CVE-2026-77105

CommServe (Commvault) contains a cryptographic signature verification flaw in its privilege management functionality, enabling privilege escalation. The vulnerability is reachable over the network with low privileges and no user interaction , rated CVSS 4.0 8.7 (HIGH) with high impact on confiden...

EUVD-2026-72731

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

CVE-2026-77105 CommServe Privilege Escalation

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

CVE-2026-62649

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...

CVE-2026-62649

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...

CVE-2026-62649

A denial-of-service vulnerability affects the web server in Reyrolle 7SR5 (all versions

EUVD-2026-72664

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...

CVE-2026-76960 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...

PT-2026-87008

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...

CVE-2026-78625: Improper Control of Generation of Code

The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during authentication requests, resulting in execution with the privileges of the web server process...

CVE-2026-62649: Allocation of Resources Without Limits or Throttling

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...

The vulnerability of the SIMATIC S7 PLC web server, related to insecure resource initialization, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the web server in the SIMATIC S7 PLC is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

CVE-2026-86166

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2026-86166 Tenda HG10 Boa Web Server formWanRedirect buffer overflow

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2026-86166

Tenda HG10 (firmware 300001138 ) is affected by a buffer overflow in the Boa Web Server component, specifically in the formWanRedirect() function of the /boaform/formWanRedirect endpoint. A remote, low-privilege attacker can trigger the vulnerability by manipulating the if argument, leading to hi...

EUVD-2026-72050

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2026-86166 Tenda HG10 Boa Web Server formWanRedirect buffer overflow

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2026-86166: Buffer Copy without Checking Size of Input

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2026-85110

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly...

CVE-2026-85109

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...