CVE-2026-75995 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an...

CVE-2026-106626

Adobe Experience Manager is affected by an Improper Input Validation vulnerability (CWE-20) that could allow an attacker with high privileges to achieve arbitrary code execution in the context of the current user. This vulnerability does not require user interaction and has a CRITICAL severity ra...

CVE-2026-95631

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-95631

Adobe Commerce is affected by an Improper Input Validation vulnerability (CWE-20) that could allow an attacker with high privileges to achieve arbitrary code execution in the context of the current user. The vulnerability does not require user interaction to exploit, and its scope is changed. No ...

CVE-2026-95631 Adobe Commerce | Improper Input Validation (CWE-20)

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-92464

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-92464

Adobe Commerce is affected by an Improper Input Validation vulnerability (CWE-20) that could lead to arbitrary code execution in the context of the current user. An attacker with high privileges can exploit this issue without user interaction. No specific affected versions, root cause components,...

EUVD-2026-98025

Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information fro...

PT-2026-111871

Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Description An improper input validation issue allows an attacker with high privileges to execute arbitrary code in the context of the current user. This process does not require any user...

CVE-2026-109634

Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information fro...

CVE-2026-109634 Frappe ERPNext before 15.121.0 SQL Injection via Unvalidated Endpoints

Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information fro...

CVE-2026-109634

Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 are susceptible to an SQL injection vulnerability. The root cause is a lack of sufficient input validation in certain endpoints. An authenticated attacker with high privileges can execute specially crafted requests to perform SQL inj...

PT-2026-111047

Name of the Vulnerable Software and Affected Versions Frappe ERPNext versions prior to 15.121.0 Frappe ERPNext versions 16.x prior to 16.34.0 Description Missing input validation in certain endpoints allows authenticated attackers with high privileges to execute SQL injection. By sending speciall...

CVE-2026-101150

A vulnerability exists due to insufficient validation of OIDC bearer token configuration . This flaw could allow an attacker with specific high privileges to perform Server-Side Request Forgery (SSRF) by directing requests to arbitrary destinations. The impact is categorized as Medium severity, w...

CVE-2026-79810

HPE Networking ClearPass Policy Manager contains Remote Code Execution (RCE) vulnerabilities within its affected interface. An authenticated remote attacker with high privileges can exploit this flaw to execute arbitrary code and commands on the underlying operating system. The severity is rated ...

CVE-2026-79810 Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the...

CVE-2026-79810 Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the...

CVE-2026-101150: Server-Side Request Forgery (SSRF)

Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations...

PT-2026-107131

Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct requests to arbitrary destinations...

CVE-2026-79810: Improper Control of Generation of Code

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the...