CVE-2025-22849

Incorrect default permissions for the IntelR OptaneTM PMem management software before versions CRMGMT01.00.00.3584, CRMGMT02.00.00.4052, CRMGMT03.00.00.0538 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined...

CVE-2025-22849

The CVE affects Intel Optane PMem management software prior to CR_MGMT_01.00.00.3584, CR_MGMT_02.00.00.4052, and CR_MGMT_03.00.00.0538. Root cause: incorrect default permissions that can allow escalation of privilege from Ring 3 (User Applications). Affected scenario: unprivileged software advers...

CVE-2025-22849

Incorrect default permissions for the IntelR OptaneTM PMem management software before versions CRMGMT01.00.00.3584, CRMGMT02.00.00.4052, CRMGMT03.00.00.0538 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined...

CVE-2026-2215

A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a manipulation of the argument SECRETKEY results in use of default cryptographic key. The attack can be initiated...

PT-2026-7315

Name of the Vulnerable Software and Affected Versions IntelR Memory and Storage Tool versions prior to 2.5.2 Description The IntelR Memory and Storage Tool, in versions before 2.5.2, has default permissions that may allow a local escalation of privilege. An authenticated user with a high complexi...

Intel Optane PMem management software 安全漏洞

Intel Optane PMem management software is a persistent memory management software developed by Intel Corporation. Previous versions of Intel Optane PMem management software, such as CRMGMT01.00.00.3584, CRMGMT02.00.00.4052, and CRMGMT03.00.00.0538, contained security vulnerabilities. These...

PT-2026-7286

Name of the Vulnerable Software and Affected Versions IntelR OptaneTM PMem management software versions CR MGMT 01.00.00.3584, CR MGMT 02.00.00.4052, CR MGMT 03.00.00.0538 Description The software has default permissions that may allow a privilege escalation. An unprivileged software adversary wi...

Intel Battery Life Diagnostic Tool 安全漏洞

The Intel Battery Life Diagnostic Tool is a battery life analysis software developed by Intel, a US company. The Intel Battery Life Diagnostic Tool has a security vulnerability, which stems from improper default permission settings, potentially leading to an increase in permissions...

How to Change Where Logs are Stored on the Veeam Appliances

Changing Log Location Will Break Automated Log Collection The automated log collection tools built into both the Veeam Backup & Replication Web UI of the Veeam Software Appliance and the "Create support bundle" function within the Host Management Console collect logs only from the default log...

Intel® Memory and Storage Tool (Intel® MAS) Software Advisory

Summary: A potential security vulnerability for some Intel® Memory and Storage Tool Intel® MAS Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-36511 Description: Incorrect default...

Intel® Battery Life Diagnostic Tool Software Advisory

Summary: A potential security vulnerability for some Intel® Battery Life Diagnostic Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31655 Description: Incorrect default permission...

Intel Chipset 安全漏洞

The Intel Chipset is a series of chips developed by the American company Intel. Previous versions of the Intel Chipset 10.1.20266.8668 contained security vulnerabilities. These vulnerabilities were caused by improper default permission settings, which could lead to an increase in permissions...

Intel Graphics Drivers 安全漏洞

Intel Graphics Drivers is a graphics driver program developed by Intel, a company in the United States. Intel Graphics Drivers contains a security vulnerability, which stems from improper default permission settings, potentially leading to an increase in permissions...

Intel Memory and Storage Tool 安全漏洞

Intel Memory and Storage Tool is a utility tool developed by Intel Corporation in the United States, used for managing and monitoring Intel Solid State Disks SSD and memory modules. Prior to version 2.5.2 of Intel Memory and Storage Tool, there were security vulnerabilities. These vulnerabilities...

PT-2026-7329

Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing CORS is misconfigured, potentially allowing unauthorized web origins to access device resource. CORS is disabled by default on Pro‑class devices and can only be enabled by an administrator through the Embedd...

Intel® Graphics Advisory

Summary: Potential security vulnerabilities for some Intel® Graphics software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-32092 Description: Insecure inherited...

CVE-2026-25894

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. An insecure default configuration in FUXA allows an unauthenticated, remote attacker to gain administrative access and execute arbitrary code on the server. This affects FUXA through version 1.2.9 when authentication is...

CVE-2026-25894

FUXA (web-based Process Visualization) contains an insecure default configuration that allows an unauthenticated, remote attacker to gain administrative access and execute arbitrary code on the server. The root cause is a hardcoded admin JWT secret in the default configuration, affecting versions...

CVE-2026-25894 FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. An insecure default configuration in FUXA allows an unauthenticated, remote attacker to gain administrative access and execute arbitrary code on the server. This affects FUXA through version 1.2.9 when authentication is...

CVE-2026-25894 FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. An insecure default configuration in FUXA allows an unauthenticated, remote attacker to gain administrative access and execute arbitrary code on the server. This affects FUXA through version 1.2.9 when authentication is...