CVE-2026-87086

Tanium addressed a denial of service vulnerability in Provision...

CVE-2026-87085

Tanium addressed a SQL injection vulnerability in Provision...

CVE-2026-87086 Tanium addressed a denial of service vulnerability in Provision.

Tanium addressed a denial of service vulnerability in Provision...

EUVD-2026-111257

Tanium addressed a denial of service vulnerability in Provision...

CVE-2026-87086

Tanium addressed a denial of service vulnerability in its Provision product. The vulnerability is associated with CWE-690 (Unchecked Return Value to NULL Pointer Dereference) and has a High base severity score of 7.5. No specific details regarding the affected component or exploit status are prov...

EUVD-2026-111240

Tanium addressed a SQL injection vulnerability in Provision...

CVE-2026-87085

Tanium addressed a SQL injection vulnerability (CWE-89) in the Provision component. While the specific root cause and affected versions are not detailed in the provided documents, the vulnerability allows for potential unauthorized data manipulation or access via network vectors. The base severit...

CVE-2026-87085 Tanium addressed a SQL injection vulnerability in Provision.

Tanium addressed a SQL injection vulnerability in Provision...

CVE-2026-113644

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands edgelet provision and edgelet config cert on supported releases; iofog-agent provision and iofog-agent...

CVE-2026-113644 iofogctl command injection via Controller provisioning response

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands edgelet provision and edgelet config cert on supported releases; iofog-agent provision and iofog-agent...

CVE-2026-113644

Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1 are vulnerable to command injection . The root cause is the unsanitized concatenation of the provisioning key and CA certificate from the Controller API into shell commands (such as edgelet provision or iofog-agent p...

CVE-2026-113644

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands "edgelet provision" and "edgelet config cert" on supported releases; "iofog-agent provision" and...

Chromium CVE-2026-106361: Incorrect provision of specified functionality in Mobile

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2026-127196

Tanium addressed a denial of service vulnerability in Provision...

PT-2026-126387

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands edgelet provision and edgelet config cert on supported releases; iofog-agent provision and iofog-agent...

PT-2026-127195

Tanium addressed a SQL injection vulnerability in Provision...

CVE-2026-106361

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

TVT DVR Device Info Disclosure (CVE-2024-7339)

Exploits CVE-2024-7339 in TVT/Provision-ISR/AVISION DVRs: unauthenticated POST /queryDevInfo leaks firmware, network, and device metadata. !/usr/bin/env python3 -- coding: utf-8 -- """TVT DVR queryDevInfo disclosure CVE-2024-7339.""" from kittysploit import from lib.protocols.http.httpclient impo...

foreman: unauthenticated information disclosure via provisioning token validation flaw

A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic logic flaw in hostverifier.rb. The application verifies the database state of a provisioning token rather than its actual presence in the incoming HTTP...

CVE-2026-12423 Foreman: unauthenticated information disclosure via provisioning token validation flaw

A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic logic flaw in hostverifier.rb. The application verifies the database state of a provisioning token rather than its actual presence in the incoming HTTP...