CVE-2026-44875

In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user...

EUVD-2026-117733

In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user...

CVE-2026-44875

The HPE Cray Programming Environment (CPE) is affected by a vulnerability in versions 25.03 and 25.09 (prior to 26.03 ). When deployed on HPCM , the deployment method potentially allows a local unprivileged user to gain elevated access . The security impact includes the potential disclosure of pr...

CVE-2026-44875

In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user...

CVE-2026-59264

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

EUVD-2026-116872

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

CVE-2026-59264 Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

PT-2026-136931

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

CVE-2026-59264: Apache Software Foundation Apache OpenOffice: The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code…

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

EUVD-2026-111226

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...

Adobe Campaign Classic cross-site scripting vulnerability

Adobe Campaign Classic versions 7.4.4 build 9402 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from a reflective XSS issue, which may allow attackers to inject malicious scripts into web pages. This can be achieved by having victims access specially crafted UR...

CVE-2026-112342 Tandoor Recipes < 2.7.0 Cross-Space Permission Cache Poisoning

Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permissionhelper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a cache key keyed only on user id while omitting the active space, with the cache...

CVE-2026-108398

A flaw was found in .NET Framework. An untrusted search path vulnerability allows an authenticated local attacker to bypass security features. By placing a malicious file in a search directory used by the application, an attacker can trick the system into loading unauthorized resources, potential...

CVE-2026-90532

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-75732

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-48383

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-90532 Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

EUVD-2026-100557

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-75732 Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-75732

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability (CWE-863 ). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user, potentially leading to elevated access or control over the victim's account or session. Exploi...