CVE-2026-71069

creationtimestamp| type| source ---|---|--- 2026-08-19 18:17:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60779

creationtimestamp| type| source ---|---|--- 2026-08-19 18:17:25+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-55483

In Snipe-IT versions prior to 8.6.0, the store() method in UsersController.php strips the superuser permission but fails to strip the admin permission, allowing any authenticated user with the users.create permission to create accounts with full administrative privileges. The fix is included in v...

CVE-2026-55483 Snipe-IT: Privilege Escalation via Missing admin Permission Check in User Creation

Snipe-IT is an IT asset/license management system. Prior to 8.6.0, an authenticated user with users.create permission can submit the admin permission while creating a user because store in app/Http/Controllers/Users/UsersController.php strips superuser permission but does not strip admin...

CVE-2026-60820

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:47+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71126

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71049

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-19234

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image,...

CVE-2026-17183

An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana's configured...

CVE-2026-71042

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:20+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71043

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-62455

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70496

The search-v2-operator ClusterRole grants cluster-admin-equivalent privileges (impersonation, RBAC write, CSR approval, ManifestWork management), enabling privilege escalation. No exploitation details or patch versions are provided in the documents; monitor Red Hat advisories for remediation guid...

EUVD-2026-62678

A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator, allowing it to impersonate other entities, write Role-Based Access Control RBAC configurations, approve Certificate Signing Requests CSRs, and manage ManifestWork. This grants...

CVE-2026-60753

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:11+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-61326

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60798

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-61321

creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:48+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71113

creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:46+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-50550 Snipe-IT: 2FA reset privilege bypass

Snipe-IT is an IT asset/license management system. Prior to 8.5.0, a user who can edit other users can reset a superadmin's two-factor authentication through app/Http/Controllers/Api/UsersController.php postTwoFactorReset. The endpoint authorizes update access but does not enforce canEditAuthFiel...