openSUSE 16 Security Update : google-cloud-sap-agent (openSUSE-SU-2026:21755-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21755-1 advisory. This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers...

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

Cisco Secure Firewall Management Center FMC Software and Cisco Security Cloud Control SCC Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on...

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical." Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:...

com.azure.spring:spring-cloud-azure-actuator-autoconfigure (>=7.0.0-beta.1, <=7.3.0), com.azure.spring:spring-cloud-azure-appconfiguration-config (>=7.0.0-beta.1, <=7.3.0) +33 more potentially affected by CVE-2026-69854 via com.azure.spring:spring-cloud-azure-autoconfigure (>=7.0.0-beta.1, <=7.3.0)

com.azure.spring:spring-cloud-azure-autoconfigure MAVEN version =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.0.0-beta.1, =7.3.0 -...

com.azure.spring:spring-cloud-azure-actuator-autoconfigure (>=6.0.0-beta.1, <=6.4.0), com.azure.spring:spring-cloud-azure-appconfiguration-config (>=6.0.0, <=6.4.0) +33 more potentially affected by CVE-2026-69854 via com.azure.spring:spring-cloud-azure-autoconfigure (>=6.0.0-beta.1, <=6.4.0)

com.azure.spring:spring-cloud-azure-autoconfigure MAVEN version =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0, =6.0.0, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.2, =6.0.0-beta.1, =6.0.0-beta.2, =6.0.0, =6.0.0-beta.2, =6.0.0, =6.0.0, =6.0.0, =6.0.0-beta.2, =6.4.0 -...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication through the AadOidcIdTokenDecoderFactory and AadB2cOidcIdTokenDecoderFactory OIDC ID token decoders in the Spring Cloud Azure OAuth2 login components. An attacker can elevate privileges and sign in as an...

CVE-2026-83991

Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...

CVE-2026-80093

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69854

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69279

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

GHSA-6X6C-W9W9-HV4H Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname

Impact Sensitive information exposure in the Infracost Terraform Cloud/Enterprise integration. Several code paths attached a configured secret token to a request whose host was taken straight from the scanned Terraform, with no check that the host was the trusted endpoint. The condition that...

Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname

Impact Sensitive information exposure in the Infracost Terraform Cloud/Enterprise integration. Several code paths attached a configured secret token to a request whose host was taken straight from the scanned Terraform, with no check that the host was the trusted endpoint. The condition that...

EUVD-2026-64019

Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname...

EUVD-2026-57222

Prowler: Stored XSS in HTML reports through unescaped cloud resource tags...

com.azure.spring:spring-cloud-azure-actuator-autoconfigure (>=4.0.0-beta.2, <=7.3.0), com.azure.spring:spring-cloud-azure-appconfiguration-config (>=4.0.0-beta.1, <=7.3.0) +47 more potentially affected by CVE-2026-69854 via com.azure.spring:spring-cloud-azure-autoconfigure (>=4.0.0-beta.2, <=7.3.0)

com.azure.spring:spring-cloud-azure-autoconfigure MAVEN version =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.1, =4.0.0-beta.1, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.1, =4.0.0-beta.2, =4.0.0-beta.2, =5.13.0, =4.9.0, =4.0.0-beta.2, =7.3.0 -...

EUVD-2026-73791

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69854

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69854

CVE-2026-69854 is an improper authentication vulnerability in Spring Cloud Azure that allows an unauthorized attacker to elevate privileges over a network . The CNA (Microsoft) assigned a CVSS 3.1 score of 9.0 (CRITICAL) with a changed scope , reflecting high impact on confidentiality, integrity,...

CVE-2026-22575

An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator ...

CVE-2026-83991

CVE-2026-83991 affects the Windows Cloud Files Mini Filter Driver , where a missing authentication check on a critical function allows a locally authenticated attacker to perform tampering . The vulnerability is rated CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges re...