CVE-2026-20235

Cisco Identity Services Engine (ISE) contains an information disclosure vulnerability in its API , caused by insufficient validation of user-supplied parameters in API requests. An authenticated remote attacker with valid administrative credentials can send a crafted API request to view sensitive...

CVE-2026-76433

This is a directory traversal vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC . Due to insufficient validation of directory traversal character sequences in a user-supplied path during provisioning resource requests, an unauthenticated, remote attacker can...

EUVD-2026-81144

A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affected device. This vulnerability is due to insufficient validation of directory traversal character sequences in a...

CVE-2026-76433 Cisco Identity Services Engine Information Disclosure Vulnerability

A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affected device. This vulnerability is due to insufficient validation of directory traversal character sequences in a...

CVE-2026-87076

Tanium addressed an information disclosure vulnerability in Discover...

CVE-2026-81870

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

CVE-2026-20343

A vulnerability in a critical API of Cisco Secure Firewall Management Center (FMC) Software arises because the API lacks authentication . An unauthenticated, remote attacker can exploit it by repeatedly invoking the API, potentially downloading sensitive files that should be restricted and consum...

CVE-2026-20343 Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service Vulnerability

A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by repeated...

CVE-2026-81870 OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

CVE-2026-81870

OpenTelemetry-Go (versions 1.5.0–1.44.0) has an information-disclosure flaw in sdk/trace.NewTracerProvider. Its Info-level diagnostic event uses MarshalLog implementations that recursively include span processor, exporter, and client configuration. Applications that enable internal Info logging v...

CVE-2026-81870 OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

CVE-2026-81870 OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

CVE-2026-87076 Tanium addressed an information disclosure vulnerability in Discover.

Tanium addressed an information disclosure vulnerability in Discover...

CVE-2026-87076

Tanium Discover is affected by an information disclosure vulnerability, rated CVSS 3.1 6.5 (MEDIUM) with a network attack vector, low complexity, and low privileges required, resulting in a high confidentiality impact with no integrity or availability impact. Tanium has addressed the issue, and d...

EUVD-2026-81081

Tanium addressed an information disclosure vulnerability in Discover...

CVE-2025-65345

CVE-2025-65345 – laravel-file-manager v3.3.1 中 Zip 功能的已认证路径遍历导致文件系统泄露 🧭 概述 laravel-file-manager v3.3.1 及以下版本中存在一个已认证的目录遍历漏洞，允许有权访问文件管理器界面的攻击者利用 zip/归档功能创建包含预期范围之外文件和目录的压缩包，原因是路径验证不当。 🧱 受影响组件 项目： laravel-file-manager 组件： zip/归档 Functionf 受影响版本： v3.3.1 及以下版本 🎯 攻击向量 1. 在文件管理器图形界面中上传或选择一个文件夹/文件。 2. 篡...

CVE-2026-92729

SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit arbitrary funnel definitions to retrieve trace analytics including identifiers, durations, span counts, service topology, and...

CVE-2026-91106

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91102

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

DEBIAN-CVE-2026-91097

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...