CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability

...

CVE-2026-69558 Microsoft Partner Center Information Disclosure Vulnerability

...

CVE-2026-69558

Microsoft Partner Center has an authorization bypass caused by a user-controlled key, enabling an unauthenticated remote attacker to disclose confidential information (CVSS 8.6, HIGH). The flaw requires no privileges or user interaction. No patch version or in-the-wild exploitation details are pr...

CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability

...

CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability

...

CVE-2026-66800

An SSRF flaw in Azure Data Factory lets an unauthenticated network attacker disclose sensitive information (CVSS 8.6 HIGH, scope changed). No exploit details are provided; Microsoft has published an update guide at the referenced MSRC link. Monitor for patch details and apply Azure Data Factory u...

CVE-2026-70105 Microsoft Word Information Disclosure Vulnerability

...

CVE-2026-70105

CVE-2026-70105 is an improper input validation vulnerability in Microsoft Office Word that allows an unauthorized, remote attacker to disclose information over a network . The attack requires user interaction (e.g., opening a crafted document) and no prior privileges. CVSS v3.1 score is 6.5 (Medi...

CVE-2026-70105 Microsoft Word Information Disclosure Vulnerability

...

CVE-2026-16973 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

CVE-2026-16972 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication...

CVE-2026-16972

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 have an improper authentication flaw allowing unauthenticated remote attackers to obtain sensitive information (CVSS 6.5, MEDIUM). IBM's support page (https://www.ibm.com/support/pages/node/7283858) is the sole reference; no exploitation details or patch ver...

CVE-2026-16964

CVE-2026-16964 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The vulnerability stems from the exposure of sensitive information , which allows a remote attacker to intercept messages and forge replies . The CVSS 3.1 base score is 6.5 (MEDIUM) with a network attack vector, low complexity, an...

CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability

...

CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability

...

CVE-2026-69519

Azure Stack HCI has an observable response discrepancy vulnerability allowing an unauthenticated remote attacker to disclose sensitive information over the network. CVSS 3.1 scores it HIGH (8.6) with network attack vector and no privileges required. No patch version or exploitation details are pr...

EUVD-2026-63684

Kerberos Agent is an open source video surveillance management agent. Prior to version 3.6.26, the Kerberos Hub upload path sends the agent's Hub credentials in the custom X-Kerberos-Hub-PrivateKey and X-Kerberos-Hub-PublicKey request headers to the operator-configured Hub URL config.HubURI. The...

CVE-2026-50192

Kerberos Agent (open-source video surveillance agent) prior to v3.6.26 leaks the Hub private key (X-Kerberos-Hub-PrivateKey) to a cross-host redirect target. The UploadKerberosHub function in machinery/src/cloud/kerberos_hub.go uses a bare &http.Client{} without a CheckRedirect policy. Go's net/h...

[SECURITY] [DSA 6455-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6455-1 [email protected] https://www.debian.org/security/ Andres Salomon August 20, 2026 https://www.debian.org/security/faq -...

CVE-2026-67448

Mailpit (email testing tool for developers) versions 1.29.0 through 1.30.5 contain a cross-site WebSocket hijacking vulnerability. The origin middleware in server/server.go checks the raw RequestURI for the /api/ prefix, while Go's ServeMux routes on the percent-decoded path. Combined with websoc...