1108 matches found
CVE-2025-40896: Improper Certificate Validation
The server certificate was not verified when an Arc agent connected to a Guardian or CMC. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Arc agent and the Guardian or CMC. This could result in theft of the client token and sensitive...
Nozomi Networks Arc Trust Management Vulnerability
Nozomi Networks Arc is an endpoint detection and response proxy software developed by Nozomi Networks, Inc. Nozomi Networks Arc has a vulnerability related to trust management. This vulnerability arises from the lack of server certificate verification during the Arc agent’s connection process. It...
Malicious Package
Overview xpack-arc-gateway is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in xpack-arc-gateway (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c9b6f2c89a51bfa23febfa505e5ce2696cd6ae695ee0a7b057e194f10ca2b The package xpack-arc-gateway was found to contain malicious code. Source: ghsa-malware...
MAL-2026-1158 Malicious code in xpack-arc-gateway (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c9b6f2c89a51bfa23febfa505e5ce2696cd6ae695ee0a7b057e194f10ca2b The package xpack-arc-gateway was found to contain malicious code. Source: ghsa-malware...
CVE-2026-2036
CVE-2026-2036 affects GFI Archiver: MArc.Store.Remoting.exe configuration allows deserialization of untrusted data, enabling remote code execution with SYSTEM privileges. Authentication is required but can be bypassed according to ZDI advisory; multiple feeds corroborate. No patch/version fix det...
February 10, 2026—KB5075971 (Monthly Rollup)
None None...
February 10, 2026—KB5075970 (Monthly Rollup)
None None...
February 10, 2026—Hotpatch KB5075942 (OS Build 26100.32313)
None None...
CVE-2026-24302
Azure Arc Elevation of Privilege Vulnerability...
EUVD-2026-5522
Azure Arc Elevation of Privilege Vulnerability...
CVE-2026-24302
Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-24302
CVE-2026-24302 is an Elevation of Privilege issue in Microsoft Azure Arc caused by improper access control. An authenticated attacker could exploit a network path to elevate privileges; CVSS 3.1 vectors show network access, no user interaction, high to critical impact. Microsoft/Microsoft-affilia...
CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-24302
Azure Arc Elevation of Privilege Vulnerability...
Azure Arc Elevation of Privilege Vulnerability
Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
PT-2026-6638
Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An elevation of privilege issue exists in Azure Arc. Successful exploitation could allow an attacker to gain elevated privileges. Recommendations At the moment, there is no information abou...
Microsoft Azure Arc Access Control Vulnerability
Microsoft Azure Arc is a storage system from Microsoft USA. that extends the Azure platform into your environment. Microsoft Azure Arc has an Access Control Error vulnerability that can be exploited by an attacker to elevate privileges...