CVE-2026-63695

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Session theft...

Ivanti Cloud Services Appliance - Path Traversal

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. id: CVE-2024-8963 info: name: Ivanti Cloud Services Appliance - Path Traversal author: johnk3r severity: critical description: | Path Traversal in the Ivanti CSA befo...

CVE-2026-79409

An issue in Webkul Bagisto 2.4.9 allows a remote attacker to obtain sensitive information via the add-to-cart API and the downloadable fulfilment components...

ROS-20260915-73-0047

The vulnerability in Chromium is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-66890: Use of Hard-coded Credentials

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...

CVE-2026-81240: Unrestricted Upload of File with Dangerous Type

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-81239: Unrestricted Upload of File with Dangerous Type

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-81238: Missing Authentication for Critical Function

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-81237: Improper Authentication

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-81236: Unrestricted Upload of File with Dangerous Type

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-81235: Missing Cryptographic Step

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-63696: Download of Code Without Integrity Check

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2026-63695: Improper Access Control

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Session theft...

PT-2026-93120

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The software uses hard-coded credentials, which may allow an attacker to execute the ftpd service as root. This could result in unauthorized remote root file...

PT-2026-92174

Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite versions prior to 2605.0.3.683 Description A missing cryptographic step allows a high privileged attacker with remote access to potentially perform information tampering. Recommendations Update to version 2605.0.3.68...

PT-2026-92178

Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite versions prior to 2605.0.3.683 Description An unrestricted upload of file with dangerous type allows an unauthenticated attacker with remote access to potentially achieve remote execution. Recommendations Update to...

PT-2026-92030

Name of the Vulnerable Software and Affected Versions Dell SmartFabric OS10 Software versions prior to 10.6.1.3 Description An unauthenticated attacker with remote access can exploit a Session Fixation issue, which occurs when an application fails to assign a new session ID after a user...

CVE-2026-90820 a2aproject a2a-java AuthorizationRequestHandlerDecorator.java AuthorizationRequestHandlerDecorator.onListTasks authorization

A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks of the file server-common/src/main/java/org/a2aproject/sdk/server/requesthandlers/AuthorizationRequestHandlerDecorator.java. Such...

Astra Linux – Vulnerability in Chromium

“Type Confusion in V8” in Google Chrome before version 129.0.6668.70 allowed a remote attacker to perform out-of-bounds memory access through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Fenced Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to obtain potentially sensitive information from the system via a crafted HTML page. Chromium security severity: Medium...