EUVD-2026-110859

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacke...

CVE-2026-90726

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacke...

HiveMQ Data Hub Zip-Slip custom module cron root RCE

Admin POST /api/v1/cc-data-hub/module-instances/custom with Zip-Slip archive writing /etc/cron.d/. !/usr/bin/env python3 -- coding: utf-8 -- """HiveMQ Platform Data Hub custom module Zip-Slip cron root RCE.""" from future import annotations import base64 import io import json import random import...

Seeq self-registration Data Lab Jupyter missing auth Python RCE

Unauth POST /api/users, login, spawn Data Lab Jupyter, execute Python via kernel WebSocket channels. """Seeq unauthenticated self-registration Data Lab Jupyter kernel RCE.""" from future import annotations import base64 import json import os import socket import struct import time import uuid fro...

HiveMQ Platform Data Hub Zip-Slip to Root RCE — Detect

Fingerprint / reachability check for HiveMQ Platform Data Hub Zip-Slip to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for HiveMQ Platform Data Hub Zip-Slip to Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Seeq Server — Unauthenticated Self-Registration + Data Lab Jupyter Missing Autho — Detect

Fingerprint / reachability check for Seeq Server — Unauthenticated Self-Registration + Data Lab Jupyter Missing Authorization → Arbitrary Python RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Seeq Server — Unauthenticated Self-Registration + Data Lab Jupyter Missing Authorization ...

EUVD-2026-110858

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal vulnerability. A high privilege...

CVE-2026-90727

Dell PowerProtect Data Domain products are impacted by a Relative Path Traversal vulnerability (CWE-23). This affects Feature Release versions 7.7.1.0 through 8.8 , LTS2024 versions 7.13.1.0 through 7.13.1.80 , LTS2025 versions 8.3.1.0 through 8.3.1.40 , and LTS2026 versions 8.6.1.0 through 8.6.1...

CVE-2026-90727

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal vulnerability. A high privilege...

CVE-2026-94347

PowerProtect Data Domain Virtual Edition is affected by a Process Control vulnerability (CWE-114) across multiple release versions, including Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10. A high pri...

CVE-2026-94347

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high...

EUVD-2026-110857

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high...

EUVD-2026-110855

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high...

CVE-2026-94346

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high...

CVE-2026-94346

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high...

CVE-2026-94346

Dell PowerProtect Data Domain Virtual Edition is affected by a Path Traversal vulnerability (CWE-31) across multiple versions, including Feature Release 7.7.1.0 through 8.7 , LTS2024 7.13.1.0 through 7.13.1.70 , LTS2025 8.3.1.0 through 8.3.1.30 , and LTS2026 8.6.1.0 through 8.6.1.10 . A high priv...

CVE-2026-65145

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

CVE-2026-65119

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, information disclosure, data tampering, and denial o...

CVE-2026-65151

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure...

CVE-2026-24269

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering...