44002 matches found
PT-2026-88840
Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings...
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical." Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:...
com.azure.spring:spring-cloud-azure-actuator-autoconfigure (>=6.0.0-beta.1, <=6.4.0), com.azure.spring:spring-cloud-azure-appconfiguration-config (>=6.0.0, <=6.4.0) +33 more potentially affected by CVE-2026-69854 via com.azure.spring:spring-cloud-azure-autoconfigure (>=6.0.0-beta.1, <=6.4.0)
com.azure.spring:spring-cloud-azure-autoconfigure MAVEN version =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0, =6.0.0, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.2, =6.0.0-beta.1, =6.0.0-beta.2, =6.0.0, =6.0.0-beta.2, =6.0.0, =6.0.0, =6.0.0, =6.0.0-beta.2, =6.4.0 -...
com.azure.spring:spring-cloud-azure-actuator-autoconfigure (>=7.0.0-beta.1, <=7.3.0), com.azure.spring:spring-cloud-azure-appconfiguration-config (>=7.0.0-beta.1, <=7.3.0) +33 more potentially affected by CVE-2026-69854 via com.azure.spring:spring-cloud-azure-autoconfigure (>=7.0.0-beta.1, <=7.3.0)
com.azure.spring:spring-cloud-azure-autoconfigure MAVEN version =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.3.0 -...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication through the AadOidcIdTokenDecoderFactory and AadB2cOidcIdTokenDecoderFactory OIDC ID token decoders in the Spring Cloud Azure OAuth2 login components. An attacker can elevate privileges and sign in as an...
CVE-2026-83991
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...
CVE-2026-80093
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69854
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69279
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
GHSA-6X6C-W9W9-HV4H Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname
Impact Sensitive information exposure in the Infracost Terraform Cloud/Enterprise integration. Several code paths attached a configured secret token to a request whose host was taken straight from the scanned Terraform, with no check that the host was the trusted endpoint. The condition that...
EUVD-2026-64019
Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname...
Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname
Impact Sensitive information exposure in the Infracost Terraform Cloud/Enterprise integration. Several code paths attached a configured secret token to a request whose host was taken straight from the scanned Terraform, with no check that the host was the trusted endpoint. The condition that...
EUVD-2026-57222
Prowler: Stored XSS in HTML reports through unescaped cloud resource tags...
EUVD-2026-73791
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...
com.azure.spring:spring-cloud-azure-actuator-autoconfigure (>=4.0.0-beta.2, <=7.3.0), com.azure.spring:spring-cloud-azure-appconfiguration-config (>=4.0.0-beta.1, <=7.3.0) +47 more potentially affected by CVE-2026-69854 via com.azure.spring:spring-cloud-azure-autoconfigure (>=4.0.0-beta.2, <=7.3.0)
com.azure.spring:spring-cloud-azure-autoconfigure MAVEN version =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.1, =4.0.0-beta.2, =4.0.0-beta.2, =5.13.0, =4.9.0, =4.0.0-beta.2, =7.3.0 -...
CVE-2026-69854
CVE-2026-69854 is an improper authentication vulnerability in Spring Cloud Azure that allows an unauthorized attacker to elevate privileges over a network . The CNA (Microsoft) assigned a CVSS 3.1 score of 9.0 (CRITICAL) with a changed scope , reflecting high impact on confidentiality, integrity,...
CVE-2026-22575
An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator ...
CVE-2026-83991
CVE-2026-83991 affects the Windows Cloud Files Mini Filter Driver , where a missing authentication check on a critical function allows a locally authenticated attacker to perform tampering . The vulnerability is rated CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges re...