CVE-2026-48098

NexTor IP Changer (command‑line tool) is affected by unsafe use of privileged commands prior to version 2.0.0. The root cause is that the application executes privileged system commands using sudo and Python's shell=True inside its logic, which can allow privileged commands to run in environments...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-64637

Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account...

CVE-2026-64637

Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account...

EUVD-2026-54563

Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account...

CVE-2026-64637

CVE-2026-64637 : In Plesk, an improper privilege management flaw in the XML-RPC API (affecting versions prior to 18.0.80) allows an authenticated reseller to obtain an administrative session for the root user account. The issue is tied to how privileges are handled within the XML-RPC API, enablin...

CVE-2026-17601

A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment...

CVE-2026-17594

Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability CWE-863 in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of...

CVE-2026-14644

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege...

EUVD-2026-54522

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege...

CVE-2026-14644

Nexus Repository 3 contains a privilege escalation vulnerability in the REST privileges API. An authenticated user who can manage privileges can elevate to full administrator under certain role configurations by abusing a type-confusion flaw in the privilege update endpoint. The CVE entry describ...

CVE-2026-14644 Nexus Repository 3 - Privilege Escalation

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege...

EUVD-2026-54521

An account holding the nexus:settings:update permission in Nexus Repository 3 or the equivalent nexus:settings permission in the legacy Nexus Repository 2 could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of...

EUVD-2026-54514

A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment...

CVE-2026-17601

A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment...

CVE-2026-17601 Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator

A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment...

CVE-2026-17601

CVE-2026-17601 affects Nexus Repository 3. A user with permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions, including full administrative access, without additional authorization checks. The vulnerability ena...

CVE-2026-56794

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2026-51400

A flaw was found in Vim. A local attacker can exploit improper handling of filenames within the vmsfixfilename function to achieve arbitrary code execution. This vulnerability enables a local user to escalate privileges or impact system integrity...

CVE-2026-56794

CVE-2026-56794 affects Dell OpenManage Server Administrator, prior to version 11.1.0.2. It is a Relative Path Traversal vulnerability that could be exploited by a low-privileged attacker with remote network access to gain filesystem access. The provided metrics assign a CVSS v3.1 base score of 6....