CVE-2026-15365

A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app...

EUVD-2026-66295

A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app...

CVE-2026-15365

CVE-2026-15365 affects vivo Kids Mode , where a pop-up logic flaw in a certain feature allows users to bypass password verification and access Quick Apps outside the app. The vulnerability requires a physical attack vector and is scored CVSS 4.0 Base 2.4 (LOW) , with low impact on confidentiality...

PT-2026-81972

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A pop-up logic flaw in a specific feature of Kids Mode enables users to bypass password verification, allowing the use of Quick Apps outside the intended...

CVE-2026-15365: Improper Enforcement of Behavioral Workflow

A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app...

CVE-2026-43657

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps...

CVE-2026-43657: Improper Privilege Management

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps...

PT-2026-81490

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.5 iPadOS versions prior to 26.5 Description A permissions issue exists where a malicious application may be able to enumerate installed apps on the device. Recommendations Update iOS to version 26.5. Update iPadOS to...

Security Bulletin: MaaS360 mobile apps (iOS and Android) are able to bypass authentication by using deep link from the browser.

Summary MaaS360 mobile apps iOS and Android are able to bypass authentication by using deep link from the browser. Vulnerability Details CVEID:CVE-2023-42021 DESCRIPTION: The MaaS360 iOS application could allow an attacker to bypass authentication mechanisms by exploiting the password reset...

EUVD-2026-63626

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69400

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69400

Azure Logic Apps path traversal flaw allows unauthenticated network attackers to elevate privileges. CVSS 9.6 (Critical) with high confidentiality, integrity, and availability impact. Microsoft Security Response Center is tracking the issue at the linked update guide; no patch version or exploita...

CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability

...

CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability

...

CVE-2026-46682 BigBlueButton: Blind SQL Injection AUTH (Moderator)

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton allowed authenticated moderators to inject SQL through the meetingId and userId values used by refreshBreakoutRoomsVisibleForUsers in akka-bbb-apps/src/main/scala/org/bigbluebutton/core/db/BreakoutRoomUserDAO.scala...

Azure Logic Apps Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

PT-2026-79208

Name of the Vulnerable Software and Affected Versions Azure Logic Apps affected versions not specified Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to elevate privileges over a network. Path...

CVE-2026-46682: Improper Neutralization of Special Elements used in an SQL Command

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton allowed authenticated moderators to inject SQL through the meetingId and userId values used by refreshBreakoutRoomsVisibleForUsers in akka-bbb-apps/src/main/scala/org/bigbluebutton/core/db/BreakoutRoomUserDAO.scala...

CVE-2026-69400: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

Sideloading on Android: What it is, why it’s risky, and how to do it more safely

A Google spokesperson announced on Reddit that it has started rolling out the first version of its Advanced Flow, designed to make installing apps from unverified developers safer. Let us explain what sideloading is, why Google Play is not 100% safe, what to look for when you’re sideloading so yo...