CVE-2026-61407

Dell Watchdog Timer Driver versions before 2.0.0.1 expose an IOCTL interface lacking proper access controls. A locally authenticated low-privilege attacker can call this IOCTL to escalate privileges, achieving high confidentiality, integrity, and availability impact (CVSS 8.8). The fix is to upgr...

CVE-2026-61407

Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...

PT-2026-78071

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector execut...

PT-2026-77293

Name of the Vulnerable Software and Affected Versions Dell Alienware Command Center versions prior to 6.14.20.0 Description A Least Privilege Violation exists where a low privileged attacker with local access could potentially exploit the issue to achieve Elevation of Privileges, which allows a...

PT-2026-78061

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes...

PT-2026-77290

Name of the Vulnerable Software and Affected Versions Dell Alienware Command Center versions prior to 6.14.20.0 Description An Improper Link Resolution Before File Access Link Following issue exists. This occurs when an application does not properly validate that a symbolic link or hard link does...

Linux Distros Unpatched Vulnerability : CVE-2026-72038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: liquidio: fix BAR resource leak on PF number failure If cn23xxgetpfnum fails, the function returns without unmapping either BAR. Unmap both BARs before...

PT-2026-77958

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

PT-2026-77259

Name of the Vulnerable Software and Affected Versions Dell AppSync version 4.6.0.0 Dell Metro Node version 8.0.0 Dell UCC Edge version 3.0.1 Dell VxRail version 8.0.322 Dell PowerMax version 10.3.0 Dell Unity version 5.4 Dell PowerFlex Manager versions prior to 4.5.4 Dell PowerFlex Intelligent...

Linux Distros Unpatched Vulnerability : CVE-2026-72165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: rawnand: fix condition in 'nandselecttarget' 'cs' here must be in range 0:nanddevntargets. CVE-2026-72165 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-72475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: dma-axi-dmac: Properly free struct axidmacdesc Use axidmacfreedesc to free fully the descriptor at fail path when call axidmacallocdesc in...

PT-2026-77793

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Purchasing executes to...

PT-2026-78127

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

PT-2026-77136

Name of the Vulnerable Software and Affected Versions Dell Watchdog Timer Driver versions prior to 2.0.0.1 Description An Exposed IOCTL Input/Output Control with insufficient access control allows a low privileged attacker with local access to potentially achieve privilege escalation. IOCTL is a...

Linux Distros Unpatched Vulnerability : CVE-2026-72267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: carminefb: fix potential memory leak in alloccarminefb The memory allocated for modelist in fbvideomodetomodelist is not freed in the subsequent error...

CVE-2026-75587 Plaintext pre-auth secret exposure via Desktop App diagnostics report

Mattermost Desktop App versions =6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the...

CVE-2026-72091

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. An attacker with local access to the accelerator node can trigger a null pointer dereference by submitting a command with an invalid command buffer object. This can lead to a kernel crash, resulting in a denial of service DoS for...

CVE-2026-59911

Dell ObjectScale, versions prior to 4.3.0.1, contains an Insertion of Sensitive Information into Log File vulnerability in the svctools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-59909

Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-56090

Dell ObjectScale, versions prior to 4.3.0.1, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...