nCentralDumpsterDiver

SolarWinds n-Central Dumpster Diver Description / Explanation FIXES/WORKAROUNDS have been released for more information: https://vulners.com/cve/CVE-2020-7984 This application utilizes the nCentral agent dot net libraries to simulate the agent registration and pull the agent/appliance configurati...

CVE-2026-123843

In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration...

EUVD-2026-118346

In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration...

CVE-2026-123843

JetBrains IntelliJ IDEA versions prior to 2026.3 are vulnerable to a security flaw where untrusted projects can trigger unauthorized changes to the GPG agent configuration . This issue is categorized as CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The vulnerability requires...

CVE-2026-123843

In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration...

CVE-2026-123843: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration

In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration...

CVE-2026-117614

A flaw was found in Jenkins. When converting legacy agent configurations into modern launcher commands, the system fails to verify whether the commands were approved by an administrator. An authenticated user with agent configuration permissions can exploit this flaw to execute arbitrary code on...

CVE-2026-115289

Use of Multiple Resources with Duplicate Identifier CWE-694 in APM Server can lead to information disclosure via a specially crafted agent configuration request. An authenticated APM agent could receive the central agent configuration that belongs to a different service until the cached...

CVE-2026-115289

The APM Server is vulnerable to CWE-694 (Use of Multiple Resources with Duplicate Identifier) , which can lead to information disclosure . An authenticated APM agent can receive the central agent configuration of a different service via a specially crafted configuration request until the cache ex...

CVE-2026-115289 Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure

Use of Multiple Resources with Duplicate Identifier CWE-694 in APM Server can lead to information disclosure via a specially crafted agent configuration request. An authenticated APM agent could receive the central agent configuration that belongs to a different service until the cached...

CVE-2026-115289 Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure

Use of Multiple Resources with Duplicate Identifier CWE-694 in APM Server can lead to information disclosure via a specially crafted agent configuration request. An authenticated APM agent could receive the central agent configuration that belongs to a different service until the cached...

EUVD-2026-116071

Use of Multiple Resources with Duplicate Identifier CWE-694 in APM Server can lead to information disclosure via a specially crafted agent configuration request. An authenticated APM agent could receive the central agent configuration that belongs to a different service until the cached...

APM Server 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-200)

Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure Use of Multiple Resources with Duplicate Identifier CWE-694 in APM Server can lead to information disclosure via a specially crafted agent configuration request. An authenticated APM agent could...

Kibana 8.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 Information Disclosure (ESA-2026-200)

The version of Kibana installed on the remote host is 8.x prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-200 advisory. - Use of Multiple Resources with Duplicate Identifier CWE-694 in APM Server can...

CVE-2026-115289: Elastic APM Server: Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure via a…

Use of Multiple Resources with Duplicate Identifier CWE-694 in APM Server can lead to information disclosure via a specially crafted agent configuration request. An authenticated APM agent could receive the central agent configuration that belongs to a different service until the cached...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangChain (CVE-2026-55443)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangChain, due to several LangChain components that resolve filesystem paths or expand search patterns that do not consistently confine the resolved path to the intended root directory. LangChain is used in our Spee...

CVE-2026-74047

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth...

CVE-2026-74047 Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth...

EUVD-2026-98680

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth...

CVE-2026-74047 Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth...