FreeBSD : vifm -- Unverified Ownership (158544f8-cf02-11f1-b0f1-d0f4051da3a3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 158544f8-cf02-11f1-b0f1-d0f4051da3a3 advisory. https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SkX7Pmiofg reports: Vifm 0.8.1-beta through 0.14.4 reuses a...

Unverified Ownership

Overview Affected versions of this package are vulnerable to Unverified Ownership via the strict lock implementation in strict.py and related claim directory handling, where mkdirmode=0o700 only enforces private permissions when it creates the directory and the subsequent lstat check reads neithe...

Linux Distros Unpatched Vulnerability : CVE-2026-93853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots...

DEBIAN-CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

CVE-2026-93853

The Barman backup tool is vulnerable to unverified ownership during snapshot backup deletion, affecting versions up to and including 3.20.0 (specifically versions from 3.4.0 for Google Cloud, 3.6.0 for Azure, and 3.7.0 for AWS). The root cause is that Barman reads snapshot identifiers from the ba...

CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

CVE-2026-93853: Unverified Ownership

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

Unverified Ownership

Overview awslabs.security-agent-mcp-server is an An AWS Labs Model Context Protocol MCP server for AWS Security Agent — automated security scanning, penetration testing, and remediation Affected versions of this package are vulnerable to Unverified Ownership via the S3 bucket ownership verificati...

CVE-2026-84386

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port...

CVE-2026-84386

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port...

CVE-2026-84386

CVE-2026-84386 is an unverified ownership vulnerability in Fortinet FortiClient for Windows , affecting versions 7.4.0 through 7.4.7 and all versions of the 7.2 line. The flaw may allow an attacker to bypass access control , resulting in low integrity and high availability impact. The CVSS 3.1 sc...

EUVD-2026-72921

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...

CVE-2026-84386: Unverified Ownership

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port...

PT-2026-87178

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...

CVE-2026-85781

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

EUVD-2026-71692

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

CVE-2026-85781 Unverified access point ownership in Amazon EFS CSI Driver

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

PT-2026-86236

Name of the Vulnerable Software and Affected Versions Amazon EFS CSI Driver versions prior to v3.4.1 Description The volume deletion component fails to verify the ownership of a storage access point. This allows an authenticated Kubernetes user with PersistentVolume creation privileges to trigger...