CVE-2026-70757

CVE-2026-70757 is a critical vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware, component: Core) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 . An unauthenticated attacker with network access via T3 or IIOP can compromise the server, resulting in full take...

CVE-2026-70756

CVE-2026-70756 is a critical vulnerability in the Core component of Oracle WebLogic Server (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via T3 or IIOP can exploit this vulnerability to ...

EUVD-2026-79506

Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...

Http4s: DigestAuth allows replay of captured requests

The DigestAuth replay defence stores lastNc + 1 rather than the nonce-count nc value it just accepted. When a legitimate client sends non-contiguous nc values parallel or retried requests, as browsers do, the server's counter lags behind the highest nc seen, and a captured Authorization header ca...

CVE-2026-88922 Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this...

CVE-2026-69206

Http4s (a Scala HTTP service framework) has a DigestAuth replay vulnerability prior to versions 0.23.35 and 1.0.0-M47 . The replay protection records lastNc + 1 instead of the highest accepted nonce-count value. When a legitimate client sends noncontiguous nc values (due to parallel or retried re...

CVE-2026-69206 Http4s: DigestAuth allows replay of captured requests

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records lastNc plus one instead of the highest nonce-count value it has accepted. When a legitimate client sends noncontiguous nc values because of parallel or retried requests, the stored...

CVE-2026-69206 Http4s: DigestAuth allows replay of captured requests

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records lastNc plus one instead of the highest nonce-count value it has accepted. When a legitimate client sends noncontiguous nc values because of parallel or retried requests, the stored...

EUVD-2026-79233

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...

CVE-2026-76707 Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...

EUVD-2026-79231

A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with Admin privilege to execute arbitrary commands on the underlying operating system...

EUVD-2026-79226

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

CVE-2026-76698

CVE-2026-76698 affects the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways . An authenticated remote attacker with limited privileges can exploit a command injection flaw via specially crafted input, potentially executing arbitrary commands with elevated privileges or...

CVE-2026-76697 Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially...

EUVD-2026-79223

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially...

EUVD-2026-79222

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting networ...

CVE-2026-76696

HPE Networking EdgeConnect SD-WAN Gateways contain a vulnerability that allows an unauthenticated adjacent attacker to perform a denial-of-service attack. Successful exploitation can crash the system , preventing it from rebooting without manual intervention , thereby disrupting network operation...

CVE-2026-76695

CVE-2026-76695 affects the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . The vulnerability is a buffer overflow that can be triggered by an unauthenticated remote attacker sending specially crafted packets to the affected service. Successful exploitation may compromi...

EUVD-2026-79221

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the...

CVE-2026-76686

A denial-of-service vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . An unauthenticated remote attacker can exploit it to disrupt the affected service, with a CVSS 3.1 score of 7.5 (HIGH) reflecting network vector, low complexity, no privileg...