CVE-2026-77393

Inductive Automation Ignition versions 8.1.53 and earlier ship with a blank default in the Gateway "Create Project Role(s)" setting, allowing any authenticated user who can execute gateway scripts to create projects . Successful exploitation could compromise the integrity and availability of the ...

tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

A flaw was found in the CGI servlet component of Apache Tomcat. This vulnerability allows a security constraint bypass via improper handling of case sensitivity in the pathInfo component of a URI mapped to the CGI servlet...