CVE-2026-71169

Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information...

EUVD-2026-104593

Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information...

CVE-2026-71169

Dell Application Store versions prior to 26.05.0.7 are vulnerable to an Incorrect Permission Assignment for Critical Resource (CWE-732). A low privileged attacker with local access could potentially exploit this flaw to cause disclosure of sensitive information . A security update is available as...

CVE-2026-71169

Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information...

Progress MOVEit Transfer < 2025.1.6 / 2026.0.x < 2026.0.4 Multiple Vulnerabilities (September 2026)

The version of Progress MOVEit Transfer installed on the remote host is prior to 2025.1.6 or 2026.0.x prior to 2026.0.4. It is, therefore, affected by multiple vulnerabilities, including: - Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer...

CVE-2026-34008

An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...

CVE-2026-34014

An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...

EUVD-2026-101984

An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...

CVE-2026-34014

A vulnerability exists in Download Station due to an incorrect permission assignment for the critical resource ds-move-files.sh, which is both writable and executed as root . A local attacker who has gained an administrator account can exploit this to compromise the security of the system. The vu...

EUVD-2026-101975

An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...

CVE-2026-87093

Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

PT-2026-114312

Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description An issue exists involving incorrect permission assignment for critical resources. Recommendations Update to version 2025.1.6 or later...

EUVD-2026-98361

An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is runnin...

PT-2026-111313

Name of the Vulnerable Software and Affected Versions AssetView affected versions not specified AssetView CLOUD affected versions not specified AssetView Cloud + affected versions not specified Description An incorrect permission assignment for critical resources allows a local authenticated...

DEBIAN-CVE-2026-109243

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...

CVE-2026-109243

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...

CVE-2026-109243

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...

EUVD-2026-97687

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...

CVE-2026-109244: Incorrect Permission Assignment for Critical Resource

FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default passwo...

CVE-2026-109243: Incorrect Permission Assignment for Critical Resource

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...