tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls...

CVE-2026-62657 Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models

A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control of the device...

CVE-2026-62657

CVE-2026-62657 concerns a certificate validation flaw in NETGEAR XR1000 Gaming Router and certain Nighthawk models. The issue could allow an unauthenticated attacker to remotely access and take control of the device due to weaknesses in certificate validation. The sources identify affected device...

CVE-2026-49791

Improper link resolution before file access 'link following' in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-57096 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

...

EUVD-2026-44275

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

EUVD-2026-44259

Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network...

CVE-2026-56647

CVE-2026-56647 is a Windows vulnerability in the Windows Remote Access Service Infrastructure where an integer overflow/wraparound can let an authorized attacker elevate privileges over a network. The affected component is the Windows Remote Access Service Infrastructure, and the root cause is an...

CVE-2026-56647 Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability

...

CVE-2026-56647 Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability

...

CVE-2026-50666

CVE-2026-50666 is a Windows Privilege Escalation vulnerability described as a use-after-free in the Windows Remote Access Connection Manager. The issue allows an authorized attacker to elevate privileges over a network. Public sources (NVD/NCSC/NVD-related) corroborate the impact and indicate Mic...

CVE-2026-50666 Windows Remote Access Elevation of Privilege Vulnerability

...

CVE-2026-50666 Windows Remote Access Elevation of Privilege Vulnerability

...

CVE-2026-50451

CVE-2026-50451 affects Windows Routing and Remote Access Service (RRAS): missing authentication for a critical function enables local privilege escalation by an authorized attacker. Documented impact is privilege escalation (local), base CVSSv3.1 7.1 (HIGH); remediation is Microsoft security upda...

CVE-2026-50451 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

...

CVE-2026-50365

CVE-2026-50365 describes an Elevation of Privileges in the Windows RPC API (RPC server) due to improper authentication, enabling an adjacent-network attacker to gain high-priority access. Public data confirms an adjacent-network attack vector with high severity (CVSS ~8.0). The affected component...

CVE-2026-50365 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

...

CVE-2026-50365 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

...

CVE-2026-49791 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

...

CVE-2026-49791 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

...