344664 matches found
CVE-2026-75650 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
CVE-2026-75650
Adobe Commerce (Magento) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability (CWE-1336) that allows arbitrary code execution in the context of the current user without requiring user interaction. The CVSS 3.1 score is 10.0 (CRITICAL) with a change...
CVE-2026-75650 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
CVE-2026-75650 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
PT-2026-86661
A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard...
Exploit for CVE-2026-82876
CVE-2026-82876 — Phison S11 SSD Firmware Signature Verificatio...
CVE-2026-66840
XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere CWE-497. Sensitive system information may be leaked...
CVE-2026-69657
XING CPTrans-ME-X contains a Use of Default Password CWE-1393. Anyone with the knowledge of the credential may log in to the affected device...
CVE-2026-62928
XING CPTrans-ME-X contains an OS Command Injection CWE-78. Unauthenticated OS command may be injected...
CVE-2026-70403
XING CPTrans-ME-X contains a Use of Hard-coded Password CWE-259. Anyone with the knowledge of the credential may log in to the affected device...
CVE-2026-70403
XING CPTrans-ME-X contains a hard-coded password (CWE-259) that allows anyone who knows the credential to log in to the affected device. The vulnerability is rated CVSS 3.1: 9.8 CRITICAL (network vector, low complexity, no privileges or user interaction required) with high impact on confidentiali...
CVE-2026-70403
XING CPTrans-ME-X contains a Use of Hard-coded Password CWE-259. Anyone with the knowledge of the credential may log in to the affected device...
CVE-2026-70403
XING CPTrans-ME-X contains a Use of Hard-coded Password CWE-259. Anyone with the knowledge of the credential may log in to the affected device...
EUVD-2026-70919
XING CPTrans-ME-X contains a Use of Hard-coded Password CWE-259. Anyone with the knowledge of the credential may log in to the affected device...
EUVD-2026-70918
XING CPTrans-ME-X contains a Use of Default Password CWE-1393. Anyone with the knowledge of the credential may log in to the affected device...
CVE-2026-69657
XING CPTrans-ME-X contains a Use of Default Password CWE-1393. Anyone with the knowledge of the credential may log in to the affected device...
CVE-2026-69657
XING CPTrans-ME-X contains a Use of Default Password vulnerability (CWE-1393), meaning anyone who knows the default credential can log in to the affected device. The vulnerability is rated CRITICAL with a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and a CVSS v4.0 base score...
CVE-2026-69657
XING CPTrans-ME-X contains a Use of Default Password CWE-1393. Anyone with the knowledge of the credential may log in to the affected device...
CVE-2026-66840
XING CPTrans-ME-X , a rack accessory product, is affected by an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) , which may allow sensitive system information to be leaked. The vulnerability is exploitable over the network with low complexity , requires no pri...