CVE-2026-71570 Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to comicagenda only could enumerate Joomla user profiles...

CVE-2026-71570

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to comicagenda only could enumerate Joomla user profiles...

CVE-2026-71571

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL...

EUVD-2026-58804

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL...

CVE-2026-71571

Technical details are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2025-7639

The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group "DNA Apps"...

CVE-2025-7639

The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group "DNA Apps"...

CVE-2026-57469

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery CSRF vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator,...

CVE-2026-57469 Cross-Site Request Forgery (CSRF) in KUNBUS PiCtory

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery CSRF vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator,...

GO-2025-4161 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, victorialogs-fips, victorialogs...

GO-2026-5298 vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, tbot, teleport...

GO-2025-3504 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, tigera-operator...

GO-2025-3690 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator-fips, seaweedfs-operator...

GO-2021-0066 vulnerabilities

Vulnerabilities for packages: spark-operator...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2026-4760 vulnerabilities

Vulnerabilities for packages: neuvector, teleport-operator-fips, teleport, neuvector-fips...

GO-2026-4764 vulnerabilities

Vulnerabilities for packages: neuvector, teleport-operator-fips, teleport, neuvector-fips...

GO-2026-5339 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-fips, kube-logging-operator...

GO-2026-4384 vulnerabilities

Vulnerabilities for packages: virt-handler, docker-machine-driver-harvester, harvester-fips, virt-controller-fips, virt-launcher, harvester, virt-operator-fips...