1487 matches found
Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
Overview On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure ICS to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357, a missing authentication for critical function vulnerability CWE-306, with a CVSSv3.1 score of 8.8;...
CVE-2025-15545
CVE-2025-15545 Information Vendor: TP-Link Vendor's website: TP-Link Model: Archer RE605X Hardware version: RE605X v3.0 Firmware version: RE605XEUV31.1.5 Build 20240905 Firmware download address: TP-Link A chain of vulnerabilities — including the use of hardcoded cryptographic keys and a command...
CVE-2021-21551
CVE-2021-21551 Dell Driver EoP CVE-2021-21551 Description Dell dbutil23.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required. This exploit was tested o...
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527...
EUVD-2026-111080
A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently...
CVE-2026-92377 Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows
Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...
CVE-2026-92375 Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root...
CVE-2026-92375 Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root...
CVE-2026-111583: Improper Privilege Management
Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...
CVE-2026-92377: Incorrect Permission Assignment for Critical Resource
Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...
CVE-2026-115253
An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy...
CVE-2026-89562
A flaw was found in the Linux kernel's IPv6 Generic Routing Encapsulation GRE subsystem. The kernel incorrectly calculates the hardware header length for Non-Broadcast Multiple Access NBMA tunnel interfaces by improperly accumulating the underlying device's header length. A local authenticated...
CVE-2026-107571
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent,...
CVE-2026-107571
Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are affected by incorrect default permissions in the Windows installer. If the product is installed in a folder inheriting permissions from a writable parent (such as the root of an NTFS volume), a local authenticated user can gain code e...
CVE-2026-107571 Incorrect Default Permissions in hMailServer
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent,...
CVE-2026-107571 Incorrect Default Permissions in hMailServer
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent,...
PT-2026-117457
Name of the Vulnerable Software and Affected Versions Progressive Robot hMailServer versions 6.0.0 through 6.3.6 Description Incorrect default permissions in the Windows installer allow a local authenticated user to execute code with high-privileged accounts, such as LocalSystem or the service's...
CVE-2026-107571: Incorrect Default Permissions
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent,...
Progressive Robot hMailServer: Permissions, licensing, and access control issues
The Progressive Robot hMailServer version 6.0.0 to 6.3.6 has vulnerabilities related to permission and access control. These vulnerabilities stem from improper default permission settings of the Windows installer. The installer accepts files from any path, and the program folder and Bin directory...