CVE-2026-49311

CVE-2026-49311 is a permission control vulnerability in the event notification module affecting Huawei consumer devices (phones, vision/wearables, and laptops). The CVSS 3.1 score is 6.2 (MEDIUM) with a local attack vector , low complexity , no privileges required , and no user interaction needed...

PT-2026-88809

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88803

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88794

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88806

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88796

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability...

SAP NetWeaver AS Java Denial of Service (3736494)

The version of SAP NetWeaver Application Server Java detected on the remote host is affected by a denial of service vulnerability as referenced in SAP Security Note 3736494: - SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested...

CVE-2026-9215

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

CVE-2026-77110

Adobe Commerce is affected by a Path Traversal vulnerability (CWE-22) that can lead to a security feature bypass . An attacker with high privileges can access unauthorized files or directories outside intended restrictions, resulting in limited availability disruption . Exploitation requires no u...

CVE-2026-77111 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...

CVE-2026-9215

A CSRF vulnerability in the web interfaces of NETGEAR XR500, XR1000, and XR1000v2 routers allows an attacker, via social engineering , to induce a router administrator into tampering with router configuration, resulting in high integrity and availability impact with no confidentiality impact. The...

CVE-2026-76962

SAP S/4HANA Manage Bank Chains app does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on...

CVE-2026-76962 Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)

SAP S/4HANA Manage Bank Chains app does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on...

CVE-2026-76962 Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)

SAP S/4HANA Manage Bank Chains app does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on...

CVE-2026-76962

SAP S/4HANA (Manage Bank Chains app) has insufficient authorization checks that allow an attacker with low privileges to send specially crafted requests to delete entries they should not be able to access. The impact is limited to availability (low severity), with no stated impact on confidential...

CVE-2026-58234 Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)

SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...

PT-2026-86957

SAP S/4HANA Manage Bank Chains app does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on...

hauler-2.1.0-3.1 on GA media (moderate)

hauler-2.1.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:11700-1 Rating: moderate Cross-References: CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-84303 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-84303 SUSE : 9.1...

PT-2026-86949

SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...

insighttoolkit-devel-5.4.7-1.1 on GA media (moderate)

insighttoolkit-devel-5.4.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11701-1 Rating: moderate Cross-References: CVE-2026-3650 CVSS scores: CVE-2026-3650 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-3650 SUSE : 8.7...