CVE-2026-92787 Feast through 0.66.0 Authentication Bypass via Unverified Token

Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all role-based access control by presenting an unverified token with a hardcoded claim value. Attackers can obtain trusted internal identity and gain unchecked read and write...

CVE-2026-76432 Cisco Identity Services Engine Arbitrary File Write Vulnerability

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker with administrative-level privileges to write arbitrary files on an affected device. This vulnerability exists because the affected software does not properly validat...

EUVD-2026-81156

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker with administrative-level privileges to write arbitrary files on an affected device. This vulnerability exists because the affected software does not properly validat...

CVE-2026-76432 Cisco Identity Services Engine Arbitrary File Write Vulnerability

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker with administrative-level privileges to write arbitrary files on an affected device. This vulnerability exists because the affected software does not properly validat...

CVE-2026-76432

A directory traversal vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC allows an authenticated, remote attacker with administrative-level privileges to write arbitrary files to any location on the affected system. The root cause is insufficient validation of dire...

CVE-2026-89084

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

CVE-2026-89083

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

CVE-2026-89082

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

CVE-2026-20324

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sftunnel peer has incorrect permissions t...

CVE-2026-20282

Cisco Identity Services Engine (ISE) contains an authenticated write vulnerability caused by insufficient validation of user-supplied input . An attacker with valid administrative credentials can send a crafted HTTP request to gain write access to the underlying operating system . Cisco assigned ...

CVE-2026-20282 Cisco Identity Services Engine Authenticated Write Vulnerability

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafte...

EUVD-2026-81140

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafte...

CVE-2026-20282 Cisco Identity Services Engine Authenticated Write Vulnerability

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafte...

CVE-2026-20324 Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sftunnel peer has incorrect permissions t...

CVE-2026-20324

CVE-2026-20324 is a CRITICAL (CVSS 9.9) vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software . The root cause is that a registered sftunnel peer holds incorrect permissions, allowing it to write an arbitrary file to any locati...

EUVD-2026-81103

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sftunnel peer has incorrect permissions t...

CVE-2026-89084 HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

CVE-2026-89084

HP Advance software is affected by potential vulnerabilities that may enable elevation of privilege , remote code execution , or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software. The CVSS 4.0 base score is 8.8 (HIGH) , with a network attack vecto...

EUVD-2026-81091

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

CVE-2026-89084 HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...