1476 matches found
RLSA-2026:72279 Critical: ipa security, bug fix, and enhancement update
Rocky Enterprise Software Foundation Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request...
HPESBNW05149 rev.1 -HPE Networking Advance Notification of Security Advisories for October 6, 2026.
Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Enterprise Software N/A - In this advance notification, HPE Networking will not provide vulnerability details, CVEs, affected software versions, or...
CVE-2026-76346
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:00+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
CVE-2026-71050
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71042
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:20+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-29 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu7onbflmq2u...
CVE-2026-70903
creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 15:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu36huwavn2y...
CVE-2026-70928
creationtimestamp| type| source ---|---|--- 2026-08-19 17:51:58+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 09:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu2ioj3vbb2u...
CVE-2026-70721
creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-60889
creationtimestamp| type| source ---|---|--- 2026-08-19 17:21:46+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61118
creationtimestamp| type| source ---|---|--- 2026-08-19 17:19:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtpno5zsu52u...
CVE-2026-61219
creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:17+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu3f6hvpxn22...
CVE-2026-70329
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:14+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:10+00:00| seen|...
CVE-2026-62839
CVE-2026-62839 describes insufficient protection of credentials in Microsoft Office SharePoint, enabling an authorized attacker to perform network spoofing. The vulnerability is triggered by inadequate credential handling in SharePoint, which may allow an attacker with low privileges and network ...
CVE-2026-5515
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user...
CVE-2026-42337
MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a broken access control vulnerability in the OSS file service URL fetch API chat/api/oss/geturl. The endpoint uses applicationid from the URL path without validating ownership, allowing attackers to perfo...
Pwn2Own Berlin 2026 Closes With $1.3 Million in Zero-Day Payouts
Cybersecurity researchers successfully demonstrated 47 unique zero-day exploits at Pwn2Own Berlin 2026, targeting major enterprise software and AI platforms...
CVE-2026-8217
A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Performing a manipulation of the argument troiaCode results in os command injection. The attack may be initiated remotely. T...
CVE-2026-8216
Affected software / component: Industrial Application Software IAS Canias ERP 8.03; affected function: iasServerRemoteInterface.doAction (Java RMI Session Management). Issue / impact: Improper authentication resulting from manipulation of the doAction function. The attack can be launched remotely...
CVE-2026-8214 Industrial Application Software IAS Canias ERP RMI doAction improper authentication
A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects the function doAction of the component RMI Interface. The manipulation of the argument sessionId results in improper authentication. It is possible to launch the attack remotely. The exploit has been ma...
