Lucene search
+L

5631 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/16 5:51 a.m.10 views

CVE-2026-41030

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

6.2CVSS5.8AI score0.00163EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/16 3:31 a.m.22 views

EUVD-2026-23163

WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine as well as on all hosts within the environment where the agent is installed...

9.3CVSS6.2AI score0.0018EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/16 3:16 a.m.16 views

CVE-2026-6348

WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine as well as on all hosts within the environment where the agent is installed...

9.3CVSS0.0018EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/16 1:53 a.m.37 views

CVE-2026-6348 Simopro Technology|WinMatrix - Missing Authentication

WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine as well as on all hosts within the environment where the agent is installed...

9.3CVSS0.0018EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/16 1:53 a.m.6 views

CVE-2026-6348

WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine as well as on all hosts within the environment where the agent is installed...

9.3CVSS6.2AI score0.0018EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/16 1:53 a.m.9 views

CVE-2026-6348 Simopro Technology|WinMatrix - Missing Authentication

WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine as well as on all hosts within the environment where the agent is installed...

9.3CVSS6.2AI score0.0018EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/16 1:53 a.m.35 views

CVE-2026-6348

WinMatrix agent by Simopro Technology is affected by a Missing Authentication vulnerability. The CVE-2026-6348 issue allows authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine and on all hosts in the environment where the agent is installed. Credent...

9.3CVSS6.2AI score0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/16 12:00 a.m.11 views

PT-2026-33271

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

6.2CVSS5.8AI score0.00163EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/16 12:00 a.m.26 views

PT-2026-33248

Name of the Vulnerable Software and Affected Versions WinMatrix agent affected versions not specified Description A missing authentication flaw allows authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine. This issue can lead to privilege escalation...

9.3CVSS6.2AI score0.0018EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/04/15 8:45 p.m.5 views

CVE-2026-22676

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...

8.5CVSS6AI score0.00104EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/15 8:45 p.m.10 views

CVE-2026-22676 Barracuda RMM < 2025.2.2 Privilege Escalation via Insecure Directory Permissions

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...

8.5CVSS6AI score0.00104EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/15 12:00 a.m.22 views

Barracuda RMM 安全漏洞

Barracuda RMM is a remote monitoring and management platform developed by the American company Barracuda. Versions of Barracuda RMM prior to 2025.2.2 contained security vulnerabilities. These vulnerabilities stemmed from excessive permissions in the file system access control list, which could...

8.5CVSS5.8AI score0.00104EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/15 12:00 a.m.25 views

PT-2026-33175

Name of the Vulnerable Software and Affected Versions Barracuda RMM versions prior to 2025.2.2 Description An issue exists where overly permissive filesystem Access Control Lists ACLs on the 'C:WindowsAutomation' directory allow local attackers to gain SYSTEM-level privileges. Attackers can modif...

8.5CVSS5.8AI score0.00104EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/04/14 7:23 p.m.13 views

CVE-2026-0233

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges...

5.4CVSS6.2AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/13 9:31 a.m.18 views

EUVD-2026-21898

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges...

5.4CVSS6.2AI score0.00175EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/13 8:16 a.m.14 views

CVE-2026-0233

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges...

8.8CVSS0.00175EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/13 7:17 a.m.9 views

CVE-2026-0233 Autonomous Digital Experience Manager: Improper validation of ADEM certificate

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges...

5.4CVSS6.2AI score0.00175EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/13 7:17 a.m.8 views

CVE-2026-0233

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges...

5.4CVSS6.2AI score0.00175EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/04/13 7:17 a.m.43 views

CVE-2026-0233

CVE-2026-0233 affects Palo Alto Networks Autonomous Digital Experience Manager on Windows. The vulnerability is a certificate validation issue enabling an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges. Linked sources identify t...

8.8CVSS6.2AI score0.00175EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/13 7:17 a.m.48 views

CVE-2026-0233 Autonomous Digital Experience Manager: Improper validation of ADEM certificate

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges...

5.4CVSS0.00175EPSS
SaveExploits0References1
Rows per page
Query Builder