CVE-2026-85127: Improper Neutralization of Input During Web Page Generation

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.8.15 does not restrict the type of files unauthenticated visitors may attach to its live chat, nor sanitize their contents, allowing them to store active content which is executed in the context of an administrator viewing the...

Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the createDBLink method. The issue results from the lac...

Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The specific flaw exists within the MnTRESTLivelogService class. Due to the improper restriction of X...

CVE-2026-63451: Heap-based Buffer Overflow

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, a locally supplied detection rule that combines frame inspection without content and a transformed match without content can make...

PT-2026-95309

Name of the Vulnerable Software and Affected Versions CSS & JavaScript Toolbox versions prior to 12.0.7 Description The plugin is subject to Stored Cross-Site Scripting XSS, a flaw where malicious scripts are permanently stored on the target server. The issue exists within the Assignment Engine...

PT-2026-95373

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.9.1 Description Access-control rules for per-type and per-record permissions are only enforced in LocalBucket. Query-execution paths accessing record data via LSM Log-Structured Merge-tree index files or the...

Cisco Identity Services Engine (cisco-sa-ise-cmd-inj-e2CuZCYZ)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges toroot...

EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2026-3735)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...

Cisco Identity Services Engine (cisco-sa-ise-rce-se7bYU57)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit...

Cisco Identity Services Engine (cisco-sa-ISE-ABP-VNSW7Tn5)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in an API of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass authentication. CVE-2026-76460 Please see the included Cisco BIDs and Cisco Security Adviso...

Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The specific flaw exists within the AlarmMessageDiskQueue class. The issue results from the lack of proper...

CVE-2026-67071

HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure valu...

Critical: Red Hat Security Advisory: satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview

A new satellite/iop-vulnerability-engine-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages...

Important: Red Hat Security Advisory: General availability of the satellite/iop-insights-engine-rhel9 container image

A new satellite/iop-insights-engine-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...

Critical: Red Hat Security Advisory: satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview

A new satellite/iop-vulnerability-engine-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages...

Important: Red Hat Security Advisory: General availability of the satellite/iop-insights-engine-rhel9 container image

A new satellite/iop-insights-engine-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...

health.matchbox:matchbox-engine (3.2.1), org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.3.3) +2 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.116)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.116 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - health.matchbox:matchbox-engine 3.2.1 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.116), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.116) +4 more potentially affected by CVE-2026-81876 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.116)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.116 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.116 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...

health.matchbox:matchbox-engine (3.2.1), org.hl7.fhir.publisher:org.hl7.fhir.publisher (1.3.3) +2 more potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.116)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.116 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - health.matchbox:matchbox-engine 3.2.1 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.116), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.116) +4 more potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (5.6.116)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 5.6.116 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.116 - ca.uhn.hapi.fhir:org.hl7.fhir.validation...