CVE-2026-85417 Incomplete property masking in the SANnav logging subsystem

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

EUVD-2026-86485

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

CVE-2026-85417

Brocade SANnav versions prior to 3.0.1a are vulnerable to incomplete property masking within the logging subsystem. Under specific configuration conditions, this flaw allows SNMP authentication and privacy passwords to be recorded in plain text within application logs. Attackers with read access ...

PT-2026-99089

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description The External Data Source feature, which retrieves records from external systems, fails to properly verify user permissions before including record details in requests. An authenticated user with basic...

PT-2026-98946

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Description Zammad is a web-based open source helpdesk and customer support system. A flaw in the HTML sanitization process allows the injection of specific HTML elements into ticket bodies. When a user views a...

CVE-2026-67420: Missing Authorization

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ OAuth credential refresh retains revoked runtime tags. when an existing AMQP connection refreshes from an OAuth token that grants the impersonator tag to a valid same-username toke...

CVE-2026-44642: Improper Neutralization of Special Elements used in an SQL Command

Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, checkupgradeaccessrights in admin/include/functionsupgrade.php conditionally escapes the submitted username only when the removed getmagicquotesgpc function exists, so PHP 8 and later concatenate an...

SUSE SLES12 Security Update : hplip (SUSE-SU-2026:4335-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4335-1 advisory. - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of...

Dell Wyse Management Suite < 2605.0.3.683 Multiple Vulnerabilities (DSA-2026-387)

The version of Dell Wyse Management Suite installed on the remote host is prior to 2605.0.3.683. It is, therefore, affected by multiple vulnerabilities, including: - Dell Wyse Management Suite WMS, versions prior to WMS 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type...

The vulnerability of the handleCORS() function in the pdns/dnsdistdist/dnsdist-web.cc load balancer and proxy for DNS traffic allows a hacker to gain unauthorized access to protected information.

The vulnerability of the handleCORS function in the pdns/dnsdistdist/dnsdist-web.cc load balancer and proxy for DNS traffic is related to the use of an untrusted domain policy file. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Perl-DBI interface for connecting to and working with databases lies in the incorrect limitation of the path name for the restricted access directory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Perl-DBI interface for connecting to and working with databases is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the BuildKit container-building software lies in the improper restriction of the path name to the restricted-access directory, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...

The vulnerability of the Fleet plugin of the Kibana data visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Kibana data visualization service, related to deficiencies in the authentication process, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the permission checking mechanism when accessing data from Jenkins automation servers allows a violator to gain unauthorized access to protected information.

The vulnerability of the permission checking mechanism when accessing data from Jenkins automation servers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected informatio...

The vulnerability of the confidential data storage mechanism in the Jenkins automation server configuration allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the confidential data storage mechanism in the Jenkins automation server configuration is related to the lack of measures taken to encrypt secret data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Kibana data visualization service, related to deficiencies in the authentication process, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the mechanism for working with identifiers of objects in the Kibana visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Kibana visualization service’s object identifier handling mechanism relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Elastic Defend component of the Kibana data visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Elastic Defend component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Apache Tomcat application server, related to incorrect session duration, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Tomcat application server is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...