EUVD-2026-72489

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information...

EUVD-2026-72482

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to...

CVE-2026-80057

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

EUVD-2026-72463

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...

CVE-2026-78488

Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) contain an OS Command Injection vulnerability caused by improper neutralization of special elements in OS commands. A low-privileged remote attacker could exploit this to achieve command ex...

CVE-2026-80128

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass...

CVE-2026-80056

Dell Secure Connect Gateway (SCG) 5.0 is affected by an Insertion of Sensitive Information into Log File vulnerability. A low-privileged attacker with local access could potentially exploit this flaw, leading to information exposure (high confidentiality impact; no integrity or availability impac...

CVE-2026-80057

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

CVE-2026-80057

Dell Secure Connect Gateway (SCG) 5.0 contains a Use of Hard-coded Cryptographic Key vulnerability in Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00. A low-privileged attacker with local access can exploit this to achieve information disclosure (high confident...

EUVD-2026-72408

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass...

CVE-2026-80130

CVE-2026-80130 affects Dell Secure Connect Gateway (SCG) 5.0 , specifically the Appliance (versions prior to 5.36.00.16 ) and the Application (versions prior to 5.36.00.00 ). The root cause is a Relative Path Traversal vulnerability that allows a low-privileged attacker with remote access to achi...

CVE-2026-80130

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution...

CVE-2025-65271

CVE-2025-65271 PoC for CVE-2025-65271 How to run? node server.js Description Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard...

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "Qsync Central にリンク追従の脆弱性が報告されています。この脆弱性が悪用されると、ユーザーアクセスを取得したリモートの攻撃者がファイルシステムを意図しない場所にたどることができる可能性があります。" 発見日： 22 Apr...

CVE-2023-32707

CVE-2023-32707 exploitdb で報告されたCVEに基づく改良されたPOCエクスプロイト Exploit Title: Splunk 9.0.5 - 管理者アカウントの乗っ取り CVE: CVE-2023-32707 概要 このスクリプトはSplunk 9.0.5の脆弱性を悪用し、管理者アカウントの乗っ取りを可能にします。このエクスプロイトは、edituser 機能を持つ低権限ユーザーを利用して権限を昇格させます。 前提条件 Python 3.x 必要なPythonパッケージ（pip3 install -r requirements.txt でインストール）:...

EUVD-2026-71864

The Events Calendar WordPress plugin before 6.17.3.1 does not restrict non-public content to the users entitled to read it on its public REST archives, allowing users with a low-privilege role such as contributor to read the full contents of every unpublished record on the site, including other...

CVE-2026-52771

YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage interpolates a page tag retrieved from the database into a DELETE FROM …links WHERE totag = '$tag' query without escaping. The page tag is attacker-controlled — the POST /api/pages/tag A...

CVE-2026-63464

CVE-2026-63464 affects nebula-mesh , a self-hosted control plane for Slack Nebula mesh VPN, in versions 0.6.0 through before 0.7.2 . The vulnerability is an SSRF that arises because non-admin operators (role user) can set allow_private: true on their own webhook subscription via POST/PATCH /api/v...

CVE-2026-75167

A broken access control vulnerability in the ugw-usr-edit method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to change the password of arbitrary accounts...

EUVD-2026-71146

Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. Attackers with low privileges can read restricted documents within their team or cross-tenant by leveraging missing ownership validation on document data...