CVE-2026-88285

GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service that requires no authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands. The underlying cause is the lack of an authentication mechanism on the service itself. The CVSS v3...

CVE-2026-88285: Missing Authentication for Critical Function

GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands...

The vulnerability of the sss_nss_protocol_parse_addr() function in the NSS responder of the access control service for remote directories and the SSHD authentication mechanism allows a attacker to cause a service failure.

The vulnerability of the sssnssprotocolparseaddr function in the NSS responder component of the access control service for remote directories and the SSHD authentication mechanism is related to the issue of the operation being executed outside of the buffer. Exploiting this vulnerability could...

CVE-2026-56758 MZ Automation libiec61850 Out-of-bounds Read

The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled length value of zero or one may cause the parser to read past the end of a heap buffer...

CVE-2026-56758

The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled length value of zero or one may cause the parser to read past the end of a heap buffer...

PT-2026-66623

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A flaw exists in the ACSE layer during the processing of AARQ PDUs Application Association Request Protocol Data Units during MMS connection establishment. An...

CVE-2026-21040

CVE-2026-21040 affects IAFDService; the root cause is improper access control that allows local privileged attackers to use the privileged APIs prior to SMR Jul-2026 Release 1. Documented impact includes access to high-privilege APIs with local execution, and no exploitation or remediation steps ...

CVE-2016-20091 Windows Firewall Control 4.8.6.0 Unquoted Service Path Privilege Escalation

Windows Firewall Control 4.8.6.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by inserting malicious executables in the service path. Attackers can place executable files in unquoted path directories that the wfcs.exe service will execute with...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the rclone rcd --rc-serve process. An attacker can execute arbitrary commands as the process user by sending unauthenticated GET or HEAD requests to specific paths, which trigger backend...

Security Advisory 0139

Security Advisory 0139 PDF Date: May 19, 2026 Revision | Date | Changes ---|---|--- 1.0 | May 19, 2026 | Initial release The CVE-ID tracking this issue: CVE-2025-49844 CVSSv3.1 Base Score: 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSSv4.0 Base Score: 9.4...

CVE-2026-2563

A vulnerability was identified in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. Affected is the function setstcreenendeabledstatus/getstatus of the file /f/service/controlDevice of the component jdcapprpc. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the...

PT-2026-6743

SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:Program Files x86ISSSecurOS to insert malicious code that would execute with...

The vulnerability of the Azure Monitor Control Service component, a monitoring service of Azure Monitor, allows a perpetrator to disclose protected information through server-side manipulation of query requests.

The vulnerability of the Azure Monitor Control Service component of the Azure Monitor monitoring service stems from server-side manipulation of queries. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

EUVD-1999-1492

Malware in sbrugna...

EUVD-2005-3035

Malware in sbrugna...

EUVD-2021-1841

Malware in sbrugna...

EUVD-2005-3034

Malware in sbrugna...

EUVD-2024-32842

Malicious code in bioql PyPI...

PT-2025-37050

Name of the Vulnerable Software and Affected Versions: litmusautomation litmus-mcp-server versions through 0.0.1 Description: An issue allows unauthorized attackers to control the target's MCP service through the SSE Server-Sent Events protocol. Recommendations: At the moment, there is no...

The vulnerability of the dcpd service in the microprogramming software of Siemens Scalance LPE9403 allows a hacker to trigger a maintenance failure.

The vulnerability of the dcpd service in Siemens Scalance LPE9403 microprogramming software is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending specially crafted malware packages...