CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below

CVE-2023-37756 – Weak Password Requirement in admin-center lead to malicious plugin upload in the i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to weak password requirement vulnerability in admin-center + malicious plugin upload lead to RCE vulnerability. These vulnerabilities...

CVE-2026-26119

CVE-2026-26119 - Windows Admin Center authenticated PowerShell execution PoC Proof-of-concept for CVE-2026-26119, classified by Microsoft as an elevation-of-privilege / improper-authentication vulnerability CWE-287 in Windows Admin Center WAC. An authenticated low-privilege WAC user can drive the...

CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center authenticated RCE via WinREST/PowerShell invokeCommand. Usage: python3 wacrce.py "" WACPASS= python3 wacrce.py Env: WACBASE - override target base URL default below WACPASS - password, used if not passed positionally...

EUVD-2026-124036

Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...

CVE-2026-65949

Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...

CVE-2026-65949

Lenovo XClarity Integrator for Microsoft Windows Admin Center versions 5.1.1 and 5.2.0 are vulnerable to a Remote Command Execution (RCE) flaw. The root cause is the improper neutralization of special elements used in an OS command, which allows an authenticated remote attacker to execute arbitra...

CVE-2026-122988

Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

CVE-2026-122988

An improper authorization vulnerability in Windows Admin Center allows an authorized attacker to elevate privileges over a network. The root cause is identified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The impact includes high levels of confidentiality, integ...

EUVD-2026-122311

Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

Windows Admin Center Elevation of Privilege Vulnerability

Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

PT-2026-144051

🚨 CVE-2026-122988 Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. 🎖@cveNotify...

CVE-2026-11547

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by a server-side request forgery vulnerability in the Admin Center deploy validation endpoint...

CVE-2026-11547 IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by a server-side request forgery vulnerability in the Admin Center deploy validation endpoint...

CVE-2026-11547

IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 are affected by a server-side request forgery (SSRF) vulnerability in the Admin Center deploy validation endpoint. This vulnerability, tracked as CVE-2026-11547 , allows an attacker to potentially conduct requests from t...

EUVD-2026-119687

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by a server-side request forgery vulnerability in the Admin Center deploy validation endpoint...

IBM WebSphere Application Server - Liberty server-side request forgery vulnerability

IBM WebSphere Application Server – Versions 17.0.0.3 through 26.0.0.10 contain a server-side request forgery vulnerability. This vulnerability stems from issues related to the validation endpoint in Admin Center, potentially allowing attackers to forge server-side requests...

PT-2026-140039

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by a server-side request forgery vulnerability in the Admin Center deploy validation endpoint...

Security Bulletin: IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities

Summary IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities. Vulnerability Details CVEID:CVE-2026-10844 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote attacker to conduct phishing attacks. CWE:CWE-601: URL Redirection to...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

EUVD-2026-93575

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...