1119 matches found
CVE-2025-65318-and-CVE-2025-65319
PoC for CVE-2025-65318 and CVE-2025-65319 CVE-2025-65318 BDU:2025-13740: When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of bo...
Eltex SMG bridging gateway RCE
The vulnerability in the WEB interface of the remote administration web interface for the Eltex SMG microprogramming switchgear is related to a data protection mechanism failure. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code...
CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass
CVE-2026-21510 - Windows Shell Security Feature Bypass Vulnerability Repository Title Suggestion: CVE-2026-21510-Windows-Shell-Bypass-Analysis This README provides a comprehensive overview of CVE-2026-21510 , a high-severity, actively exploited zero-day vulnerability patched by Microsoft in the...
EUVD-2026-124165
Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific fl...
CVE-2026-122044 Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability
Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific fl...
CVE-2026-122044: Philips Hue Bridge Pro: Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability
Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific fl...
EUVD-2026-121640
Protection mechanism failure for some BigDL before version 2.4.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occu...
PT-2026-141872
Protection mechanism failure for some BigDL before version 2.4.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occu...
CVE-2026-102618 IBM i is Affected by a Protection Mechanism Failure
IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated user to indirectly disable system auditing, which they otherwise don't have authority to disable...
CVE-2026-123556
ZcashFoundation Zebra from 4.5.0 before 7.0.0 contains a protection mechanism failure that bans honest peers by scoring mempool lock-time rejections at the ban threshold. Attackers can broadcast transactions locked until the current height right after each block, causing lagging nodes to ban hone...
CVE-2026-123556 Zebra 4.5.0 before 7.0.0 Honest Peer Ban via Mempool Lock-Time Scoring
ZcashFoundation Zebra from 4.5.0 before 7.0.0 contains a protection mechanism failure that bans honest peers by scoring mempool lock-time rejections at the ban threshold. Attackers can broadcast transactions locked until the current height right after each block, causing lagging nodes to ban hone...
EUVD-2026-119441
ZcashFoundation Zebra from 4.5.0 before 7.0.0 contains a protection mechanism failure that bans honest peers by scoring mempool lock-time rejections at the ban threshold. Attackers can broadcast transactions locked until the current height right after each block, causing lagging nodes to ban hone...
CVE-2026-123556 Zebra 4.5.0 before 7.0.0 Honest Peer Ban via Mempool Lock-Time Scoring
ZcashFoundation Zebra from 4.5.0 before 7.0.0 contains a protection mechanism failure that bans honest peers by scoring mempool lock-time rejections at the ban threshold. Attackers can broadcast transactions locked until the current height right after each block, causing lagging nodes to ban hone...
CVE-2026-123556
ZcashFoundation Zebra versions 4.5.0 before 7.0.0 are susceptible to a protection mechanism failure (CWE-693) involving mempool lock-time scoring. An attacker can broadcast transactions locked until the current height immediately following each block. This causes lagging nodes to reach a ban thre...
PT-2026-139837
Name of the Vulnerable Software and Affected Versions ZcashFoundation Zebra versions 4.5.0 through 6.9.9 Description A protection mechanism failure allows attackers to cause lagging nodes to ban honest relaying peers for 24 hours or until a restart. This occurs because the system scores mempool...
CVE-2026-123556: ZcashFoundation zebra: ZcashFoundation Zebra from 4.5.0 before 7.0.0 contains a protection mechanism failure that bans honest peers by scoring…
ZcashFoundation Zebra from 4.5.0 before 7.0.0 contains a protection mechanism failure that bans honest peers by scoring mempool lock-time rejections at the ban threshold. Attackers can broadcast transactions locked until the current height right after each block, causing lagging nodes to ban hone...
Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service, which listens on TCP port 443 by default. The issue...
Security Bulletin: IBM i is Affected by a Protection Mechanism Failure [CVE-2026-102618]
Summary IBM i is vulnerable to a user disabling system auditing due to a protection mechanism failure CVE-2026-102618 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-102618 DESCRIPTION: IBM i could allow an authenticated user to indirectly disable system...