45087 matches found
EUVD-2026-64019
Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname...
EUVD-2026-57222
Prowler: Stored XSS in HTML reports through unescaped cloud resource tags...
EUVD-2026-73791
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69854
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...
com.azure.spring:spring-cloud-azure-actuator-autoconfigure (>=4.0.0-beta.2, <=7.3.0), com.azure.spring:spring-cloud-azure-appconfiguration-config (>=4.0.0-beta.1, <=7.3.0) +47 more potentially affected by CVE-2026-69854 via com.azure.spring:spring-cloud-azure-autoconfigure (>=4.0.0-beta.2, <=7.3.0)
com.azure.spring:spring-cloud-azure-autoconfigure MAVEN version =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.1, =4.0.0-beta.2, =4.0.0-beta.2, =5.13.0, =4.9.0, =4.0.0-beta.2, =7.3.0 -...
CVE-2026-69854
CVE-2026-69854 is an improper authentication vulnerability in Spring Cloud Azure that allows an unauthorized attacker to elevate privileges over a network . The CNA (Microsoft) assigned a CVSS 3.1 score of 9.0 (CRITICAL) with a changed scope , reflecting high impact on confidentiality, integrity,...
CVE-2026-22575
An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator ...
EUVD-2026-73359
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...
CVE-2026-83991
CVE-2026-83991 affects the Windows Cloud Files Mini Filter Driver , where a missing authentication check on a critical function allows a locally authenticated attacker to perform tampering . The vulnerability is rated CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges re...
EUVD-2026-73326
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-80093
A use-after-free flaw in the Windows Cloud Files Mini Filter Driver allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated CVSS 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required, impacting confidentiality, integrity, and ...
EUVD-2026-73216
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69279
CVE-2026-69279 is a use after free vulnerability in the Windows Cloud Files Mini Filter Driver that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity but...
Security Bulletin: Due to use of IBM WebSphere Application Server and IBM WebSphere Liberty, IBM Cloud Pak System is affected by multiple vulnerabilities
Summary Multiple vulnerabilities have been identified in IBM WebSphere Application Server and IBM WebSphere Liberty, supporting product which is shipped as pattern type with IBM Cloud Pak System. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affecte...
Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution
A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026. Cybersecurity company CrowdStrike is tracking the Brazil-based activity cluster under the name Slim Spider. "The adversary demonstrates dee...
CVE-2026-86735
snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule that fails to detect IPv6 transition addresses encoding private IPv4 targets. Attackers with super-admin privileges can configure webhook URLs using NAT64, 6to4, or Teredo...
Directory Traversal
Spring Cloud Config is vulnerable to Directory Traversal. The vulnerability is due to improper restriction of configuration file access in the native environment repository, which allows an attacker to access configuration files outside the configured repository path...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...