CVE-2026-58165

OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-admin identities with fine-grained enrollment management permissions to create enrollments for any identity, including the default administrator, because the ApplyCreate...

NexusPHP ipsearch.php file cross-site scripting vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending PATHINFO to the ipsearch.php file to obtain the...

Arbitrary Command Execution Vulnerability in Multiple Cisco Products

The Cisco RV110W RV130W and RV215W are Cisco router products. An arbitrary command execution vulnerability exists in the CLI command parser of the Cisco RV110W Wireless-N VPN Firewall, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router, which allows an authenticated, loc...