CVE-2026-6516

CVE-2026-6516 affects Zohocorp ManageEngine ADAudit Plus versions before 8606. The issue is an unauthenticated remote code execution vulnerability caused by the vulnerable agent API, as described in the NVD entry. The CVSS‑3.1 metrics indicate a critical severity (10.0) with network attack vector...

CVE-2026-6516 Remote Code Execution

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...

EUVD-2026-48337

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...

CVE-2026-6516

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...

CVE-2026-6516: Improper Neutralization of Special Elements used in an OS Command

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...

ManageEngine AD360 Detection Tool

A proof of concept detection tool for ManageEngine AD360 products affected by CVE-2026-11374. The Python utility safely checks whether an ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, or ADAudit Plus deployment is AD360-integrated and therefore meets the exploit precondition for th...

PT-2026-64042

Name of the Vulnerable Software and Affected Versions ManageEngine ADAudit Plus versions prior to 8606 Description Unauthenticated remote code execution is possible due to a flaw in the agent API. Recommendations Update ManageEngine ADAudit Plus to version 8606 or later...

WordPress Brands for WooCommerce plugin <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Brands for WooCommerce versions = 3.8.8...

CVE-2026-42533 vulnerabilities

Vulnerabilities for packages: nginx-mainline, commercial-nginx-plus, nginx-stable, ingress-nginx-controller, ingress-nginx-controller-fips...

CVE-2026-60005 vulnerabilities

Vulnerabilities for packages: nginx-stable, commercial-nginx-plus, nginx-mainline...

GHSA-M73P-XG7Q-M8F2 vulnerabilities

Vulnerabilities for packages: nginx-stable, commercial-nginx-plus, nginx-mainline...

GHSA-VXCV-H5WJ-JXR5 vulnerabilities

Vulnerabilities for packages: nginx-stable, commercial-nginx-plus, nginx-mainline...

CVE-2026-56434 vulnerabilities

Vulnerabilities for packages: nginx-stable, commercial-nginx-plus, nginx-mainline...

GHSA-FXFG-V4RJ-HP95 vulnerabilities

Vulnerabilities for packages: nginx-mainline, commercial-nginx-plus, nginx-stable, ingress-nginx-controller, ingress-nginx-controller-fips...

EUVD-2026-46586

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++. Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

EUVD-2026-46585

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++. Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

CVE-2026-60179

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++. Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs

Apple has moved to address a security flaw in its Hide My Email service that enabled users' real email addresses to be unmasked, effectively undermining the feature's privacy guarantees. 404 Media reported Tuesday that a fix for the issue was deployed by Apple on July 3, 2026, after more than a...

EUVD-2026-41903

PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms...

PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms

Impact channelBinding=require connections can be silently downgraded from SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256 without it, losing the man-in-the-middle protection the setting is meant to guarantee. An attacker who can intercept the TLS connection triggers the downgrade...