PT-2026-111564

Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm agent upgrade that allows enrolled agents to issue upgrade custom commands with attacker-controlled file path. Attackers can inject an upgrade custom message over the agent channel to read arbitrary files as root, exfiltrating...

PT-2026-116240

Уязвимость компонента wm agent upgrade платформы для мониторинга безопасности и обнаружения угроз Wazuh связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

CVE-2026-76147 Genians, Inc Genian NAC/ZTNA Remote Code Execution

A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...

CVE-2026-76147

A path traversal (ZIP Slip) vulnerability exists in the agent upgrade feature of Genian NAC/ZTNA . The root cause is insufficient authorization and integrity verification , which allows a remote attacker to achieve remote code execution . No specific patch versions or exploit links are provided i...

CVE-2026-76147 Genians, Inc Genian NAC/ZTNA Remote Code Execution

A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...

CVE-2026-77698

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...

EUVD-2026-72325

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...

CVE-2026-77698 Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...

CVE-2026-77698

ManageEngine Endpoint Central by Zohocorp, in versions prior to 11.5.2605.01 , is affected by a local privilege escalation vulnerability triggered through the Agent upgrade process. An attacker with low local privileges and user interaction can escalate their access, resulting in low impact to co...

CVE-2026-77698 Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...

CVE-2026-77698: Improper Privilege Management

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...

PT-2026-86664

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...

OPENSUSE-SU-2026:20924-1 Security update for elemental-system-agent

This update for elemental-system-agent fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header bsc1260277. Changes: - Update to version 0.3.16: setup for immutable releases 274 align system-agent image...

Veeam Agent for Linux: Update Blocked by Repository Signing Key Change

Article Applicability This article is intended for customers managing Veeam Agent for Linux 6.3 deployments. Deployments that have already been updated to Veeam Agent for Linux 13, or are being updated to it, are not affected by the repository GPG key change. Challenge When attempting to update...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the FindContainer function. An attacker can gain unauthorized interactive shell access to containers outside their permitted label scope by directly targeting container IDs through th...

Update Rollup 1 for System Center 2025 Data Protection Manager

Update Rollup 1 for System Center 2025 Data Protection Manager Applies to: System Center 2025 Data Protection Manager Introduction This article describes the new features and issues that are fixed in Update Rollup 1 for Microsoft System Center Data Protection Manager 2025. It also contains the...

EUVD-2021-16185

Malware in sbrugna...

Update Rollup 5 for System Center 2019 Data Protection Manager

Update Rollup 5 for System Center 2019 Data Protection Manager Applies to : System Center 2019 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 5 for Microsoft System Center Data Protection Manager 2019. This article also contains the...

Update Rollup 4 for System Center 2019 Data Protection Manager

Update Rollup 4 for System Center 2019 Data Protection Manager Applies to : System Center 2019 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 4 for Microsoft System Center Data Protection Manager 2019. This article also contains the...

Update Rollup for Azure File Sync Agent – July 2019 (KB4490497)

Update Rollup for Azure File Sync Agent – July 2019 KB4490497 Applies To Azure Introduction This article describes the issues that are fixed in the Update Rollup for Azure File Sync Agent that is dated July 2019. Additionally, this article contains installation instructions for the update...