CVE-2026-56794

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2026-56793

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-56793

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

EUVD-2026-54474

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

remote limited file-write as root via discovery in open-iscsi

...

CPDLC over ATN-B1 Vulnerabilities

ADVISORY SUMMARY ATN-B1 CPDLC relies on legacy clear text unauthenticated radio frequency links. Research demonstrates that these characteristics allow unauthorized message injection, denial-of-service conditions, and forced session resets. These vulnerabilities do not constitute an unsafe...

PT-2026-69027

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.2 Description A Relative Path Traversal issue exists where a low privileged attacker with remote access could potentially gain unauthorized access to the filesystem. Relative Path...

CVE-2026-56794: Relative Path Traversal

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2026-56793: Improper Authentication

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

PT-2026-69026

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.2 Description An improper authentication issue allows an unauthenticated attacker with remote access to potentially gain unauthorized access to the system. Recommendations Update De...

HPESBNW05119 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking Private 5G Core

Potential Security Impact: Remote: Access Restriction Bypass, Authentication Bypass, Escalation of Privilege, Gain Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Aruba Networking Private 5G Core 1.26.1.2 and prior CVSS Scores: | CVE | CVSS Vector | Base...

CVE-2026-15732 WGDashboard Server-Side Request Forgery Vulnerability

A Server-Side Request Forgery SSFR vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses...

MAL-2026-13432 Malicious code in @junyoung-kim/reins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f53adf4aaeaffcb1bf0698a8fcb748f12522321b24cf44802d0b9f1b441475 The reins CLI spawns a local pseudo-terminal via node-pty default /bin/bash or cmd.exe and bridges it bidirectionally to a hardcoded WebSocket endpoi...

Malicious code in @ccfly/setup-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faefd7405c377b2260ca4d731c9234a294d8d07b559646b8fc58be5488906eec The package ships a 6.3 MB linux/arm64 Go binary at bin/ccfly-setup. The binary embeds github.com/creack/pty PTY spawner and...

CVE-2026-64993

Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

CVE-2026-19006 mf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorization

A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made...

Johnson Controls Inc. TL280

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to access sensitive information on the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...

CVE-2026-18993

A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/modeltools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The explo...

CVE-2026-18993

The CVE-2026-18993 entry relates to NousResearch hermes-agent, specifically the Memory Toolset component, file hermes-agent/model_tools.py. The description indicates improper access controls in this functionality and an exploitable condition that can be triggered remotely. Affected versions inclu...

CVE-2026-18990

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The...