Oracle Solaris Driver Data Access

The vulnerability of the Oracle Solaris operating system is related to insufficient protection for service data. Exploiting this vulnerability can allow an attacker to gain access to read, modify, and delete data...

EPM Agent Cloud Oracle Read Modify Delete

The vulnerability of the EPM Agent component in the Oracle Planning and Budgeting Cloud Service relates to insufficient protection of operational data. Exploiting this vulnerability may allow attackers to gain read, modify, and delete access to data...

Oracle Java SE AWT JavaFX Data Access

The vulnerabilities of the AWT and JavaFX components of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, are related to insufficient protection of application data. Exploiting these vulnerabilities can allow an...

EPM Agent Unauthorized Access

The vulnerability of the EPM Agent component in the Oracle Planning and Budgeting Cloud Service relates to insufficient protection of operational data. Exploiting this vulnerability may allow attackers to gain unauthorized access to protected information...

Oracle Solaris Driver Data Access

The vulnerability of the Oracle Solaris operating system is related to insufficient protection for service data. Exploiting this vulnerability can allow an attacker to gain access to read, modify, and delete data...

CVE-2025-58742

Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle AiTM by modifying the 'Server' field to redirect client...

Qualys Named a Leader and Outperformer in the 2025 GigaOm Radar for CNAPP

We’re proud to share that Qualys has been recognized as a Leader and Outperformer in the 2025 GigaOm Radar Report for Cloud-Native Application Protection Platforms CNAPP. This year’s evaluation underscores an important reality of the CNAPP market: while 18 vendors were evaluated , only a small...

CVE-2026-20080

A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding. This vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit th...

CVE-2026-20080 Cisco IEC6400 Edge Compute Appliance SSH Denial of Service Vulnerability

A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding. This vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit th...

CVE-2026-20080

CVE-2026-20080 affects Cisco IEC6400 Wireless Backhaul Edge Compute Software. The SSH service can be flooded by unauthenticated remote attackers, causing the SSH server to become unresponsive while other operations stay stable. Reported by Cisco and mirrored in multiple feeds, the issue arises fr...

EUVD-2026-3662

A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding. This vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit th...

Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability

A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding. This vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit th...

Cisco IEC6400 Wireless Backhaul Edge Compute Software: Resource Management Error Vulnerability

Cisco IEC6400 Wireless Backhaul Edge Compute Software is a system firmware for edge computing devices developed by the American company Cisco. There is a resource management vulnerability in Cisco IEC6400 Wireless Backhaul Edge Compute Software. This vulnerability stems from the lack of effective...

CVE-2026-20080: Uncontrolled Resource Consumption

A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding. This vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit th...

Dell PowerScale OneFS Auth Bypass

The vulnerability of the Dell PowerScale OneFS operating system lies in the insufficient limitation on authentication attempts. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

IntraService Data Protection Unauthorized Access

The vulnerability of the IntraService customer interaction system is related to a breach in the data protection mechanism. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected information...

Windows Management Services Information Disclosure

The vulnerability of the Windows Management Services management tool for operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2025-58741

The CVE-2025-58741 entry concerns Milner ImageDirector Capture. Affected product/versions: ImageDirector Capture 7.0.9 through 7.6.3.25808. Issue: Insufficiently Protected Credentials vulnerability in the Credential Field allows retrieval of credential material and enables database access. Impact...

CVE-2025-58741 Insecure Masked Credential Fields Enable Database Credential Access in Milner ImageDirector Capture

Insufficiently Protected Credentials vulnerability in the Credential Field of Milner ImageDirector Capture allows retrieval of credential material and enables database access.This issue affects ImageDirector Capture: from 7.0.9 through 7.6.3.25808...

Four priorities for AI-powered identity and network access security in 2026

No doubt, your organization has been hard at work over the past several years implementing industry best practices, including a Zero Trust architecture. But even so, the cybersecurity race only continues to intensify. AI has quickly become a powerful tool misused by threat actors, who use it to...