The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute arbitrary code and elevate their privileges to the root level.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and elevate their privileges to the root leve...

The vulnerability of the RADIUS function of the Cisco Identity Services Engine (ISE) management interface allows a perpetrator to cause service interruptions.

The vulnerability of the RADIUS function of the Cisco Identity Services Engine ISE management interface involves an escape from the buffer into memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

PT-2026-97422

Name of the Vulnerable Software and Affected Versions FileMaker Server versions prior to 26.0.3 Description A heap buffer overflow occurs in the database engine block parsing routine. This issue allows a maliciously crafted .fmp12 database file to cause memory corruption, which could potentially...

PT-2026-97609

Name of the Vulnerable Software and Affected Versions SoftNews Media Group DataLife Engine version 18.0 Description An issue exists in the Search Module within the strip data function of the engine/modules/search.php file. A remote attacker can trigger a SQL injection by manipulating the story...

PT-2026-97315

Name of the Vulnerable Software and Affected Versions Forcepoint Security Engine NGFW versions 7.1.0 through 7.1.13 Forcepoint Security Engine NGFW versions 7.3.0 through 7.3.1 Forcepoint Security Engine NGFW version 7.3.3 Forcepoint Security Engine NGFW versions 7.4.0 through 7.4.1 Forcepoint...

Linux Distros Unpatched Vulnerability : CVE-2026-92021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16. CVE-2026-92021 Note that Ness...

The vulnerability of the Cisco Identity Services Engine (ISE) platform, related to the lack of protective measures for the SQL query structure, allows a hacker to execute arbitrary code.

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the SXP platform for managing Cisco Identity Services Engine policies allows a perpetrator to cause a service failure.

The vulnerability of the Cisco Identity Services Engine ISE policy management platform’s SXP service is related to improper elimination of special elements in data requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Cisco Identity Services Engine (ISE) policy management platform and the Cisco ISE Passive Identity Connector (ISE-PIC) virtual authentication data collection device lies in the lack of measures to neutralize special elements. This allows attackers to execute arbitrary code and elevate their privileges to the root level.

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability...

Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

A vulnerability in the Goja JavaScript engine used by Nuclei's javascript: protocol allows arbitrary native code execution on the scanner host when running untrusted JavaScript templates. Affected Component The issue is in the Goja JavaScript runtime embedded in Nuclei's JavaScript protocol...

GHSA-VXG7-F2JJ-JMQM Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

A vulnerability in the Goja JavaScript engine used by Nuclei's javascript: protocol allows arbitrary native code execution on the scanner host when running untrusted JavaScript templates. Affected Component The issue is in the Goja JavaScript runtime embedded in Nuclei's JavaScript protocol...

GHSA-59W7-V8RR-PR4P OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters

Impact ACL Policies OpenBao supports "templated polices": Policies with placeholders that are replaced at evaluation time. This allows you to write a single policy which e.g. grants user "alice" access to all entries in a key value engine prefixed with alice/ while granting "bob" access to bob/,...

OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters

Impact ACL Policies OpenBao supports "templated polices": Policies with placeholders that are replaced at evaluation time. This allows you to write a single policy which e.g. grants user "alice" access to all entries in a key value engine prefixed with alice/ while granting "bob" access to bob/,...

CVE-2026-76712

A vulnerability exists in the Analytics and Location Engine ALE that may allow for unauthorized access, information disclosure, or denial of service. An unauthenticated remote attacker could exploit the vulnerable system by sending specially crafted input or intercepting network communications...

CVE-2026-76713

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full syste...

CVE-2026-76714

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system...

CVE-2026-76715

A vulnerability in an administrative component of Analytics and Location Engine ALE is vulnerable to a man-in-the-middle MitM attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected applian...

CVE-2026-76716

Multiple vulnerabilities exist in the Analytics and Location Engine ALE that may allow for unauthorized access or denial of service. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted input or leveraging improper security configurations. Successful...

CVE-2026-76717

A vulnerability exists in the Analytics and Location Engine ALE API that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input to a specific API endpoint. Successful exploitation could result...

CVE-2026-76709

A vulnerability exists in the internal administrative component of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting i...