CVE-2026-16756

Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections and sending partial requests that are never completed,...

EUVD-2026-48294

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home proxy server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the proxy server address parameter to /Archiver/CallHomeSettingsWizard.aspx. The injected paylo...

CVE-2026-65916 CyberPanel Missing Authorization in cancelBackupCreation Handler

CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users to kill, delete, and corrupt other tenants' backups. Attackers can send crafted POST requests with arbitrary backupCancellationDoma...

CVE-2026-65916

CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users to kill, delete, and corrupt other tenants' backups. Attackers can send crafted POST requests with arbitrary backupCancellationDoma...

MINI-VC5R-55PC-RFHM

Bulletin has no description...

MINI-8FPX-FFJ3-29VW

Bulletin has no description...

EUVD-2026-48242

SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/ link references a name that is not an installed plugin, the application opens a custom tab and inserts the link's icon parameter into the tab header via innerHTML without...

RHSA-2026:44271 Red Hat Security Advisory: dogtag-pki security update

Bulletin has no description...

RHSA-2026:43460 Red Hat Security Advisory: libreoffice security update

Bulletin has no description...

RHSA-2026:43400 Red Hat Security Advisory: dogtag-pki security update

Bulletin has no description...

RHSA-2026:42122 Red Hat Security Advisory: sssd security update

Bulletin has no description...

RHSA-2026:41937 Red Hat Security Advisory: sssd security update

Bulletin has no description...

RHSA-2026:41901 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Bulletin has no description...

CVE-2024-58330

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

EUVD-2026-47895

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...

ECHO-18B0-99B8-3F51

Bulletin has no description...

CVE-2026-59677

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10...

MINI-QQHR-77QR-H867

Bulletin has no description...

MINI-M4VQ-XP24-XW26

Bulletin has no description...

EUVD-2024-55694

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...