CVE-2026-16841: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

CVE-2026-16840: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...

CVE-2026-16829: NULL Pointer Dereference

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-75476: Improper Handling of Highly Compressed Data (Data Amplification)

Tanium addressed a compression bomb vulnerability in Threat Response...

CVE-2026-11617: Improper Handling of Highly Compressed Data (Data Amplification)

Tanium addressed a compression bomb vulnerability in Findings...

CVE-2026-73388: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...

CVE-2026-73387: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

CVE-2026-66668: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-73182: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in BBQ Pro = 3.9 versions...

CVE-2026-49428: Improperly Controlled Modification of Dynamically-Determined Object Attributes

Certain system calls, such open2 with the OTRUNC flag set, and fspacectl2, could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An unprivileged local user can abuse the bug to access freed kernel...

CVE-2026-76924: Out-of-bounds Read

Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-54794: Server-Side Request Forgery (SSRF)

Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery SSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-73385: Missing Authorization

Unauthenticated Broken Access Control in Outranking Plugin Options = 1.1.3 versions...

CVE-2026-73185: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in NGG Smart Image Search 4.0.0 versions...

CVE-2026-58086: Improper Check for Dropped Privileges

As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. An unprivileged user in a jail that has permission to debug the target process can modify the jailed roo...

CVE-2026-16917: Integer Overflow or Wraparound

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow...

CVE-2026-20318: Improper Input Validation

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

PT-2026-78799

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

CVE-2025-14603: Undefined Security Weakness

The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database contents or causing the application to become unresponsive. Apply patch from vendor https://vsdesk.ru/ . Versions 14.0101 and...

CVE-2026-20358: External Control of File Name or Path

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...