PT-2026-107676

CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service...

PT-2026-107690

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Description An unauthenticated user with network access to the Patroni REST API on a search head cluster member can execute arbitrary operating-system...

PT-2026-107695

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15 Description An issue exists where a user with the run collect capabili...

PT-2026-107599

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An out-of-bounds read issue exists within the software. An out-of-bounds read occurs when the system reads data past the end or before the beginning of the intended buffer, which can lead...

Linux Distros Unpatched Vulnerability : CVE-2026-106344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged...

PT-2026-107562

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run script endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import , to...

Linux Distros Unpatched Vulnerability : CVE-2026-106294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted...

Exploit-CVE-2014-4113

Exploit-CVE-2014-4113 CVE-2014-4113 is a Local & Privilege Escalation Exploits. You can get the SYSTEM Privilege. support platform: x86; windows xp and windowx 7 usage: 1. cmd.exeлǰĿ¼ִ cve-2014-4113.exe target program name for example: cve-2014-4113.exe calc.exe...

Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Vulnerabilities found in IBM Db2 LUW that affect Foundation and IBM Tivoli Monitoring ITM pattern Types pTypes shipped with IBM Cloud Pak System. Vulnerabilities were addressed in IBM Cloud Pak System v2.3.5.1. IBM Cloud Pak System provides IBM Db2 with BLU Acceleration Pattern 1.2.26.0...

Security Bulletin: Multiple Vulnerabilities in IBM® SDK, Java™ Technology affect IBM Cloud Pak System

Summary Multiple Vulnerabilities have been found in IBM® SDK, Java™ Technology that is shipped with IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities as per the IBM® SDK, Java™ Technology April 2026 in IBM Cloud Pak System 2.3.5.1. Vulnerability Details...

CVE-2026-86684

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORTLOCALPATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...

CVE-2026-86684 Gitea push mirror local path check uses the repository owner

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORTLOCALPATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...

CVE-2026-102163

Affected Arista access points with the Wireless Intrusion Prevention System (WIPS) active are vulnerable to a flaw where an unauthenticated attacker in radio frequency (RF) proximity can send a crafted frame . This action can crash the sensor service , leading to the disablement of WIPS monitorin...

CVE-2026-102163 Security Advisory 0195

On affected Arista access points with Wireless Intrusion Prevention System WIPS active, an unauthenticated attacker within radio frequency RF proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution...

EUVD-2026-93965

On affected Arista access points with Wireless Intrusion Prevention System WIPS active, an unauthenticated attacker within radio frequency RF proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution...

CVE-2026-102163 Security Advisory 0195

On affected Arista access points with Wireless Intrusion Prevention System WIPS active, an unauthenticated attacker within radio frequency RF proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution...

CVE-2026-101157 Security Advisory 0192

A stored cross-site scripting XSS vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated...

CVE-2026-101157 Security Advisory 0192

A stored cross-site scripting XSS vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated...

CVE-2026-101157

A stored cross-site scripting (XSS) vulnerability exists that may allow an unauthenticated attacker with adjacent-network access to inject malicious content. This content executes when an authenticated user views the affected content, potentially allowing the attacker to compromise the victim's a...

CVE-2026-102413 Uncaught Exception in Elastic Endpoint Leading to Denial of Service

Uncaught Exception CWE-248 in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations including Chinese, Japanese, and Korean locales on Windows, an unhandle...