RLSA-2026:68233 Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

CVE-2026-81474

Dell OpenManage Server Administrator (versions prior to 11.1.0.3 ) contains a Heap-based Buffer Overflow vulnerability. A low-privileged attacker with local access and no user interaction can exploit this to achieve Elevation of Privileges , with high impact on confidentiality, integrity, and ava...

EUVD-2026-81426

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-81474

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2026-95168

Name of the Vulnerable Software and Affected Versions Microsoft Container Registry affected versions not specified Description An authorization bypass exists due to a user-controlled key, which allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment,...

CVE-2026-69865: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network...

PT-2026-95174

Name of the Vulnerable Software and Affected Versions M365 Copilot affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an authorized attacker to elevate privileges over a network. Recommendations At the...

CVE-2026-85885: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...

CVE-2026-69399: Unintended Proxy or Intermediary

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-77903: Authentication Bypass by Spoofing

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...

PT-2026-95177

Name of the Vulnerable Software and Affected Versions Azure Cosmos DB affected versions not specified Description An issue involving improper neutralization of special elements in output used by a downstream component, known as injection, allows an authorized attacker to elevate privileges over a...

CVE-2026-87701: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network...

PT-2026-95176

Name of the Vulnerable Software and Affected Versions Azure AI Foundry affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server-side application to make...

CVE-2026-83944: Improper Access Control

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

PT-2026-94362

Name of the Vulnerable Software and Affected Versions Dell SmartFabric Manager versions prior to 2.2.1 Description Insufficient Verification of Data Authenticity allows a low privileged attacker with remote access to potentially achieve elevation of privileges. Recommendations Update Dell...

AlmaLinux 8 : .NET 9.0 (ALSA-2026:68233)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:68233 advisory. dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability CVE-2026-58649 dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerabili...

PT-2026-94350

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description Improper Privilege Management allows a high privileged attacker with remote access to achieve elevation of privileges. Recommendations Update Dell OpenManage Server...

PT-2026-95183

Name of the Vulnerable Software and Affected Versions Azure Database for PostgreSQL affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version...

ALSA-2026:68676 Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

PT-2026-95171

Name of the Vulnerable Software and Affected Versions Microsoft Dataverse affected versions not specified Description An authentication bypass via spoofing allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer...