CVE-2026-20289: Insertion of Sensitive Information into Log File

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...

PT-2026-68065

Name of the Vulnerable Software and Affected Versions Rancher Manager affected versions not specified Description When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints. This occurs because the audit...

PT-2026-68242

Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description A flaw in the logging subsystem allows an authenticated local attacker with low privileges to access sensitive data. The issue occurs because the system logs sensitive information. By...

CVE-2026-59675: Allocation of Resources Without Limits or Throttling

When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints. Because the audit middleware is positioned earlier in the handler chain than Rancher's APIBodyLimitingHandler, the body-size cap default 1 MiB is...

django-automated-logging (0.0.1a0) potentially affected by CVE-2026-15307 via django (1.10.0rc1)

django PYPI version 1.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-automated-logging 0.0.1a0 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

django-automated-logging (0.0.1a0) potentially affected by CVE-2026-15830 via django (1.10.0rc1)

django PYPI version 1.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-automated-logging 0.0.1a0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

django-automated-logging (0.0.1a0) potentially affected by CVE-2026-15830 via django (1.10.0rc1)

django PYPI version 1.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-automated-logging 0.0.1a0 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...

CLSA-2026-1779929356 TuxCare security update for org.apache.logging.log4j (1 CVE)

TuxCare rebuilt 32 org.apache.logging.log4j packages to address 1 CVE. Fixed in 2.17.1-tuxcare.2...

CLSA-2026-1776991059 TuxCare security update for org.apache.logging.log4j (2 CVEs)

TuxCare rebuilt 33 org.apache.logging.log4j packages to address 2 CVEs. Fixed in 2.17.2-tuxcare.1...

OMB M-26-14 Compliance: Adaptive Edge Logging for Federal CISOs

...

wp2shell

Command-Line Arguments Argument Type Default Description -u, --u...

Inefficient Algorithmic Complexity

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the IETFUtils.valueToString method, reached through X500Name.toString, equals, and hashCode via...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the IETFUtils.valueToString method, reached through X500Name.toString, equals, and hashCode via AbstractX500NameStyle, which escapes each special character with vBuf.insertindex, "\" on the same...

CVE-2026-20482

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...

CVE-2026-20482

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...

EUVD-2026-52072

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...

CVE-2026-20482

A vulnerability exists in the wlan STA FW where the system can become unresponsive due to logging issues. This flaw could lead to a remote (proximal/adjacent) denial of service without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: WCNCR00486...

CVE-2026-20482

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...

PT-2026-67170

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...

CVE-2026-20482: Allocation of Resources Without Limits or Throttling

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...