ROS-20260819-73-0051

The vulnerability in Tomcat10 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2026-78397

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description An issue exists where the software fails to apply visibility checks for parent FAQ records before returning associated child resources. Unauthenticated attackers can retrieve restricted comment text...

PT-2026-78349

Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...

PT-2026-78582

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2 IBM Power System...

PT-2026-78342

Name of the Vulnerable Software and Affected Versions Outranking Plugin versions prior to 1.1.4 Description Broken access control allows unauthenticated users to access the options of the Outranking Plugin. Recommendations Update to a version newer than 1.1.3...

ROS-20260819-73-0052

The vulnerability in Tomcat11 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

ROS-20260819-73-0057

The vulnerability in Tomcat10 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260819-73-0050

The vulnerability in Tomcat is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

PT-2026-78496

Name of the Vulnerable Software and Affected Versions Cisco Secure Workload affected versions not specified Description Improper access control issues exist within the software, categorized under CWE-284, which refers to the improper restriction of operations on a resource. These issues were...

PT-2026-78725

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user with a role possessing the schedule search capabilit...

Linux Distros Unpatched Vulnerability : CVE-2026-11817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments are not impacted. In a multi-organization...

PT-2026-78501

Name of the Vulnerable Software and Affected Versions Cisco Crosswork affected versions not specified Description An internal security review identified issues related to external control of the file system. This involves a collection of vulnerabilities where an external actor could potentially...

PT-2026-78694

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.6.1 Description An issue exists in the GET /host/db/host/:id/password endpoint within src/backend/database/routes/host.ts where host ownership is not enforced during credential resolution. When an authenticated user...

PT-2026-78566

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware version FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2...

PT-2026-78821

Name of the Vulnerable Software and Affected Versions Splunk AI Toolkit versions prior to 6.0.0 Description Low-privileged users without admin or power roles can start, stop, and configure containers, as well as read or modify connection and configuration data. This occurs because multiple handle...

PT-2026-78641

Name of the Vulnerable Software and Affected Versions Ozols Grupa OZOLS versions prior to 1.1.1233 Description The software contains a flaw in its automatic update channel, specifically affecting the OzolsSQL client update path, the serv update.vbs file, and the update SQL Server Agent job using...

ROS-20260819-73-0058

The vulnerability in Tomcat11 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

CVE-2026-66589

Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a through 5.2.30...

MINI-4XW9-CM6V-GVJ5

Bulletin has no description...

CVE-2026-66589 WordPress B2BKing plugin <= 5.2.30 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a through 5.2.30...