CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

CVE-2026-110866

Versions of Renovate prior to 44.61.3 are vulnerable to a protection mechanism bypass (CWE-693). The flaw allows an attacker to skip minimumReleaseAge checks when a user requests a PR rebase using the rebase/retry checkbox. This enables an attacker who publishes a malicious dependency to have tha...

CVE-2026-110689

A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The...

CVE-2026-110689

A security flaw exists in OpenClaw ClawScan up to version 0.1.6 , specifically within the Static Scanner component. The vulnerability affects the shouldSkipTargetPath function in the internal/runner/runner.go file, leading to a protection mechanism failure (CWE-693) when manipulated. This flaw re...

CVE-2026-110689 OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism

A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The...

CVE-2026-110689 OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism

A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The...

EUVD-2026-101661

A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The...

CVE-2026-35161

Dell PowerScale InsightIQ , versions 5.2.0 through 6.3.0 , is affected by an Overly Restrictive Account Lockout Mechanism vulnerability (CWE-645). An unauthenticated attacker with remote access could exploit this flaw to cause a Denial of Service (DoS) . Documentation regarding specific exploit a...

CVE-2026-108071 Improper Multi-Factor Authentication Validation Allows Authentication Bypass

Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication MFA mechanism. A remote attacker authenticated with valid first-factor credentials could bypass the second-factor verification because the authentication flow does not correctly apply the MFA validation...

CVE-2026-110689: Protection Mechanism Failure

A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The...

ROS-20261014-73-0213

The vulnerability in the kernel-lt is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to circumvent existing security restrictions...

CVE-2026-110866: Protection Mechanism Failure

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

PT-2026-114180

Name of the Vulnerable Software and Affected Versions Renovate versions prior to 44.61.3 Description A protection mechanism bypass exists that allows minimumReleaseAge checks to be skipped when a user requests a Pull Request PR rebase using the rebase/retry checkbox. This allows an attacker to...

CVE-2026-70185

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally...

CVE-2026-90322

A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System 2 cluster heartbeat mechanism. When a local node within the cluster is reset, an internal flag is not properly cleared, leading to an inconsistent state. This inconsistency can cause the system's heartbeat monitoring process ...

CVE-2026-90301

A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System version 2 heartbeat mechanism. This vulnerability arises from a race condition during the management of heartbeat regions and their associated network handlers. A remote attacker could exploit this timing issue to trigger a...

Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2026-16830 DESCRIPTION: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote...

PT-2026-112286

Name of the Vulnerable Software and Affected Versions Windows PowerShell affected versions not specified Description A protection mechanism failure allows an authorized attacker to locally bypass a security feature, which can lead to an impact on the system. Recommendations At the moment, there i...

Cisco Secure Workload protection Multi-cloud Data Centers Compromise Data Compromise

The vulnerability of the Cisco Secure Workload protection mechanism for multi-cloud data centers previously known as Tetration is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected...

Tencent AI-Infra-Guard Code Execution

The vulnerability of the Tencent AI-Infra-Guard software platform for security testing involves a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...