EUVD-2026-107641

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

EUVD-2026-107652

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

EUVD-2026-107657

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could move field extractions or field transformations to apps for which the user does not have read access. The vulnerability is possible because the...

EUVD-2026-107578

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and...

CLSA-2026-1792400260 Fix of 74 CVEs

CVE-2026-99999 - ipv4: validate checksumstart before completing checksum CVE-2026-99999 CVE-2026-64015 - security/keys: fix missed RCU read section on lookup CVE-2026-64015 CVE-2023-53282 - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write CVE-2023-53282 CVE-2026-43250 -...

Node.js follow-redirects Unauthorized Access

The vulnerability in Node.js’ follow-redirects module relates to the redirection of confidential user data without proper deletion procedures. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

ANGLE Library Protected Information Access

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Drupal Webform permission and access control issues vulnerability

Versions 0.0.0 through 6.2.12 and versions 6.3.0 through 6.3.1 of Drupal Webform contain a permission and access control vulnerability. This vulnerability stems from the use of unsafe operations in permission definitions, potentially leading to stored cross-site scripting attacks...

Devolutions Server authorization issue vulnerability

Devolutions Server versions 2026.3.10.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from improper authorization handling during Devolutions Gateway token generation. It may allow authenticated non-administrator attackers to bypass network access rules of the...

Drupal Webform permission and access control issues vulnerability

Versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 of Drupal Webform contain permission and access control vulnerabilities. These stem from insufficient granularity in access control, potentially leading to forced browsing...

Microsoft Access Code Execution

The vulnerability of Microsoft Access database management systems, as well as Microsoft Office and 365 Apps for Enterprise applications, is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

Oracle MySQL Connectors ODBC (October 2026 CPU)

The versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. The supported version that is affected is 26.7.1...

Linux Distros Unpatched Vulnerability : CVE-2026-101516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported version...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142747 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use getunalignedbe32 and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142739)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142739 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft AH6 rearranges routing-header addresses before...

ABB Ability Edgenius authorization issue vulnerability

ABB Ability Edgenius versions 3.2.3.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from the lack of authentication for critical functions, potentially allowing unauthorized access to these functions...

PT-2026-121389

UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references in Apache Abdera allows an attacker to access sensitive data or make server-side requests when an application parses attacker-controlled XML with Abdera. This issue affects Apache Abdera: all versions. Apache Abdera ...

PT-2026-121300

Authorization Bypass Through User-Controlled Key vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.0-beta.1...

PT-2026-121306

Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Extended: from n/a through 0.9.2.7...

PT-2026-121309

Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.1...