EUVD-2026-111265

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation...

CVE-2026-108325

Tanium addressed a vulnerability in Reputation involving the insertion of sensitive information into log files (CWE-532). The vulnerability could allow for the exposure of sensitive data, resulting in a high impact on confidentiality, integrity, and availability. Detailed technical root causes an...

CVE-2026-108325 Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation...

EUVD-2026-111260

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension...

CVE-2026-108332

Tanium addressed an improper link resolution before file access vulnerability (CWE-59) within the Threat Response Client Extension . The vulnerability allows for potential high impact on confidentiality and integrity when an attacker can influence link resolution. Exploitation details are not pro...

CVE-2026-108332 Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension...

SUSE CVE-2026-115908

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipArchive::extract and ZipArchive::extractunwrappedrootdir use safepreparepath in src/read/zipfile.rs and simplifiedcomponents in src/path.rs to validate symbolic link targets with a lexical...

SUSE CVE-2026-116612

A flaw was found in GStreamer Editing Services gst-editing-services. A GES project file can embed an arbitrary GStreamer pipeline description as an effect definition. When such a file is loaded, either explicitly by an editing application or automatically by a media player or file-manager...

WordPress affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload vulnerability

Authenticated Contributor+ Arbitrary File Upload vulnerability discovered by Wordfence PRISM in WordPress Plugin affiliate-toolkit versions = 3.9.2...

CVE-2026-108328

Tanium addressed a vulnerability in Threat Response involving the insertion of sensitive information into log files (CWE-532). The vulnerability allows for the potential exposure of sensitive data within system logs. Remediation information is available via security advisory TAN-2026-051 . No spe...

EUVD-2026-111237

Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response...

CVE-2026-108328 Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.

Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response...

Important: Red Hat Security Advisory: emacs security update

An update for emacs is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2026-48380

Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-116673

systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStatsiface implementation uses the caller-supplied interface value in an fs.existsSync check and to build /sys/class/net/ paths, including the operstate path, without verifying that it is a...

CVE-2026-108140

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

CVE-2026-106077

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges...

CVE-2026-102637

A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger a Reflected Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to re...

CVE-2025-64394

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service...

CVE-2026-116673

systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStatsiface implementation uses the caller-supplied interface value in an fs.existsSync check and to build /sys/class/net/ paths, including the operstate path, without verifying that it is a...