.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-53791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sendi...

CVE-2026-18673

Kong Mesh CVE-2026-18673 affects kuma-dp readiness service. When Envoy admin API is exposed on a TCP port (9902) while the Envoy admin API is connected to a Unix domain socket by default, the readiness endpoint forwards a large portion of the Envoy admin API to any caller on the port without auth...

CVE-2026-65806

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...

CVE-2026-40375

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

EUVD-2026-56565

Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network...

CVE-2026-62902

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

Azure CycleCloud Information Disclosure Vulnerability

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...

Microsoft QUIC Information Disclosure Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

Microsoft Teams iOS Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

.NET Information Disclosure Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

CVE-2026-62900

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-70693

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...

GHSA-89XV-2M56-2M9X

creationtimestamp| type| source ---|---|--- 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/4a24aedae8017b5aebed0300d07c7ee9 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/8b54bdd2fe9905dc89b9c8ccf42f5fc4 2026-08-17 10:21:36+00:00| seen|...

EUVD-2026-54320

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

Medixant RadiAnt DICOM

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to cause the application to crash if a maliciously crafted DICOM file is opened. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

CVE-2026-71264

CVE-2026-71264 affects WLED. The GET /json/cfg endpoint discloses the device’s general configuration (network, hardware, LED setup) to any unauthenticated client because it calls serveJson() without a settings-PIN check, unlike the /edit endpoint which enforces correctPIN. Additionally, the globa...