Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to IBM Semeru Runtime

Summary IBM App Connect Enterprise runtime is vulnerable to multiple vulnerabilities due to IBM Semeru Runtime. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

CVE-2026-48907-

CVE-2026-48907 — ماسح ومستغل ثغرة RCE غير المُوثّقة لمحرر JCE في جوملا CVSS 10.0 | CWE-284 | CISA KEV | EPSS 80% أداة ماسحة واستغلال ثغرات مبنية بلغة بايثون لـ CVE-2026-48907 ، وهي ثغرة حرجة تسمح بتنفيذ تعليمات برمجية عن بُعد دون مصادقة في امتداد JCE محرر محتوى جوملا الخاص بنظام إدارة المحتوى...

Adobe Connect < 12.1.5 - Local File Disclosure

Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...

VMware vRealize Log Insight - Improper Access Control to RCE

The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution. id: CVE-2022-31704 info: name: VMware vRealize Log Insight - Improper Acces...

CVE-2026-48907

CVE-2026-48907 CVE-2026-48907 est une vulnérabilité critique de contrôle d'accès inadéquat dans l'extension JCE Editor pour Joomla. Elle permet à des attaquants non authentifiés de créer de nouveaux profils d'éditeur, ce qui peut finalement conduire à un téléchargement arbitraire de fichiers PHP ...

CVE-2026-36425

CVE-2026-36425 : إنهاء عشوائي للعمليات بواسطة OPSWAT AppRemover برنامج تشغيل kernel موقع من OPSWAT يقتل أي عملية عند الطلب. لا حاجة لحقوق المسؤول، لا فحوصات للامتيازات، ولا أسئلة تُطرح. وجّهه نحو EDR أو مضاد فيروسات أو عملية محمية بـ PPL وتموت. ثلاث طرق قتل مختلفة، جميعها تعمل من وضع kernel، وكله...

cve-2019-14326

CVEID : CVE-2019-14326 اسم المنتج المنتجات المتأثّر وإصداراته : Andy جميع الإصدارات حتى 46.11.113 نوع المشكلة : CWE-284: التحكم غير السليم في الوصول الملخص Andy هو محاكي أندرويد لأنظمة ويندوز وماك. أثناء اختباراتنا، عثرنا على منافذ TCP محلية مفتوحة يمكن استغلالها لرفع الامتيازات من المستخدم إلى...

CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass

CVE-2025-46018 – تجاوز مصادقة الدفع في تطبيق CSC Pay للهاتف المحمول الملخص تم اكتشاف ثغرة في تجاوز مصادقة الدفع في تطبيق CSC Pay للهاتف المحمول، وتؤثر على الإصدار 2.19.4. سمح هذا الخلل للمهاجم ببدء عملية دفع، ثم تعطيل البلوتوث عند نقطة محددة في العملية، وتشغيل آلة غسيل دون أن يتم تحصيل أي رسوم. ت...

CVE-2026-82486

A vulnerability in SiteServer SSCMS 7.4.0 affects the Agent Installation Workflow component, where improper access controls are triggered by manipulating the SecurityKey argument. The attack is remotely exploitable but rated as high complexity and difficult to execute . CVSS 3.1 scores it 5.0 (Me...

CVE-2021-42562

CVE-2021-42562: Fehlerhafte Zugriffskontrolle in MITRE Caldera Caldera Versionen =2.8.1 trennt Benutzerrechte nicht ordnungsgemäß, sodass Nicht-Admin-Benutzer Zugriff auf das Lesen und Ändern von Konfigurationen oder anderen Komponenten haben, die nur für Admin-Benutzer zugänglich sein sollten...

CVE-2023-27350

CVE-2023-27350 Questa vulnerabilità consente a un utente malintenzionato remoto di aggirare l'autenticazione su installazioni affette di PaperCut NG 22.0.5 Build 63914. Non è richiesta autenticazione per sfruttare questa vulnerabilità. Il difetto specifico risiede nella classe SetupCompleted. Il...

CVE-2023-23752

Joomla! options...

EUVD-2026-66404

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...

EUVD-2026-66402

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device...

EUVD-2026-66368

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

EUVD-2026-66400

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...

EUVD-2026-66365

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application...

Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in IBM Semeru Runtime

Summary The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in IBM Semeru Runtime. These vulnerabilities are addressed. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut...

Chromium: CVE-2026-79201 Improper access control in Workers

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

EUVD-2026-67713

An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allow...