CVE-2026-80178

Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Privilege Management vulnerability. Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected. A low-privileged attacker with local access could potentially exploit this flaw to achieve privilege esc...

EUVD-2026-72322

Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile because the ACL entry for templates/uploadFile used the wildcard . This bypasses the intended role restrictions applied to neighboring template-management operations. The upload handler accepts...

PT-2026-86822

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...

PT-2026-86827

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to informati...

PT-2026-86807

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass...

PT-2026-86782

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges...

PT-2026-86809

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution...

PT-2026-86842

Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description An improper locking issue exists where a low privileged attacker with remote access could potentially exploit the flaw to gai...

PT-2026-86837

Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description An incorrect permission assignment for critical resources allows a low privileged attacker with local access to potentially...

CVE-2026-80130: Relative Path Traversal

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution...

CVE-2026-80126: Improper Locking

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker...

security-report-for-ruoyi-dictionary-preview-stored-xss

RuoYi 4.8.3 Dictionary Preview Stored XSS English security ad...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022313 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022280 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022343 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022334 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45,...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022324 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022354 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45,...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022349 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45,...

EUVD-2026-71864

The Events Calendar WordPress plugin before 6.17.3.1 does not restrict non-public content to the users entitled to read it on its public REST archives, allowing users with a low-privilege role such as contributor to read the full contents of every unpublished record on the site, including other...