CVE-2026-20343

A vulnerability in a critical API of Cisco Secure Firewall Management Center (FMC) Software arises because the API lacks authentication . An unauthenticated, remote attacker can exploit it by repeatedly invoking the API, potentially downloading sensitive files that should be restricted and consum...

CVE-2026-20343 Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service Vulnerability

A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by repeated...

CVE-2026-81870 OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

CVE-2026-81870

OpenTelemetry-Go (versions 1.5.0–1.44.0) has an information-disclosure flaw in sdk/trace.NewTracerProvider. Its Info-level diagnostic event uses MarshalLog implementations that recursively include span processor, exporter, and client configuration. Applications that enable internal Info logging v...

CVE-2026-81870 OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

CVE-2026-81870 OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

CVE-2026-87076

Tanium Discover is affected by an information disclosure vulnerability, rated CVSS 3.1 6.5 (MEDIUM) with a network attack vector, low complexity, and low privileges required, resulting in a high confidentiality impact with no integrity or availability impact. Tanium has addressed the issue, and d...

CVE-2026-87076 Tanium addressed an information disclosure vulnerability in Discover.

Tanium addressed an information disclosure vulnerability in Discover...

EUVD-2026-81081

Tanium addressed an information disclosure vulnerability in Discover...

CVE-2025-65345

CVE-2025-65345 – Authenticated Path Traversal From Zip Function Leading to Filesystem Disclosure in laravel-file-manager v3.3.1 🧭 Overview An authenticated Directory Traversal vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to use...

CVE-2026-92729

SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit arbitrary funnel definitions to retrieve trace analytics including identifiers, durations, span counts, service topology, and...

CVE-2026-91106

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91102

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

DEBIAN-CVE-2026-91097

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91101

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

DEBIAN-CVE-2026-91098

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91098

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-73442

On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs or a system receiving forwarded log output to obtain the peer devic...

CVE-2026-19632

TranslatePress 密码重置链接泄露导致管理员账户接管 CVE： CVE-2026-19632 | CVSS： 9.8（严重） 通过 WordPress 的 TranslatePress 插件实现未认证账户接管。 从 CVE 发布到可用的 Day-One PoC 所用时间：5 小时 9 分 40 秒 影响版本至 3.3.1（含）；该问题已在 3.3.2 中修复。 TLDR TranslatePress 可以翻译 WordPress 外发的电子邮件，并将其翻译后的字符串保存到数据库中。 TranslatePress 还会将包含完整重置链接（含密钥）的密码重置邮件直接保存到翻译表中...

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data

深入解析 CVE-2026-20805：Windows DWM 漏洞如何泄露敏感数据 CVE‑2026‑20805：Windows 桌面窗口管理器（Desktop Window Manager）的一个缺陷，可导致本地信息泄露。需要低权限，无需用户交互。CVSS 评分为 5.5（中危）。已被积极利用，并列入 CISA KEV 目录；补丁已于 2026 年 1 月发布。 深入解析 CVE 2026 20805：Windows DWM 漏洞如何泄露敏感数据 1 执行摘要 CVE 2026 20805 是桌面窗口管理器（DWM）中的一个信息泄露缺陷——DWM 是渲染桌面、合成窗口以及加速基于 G...