PT-2026-93851

Name of the Vulnerable Software and Affected Versions Dell Update Package Framework versions prior to 26.07.03 Description A Stack-based Buffer Overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

PT-2026-93841

Name of the Vulnerable Software and Affected Versions Dell Update Package Framework versions prior to 26.07.03 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A low privileged attacker with local access could exploit this...

CVE-2026-71179: Improper Neutralization of Special Elements used in an OS Command

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileg...

CVE-2026-71182: Improper Link Resolution Before File Access

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

PT-2026-93844

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

PT-2026-93322

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.11 through 19.1.7 GitLab EE versions 19.2 through 19.2.5 GitLab EE versions 19.3 through 19.3.1 Description Improper authorization controls on compliance framework management allow an authenticated user with the Security...

CVE-2026-71181: Improper Link Resolution Before File Access

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2026-71180: Unchecked Return Value

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-86358: Stack-based Buffer Overflow

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...

A GAN-Based Framework for Robust DDoS Attack Detection

The availability and consistency of online services remain vulnerable due to Distributed Denial of Service DDoS attacks. These attacks are evolving by adopting more complex strategies to evade traditional network security systems. Despite the effectiveness of machine learning models in detecting...

PT-2026-93842

Name of the Vulnerable Software and Affected Versions Dell Update Package Framework versions prior to 26.07.03 Description An Unchecked Return Value issue exists where the software fails to properly verify the result of a function call. A low privileged attacker with local access can exploit this...

CVE-2026-92137: Improper Limitation of a Pathname to a Restricted Directory

Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is contained within the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to create or replace arbitrary files on the...

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform allows a hacker to gain full control over the application.

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTPS protocol...

The vulnerability of the Security Framework component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

GitLab 18.11 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-16794)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticate...

CVE-2026-81855

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

CLSA-2026-1789510477 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.30-tuxcare.11...

CVE-2026-81855

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard , a marine engine management platform. An attacker with network access and no prior privileges can exploit this to gain high confidentiality and high integrity...

CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...