CVE-2026-86516: Improper Privilege Management

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege...

PT-2026-87860

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use after free condition in Windows Deployment Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after fr...

PT-2026-87872

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-69607: Use After Free

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

PT-2026-87609

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use-after-free condition exists in Windows Deployment Services, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the...

CVE-2026-72957: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-72943: Use After Free

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-72954: Use After Free

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

PT-2026-87870

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use after free condition in Windows Deployment Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after fr...

ROOT-OS-UBUNTU-2204-CVE-2025-38480 CVE-2025-38480 in linux - Patched by Root

Root has patched CVE-2025-38480 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-75034

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

EUVD-2026-70512

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

CVE-2026-75034 Rancher: SAML Assertion Replay

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

monitor v0.41.0

BetterDB Monitor The monitoring layer that Valkey deserves. BetterDB persists what Valkey throws away - slowlogs, command patterns, client activity, anomaly signals - so you can debug what happened at 3am, not just what's happening now. Built for Valkey 8.x with native support for COMMANDLOG,...

The vulnerability of the TFTP server of the Windows Deployment Services service allows a hacker to execute arbitrary code.

The vulnerability of the TFTP server of the Windows Deployment Services service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-78603

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding minimal Elasticsearch privileges could bypass Kibana feature authorization and space access controls, resulting ...

CVE-2026-78603 Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding minimal Elasticsearch privileges could bypass Kibana feature authorization and space access controls, resulting ...

CVE-2026-78603 Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding minimal Elasticsearch privileges could bypass Kibana feature authorization and space access controls, resulting ...

CVE-2026-78603 Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding minimal Elasticsearch privileges could bypass Kibana feature authorization and space access controls, resulting ...

CVE-2026-78605

Elasticsearch is affected by an HTTP Request Smuggling flaw (CWE-444) that can lead to information disclosure . Under specific proxy deployment configurations, a network attacker with no prior authentication could obtain confidential responses intended for other authenticated users. The CVSS 3.1 ...