CVE-2026-79687

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access...

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-69385

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-79687

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access...

CVE-2026-79687

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access...

CVE-2026-79687

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability (CVE-2026-79687). An unauthenticated attacker with remote network access could exploit the flaw to obtain filesystem access , with a changed scope and High impact on confidentiality, integrity, and availab...

CVE-2026-78319

A service running on the affected products contains a potential Time-of-Check Time-of-Use TOCTOU race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of unauthorized code...

Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

While monitoring Mirage Kitten activity, we uncovered a previously undocumented malware family that we dubbed NodeRabbit. We identified the first sample on a system in Afghanistan. Further threat hunting revealed two additional, more advanced, variants: one on a system in Egypt and another on a...

CVE-2026-40018

A flaw was found in Dovecot. A remote attacker with high attack complexity could exploit this vulnerability to gain access to sensitive information and modify data without requiring any user interaction or privileges. Mitigation Mitigation for this issue is either not available or the currently...

CVE-2026-58566: Incorrect Authorization

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

ROS-20260901-73-0031

The vulnerability in the incus is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

PT-2026-84350

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An incorrect authorization issue allows a low privileged attacker with remote access to potentially elevate their privileges. Recommendations At the moment, there is no information...

ROS-20260901-73-0043

The vulnerability in Netty is related to the use of insufficiently random values. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2026-84349

Name of the Vulnerable Software and Affected Versions Dell PowerStore SDNAS affected versions not specified Description An issue exists where authentication is missing for a critical function. This allows an unauthenticated attacker with remote access to potentially gain access to the filesystem...

PT-2026-84419

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A flaw in the API of HPE Networking Fabric Composer allows an unauthenticated remote attacker to perform a denial of service attack, which can disrupt the availability ...

The vulnerability of the Remote Access API interface for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Remote Access API interface for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.

The vulnerability of DevTools components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

CVE-2026-82641: Missing Authentication for Critical Function

Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt...