CVE-2026-29647

In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...

PT-2026-44323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1 Description An issue exists in the spi: mpc52xx component where the controller is not properly deregistered before the driver unbinds...

Dell PowerProtect Data Domain (Dell PowerProtect DD) security vulnerabilities

Dell PowerProtect Data Domain Dell PowerProtect DD is a set of hardware devices developed by the American company Dell, used for data protection, backup, storage, and de-duplication. Vulnerabilities exist in versions 7.7.1.0 to 8.7.0.0 of Dell PowerProtect Data Domain Dell PowerProtect DD, as wel...

PT-2026-33840

In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...

CVE-2026-6572

A security vulnerability has been detected in Collabora KodExplorer up to 4.52. Affected by this issue is some unknown functionality of the file /app/controller/share.class.php of the component fileUpload Endpoint. The manipulation of the argument fileUpload leads to improper authorization. Remot...

CVE-2026-6570

A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argument path results in authorization bypass. The attack may be initiated remotely. The exploit has be...

CVE-2026-6571: Authorization Bypass Through User-Controlled Key

A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is the function roleGroupAction of the file /app/controller/systemRole.class.php. Executing a manipulation of the argument grouprole can lead to authorization bypass. The attack may be launched...

EyouCMS security vulnerabilities

EyouCMS is an open-source content management system CMS developed by Eyou Corporation in China, based on ThinkPHP. EyouCMS versions 1.7.1 and earlier have security vulnerabilities. These vulnerabilities stem from the handling of the filename parameter in the file...

Exploit for CVE-2026-4484

CVE-2026-4484 Masteriyo LMS = 2.1.6 - Missing Authorizatio...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-cd, delve, redka, nats-top, renovate, hey, opentelemetry-operator, regclient, prometheus-operator, mage, envoy-gateway, pvc-autoresizer, coredns, nri-f5, gitlab-kas, kube-arangodb, kubernetes-csi-external-attacher, helm, cni-plugins, net-kourier,...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-cd, delve, redka, nats-top, renovate, hey, opentelemetry-operator, regclient, prometheus-operator, mage, envoy-gateway, pvc-autoresizer, coredns, nri-f5, gitlab-kas, kube-arangodb, kubernetes-csi-external-attacher, helm, cni-plugins, net-kourier,...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-cd, delve, redka, nats-top, renovate, hey, opentelemetry-operator, regclient, prometheus-operator, mage, envoy-gateway, pvc-autoresizer, coredns, nri-f5, gitlab-kas, kube-arangodb, kubernetes-csi-external-attacher, helm, cni-plugins, net-kourier,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-cd, delve, redka, nats-top, renovate, hey, opentelemetry-operator, regclient, prometheus-operator, mage, envoy-gateway, pvc-autoresizer, coredns, nri-f5, gitlab-kas, kube-arangodb, kubernetes-csi-external-attacher, helm, cni-plugins, net-kourier,...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: mongo-tools-fips, grafana-operator, gofumpt, knative-serving-fips, aws-application-networking-k8s, kubescape-server, kubernetes-csi-node-driver-registrar, container-object-storage-interface, gatekeeper-fips, cloudbeat, external-dns-fips, tekton-pipelines,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: mongo-tools-fips, grafana-operator, gofumpt, knative-serving-fips, aws-application-networking-k8s, kubescape-server, kubernetes-csi-node-driver-registrar, container-object-storage-interface, gatekeeper-fips, cloudbeat, external-dns-fips, tekton-pipelines,...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: mongo-tools-fips, grafana-operator, gofumpt, knative-serving-fips, aws-application-networking-k8s, kubescape-server, kubernetes-csi-node-driver-registrar, container-object-storage-interface, gatekeeper-fips, cloudbeat, external-dns-fips, tekton-pipelines,...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: mongo-tools-fips, grafana-operator, gofumpt, knative-serving-fips, aws-application-networking-k8s, kubescape-server, kubernetes-csi-node-driver-registrar, container-object-storage-interface, gatekeeper-fips, cloudbeat, external-dns-fips, tekton-pipelines,...

EUVD-2026-23442

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...

CVE-2026-6284

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...

ch.exense.commons:exense-auth-ldap (>=1.3.0, <=1.3.1), ch.exense.commons:exense-core-server (>=1.3.0, <=1.3.1) +12 more potentially affected by CVE-2026-40458 +1 more via org.pac4j:pac4j-ldap (>=4.0.0, <=4.4.0)

org.pac4j:pac4j-ldap MAVEN version =4.0.0, =1.3.0, =1.3.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =1.0.0.release, =1.0.1.release Source cves: CVE-2026-40458, CVE-2026-40459 Source advisory: SNYK:JAVA-ORGPAC4J-16109662...