191139 matches found
EUVD-2026-66387
TarsWeb enforces its per-application roles by calling AuthService from individual controller methods, and four methods in app/controller/patch/PatchController.js make no such call. uploadAndPublish accepts a package upload and then builds and dispatches a deployment task to every server matching...
CVE-2026-77541
UniFi Network Application (Ubiquiti) is affected by an Improper Access Control vulnerability that allows an attacker with network access and high privileges to escalate privileges within the application. The flaw carries a CVSS 3.1 score of 9.1 (Critical) , with a network attack vector, low compl...
CVE-2026-77541
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
CVE-2026-77541
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
CVE-2026-77538
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application...
CVE-2026-77538
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application...
CVE-2026-77538
An Improper Access Control vulnerability in the UniFi Connect Application (Ubiquiti) allows a network-based attacker with no prior privileges to escalate privileges within the application. The CVSS 3.1 score is 8.2 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L, indicating a low-comp...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to OpenSSH
Summary OpenSSH is used by IBM Integrated Analytics System as a suite of secure networking utilities for encrypted communications. Multiple vulnerabilities affect OpenSSH versions prior to 10.3. CVE-2026-35385 involves improper preservation of file permissions where a file downloaded via scp usin...
CVE-2026-77536
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...
CVE-2026-77536
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...
CVE-2026-77536
CVE-2026-77536 is a Critical (CVSS 9.9) Improper Access Control vulnerability affecting certain devices running UniFi OS (Ubiquiti). A malicious actor with network access and low privileges can exploit this flaw to escalate privileges within affected UniFi OS devices or instances, resulting in hi...
CVE-2026-77534
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...
CVE-2026-77534
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...
CVE-2026-77534
CVE-2026-77534 is an Improper Access Control vulnerability affecting certain devices running UniFi OS (Ubiquiti). A low-privileged actor with network access can exploit it to escalate privileges within affected UniFi OS devices or instances. The CNA-assigned CVSS 3.1 score is 9.9 (CRITICAL) , ref...
CVE-2026-19538
The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TLS and sending the query twice on connection that is kept open...
DEBIAN-CVE-2026-18664
When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...
CVE-2026-18664
When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...
CVE-2026-18664
When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...
CVE-2026-19197
A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...
CVE-2026-19197
A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...