CVE-2026-26722

CVE-2026-26722 affects Key Systems Inc Global Facilities Management Software v.20230721a. A remote attacker can escalate privileges through the PIN component of the login functionality. Documents consistently indicate privilege escalation as the impact; CVSSv3.1 vectors imply Network access, Low ...

CVE-2026-26721

Summary : CVE-2026-26721 affects Key Systems Inc Global Facilities Management Software v.20230721a. A vulnerability in the SID query parameter can allow a remote attacker to obtain sensitive information, impacting confidentiality (CVE-3.1.3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) ...

Key Systems Global Facilities Management Software 安全漏洞

Key Systems Global Facilities Management Software is a facilities management system developed by the American company Key Systems. Version 20230721a of Key Systems Global Facilities Management Software contains a security vulnerability. This vulnerability stems from issues with the sid query...

CVE-2026-26721

An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter...

Linux Distros Unpatched Vulnerability : CVE-2026-2739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects versions of the package bn.js before 5.2.3. Calling maskn0 on any BN instance corrupts the internal state, causing toString, divmod, and other...

Linux Distros Unpatched Vulnerability : CVE-2026-2044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

GHSA-83G3-92JG-28CX vulnerabilities

Vulnerabilities for packages: pulumi, sqlpad, code-server, tileserver-gl, kubeflow-katib, opensearch-dashboards, prism, py3-jupyterlab, saf, vitess, pnpm-stage0, renovate, npm, node-gyp, lerna, kubeflow-pipelines...

CVE-2026-26278 vulnerabilities

Vulnerabilities for packages: saf, renovate, langfuse-fips, prism, dbgate-fips, kubeflow-pipelines, librechat, jitsucom-jitsu, kibana, tileserver-gl, tileserver-gl-fips, dbgate, langfuse...

CVE-2025-15577

creationtimestamp| type| source ---|---|--- 2026-02-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-02...

CVE-2026-20761

creationtimestamp| type| source ---|---|--- 2026-02-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-01 2026-02-20 17:08:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfclwgs42626...

CVE-2026-25329

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

CVE-2026-25324

Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

CVE-2025-33042 vulnerabilities

Vulnerabilities for packages: logstash, pinot, kafbat-ui, akhq, apache-hop-fips, druid, spark-fips, kafbat-ui-fips, apache-pulsar, hadoop-fips, wavefront-proxy, apache-hop, spark, celeborn...

GHSA-RP46-R563-JRC7 vulnerabilities

Vulnerabilities for packages: logstash, pinot, kafbat-ui, akhq, apache-hop-fips, druid, spark-fips, kafbat-ui-fips, apache-pulsar, hadoop-fips, wavefront-proxy, apache-hop, spark, celeborn...

GHSA-27JP-WM6Q-GP25 vulnerabilities

Vulnerabilities for packages: superset, airflow-core, airflow...

Valmet DNA Engineering Web Tools

RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to manipulate the web maintenance services URL to achieve arbitrary file read access. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...

Jinan USR IOT Technology Limited (PUSR) USR-W610

RISK EVALUATION Successful exploitation of these vulnerabilities could result in authentication being disabled, a denial-of-service condition, or an attacker stealing valid user credentials, including administrator credentials. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

Linux Distros Unpatched Vulnerability : CVE-2026-2648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF fil...

PT-2026-20694

Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.4...

Linux Distros Unpatched Vulnerability : CVE-2026-2708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soupmessageheadersappendcommon function in libsoup/soup-message-headers.c...