CVE-2025-68648

A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2...

CVE-2026-25836

FortiSandbox Cloud 5.0.4 is affected by an OS command injection vulnerability. A privileged attacker with super-admin profile and CLI access can craft HTTP requests to execute arbitrary commands on the system. The CVSSv3.1 base score is 7.2 (HIGH) with network access, low attack complexity, and h...

CVE-2026-25836

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP...

CVE-2026-25836

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSandbox Cloud 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP requests...

CVE-2026-25836

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSandbox Cloud 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP requests...

CVE-2026-30939 Parse Server has Denial of Service (DoS) and Cloud Function Dispatch Bypass via Prototype Chain Resolution

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.13 and 9.5.1-alpha.2, an unauthenticated attacker can crash the Parse Server process by calling a Cloud Function endpoint with a prototype property name as the function name. The...

CVE-2026-30939 Parse Server has Denial of Service (DoS) and Cloud Function Dispatch Bypass via Prototype Chain Resolution

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.13 and 9.5.1-alpha.2, an unauthenticated attacker can crash the Parse Server process by calling a Cloud Function endpoint with a prototype property name as the function name. The...

CVE-2026-30939

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.13 and 9.5.1-alpha.2, an unauthenticated attacker can crash the Parse Server process by calling a Cloud Function endpoint with a prototype property name as the function name. The...

CVE-2026-30939

CVE-2026-30939 is associated with a vulnerability in Parse Server via a prototype chain resolution issue that enables a DoS. An unauthenticated attacker can crash the server by calling a Cloud Function endpoint with a prototype property name as the function name; other prototype property names by...

CVE-2026-30939 Parse Server has Denial of Service (DoS) and Cloud Function Dispatch Bypass via Prototype Chain Resolution

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.13 and 9.5.1-alpha.2, an unauthenticated attacker can crash the Parse Server process by calling a Cloud Function endpoint with a prototype property name as the function name. The...

CVE-2026-30938

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.12 and 9.5.1-alpha.1, the requestKeywordDenylist security control can be bypassed by placing any nested object or array before a prohibited keyword in the request payload. This is...

Exploit for CVE-2026-2472

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Simple Proof of C...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, oauth2-proxy, fscrypt, snyk-cli, podinfo, opencost, azuredisk-csi, terraform-provider-pagerduty, cluster-api-provider-vsphere, pulumi-kubernetes-operator, rancher-webhook, newrelic-fluent-bit-output, tempo, mc, kube-rbac-proxy,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, oauth2-proxy, fscrypt, snyk-cli, podinfo, opencost, azuredisk-csi, terraform-provider-pagerduty, cluster-api-provider-vsphere, pulumi-kubernetes-operator, rancher-webhook, newrelic-fluent-bit-output, tempo, mc, kube-rbac-proxy,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: nri-mysql, opensearch-k8s-operator, datadog-agent, gitlab-kas-fips, grafana-operator, scanner-test-golang-vulnerability-fixed, knative-eventing, container-object-storage-interface, spark-operator-fips, nri-mssql-fips, sigstore-scaffolding,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: nri-mysql, opensearch-k8s-operator, datadog-agent, gitlab-kas-fips, grafana-operator, scanner-test-golang-vulnerability-fixed, knative-eventing, container-object-storage-interface, overmind, nri-mssql-fips, sigstore-scaffolding, external-secrets-operator-fips, jaeger...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-kas-fips, knative-eventing, terraform-provider-tls, tofu-controller-fips, external-secrets-operator-fips, elastic-agent-fips, cert-manager-cmctl-fips, prometheus-mysqld-exporter, terraform-provider-acme-fips, ko-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-kas-fips, knative-eventing, terraform-provider-tls, tofu-controller-fips, external-secrets-operator-fips, elastic-agent-fips, cert-manager-cmctl-fips, prometheus-mysqld-exporter, terraform-provider-acme-fips, ko-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: nri-mysql, opensearch-k8s-operator, datadog-agent, gitlab-kas-fips, grafana-operator, scanner-test-golang-vulnerability-fixed, knative-eventing, container-object-storage-interface, overmind, nri-mssql-fips, sigstore-scaffolding, external-secrets-operator-fips, jaeger...

Security Bulletin: IBM Streamsets Cartridge shipped with publicy disclosed vulnerablity version of containerd

Summary IBM Streamsets Cartridge shipped with publicy disclosed vulnerablity version of containerd github.com/containerd/containerd v1.7.28 CVE-2024-25621 Vulnerability Details CVEID:CVE-2024-25621 DESCRIPTION: containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28,...