EUVD-2026-46440

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data...

EUVD-2026-47297

Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterprise SCM...

PT-2026-63340

Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data...

PT-2026-63881

Name of the Vulnerable Software and Affected Versions Polylang versions prior to 3.8.6 Polylang Pro versions prior to 3.8.6 Description An issue allows the retrieval of embedded sensitive data, exposing system information to an unauthorized control sphere. Authenticated attackers with...

ROS-20260722-73-0007

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2026-63919

Name of the Vulnerable Software and Affected Versions Complianz versions prior to 7.5.2 Description The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress allows unauthenticated attackers to extract sensitive user or configuration data due to sensitive information exposure. Recommendations...

CVE-2026-57600: Improper Input Validation

Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data...

The vulnerability of the Microsoft SQL Server database management system, related to overflow in dynamic memory buffers, allows attackers to disclose sensitive information that is protected by this system’s security measures.

The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the getParameter() function in the AbstractSalesforceProcessor class of the camel-salesforce component of the Apache Camel framework allows a attacker to disclose protected information.

The vulnerability of the getParameter function in the AbstractSalesforceProcessor class of the camel-salesforce component of the Apache Camel framework is related to vulnerabilities in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to disclose sensitive...

CVE-2026-62456

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle HRMS UK. While the...

CVE-2026-63143

Technical details (affected products, components, versions, exploitability) are not publicly available in the provided documents; monitor for updates.

EUVD-2026-46358

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the GET /login/oauth/userinfo endpoint. An attacker can access identity claims such as email and groups by supplying a personal access token with insufficient scopes as a bearer...

CVE-2026-50756

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the webhook delivery. An attacker can access sensitive repository content by maintaining control of a webhook endpoint after their collaborator access has been revoked. Remediation Upgrade...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the webhook delivery. An attacker can access sensitive repository content by maintaining control of a webhook endpoint after their collaborator access has been revoked. Remediation Upgrade...

CVE-2026-64877

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database...

CVE-2026-64877

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database...

CVE-2026-64877

CVE-2026-64877 is an authenticated, non-admin SQL injection vulnerability in the appliance’s ticketing REST API that can lead to access to sensitive data stored in the appliance database. The CVSS v3.1 base score is 9.6 (CRITICAL) with network attack vector, low attack complexity, and privileges ...

CVE-2026-56586

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...