5897 matches found
PT-2026-95586
Name of the Vulnerable Software and Affected Versions cockpit-machines affected versions not specified Description A flaw in the cockpit-machines component allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords. This occurs because the component...
You Shall Not Pass into Ring-0! a User Privacy-Friendly Anti-Cheat Architecture for Personal Computers
Kernel-level anti-cheats are effective against malicious player behavior in competitive video games, but raise significant user privacy concerns regarding installing unverifiable components at privileged modes i.e., ring-0 in x86. While existing research has focused on improving the effectiveness...
Astra Linux – Vulnerability in OVN
A flaw was discovered in the Open Virtual Network OVN. Specially crafted UDP packets may bypass egress access control lists ACLs in OVN installations that are configured with a logical switch equipped with DNS records. This occurs if the same switch has any egress ACLs configured. This issue can...
Astra Linux – Vulnerability in Linux, Linux 5.10
A issue was discovered in the x86 KVM subsystem of the Linux kernel before version 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVMVCPUPREEMPTED situations...
Docker Containers Vs. Virtual Machines: A Comparative Study of Architecture, Performance, Configuration, and Security
Modern application platforms must isolate workloads while preserving deployment speed, portability, resource efficiency, and security. Virtual machines VMs and Docker containers address this requirement at different abstraction layers: VMs virtualize hardware and run independent guest operating...
Linux Distros Unpatched Vulnerability : CVE-2026-84165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an...
smolvm v1.8.3
smolvm Branchable microVMs for AI agents. Embed lightweight virtual machines into your software, portable dev environments, and local sandboxing. Install brew install smol-machines/tap/smolvm macOS Homebrew curl -sSL https://smolmachines.com/install.sh | bash macOS + Linux Windows: unzip the...
EUVD-2026-66768
Simple Machines Forum SMF through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the user parameter. Attackers can exploit th...
CVE-2026-43621
Simple Machines Forum SMF through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the user parameter. Attackers can exploit th...
CVE-2026-43621
Simple Machines Forum SMF through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the user parameter. Attackers can exploit th...
CVE-2026-43621 Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load()
Simple Machines Forum SMF through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the user parameter. Attackers can exploit th...
CVE-2026-43621 Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load()
Simple Machines Forum SMF through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the user parameter. Attackers can exploit th...
CVE-2026-43621
Simple Machines Forum (SMF) through 2.1.7 contains an authorization state-confusion vulnerability in the profile loader (Profile::load()). By supplying multiple values for the user parameter, an authenticated low-privileged user can exploit a mismatch between Profile::$member and User::$me->is...
CVE-2026-43621 Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load()
Simple Machines Forum SMF through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the user parameter. Attackers can exploit th...
PT-2026-82312
Simple Machines Forum SMF through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the user parameter. Attackers can exploit th...
CVE-2026-43621: Incorrect Authorization
Simple Machines Forum SMF through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the user parameter. Attackers can exploit th...
EUVD-2026-63629
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
CVE-2026-69543
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
CVE-2026-69543 Azure Virtual Machines Elevation of Privilege Vulnerability
...
CVE-2026-69543
An SSRF vulnerability in Azure Virtual Machines allows an authorized low-privilege attacker to elevate privileges over a network, with a HIGH CVSS 3.1 base score of 8.5. No patch version, workaround, or exploitation evidence is provided in the documents.