CVE-2026-30985 iccDEV has a heap-based buffer overflow write in CIccMatrixMath::SetRange()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRange causing memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

CVE-2026-24313

SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system information to be disclosed. This vulnerability has a low impact on confidentiality and does not affect integrity or availability...

CVE-2026-26118

CVE-2026-26118 – Azure MCP Server Tools SSRF allows an authorized attacker to elevate privileges. Affected component: MCP Server Tools. Root cause: server-side request forgery enabling elevation of privilege with network access. CVSSv3.1 base score 8.8 (High); Vector: Network; Privileges required...

CVE-2026-26118 Azure MCP Server Tools Elevation of Privilege Vulnerability

...

CVE-2026-26118 Azure MCP Server Tools Elevation of Privilege Vulnerability

...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, crossplane-provider-aws-s3, crossplane-provider-terraform-fips, kubernetes-csi-livenessprobe, cilium-certgen, aws-fsx-csi-driver-fips, amazon-ecs-agent-fips, kapp, flux-fips, xcaddy, go, crossplane-provider-aws-kinesis,...

com.github.mcollovati:quarkus-hilla-commons-deployment (>=25.0.0-rc1, <=25.0.0), com.github.mcollovati:quarkus-hilla-deployment (>=25.0.0-rc1, <=25.0.0) +21 more potentially affected by CVE-2026-2741 via com.vaadin:flow-build-tools (>=25.0.0, <=25.0.3)

com.vaadin:flow-build-tools MAVEN version =25.0.0, =25.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.2 and more Source cves: CVE-2026-2741 Source advisory: MEND:CVE-2026-2741...

com.github.mcollovati:quarkus-hilla-commons-deployment (25.0.0-beta1), com.github.mcollovati:quarkus-hilla-deployment (25.0.0-beta1) +21 more potentially affected by CVE-2026-2741 via com.vaadin:flow-build-tools (>=25.0.0-rc1, <=25.0.2)

com.vaadin:flow-build-tools MAVEN version =25.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =4.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =25.0.0-rc1, =25.0.1 and more Source cves: CVE-2026-2741 Source advisory: SNYK:JAVA-COMVAADIN-155183...

RLSA-2026:3938 Moderate: nfs-utils security update

The nfs-utils packages provide a daemon for the kernel Network File System NFS server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. Security Fixes:...

Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools

Menlo Park, USA, 10th March 2026, CyberNewswire...

CVE-2026-24313 Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)

SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system information to be disclosed. This vulnerability has a low impact on confidentiality and does not affect integrity or availability...

CVE-2026-24313

SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system information to be disclosed. This vulnerability has a low impact on confidentiality and does not affect integrity or availability...

CVE-2026-24313 Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)

SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system information to be disclosed. This vulnerability has a low impact on confidentiality and does not affect integrity or availability...

CVE-2026-24313

CVE-2026-24313 affects SAP Solution Tools Plug-In (ST-PI). A function module does not perform proper authorization checks for authenticated users, enabling disclosure of system information. According to the provided documentation, the vulnerability has a low confidentiality impact and does not af...

PT-2026-24350

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.5 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. A heap-buffer-overflow read exists in the CIccXmlArrayType::DumpArray function, leading to out-of-bounds read...

SAP Solution Tools Plug-In security vulnerabilities

SAP Solution Tools Plug-In is a basic component plugin developed by the German company SAP. There is a security vulnerability in the SAP Solution Tools Plug-In, which stems from the lack of necessary authorization checks for authenticated users. This vulnerability may lead to the disclosure of...

Microsoft Azure MCP Server Tools code-related vulnerabilities

Microsoft Azure MCP Server Tools is a model context protocol of the American company Microsoft. It supports various tools, languages, and frameworks, enabling the construction and deployment of applications on Azure. There are code-related vulnerabilities in Microsoft Azure MCP Server Tools...

CVE-2026-24313: Missing Authorization

SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing system information to be disclosed. This vulnerability has a low impact on confidentiality and does not affect integrity or availability...

KLA90921 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, spoof user interface, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of...

KLA90924 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure IOT...