CVE-2026-7818 pgAdmin 4: Unsafe deserialization (CWE-502) in file-backed session manager leads to remote code execution

Deserialization of untrusted data CWE-502 in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe deserialization of session-file contents using Python's standard object-serialization module before performing any HMAC integrity check. Any file dropped into the sessions directo...

CVE-2026-7818 pgAdmin 4: Unsafe deserialization (CWE-502) in file-backed session manager leads to remote code execution

Deserialization of untrusted data CWE-502 in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe deserialization of session-file contents using Python's standard object-serialization module before performing any HMAC integrity check. Any file dropped into the sessions directo...

CVE-2026-7551

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text that is forwarded...

CVE-2026-7551 HKUDS OpenHarness Remote Command Execution via /bridge Slash Command

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text that is forwarded...

Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-1499)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1499 advisory. cmd/go: bypass of flag sanitization can lead to arbitrary code execution CVE-2025-61731 cmd/go: unexpected code execution when invoking toolchain CVE-2025-68119 Tenable has extracted the...

de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.2, <=1.9.0-rc1), org.apache.tomcat:tomcat-catalina (8.0.5) +5 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.0.5)

org.apache.tomcat:tomcat-coyote MAVEN version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =1.8.2, =0.7, =0.15 Source cves: CVE-2026-24733...

de.javakaffee.msm:memcached-session-manager (1.9.2), de.javakaffee.msm:memcached-session-manager-tc7 (1.9.2) +19 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (7.0.68)

org.apache.tomcat:tomcat-coyote MAVEN version 7.0.68 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - de.javakaffee.msm:memcached-session-manager 1.9.2 -...

de.javakaffee.msm:memcached-session-manager (>=1.9.3, <=2.0.0), de.javakaffee.msm:memcached-session-manager-tc7 (>=1.9.3, <=2.0.0) +5 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (7.0.69)

org.apache.tomcat:tomcat-coyote MAVEN version 7.0.69 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - de.javakaffee.msm:memcached-session-manager =1.9.3, =1.9.3, =1.9.3, =2.0.0 -...

de.javakaffee.msm:memcached-session-manager (>=1.8.0, <=1.8.1), de.javakaffee.msm:memcached-session-manager-tc7 (>=1.7.0, <=1.8.1) +6 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (7.0.40)

org.apache.tomcat:tomcat-coyote MAVEN version 7.0.40 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - de.javakaffee.msm:memcached-session-manager =1.8.0, =1.7.0, =1.8.1 - net.myrrix:myrrix-web...

de.javakaffee.msm:memcached-session-manager (>=1.8.2, <=1.9.0-rc1), de.javakaffee.msm:memcached-session-manager-tc7 (>=1.8.2, <=1.9.0-rc1) +28 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (7.0.53)

org.apache.tomcat:tomcat-coyote MAVEN version 7.0.53 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - de.javakaffee.msm:memcached-session-manager =1.8.2, =1.8.2, =1.9.0-rc1, =3.1.0, =1.6.0.1,...

com.github.dblock.waffle:waffle-tomcat7 (1.8.1), de.javakaffee.msm:memcached-session-manager (>=1.9.0, <=1.9.1) +5 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (7.0.67)

org.apache.tomcat:tomcat-coyote MAVEN version 7.0.67 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - com.github.dblock.waffle:waffle-tomcat7 1.8.1 - de.javakaffee.msm:memcached-session-manager...

Windows Local Session Manager Privilege Escalation

The vulnerability of the Windows Local Session Manager LSM component of the Windows operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-20869

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...

CVE-2026-20869

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...

CVE-2026-20869

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...

CVE-2026-20869

CVE-2026-20869 affects Windows Local Session Manager (LSM) and is described as a race-condition vulnerability in the management of a shared resource that allows an authenticated, local attacker to elevate privileges. The initial CVE entry cites local privilege escalation with a high impact. Micro...

CVE-2026-20869 Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability

...

CVE-2026-20869 Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability

...

CVE-2026-20869

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...

Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...