The vulnerabilities of Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA), as well as the Cisco Secure Firewall Management Center (formerly Cisco Firepower Management Center) software, are related to a flaw in the data protection mechanism. This flaw allows attackers to bypass existing security measures.

The vulnerabilities of Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA, as well as the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center software, are related to the compromise of the data protection...

CVE-2026-73589: Weak Encoding for Password

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information...

CVE-2026-73586: Insufficient Session Expiration

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism...

CVE-2026-90950: Protection Mechanism Failure

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the request, allowing unauthenticated users to create accounts without solving the reCAPTCHA the site has enabled...

CVE-2026-94251: Protection Mechanism Failure

A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue...

CVE-2026-91796: Protection Mechanism Failure

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2026-73587: Improper Certificate Validation

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering,...

The vulnerability in the `defaultSandboxPrepareStackTrace` function of the `lib/setup-sandbox.js` file in the `vm2` library of the NPM package manager allows a attacker to compromise the integrity of protected information.

The vulnerability of the defaultSandboxPrepareStackTrace function in the lib/setup-sandbox.js file of the vm2 library, a part of the npm package manager, is related to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker to compromise the integrity of the...

CVE-2026-79919: Protection Mechanism Failure

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LDPRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback so the dlopen call-stack heuristic sees a Python import frame, then use unhooked dlsym...

CVE-2026-79918: Protection Mechanism Failure

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LDPRELOAD sandbox hooks execve, execvpe, and execveat to prevent subprocess creation but does not hook fexecve. An authenticated attacker able to execute tool code can call fexecve to start a proces...

Exploit for Protection Mechanism Failure in Intel Transfer_Learning_Tool

Comprehensive Security Analysis of CVE-2026-39452: Protection...

CVE-2026-93763 Silent plaintext persistence via unresolved callable database name in encryption schema map

A protection mechanism failure in the object-document mapper's encryption configuration generation can cause fields that an application declared for client-side field-level encryption to be written and kept in cleartext, without any error or warning. A party holding ordinary read access to the...

CVE-2026-93763

This vulnerability affects Mongoid , a Ruby object-document mapper for MongoDB. A protection mechanism failure in the encryption configuration generation — specifically an unresolved callable database name in the encryption schema map — causes fields declared for client-side field-level encryptio...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure via sanitizeCryptoModule in lib/builtin.js, where a NodeVM that allowlists the crypto builtin exposes crypto.setFips...

CVE-2026-86796: Protection Mechanism Failure

The Hide My WP Ghost WordPress plugin before 7.0.11 does not verify that a request is a genuine WooCommerce request before disabling its firewall, threat-detection and login/URL-hiding protections, treating the mere presence of an attacker-suppliable request parameter as sufficient, which allows...

CVE-2026-86800: Protection Mechanism Failure

The Hide My WP Ghost WordPress plugin before 7.0.11 does not properly validate a loopback security-check request before disabling its login and URL hiding protection, dropping that protection precisely when the request's verification value is missing or incorrect, which any visitor can arrange,...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure in the node:sqlite module exposure within the sandbox environment when certain builtins are permitted. An attacker can...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure in the Promise.prototype.finally process. An attacker can execute arbitrary code by crafting an async function that...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure via the WebAssembly.compileStreaming and WebAssembly.instantiateStreaming functions. An attacker can gain access to the...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure through improper enforcement of the allowAsync option in the VM and NodeVM. An attacker can execute code asynchronously...