CVE-2026-70954: Missing Authentication for Critical Function

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform...

CVE-2026-70717: Improper Access Control

Vulnerability in Oracle Autonomous Health Framework component: Cluster Health Analyzer. Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attach...

CVE-2026-70953: Missing Authentication for Critical Function

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Commerce Platform...

PT-2026-77733

Name of the Vulnerable Software and Affected Versions Oracle Autonomous Health Framework component: Trace File Analyzer versions 26-26.1.0 Oracle Autonomous Health Framework component: Trace File Analyzer version 26.2.0 Oracle Autonomous Health Framework component: Trace File Analyzer version...

CVE-2026-67920

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreWorkdir, and org.springframework.util.FileSystemUtils.copyRecursively components...

PT-2026-77730

Name of the Vulnerable Software and Affected Versions Oracle Autonomous Health Framework component: Trace File Analyzer versions 26-26.1.0 Oracle Autonomous Health Framework component: Trace File Analyzer version 26.2.0 Oracle Autonomous Health Framework component: Trace File Analyzer version...

Linux Distros Unpatched Vulnerability : CVE-2026-62897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. CVE-2026-62897 Note that Nessus relies on the presence...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

CLSA-2026-1787002033 TuxCare security update for yiisoft/yii2-dev (1 CVE)

TuxCare rebuilt yiisoft/yii2-dev to address 1 CVE. Fixed in 2.0.54-p1+tuxcare...

CVE-2026-65974 ERPNext: Server-Side Template Injection leading to Remote Code Execution

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, limited authenticated users can cross a permission boundary in Frappe safe execution because frappe.rendertemplate is exposed without forcing restrictglobals, allowing server-side template injectio...

CVE-2026-65974 ERPNext: Server-Side Template Injection leading to Remote Code Execution

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, limited authenticated users can cross a permission boundary in Frappe safe execution because frappe.rendertemplate is exposed without forcing restrictglobals, allowing server-side template injectio...

gstreamer1-plugins-bad-free security update

An update is available for gstreamer1-plugins-bad-free. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs...

RLSA-2026:55435 Important: gstreamer1-plugins-ugly-free security update

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGPL. Security Fixes: gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds chec...

BIT-DOTNET-SDK-2026-62897 .NET Framework Remote Code Execution Vulnerability

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally...

BIT-DOTNET-2026-62897 .NET Framework Remote Code Execution Vulnerability

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-19974

A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the function std::strncmp of the file src/tsessioncookiestore.cpp of the component Session Cookie Handler. The manipulation results in improper authentication. The attack can be...

CVE-2026-19974

The CVE targets treefrog-framework (treefrog-framework) up to version 2.11.2. The vulnerability lies in the Session Cookie Handler’s tsessioncookiestore.cpp, specifically the use of std::strncmp, enabling improper authentication. It can be exploited remotely with high attack complexity; a public ...

CVE-2026-19974 treefrogframework treefrog-framework Session Cookie tsessioncookiestore.cpp strncmp improper authentication

A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the function std::strncmp of the file src/tsessioncookiestore.cpp of the component Session Cookie Handler. The manipulation results in improper authentication. The attack can be...

EUVD-2026-60026

A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the function std::strncmp of the file src/tsessioncookiestore.cpp of the component Session Cookie Handler. The manipulation results in improper authentication. The attack can be...