-fips, tetragon, gitlab-cng-fips, crossplane-provider-aws-cognitoidp-fips, gitlab-runner,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: zot, rancher-webhook, external-secrets-operator, yunikorn-k8shim, gitea, juicefs, dex, cert-manager-cmctl, grafana, frp, gitlab-runner, kyverno, xeol, flux, terraform, minio, rancher, rclone, bento, sftpgo-plugin-auth, flux-source-controller, rancher-agent,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: zot, rancher-webhook, external-secrets-operator, yunikorn-k8shim, gitea, juicefs, dex, cert-manager-cmctl, grafana, frp, gitlab-runner, kyverno, xeol, flux, terraform, minio, rancher, rclone, bento, sftpgo-plugin-auth, flux-source-controller, rancher-agent,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, kyverno-notation-aws-fips, spqr, grafana, k6-fips, gitlab-runner, minio-fips, neuvector-fips, frp, cert-manager-openshift-routes-fips, versitygw-fips, terraform-fips, commercial-kyverno, cert-manager-openshift-routes, cloudbeat, elastic-agent,...

EUVD-2026-21856

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...

CVE-2026-21006

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...

CVE-2026-21006

CVE-2026-21006 describes an improper access control in Samsung DeX (before SMR Apr-2026 Release 1) that lets a physical attacker access hidden notification contents. The entry specifies affected platform as Samsung DeX, with a minimal base impact on confidentiality (VULNERABLE: LOW; SUBSEQUENT: H...

CVE-2026-21006

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...

CVE-2026-21006

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...

CVE-2026-21006

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...

PT-2026-32264

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...

CVE-2026-21006: Undefined Security Weakness

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents...

Embedded Malicious Code

Overview @velora-dex/sdk is a SDK for the Velora API Affected versions of this package are vulnerable to Embedded Malicious Code that delivers a malicious payload through dist/index.js. An attacker uploaded a compromised version of the package directly to the npm registry. The payload runs a...