CVE-2026-79963

Dell Secure Connect Gateway 5.0 (SCG) is affected by a Download of Code Without Integrity Check vulnerability. The issue affects Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 . An unauthenticated attacker with remote network access could exploit this to achie...

CVE-2026-79963

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command executi...

CVE-2026-78574

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the conte...

CVE-2026-72929

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-72929

CVE-2026-72929 is an elevation of privilege vulnerability in Windows Installer , caused by improper validation of an integrity check value . An authorized local attacker can exploit this to gain elevated privileges, with the CVSS 3.1 base score of 7.8 (HIGH) reflecting full impact on confidential...

EUVD-2026-73105

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

Windows Installer Elevation of Privilege Vulnerability

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-85181

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Cortex(CCx) 26.0.0-IF002 for August 2026

Summary IBM Content Cortex CCx 26.0.0-IF002 addresses CVEs across components including AI Services & tools, FDM and CPE. Vulnerability Details CVEID:CVE-2026-12817 DESCRIPTION: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also...

CVE-2026-82549

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might...

CVE-2026-82549 Linux Foundation Magma SecurityModeComplete integrity check

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might...

CVE-2026-82549 Linux Foundation Magma SecurityModeComplete integrity check

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might...

CVE-2026-82549

Linux Foundation Magma 1.9.0 is affected by an improper validation of integrity check value in the SecurityModeComplete Handler component, allowing a remote attacker with no privileges to manipulate integrity checks. The vulnerability is scored 8.3 (HIGH) under CVSS 3.1 with a scope change, and 6...

EUVD-2026-68266

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might...

Malicious code in framework-zero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa0b9f3bb077648bf715ae13565ed44e67471548c98861bd5fb4d9472a3223b package.json line 11 declares a dependency whose source is the bare HTTPS URL https://repo.securityctrl.com/framework-zero instead of a registry...

MAL-2026-15520 Malicious code in ring-device-settings-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ea2aed3d7e8c0b9c99532d6714c486a5ad685418ebbd96c67b44b63f79fe01 package.json declares a dependency whose key equals the package's own name ring-device-settings-library and whose value is a raw HTTPS URL pointing a...

Malicious code in integration-amplitude (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd9ffdf0c07f64af4034ec76aea284a6290f4633f2c80eefa65579c1a297bfb package.json declares the package's own name as a dependency whose source is the bare HTTPS URL https://repo.securityctrl.com/integration-amplitude...

MAL-2026-15510 Malicious code in integration-amplitude (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd9ffdf0c07f64af4034ec76aea284a6290f4633f2c80eefa65579c1a297bfb package.json declares the package's own name as a dependency whose source is the bare HTTPS URL https://repo.securityctrl.com/integration-amplitude...

SUSE CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

CVE-2026-65097

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...