12729 matches found
CVE-2026-6484
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
PT-2026-71165
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...
Linux Distros Unpatched Vulnerability : CVE-2026-62992
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 5.8.2 and 4.5.7 on the 4.x line,...
Linux Distros Unpatched Vulnerability : CVE-2026-62899
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a...
PT-2026-71168
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A race condition allows a remote authenticated attacker to bypass security restrictions and obtain sensitive information. A race condition is a situation where the system's behavior depends on the...
PT-2026-71226
Name of the Vulnerable Software and Affected Versions LXD affected versions not specified Description An improper validation issue in the instancePostMigration function within lxd/instance post.go allows an authenticated attacker with can create instances permissions on a restricted project to...
PT-2026-71157
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to unsafe reflection...
GitLab 19.2 < 19.2.2 (CVE-2026-16627)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2... CVE-2026-16627 Note that Nessus has not tested for this issue but has instead relied only on the...
GHSA-3RRR-JR9J-H3Q3 vulnerabilities
Vulnerabilities for packages: langfuse...
Security Bulletin: IBM i is Affected By Improper Validation Vulnerability in Line Printer Daemon [CVE-2026-17445]
Summary IBM i is vulnerable to bypassing security restrictions due to improper validation CVE-2026-17445 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17445 DESCRIPTION: IBM i could allow a remote authenticated attacker to bypas...
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.HttpListener. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Inconsistent interpretation of http...
GHSA-R6MH-95JW-G7QG Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.HttpListener. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Inconsistent interpretation of http...
CVE-2026-48416
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction...
CVE-2026-48415
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability...
CVE-2026-48411
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require use...
EUVD-2026-56849
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction...
CVE-2026-48416 Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction...
CVE-2026-48416
CVE-2026-48416 affects Adobe Commerce with an Incorrect Authorization vulnerability (CWE-863) that could allow an attacker to bypass security controls and gain unauthorized read access. The issue reportedly requires no user interaction and has a CVSS v3.1 base score of 7.5 (HIGH) , with a network...
EUVD-2026-56847
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability...
CVE-2026-48411
CVE-2026-48411 : Adobe Commerce is affected by an Incorrect Authorization vulnerability that could bypass security features, allowing a user with high privileges to gain unauthorized write access. Exploitation requires network access, is possible without user interaction, and has a CVSSv3.1 base ...