CVE-2026-87076

Tanium Discover is affected by an information disclosure vulnerability, rated CVSS 3.1 6.5 (MEDIUM) with a network attack vector, low complexity, and low privileges required, resulting in a high confidentiality impact with no integrity or availability impact. Tanium has addressed the issue, and d...

EUVD-2026-81081

Tanium addressed an information disclosure vulnerability in Discover...

CVE-2025-65345

CVE-2025-65345 – Authenticated Path Traversal From Zip Function Leading to Filesystem Disclosure in laravel-file-manager v3.3.1 🧭 Overview An authenticated Directory Traversal vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to use...

CVE-2026-92729

SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit arbitrary funnel definitions to retrieve trace analytics including identifiers, durations, span counts, service topology, and...

CVE-2026-91106

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91102

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

DEBIAN-CVE-2026-91097

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91101

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

DEBIAN-CVE-2026-91098

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91098

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-73442

On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs or a system receiving forwarded log output to obtain the peer devic...

CVE-2026-19632

TranslatePress 密码重置链接泄露导致管理员账户接管 CVE： CVE-2026-19632 | CVSS： 9.8（严重） 通过 WordPress 的 TranslatePress 插件实现未认证账户接管。 从 CVE 发布到可用的 Day-One PoC 所用时间：5 小时 9 分 40 秒 影响版本至 3.3.1（含）；该问题已在 3.3.2 中修复。 TLDR TranslatePress 可以翻译 WordPress 外发的电子邮件，并将其翻译后的字符串保存到数据库中。 TranslatePress 还会将包含完整重置链接（含密钥）的密码重置邮件直接保存到翻译表中...

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data

深入解析 CVE-2026-20805：Windows DWM 漏洞如何泄露敏感数据 CVE‑2026‑20805：Windows 桌面窗口管理器（Desktop Window Manager）的一个缺陷，可导致本地信息泄露。需要低权限，无需用户交互。CVSS 评分为 5.5（中危）。已被积极利用，并列入 CISA KEV 目录；补丁已于 2026 年 1 月发布。 深入解析 CVE 2026 20805：Windows DWM 漏洞如何泄露敏感数据 1 执行摘要 CVE 2026 20805 是桌面窗口管理器（DWM）中的一个信息泄露缺陷——DWM 是渲染桌面、合成窗口以及加速基于 G...

CVE-2026-92720

creationtimestamp| type| source ---|---|--- 2026-09-16 19:00:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvnt5g54g22f 2026-09-16 20:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvnwwr2fvf2r...

EUVD-2026-81008

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...

EUVD-2026-81007

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

EUVD-2026-81005

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91104 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91101 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91099

HP Linux Imaging and Printing (HPLIP) has been affected by multiple externally reported vulnerabilities across several software components. HP states the findings could potentially enable remote code execution , privilege escalation , denial of service , information disclosure , or unauthorized f...