CVE-2026-7657

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery SSRF due to incomplete and ineffective SSRF protection enforcement...

MediaWiki Unauthorized Access

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to insufficient protection of operational data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Splunk MCP Server Data Compromise

The vulnerability of the Splunk MCP Server data processing and analysis application is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-10540 Weak password hash protection in Control-M/Entreprise Manager

The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupported versions 9.0.20.x and potentiall...

Microsoft Azure Stack Edge Spoofing

The vulnerability of the certificate management interface of the Microsoft Azure Stack Edge software platform is related to insufficient protection of the website structure. Exploiting this vulnerability could allow attackers to carry out spoofing attacks...

Blitz Identity Provider XSS

The vulnerability of the Blitz Identity Provider software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

EUVD-2026-33921

CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.8335, 15.2.8400 to 15.2.8441, 15.3.8500 to 15.3.8531, and 15.4.8600 to 15.4.8630 allows a remote unauthenticated attacker to...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

OpenClaw Information Disclosure Vulnerability (CNVD-2026-14389)

OpenClaw is openclaw open source an intelligent artificial assistant. OpenClaw has an information disclosure vulnerability, the vulnerability stems from the component File Existence Handler's function tools.exec.safeBins for the protection of sensitive information is insufficient, an attacker can...

CVE-2025-15567

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

GHSA-QHP6-6P8P-2RQH Wildfly Elytron integration susceptible to brute force attacks via CLI

Impact A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI. Patches The default behaviour has been changed in...

Continent Security Complex Authentication Bypass

The vulnerability of the “Continent” security complex version 4 is related to the use of weak protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass authentication mechanisms and gain administrative access to the complex...

SIMATIC RTLS Locating Manager Privilege Escalation

The vulnerability of the software for calculating the positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Amiro.CMS Unauthorized Access

The vulnerability of the Amiro.CMS content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

IBM QRadar SIEM Information Disclosure

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Palo Alto Networks Cortex Unauthorized Access

The vulnerability of the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to user registration data...

Portable Clusterware Oracle Database Server Information Disclosure

The vulnerability of the Portable Clusterware component of the Oracle Database Server management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to and read data...

phpPgAdmin XSS

The vulnerability in the scripts sequites.php, indexes.php, and admin.php of the phpPgAdmin web administration tool relates to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

GLPI Insufficient Protection Unauthorized Access

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to user records by sending a specially...

Websoft HCM Automation Software XSS

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...