CVE-2025-32463

CVE-2025-32463 Marco de Detección Un marco integral de monitoreo de seguridad y detección diseñado para identificar intentos de explotación de la vulnerabilidad de escalada de privilegios sudo chroot CVE-2025-32463. Este proyecto demuestra metodologías avanzadas de detección de amenazas,...

Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()

Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...

CVE-2026-4255

CVE-2026-4255 Thermalright TR-VISION HOME DLL Side-Loading Privilege Escalation Severity: HIGH CVSS 8.4 CWE: CWE-829 Inclusion of Functionality from Untrusted Control Sphere Published: 16/03/2026 CNA: Toreon Affected versions: Thermalright TR-VISION HOME ≤ 2.0.5 Windows 64-bit Discovered by: Ard3...

EUVD-2026-76443

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the...

CVE-2026-69315

Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally...

EUVD-2026-73870

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-68842

CVE-2026-68842 is an information disclosure vulnerability in the Windows MIDI Service Module , where sensitive system information is exposed to an unauthorized control sphere. An authorized attacker with local access and low privileges can disclose confidential information, with high impact to co...

EUVD-2026-73045

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network...

CVE-2026-66840

XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere CWE-497. Sensitive system information may be leaked...

PT-2026-85410

Name of the Vulnerable Software and Affected Versions XING CPTrans-ME-X affected versions not specified Description XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere, which may lead to the leakage of sensitive system information...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

EUVD-2026-69230

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could exploit this to execute arbitrary code with root privileges , resulting in high impact to confidentiality, integrity, and availability with a cha...

BIT-GITLAB-2026-18252 Inclusion of Functionality from Untrusted Control Sphere in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have executed arbitrary commands in a CI context, due to the Claude...

PT-2026-84255

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An authenticated user with limited privileges can exploit an Inclusion of Functionality from Untrusted Control Sphere to execute arbitrary code with root privileges. Recommendations A...

CVE-2026-62902

A flaw was found in .NET. This vulnerability allows an unauthorized attacker to disclose sensitive information over a network. The issue arises from the inclusion of functionality from an untrusted control sphere, which can be exploited to reveal data. Mitigation No mitigation is needed. All...

CVE-2026-67267

Dell Command Update (DCU) versions prior to 5.7.1 are affected by an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve information disclosure , with no user interaction required. T...

PT-2026-78641

Name of the Vulnerable Software and Affected Versions Ozols Grupa OZOLS versions prior to 1.1.1233 Description The software contains a flaw in its automatic update channel, specifically affecting the OzolsSQL client update path, the serv update.vbs file, and the update SQL Server Agent job using...

Linux Distros Unpatched Vulnerability : CVE-2026-62902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-62902 Note tha...