Splunk Enterprise 9.3.0 < 9.3.14, 9.4.0 < 9.4.13, 10.0.0 < 10.0.8, 10.2.0 < 10.2.5, 10.4.0 < 10.4.1 (SVD-2026-0703)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0703 advisory. - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below...

CVE-2025-11698

The CVE-2025-11698 vulnerability affects 5380/5480/5580 controllers with boot firmware versions below 1.072. It enables a denial-of-service by allowing a malicious actor to write invalid file data to the controller, potentially causing a major non-recoverable fault (MNRF). The documents do not pr...

Microsoft PC Manager < 3.22.1.0 Elevation of Privilege (CVE-2026-50438) (July 2026)

The Windows 'Microsoft PC Manager' app installed on the remote host is prior to 3.22.1.0. It is, therefore, affected by an elevation of privilege vulnerability: - A local privilege escalation vulnerability allows an authenticated attacker to escalate privileges beyond the vulnerable component's...

CVE-2026-49971 Laravel-Mediable < 7.0.0 Stored XSS via SVG File Upload

Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows authenticated or anonymous users to execute arbitrary JavaScript by uploading unsanitized SVG files containing embedded scripts in onload event handlers, script tags, or foreignObject elements. Attacker...

CVE-2026-14380 affecting package perl-DBI for versions less than 1.650-1

CVE-2026-14380 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-10536 affecting package curl for versions less than 8.11.1-10

CVE-2026-10536 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...

CVE-2026-8458 affecting package curl for versions less than 8.11.1-10

CVE-2026-8458 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...

CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-8926 affecting package curl for versions less than 8.11.1-10

CVE-2026-8926 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...

CVE-2026-14739 affecting package perl-DBI for versions less than 1.650-1

CVE-2026-14739 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-60001 affecting package openssh for versions less than 9.8p1-9

CVE-2026-60001 affecting package openssh for versions less than 9.8p1-9. A patched version of the package is available...

CVE-2026-59995 affecting package openssh for versions less than 9.8p1-9

CVE-2026-59995 affecting package openssh for versions less than 9.8p1-9. A patched version of the package is available...

CVE-2026-59999 affecting package openssh for versions less than 9.8p1-9

CVE-2026-59999 affecting package openssh for versions less than 9.8p1-9. A patched version of the package is available...

CVE-2026-42055 affecting package nginx for versions less than 1.28.3-7

CVE-2026-42055 affecting package nginx for versions less than 1.28.3-7. A patched version of the package is available...

CVE-2026-53488 affecting package moby-containerd-cc for versions less than 1.7.7-15

CVE-2026-53488 affecting package moby-containerd-cc for versions less than 1.7.7-15. A patched version of the package is available...

CVE-2026-57585 affecting package python-msgpack for versions less than 1.0.5-3

CVE-2026-57585 affecting package python-msgpack for versions less than 1.0.5-3. A patched version of the package is available...

CVE-2026-12912 affecting package libtiff for versions less than 4.6.0-14

CVE-2026-12912 affecting package libtiff for versions less than 4.6.0-14. A patched version of the package is available...

CVE-2026-12151 affecting package nodejs for versions less than 24.17.0-2

CVE-2026-12151 affecting package nodejs for versions less than 24.17.0-2. A patched version of the package is available...

CVE-2026-57827

The CVE-2026-57827 entry concerns the Joomla extension RSFiles (RSFiles component) from rsjoomla.com, affected versions prior to 1.17.12. The vulnerability is an unauthenticated arbitrary file upload that can upload executable files, enabling full remote code execution (RCE). The connected record...

CVE-2026-57827 Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE...