EUVD-2026-101877

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-68403

The QuRouter software is affected by an external control of system or configuration setting vulnerability (CWE-15). A local attacker who has obtained administrator privileges can exploit this flaw to modify data on the system. The vulnerability has been addressed in QuRouter version 2.7.2.113 and...

PT-2026-115254

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to execute code over a network...

The LLM-Attacker: A Unified Red-Team Framework for Privacy Evaluation of Split and Distributed LLM Systems

Split language models keep input text on a client but send intermediate representations to a server. Attacks can reconstruct text from these messages. Comparing privacy evaluations is difficult when attackers see different messages, know different model weights or use different datasets and...

PT-2026-115225

Name of the Vulnerable Software and Affected Versions EnergizeLab Eilik and EilikO affected versions not specified Description The FastAPI AI inference and profiling services lack authentication for AI model administration functions. This allows an unauthenticated remote attacker to modify the AI...

CVE-2026-82153

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-82153

The Dell OS Recovery Tool (versions prior to 2.4.4 ) is affected by an Insecure Storage of Sensitive Information vulnerability (CWE-922). A low privileged attacker with physical access could exploit this flaw to cause Information Disclosure . Remediation is available via security update DSA-2026-...

EUVD-2026-42940

Apprise forwards configured auth headers across cross-origin HTTP redirects...

CVE-2026-102087

An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. When in a BGP traffic engineering scenario a specific, valid, optional,...

CVE-2026-102019

An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed RIPv2 message...

CVE-2026-101971

An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing protocol daemon, of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service and heap memory corruption via OSPFv3 messages on an...

CVE-2026-102060

A NULL Pointer Dereference vulnerability exists in the rpd process of Juniper Networks Junos OS (MX Series) and Junos OS Evolved (ACX Series). An unauthenticated adjacent attacker can trigger a denial of service (DoS) by sending an IGMPv3 membership report from a directly connected network. No sp...

CVE-2026-102058 Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled

A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon via crafted BFD session traffic...

CVE-2026-102041

A Reachable Assertion vulnerability exists in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved . An adjacent unauthenticated network attacker can trigger a denial of service by sending malformed RSVP signaling when RSVP is enabled. Specific details regarding affected versi...

CVE-2026-102033 Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled

An Improper Validation of Specified Quantity in Input vulnerability in l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via an ICCP MC-LAG message...

CVE-2026-102032

A Missing Release of Memory after Effective Lifetime vulnerability exists in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved . When the static MAC-IP feature is active, an unauthenticated adjacent attacker can cause a denial of service by sending crafted packets. No specific e...

EUVD-2026-101327

A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to crash the routing daemon via specific PIM messages when sparse mode PIM is configured...

CVE-2026-76113

Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfishcertificate resource component. A high privileged attacker with remote access could potentially exploit this vulnerability, leading...

CVE-2026-76113

Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfishcertificate resource component. A high privileged attacker with remote access could potentially exploit this vulnerability, leading...

EUVD-2026-101145

Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfishcertificate resource component. A high privileged attacker with remote access could potentially exploit this vulnerability, leading...