CVE-2026-49314: Out-of-bounds Read

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49311: Undefined Security Weakness

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-41987: Undefined Security Weakness

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-12855: Improper Input Validation

Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects...

CVE-2026-87032: Exposure of Sensitive Information to an Unauthorized Actor

Tanium addressed an information disclosure vulnerability in Tanium Server...

CVE-2026-49310: Undefined Security Weakness

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-87088: Improper Neutralization of Special Elements used in an OS Command

Tanium addressed an unauthorized code execution vulnerability in Enforce...

CVE-2026-87084: Server-Side Request Forgery (SSRF)

Tanium addressed a server-side request forgery vulnerability in Enforce...

CVE-2026-87072: Missing Authorization

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-81647: Integer Overflow to Buffer Overflow

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-81646: Out-of-bounds Read

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-81644: Undefined Security Weakness

DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-79635: Server-Side Request Forgery (SSRF)

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery SSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-19733: Server-Side Request Forgery (SSRF)

Server-Side request forgery SSRF vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. This issue affects Library Information and Document Automati...

CVE-2026-11838: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

CVE-2026-12858: Improper Privilege Management

Improper Privilege Management vulnerability in ESET AV Remover standalone allows Privilege Escalation via especially crafted RPC...

CVE-2026-85133: Missing Authorization

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on several of its settings AJAX actions, allowing any authenticated user, such as a subscriber, to read and destroy scan data belonging to the administrator and to overwrite the WPLP Cookie Consent...

CVE-2026-85132: Missing Authorization

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its cookie scanner AJAX actions, allowing any authenticated user, such as a subscriber, to read back the automated scan schedule the administrator configured...

CVE-2026-87820: Exposure of Sensitive Information to an Unauthorized Actor

CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...

CVE-2026-8044: Improper Neutralization of Argument Delimiters in a Command

CWE-88: Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters...