CVE-2026-86386

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special...

EUVD-2026-111854

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special...

PT-2026-128052

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special...

CVE-2026-105489

Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability (CWE-89) caused by the improper neutralization of special elements in an SQL command. A low-privileged attacker can exploit this flaw without user interaction to achieve arbitrary code execution in the context of the curre...

CVE-2026-105489 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

EUVD-2026-111225

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

CVE-2026-104351

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code (Code Injection) vulnerability (CWE-94). A low-privileged attacker can exploit this flaw to achieve arbitrary code execution in the context of the current user without requiring any user interaction. This vulner...

EUVD-2026-111117

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

CVE-2026-104349

Adobe Creative Cloud Desktop for Windows is affected by an Uncontrolled Search Path Element vulnerability (CWE-427 ). A low-privileged attacker could exploit this flaw to achieve arbitrary code execution in the context of the current user by tricking a victim into opening a malicious file. Adobe ...

PT-2026-126698

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

CVE-2026-115425

Multiple cross site scripting XSS vulnerabilities affect OPNsense firewall vesrion 26.7.11 and earlier allows low privileged attacker to execute Javascript in the context of another user visiting a specific page or clicking on a specifically crafted link...

CVE-2026-115425

The OPNsense firewall (versions 26.7.1_1 and earlier ) is affected by multiple cross-site scripting (XSS) vulnerabilities. These flaws allow a low privileged attacker to execute JavaScript in the context of another user who visits a specific page or interacts with a specifically crafted link. Whi...

CVE-2026-115425 Multiple cross-site scripting (XSS) in OPNsense

Multiple cross site scripting XSS vulnerabilities affect OPNsense firewall vesrion 26.7.11 and earlier allows low privileged attacker to execute Javascript in the context of another user visiting a specific page or clicking on a specifically crafted link...

CVE-2026-115425 Multiple cross-site scripting (XSS) in OPNsense

Multiple cross site scripting XSS vulnerabilities affect OPNsense firewall vesrion 26.7.11 and earlier allows low privileged attacker to execute Javascript in the context of another user visiting a specific page or clicking on a specifically crafted link...

EUVD-2026-109656

Multiple cross site scripting XSS vulnerabilities affect OPNsense firewall vesrion 26.7.11 and earlier allows low privileged attacker to execute Javascript in the context of another user visiting a specific page or clicking on a specifically crafted link...

PT-2026-123203

Multiple cross site scripting XSS vulnerabilities affect OPNsense firewall vesrion 26.7.1 1 and earlier allows low privileged attacker to execute Javascript in the context of another user visiting a specific page or clicking on a specifically crafted link...

Oracle VM VirtualBox 7.2.22 (October 2026 CPU)

The 7.2.20 versions of VM VirtualBox installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20...

Oracle VM VirtualBox 7.2.18 (October 2026 CPU)

The 7.2.16 versions of VM VirtualBox installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16...

Linux Distros Unpatched Vulnerability : CVE-2026-87301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2026-91484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: Java plugin. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit...