EUVD-2026-95338

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

Apache Thrift Host Certificate Unauthorized Access

The vulnerability of the Apache Thrift framework is related to the lack of checks for host-specific certificate data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Apache Thrift Integer Overflow Unauthorized Access

The vulnerability of the Apache Thrift framework is related to integer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

OpenSSL Memory Use After Free Unauthorized Access

The vulnerability of TLS and SSL OpenSSL tools is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Microsoft SQL Server Buffer Overflow

The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Apache Thrift Pathname Restriction Unauthorized Access

The vulnerability of the Apache Thrift framework is related to shortcomings in pathname limitation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Safety Graph: When Safety Responses Become Attack Surfaces in Cyber-Physical Systems

Modern industrial control systems ICS are susceptible to cyber attacks triggering safety failures in the operational technology OT layer. The traditional way to mitigate any failure in OT is to implement safety responses. However, we show in this work that these responses can open up new attack...

PT-2026-109129

Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid subscription to an existing member, modify that member's name, and inject content into newsletters sent to the member. Depending on the...

ROS-20261009-73-0462

The vulnerability of the ov5647probe function in the drivers/media/i2c/ov5647.c file of the Linux kernel’s multimedia device driver is related to incorrect initialization of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

PT-2026-108777

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An improper validation of specified type of input allows a low privileged attacker with remote access to potentially cause information exposure and...

CVE-2026-78795

The Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router is vulnerable in versions v1.3.241114.024540 and before . A remote attacker can exploit this issue to obtain sensitive information . The vulnerability is classified as CWE-200 (Exposure of Sensitive Information to an Unauth...

EUVD-2026-95859

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information...

PT-2026-108923

A missing authorization check in the illumos zones statistics daemon zonestatd allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running. The zonestatd door server procedure, zsd server in usr/src/cmd/zonestat/zonestatd/zonestatd.c, handles the ZS...

VulnCheck KEV: CVE-2026-105134

Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with...

VulnCheck KEV: CVE-2026-105133

Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134...

CVE-2026-78795: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information...

CVE-2026-104114: NULL Pointer Dereference

A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamddoorswitch in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...

CVE-2026-104117: Missing Authorization

A missing authorization check in the illumos IP management daemon ipmgmtd allows a local user to change the persistent IP multipathing IPMP configuration. The ipmgmtd door dispatch table in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmtdoor.c does not require the solaris.network.interface.config...

CVE-2026-108269: Origin Validation Error

Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before...

CVE-2026-78797: Improper Control of Generation of Code

An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the taskid in tasks-lib.lua...