EUVD-2026-58271

Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an internal error condition in Kibana by supplying specially crafted data...

Kibana 8.19.20, 9.3.8, and 9.4.5 Security Update (ESA-2026-101)

Uncaught Exception in Kibana Leading to Denial of Service Description: Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an...

Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities

Summary Multiple vulnerabilities are found in the dependent open source libraries used in IBM Quantum Safe Explorer code base. IBM Quantum Safe Explorer has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION:...

CVE-2026-71390 CAI Content Credentials | Improper Input Validation (CWE-20)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...

CVE-2026-71390

CAI Content Credentials is affected by an Improper Input Validation vulnerability (CWE-20) that could bypass security features and grant unauthorized limited write access. CVE-2026-71390; impact details: local attacker, no user interaction required, with a base CVSSv3.1 score of 4.0 (Medium). Exp...

CVE-2026-71390 CAI Content Credentials | Improper Input Validation (CWE-20)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...

CVE-2026-48436

Affected software/area: CAI Content Credentials. Vulnerability type: Improper Input Validation leading to a security feature bypass. Root cause / nature: Input validation flaw could allow bypass of security measures, enabling unauthorized write access. Impact: Security feature bypass with unautho...

CVE-2026-48436 CAI Content Credentials | Improper Input Validation (CWE-20)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...

CVE-2026-48436 CAI Content Credentials | Improper Input Validation (CWE-20)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...

CVE-2026-21279 ColdFusion | Improper Input Validation (CWE-20)

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...

CVE-2026-21279

The CVE-2026-21279 entry concerns Adobe ColdFusion (per CVE records) and describes an Improper Input Validation vulnerability that enables a Security feature bypass. The root cause is input validation failure allowing an attacker to bypass protections and gain unauthorized read access and limited...

CVE-2026-21279 ColdFusion | Improper Input Validation (CWE-20)

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...

CVE-2026-48384

Technical details (affected product/version, root cause, exploit specifics) are not publicly provided in the provided documents. Monitor for updates; no public technical details are included to assess vulnerability specifics beyond the general description.

CVE-2026-48384 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

CVE-2026-48384 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

CVE-2026-21273 ColdFusion | Improper Input Validation (CWE-20)

is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-21273

CVE-2026-21273 affects Adobe ColdFusion . The description shows an Improper Input Validation vulnerability that could lead to privilege escalation . A low-privileged attacker could gain unauthorized read/write access, but exploitation requires a victim to open a malicious file and user interactio...

CVE-2026-21273 ColdFusion | Improper Input Validation (CWE-20)

is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)

Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated remote code execution RCE against a vulnerable SharePoint server. Today, both Rapid7 and Microsoft ar...

Security Update for Microsoft Power BI Report Server (August 2026)

The Microsoft Power BI Report Server on the remote host is missing the February 2026 security update. It is, therefore, affected by an RCE vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...