CVE-2026-76531 Files or Directories Accessible to External Parties in Splunk SOAR

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability This type of vulnerability is a frequent attack vector fo...

CVE-2026-77371 Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access

Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's connect path in redash/queryrunner/duckdb.py created connections with enableexternalaccess left at its default value of true. A user with query access to an administrator-created DuckDB dat...

CVE-2026-77371 Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access

Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's connect path in redash/queryrunner/duckdb.py created connections with enableexternalaccess left at its default value of true. A user with query access to an administrator-created DuckDB dat...

CVE-2026-77371 Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access

Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's connect path in redash/queryrunner/duckdb.py created connections with enableexternalaccess left at its default value of true. A user with query access to an administrator-created DuckDB dat...

PT-2026-114285

Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's connect path in redash/query runner/duckdb.py created connections with enable external access left at its default value of true. A user with query access to an administrator-created DuckDB...

Linux kernel LSM Buffer Overflow DoS

The vulnerability in the lsmnametoattr function within the security subsystem of the Linux kernel, specifically in security/lsmsyscalls.c, involves unrestricted external access blocking. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality and integrity of...

This Coin-Sized Device Can Hack a Boeing 737

Security researchers found that in less than 60 seconds, they could open a hatch on a plane’s exterior, plug in a tiny device, and redirect the aircraft’s autopilot or sabotage its flight plan...

CVE-2026-18215

Keycloak-security issue: Microsoft accounts login with tenant restriction can be bypassed via token exchange. A valid Microsoft token from a different organization could grant access to the Keycloak realm, exposing data or enabling unauthorized actions. Affected component is Keycloak’s Microsoft ...

Malicious code in @404c3s4r/testxxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd0eb9a43f893d498f074432357cace7974802e77750075976412a8300599a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-44108

Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window in which internal services may become externally accessible, potentially allowing an unauthenticated remote attacker to connect to these...

Exploit for Unrestricted Upload of File with Dangerous Type in Progress Sitefinity

SOC Incident Analysis: Microsoft SharePoint Server Elevation o...

MAL-2026-11102 Malicious code in riskunifiedgatewayserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d96d72f82bb3dfb9c04ca9b519f859677fd07d6396699d9273ef5ef14547d2b Package installs a preinstall hook that runs index.js on npm install. The script collects the installer's hostname, platform, architecture, home...

EUVD-2026-49059

Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2026-57990

Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

PT-2026-64819

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description An issue exists where files or directories are accessible to external parties, allowing an unauthorized attacker to disclose information over a network. Recommendations ...

Oracle WebCenter Portal (July 2026 CPU)

The 12.2.1.4.0 and 14.1.2.0.0 versions of WebCenter Portal installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported...

JLSEC-2026-774 `sniff_csv` provides filesystem access even when `enable_external_access` is disabled in duckdb

Summary Content in filesystem is accessible for reading using sniffcsv, even with enableexternalaccess=false. Details During a pentest, a security researcher was able to access environment variable data and other system data by using the sniffcsv function, even though we set enableexternalaccess ...

MAL-2026-10794 Malicious code in @gocortexio/npmgremlinbox-c-uda-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83660c96e8a26e9d1536cf10894cf347defb7ff139add7b3ecb738ee69029dfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-824W-X939-6CMC TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint

Impact The /internal/objectstorage endpoint accepts a caller-supplied JSON storagepath parameter that dynamically overrides the TensorZero objectstorage configuration. By abusing the filesystem storage type, a caller can read arbitrary files from the gateway filesystem, including files that may...