Universal Robots PolyScope 操作系统命令注入漏洞

Universal Robots PolyScope is a graphical control software interface developed by Universal Robots in the United States, used for programming and operating industrial collaborative robots. Versions of Universal Robots PolyScope prior to 5.21.1 contained an operating system command injection...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring and Dashboard operands are vulnerable to loss of confidentiality (CVE-2026-39892, CVE-2026-34073) and arbitrary code execution (CVE-2026-40087)

Summary IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to loss of confidentiality CVE-2026-39892, CVE-2026-34073. Dashboard operands that use the App Connect Enterprise Agent are vulnerable to arbitrary code execution...

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via inadequate validation of the Origin header during WebSocket connection upgrades. An attacker can gain unauthorized access to sensitive log data by convincing an authenticated user to visit a...

Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users

Summary Kubetail's dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on connection upgrade. A malicious web page visited by a user with an active Kubetail session could open a WebSocket to the user's dashboard and read their Kubernetes logs in real time. Thi...

PT-2026-38411

Name of the Vulnerable Software and Affected Versions Kubetail Dashboard versions prior to 0.14.0 Kubetail Helm Chart versions prior to 0.23.0 Kubetail CLI versions prior to 0.16.0 Description Kubetail's dashboard exposes WebSocket endpoints that do not adequately validate the Origin header durin...

GHSA-VF2M-468P-8V99 vulnerabilities

Vulnerabilities for packages: lerna, awx, kubeflow-centraldashboard, langfuse, kibana, gitlab-rails-ce, langfuse-fips, opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips, jitsucom-jitsu, redisinsigh...

GHSA-PMWG-CVHR-8VH7 vulnerabilities

Vulnerabilities for packages: lerna, awx, kubeflow-centraldashboard, langfuse, kibana, gitlab-rails-ce, langfuse-fips, opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips, jitsucom-jitsu, redisinsigh...

GHSA-62HF-57XW-28J9 vulnerabilities

Vulnerabilities for packages: lerna, awx, kubeflow-centraldashboard, langfuse, kibana, gitlab-rails-ce, langfuse-fips, opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips, jitsucom-jitsu, redisinsigh...

GHSA-5C9X-8GCM-MPGX vulnerabilities

Vulnerabilities for packages: lerna, awx, kubeflow-centraldashboard, langfuse, kibana, gitlab-rails-ce, langfuse-fips, opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips, jitsucom-jitsu, redisinsigh...

GHSA-445Q-VR5W-6Q77 vulnerabilities

Vulnerabilities for packages: lerna, awx, kubeflow-centraldashboard, langfuse, kibana, gitlab-rails-ce, langfuse-fips, opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips, jitsucom-jitsu, redisinsigh...

GHSA-XX6V-RP6X-Q39C vulnerabilities

Vulnerabilities for packages: lerna, awx, kubeflow-centraldashboard, langfuse, kibana, gitlab-rails-ce, langfuse-fips, opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips, jitsucom-jitsu, redisinsigh...

GHSA-XHJH-PMCV-23JW vulnerabilities

Vulnerabilities for packages: lerna, awx, kubeflow-centraldashboard, langfuse, kibana, gitlab-rails-ce, langfuse-fips, opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips, jitsucom-jitsu, redisinsigh...

GHSA-W9J2-PVGH-6H63 vulnerabilities

Vulnerabilities for packages: lerna, awx, kubeflow-centraldashboard, langfuse, kibana, gitlab-rails-ce, langfuse-fips, opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips, jitsucom-jitsu, redisinsigh...

GHSA-M7PR-HJQH-92CM vulnerabilities

Vulnerabilities for packages: lerna, awx, kubeflow-centraldashboard, langfuse, kibana, gitlab-rails-ce, langfuse-fips, opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips, jitsucom-jitsu, redisinsigh...

GHSA-PF86-5X62-JRWF vulnerabilities

Vulnerabilities for packages: lerna, awx, kubeflow-centraldashboard, langfuse, kibana, gitlab-rails-ce, langfuse-fips, opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips, jitsucom-jitsu, redisinsigh...

GHSA-6CHQ-WFR3-2HJ9 vulnerabilities

Vulnerabilities for packages: lerna, awx, kubeflow-centraldashboard, langfuse, kibana, gitlab-rails-ce, langfuse-fips, opensearch-dashboards, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips, jitsucom-jitsu, redisinsigh...

Privilege Escalation

@oneuptime/common is vulnerable to privilege escalation. The vulnerability is due to improper validation of the isMasterAdmin parameter in the login response, which allows an attacker to manipulate its value and gain unauthorized access to the admin dashboard...

DEBIAN-CVE-2026-23928

The Item history widget in Zabbix 7.0+ or the Plain text widget in Zabbix 6.0 can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would...

CVE-Intelligence

VulnForge Local-only, single-user CVE alert & patch-priority...

EUVD-2026-27331

An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 5.0, Medium. This...