TencentOS Server 3: perl:5.32 (TSSA-2026:0660)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0660 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2026-15069

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to improper neutralization of input during web page generation...

CVE-2026-59695

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet in a single request by naming an arbitrarily high gas price. When the mpp Elixir library is configured as fee payer feepayer: true,...

PT-2026-60873

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description An authenticated user can execute arbitrary commands with elevated privileges on the system. This occurs due to improper validation of user-supplied input within the Python Interpreter...

ROS-20260717-73-0038

The vulnerability of the Resource Timing application programming interface in Google Chrome and Microsoft Edge browsers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected informati...

Windows Privilege Escalation

Vulnerabilities of Windows operating systems are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

FortiPAM identity management GUI Code Execution

The vulnerability of the graphical user interface GUI of the FortiPAM identity management system, the FortiOS operating system, and the FortiProxy proxy server for protecting against internet attacks is related to the execution of operations outside of the buffer in memory. Exploiting this...

Microsoft SharePoint Server Deserialization RCE

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Windows Access Control Bypass

Vulnerabilities of Windows operating systems are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to bypass security restrictions...

Windows Search Privilege Exploitation

The vulnerability of the Windows Search search and indexing service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Security updates available for Adobe, Chrome, Firefox, VMWare, and Zoom

Security updates are not just for enterprises with a dedicated security team and a change-management calendar. For consumers and small businesses, they are one of the simplest ways to shut down known attack paths before criminals get a chance to use them. That matters because attackers love these...

Huawei HarmonyOS Image Codec Module Out-of-Bounds Reading Vulnerability

Huawei HarmonyOS is an operating system. The image codec module of Huawei HarmonyOS has a out-of-bounds read vulnerability, which stems from insufficient validation of input data. Attackers can exploit this vulnerability to compromise the confidentiality of services...

GitLab EE Access Rights Data Compromise

The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authorization process. Exploiting this vulnerability could allow ...

ROS-20260716-73-0028

The vulnerability of the Google Chrome browser’s PDF component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions by sending a specially crafted HTML page...

Windows Privilege Escalation

Vulnerabilities of Windows operating systems are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

Group Policy Services Privilege Escalation

The vulnerability of Group Policy Services in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

Adobe Animate Auth Bypass RCE

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : .NET vulnerabilities (USN-8553-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8553-1 advisory. Artur Stetsko discovered that the .NET did not properly validate authentication data. An attacker could possibly use this issue t...

Alibaba Cloud Linux 3 : 0195: 389-ds:1.4 (ALINUX3-SA-2026:0195)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0195 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-11610: A heap buffer overflow fla...

USN-8553-1 dotnet8, dotnet10 vulnerabilities

Artur Stetsko discovered that the .NET did not properly validate authentication data. An attacker could possibly use this issue to elevate privileges. CVE-2026-47300 Levi Broderick discovered that .NET did not properly handle XML encryption during parsing. An attacker could possibly use this issu...