CVE-2026-26289 Subnet Solutions PowerSYSTEM Center Incorrect Authorization

PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions only...

CVE-2026-26289

PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions only...

CVE-2026-33570 Subnet Solutions PowerSYSTEM Center Incorrect Authorization

PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normally limited by operational permissions...

org.apache.dubbo:dubbo-compatible (>=3.2.0-beta.6, <=3.3.0-beta.1), org.apache.dubbo:dubbo-remoting-http (>=3.2.0-beta.6, <=3.3.0-beta.1) +4 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.87)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.87 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.dubbo:dubbo-compatible =3.2.0-beta.6, =3.2.0-beta.6, =3.2.0-beta....

com.alibaba:dubbo (2.6.0), com.alibaba:dubbo-remoting-http (>=2.6.1, <=2.6.2) +7 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.alibaba:dubbo 2.6.0 - com.alibaba:dubbo-remoting-http =2.6.1, =2.6.1,...

com.51degrees:geo-location.web.examples.mvc (>=4.4.29, <=4.4.30), com.51degrees:geo-location.web.examples.servlet (>=4.4.29, <=4.4.30) +7 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.29, =4.4.29, =4.4.29,...

org.apache.dubbo:dubbo-compatible (>=3.2.0-beta.6, <=3.3.0-beta.1), org.apache.dubbo:dubbo-remoting-http (>=3.2.0-beta.6, <=3.3.0-beta.1) +4 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.87)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.87 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.dubbo:dubbo-compatible =3.2.0-beta.6, =3.2.0-beta.6, =3.2.0-beta....

org.apache.dubbo:dubbo-compatible (>=3.2.0-beta.6, <=3.3.0-beta.1), org.apache.dubbo:dubbo-remoting-http (>=3.2.0-beta.6, <=3.3.0-beta.1) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.87)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.87 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.dubbo:dubbo-compatible =3.2.0-beta.6, =3.2.0-beta.6, =3.2.0-beta....

org.apache.dubbo:dubbo-compatible (>=3.2.0-beta.6, <=3.3.0-beta.1), org.apache.dubbo:dubbo-remoting-http (>=3.2.0-beta.6, <=3.3.0-beta.1) +4 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.87)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.87 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.dubbo:dubbo-compatible =3.2.0-beta.6, =3.2.0-beta.6, =3.2.0-beta....

com.alibaba:dubbo (2.6.0), com.alibaba:dubbo-remoting-http (>=2.6.1, <=2.6.2) +7 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.alibaba:dubbo 2.6.0 - com.alibaba:dubbo-remoting-http =2.6.1, =2.6.1,...

com.51degrees:geo-location.web.examples.mvc (>=4.4.26, <=4.4.28), com.51degrees:geo-location.web.examples.servlet (>=4.4.26, <=4.4.28) +7 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.98)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.98 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.26, =4.4.26, =4.4.26,...

com.alibaba:dubbo (2.6.0), com.alibaba:dubbo-remoting-http (>=2.6.1, <=2.6.2) +7 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.alibaba:dubbo 2.6.0 - com.alibaba:dubbo-remoting-http =2.6.1, =2.6.1,...

org.apache.dubbo:dubbo-compatible (>=3.2.0-beta.6, <=3.3.0-beta.1), org.apache.dubbo:dubbo-remoting-http (>=3.2.0-beta.6, <=3.3.0-beta.1) +4 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.87)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.87 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.dubbo:dubbo-compatible =3.2.0-beta.6, =3.2.0-beta.6, =3.2.0-beta....

org.apache.dubbo:dubbo-compatible (>=3.2.0-beta.6, <=3.3.0-beta.1), org.apache.dubbo:dubbo-remoting-http (>=3.2.0-beta.6, <=3.3.0-beta.1) +4 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.5.87)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.87 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.dubbo:dubbo-compatible =3.2.0-beta.6, =3.2.0-beta.6, =3.2.0-beta....

com.51degrees:geo-location.web.examples.mvc (>=4.4.29, <=4.4.30), com.51degrees:geo-location.web.examples.servlet (>=4.4.29, <=4.4.30) +7 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.5.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.29, =4.4.29, =4.4.29,...

ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0, <=4.7.4) +1906 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.21)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41284 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-16643259...

EUVD-2026-29438

Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have created clusters with an insecure default password which could have been exploited by a remote attacker to gain full administrative access to the database. Exploitation required...

CVE-2026-7428

Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have created clusters with an insecure default password which could have been exploited by a remote attacker to gain full administrative access to the database. Exploitation required...

EUVD-2026-29407

The HEL Online Classroom: AI-powered Online Classrooms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.3. This is due to a missing capability check on a REST API endpoint registered with a permissioncallback of 'returntrue', which bypasses all...

EUVD-2026-29394

The iPOSpays Gateways WC plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.3.7. This is due to the plugin exposing a REST API endpoint /wp-json/ipospays/v1/savesettings with 'permissioncallback' set to 'returntrue', which allows unauthenticated access...