PT-2026-78312

Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv3 to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer...

CVE-2026-20318: Improper Input Validation

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

PT-2026-79956

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A user-supplied list of document fields accepted by the Kibana Playground for RAG feature was neither bounded in length nor de-duplicated before it was used t...

PT-2026-78499

Name of the Vulnerable Software and Affected Versions Cisco Secure Workload affected versions not specified Description Buffer management issues were identified during an internal security review. These issues fall under the category of CWE-119, which refers to improper restriction of operations...

CVE-2026-20030: Improper Neutralization of Special Elements used in an SQL Command

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

PT-2026-78490

Name of the Vulnerable Software and Affected Versions Cisco Crosswork affected versions not specified Description Multiple issues exist involving improper neutralization of special elements used in SQL commands, which can lead to SQL injection. SQL injection is a technique where an attacker inser...

PT-2026-78686

The NVS backend of the Zephyr settings subsystem subsys/settings/src/settings nvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '0', where rc is the return value of nvs read. Per its contract, nvs read returns the full stored entry lengt...

PT-2026-79874

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized cross-space access via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. The result is disclosure of inference output from a trained model in a different space that the user is not authoriz...

PT-2026-79882

Improperly Controlled Modification of Dynamically-Determined Object Attributes CWE-915 in the case management functionality of Elastic Security in Kibana can lead to unauthorized modification of case data by an authenticated user who has not been granted case editing privileges, via Manipulating...

PT-2026-78498

Name of the Vulnerable Software and Affected Versions Cisco Secure Workload affected versions not specified Description Improper input validation issues exist within the software. These issues are categorized under CWE-20, which refers to a failure to properly validate input before it is processe...

PT-2026-78500

Name of the Vulnerable Software and Affected Versions Cisco Crosswork affected versions not specified Description Multiple issues related to missing authentication for critical functions were identified during an internal security review. These issues fall under the category of CWE-306, which...

Linux Distros Unpatched Vulnerability : CVE-2026-63337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0,...

CVE-2026-61317

creationtimestamp| type| source ---|---|--- 2026-08-18 22:14:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfai2f53p2p 2026-08-19 02:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfpd3fsh22p 2026-08-19 17:51:48+00:00| seen|...

Exploit for Missing Authorization in Portainer

CVE-2026-44848 — Portainer: Missing Authorization on Docker Pl...

CVE-2026-70763

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: Daily Business Intelligence. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

CVE-2026-70729

Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite component: Service Request Form. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Teleservice...

CVE-2026-61341

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud...

CVE-2026-61021

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCent...

CVE-2026-60727

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

CVE-2026-60413

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology...