PT-2026-22802

Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support LinkBSL and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric...

PT-2026-22838

Name of the Vulnerable Software and Affected Versions GLPI Inventory Plugin versions prior to 1.6.6 Description The GLPI Inventory Plugin manages network discovery, inventory, software deployment, and data collection for GLPI agents. A reflected cross-site scripting XSS issue exists in task jobs...

Samsung TVs stop spying on viewers in Texas. Here’s how to disable ACR anywhere

Samsung has settled a lawsuit with the Texas Attorney General over how its smart TVs collect and monetize viewing data using Automated Content Recognition ACR. As part of the settlement, Samsung agreed to stop collecting ACR data from Texans without explicit, informed consent and to rewrite its...

The vulnerability of the Data Collection Agent service in the Cisco Catalyst SD-WAN Manager centralized network management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Data Collection Agent service in the Cisco Catalyst SD-WAN Manager centralized network management system is related to errors when privileged application programming interfaces APIs are used. Exploiting this vulnerability could allow a malicious actor to gain unauthorized...

The vulnerability of the Data Collection Agent service in the Cisco Catalyst SD-WAN Manager centralized network management system allows a malicious actor to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the Data Collection Agent service in the Cisco Catalyst SD-WAN Manager centralized network management system is related to the storage of passwords in a recoverable format. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

CVE-2026-20128

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...

Malicious StripeApi NuGet Package Mimicked Official Library and Stole API Tokens

Cybersecurity researchers have disclosed details of a new malicious package discovered on the NuGet Gallery, impersonating a library from financial services firm Stripe in an attempt to target the financial sector. The package, codenamed StripeApi.Net, attempts to masquerade as Stripe.net, a...

EUVD-2026-8676

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to gain DCA user privileges on an affected system. To exploit this vulnerability, the attacker must have valid vmanage credentials on the affected system. This...

CVE-2026-20128

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...

CVE-2026-20128

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to gain DCA user privileges on an affected system. To exploit this vulnerability, the attacker must have valid vmanage credentials on the affected system. This...

CVE-2026-20128 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...

CVE-2026-20128

CVE-2026-20128 affects Cisco Catalyst SD-WAN Manager: Data Collection Agent stores the DCA password in a recoverable credential file on the filesystem, enabling an authenticated, local attacker with valid vManage credentials to read the file and gain DCA user privileges, potentially compromising ...

CVE-2026-20128

A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...

PT-2026-21955

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager versions prior to 20.18 Description A flaw in the Data Collection Agent DCA feature allows an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This issue is caused by the presenc...

SUSE CVE-2026-25996

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

Applying Public Health Systematic Approaches to Cybersecurity: The Economics of Collective Defense

The U.S. public health system increased life expectancy by more than 30 years since 1900 through systematic data collection, evidence-based intervention, and coordinated response. This paper examines whether cybersecurity can benefit from similar organizational principles. We find that both domai...

PT-2026-7900

Name of the Vulnerable Software and Affected Versions Inspektor Gadget affected versions not specified Description Inspektor Gadget has an issue where string fields from eBPF events in columns output mode are not sanitized, potentially allowing maliciously crafted event payloads from observed...

The vulnerability of the multiq3_attach() function in the drivers/comedi/drivers/multiq3.c module allows attackers to cause a service failure for Linux operating system-based data collection devices.

The vulnerability of the multiq3attach function in the drivers/comedi/drivers/multiq3.c module, which supports Linux kernel-based data collection devices, is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service...

The system’s vulnerability for data collection and automation process control in Delta Electronics DIAView, due to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Delta Electronics DIAView system for data collection and automation process control is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows attackers to execute arbitrary commands...

The system’s vulnerability regarding data collection and automation process control in Delta Electronics DIAView, due to the lack of authentication for critical functions, allows unauthorized individuals to gain unauthorized access to the system.

The vulnerability of the Delta Electronics DIAView system for data collection and automation process control is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the system...