EUVD-2026-44715

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-20150

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

Improper Access Control

OpenCost is vulnerable to Improper Access Control. The vulnerability is due to missing authentication in the /serviceKey endpoint, which allows an attacker to overwrite the GCP service account key file remotely, leading to service disruption, credential theft, and potential privilege escalation...

PT-2026-60219

Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description Improper access control issues exist within the operating system. A remote attacker could exploit these flaws to bypass existing security restrictions and elevate their privileges...

[20260805] - Core - Improper ACL checks for category webservice endpoints

An improper access check allows unauthorized users to create categories for inaccessible components...

CVE-2026-58617

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-58545

Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally...

CVE-2026-57088

Improper access control in Extensible Storage Engine ESENT allows an authorized attacker to elevate privileges locally...

CVE-2026-56157

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-50465

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

CVE-2026-50418

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-50373

Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-50335

Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally...

CVE-2026-50342

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-50351

Improper access control in Windows Audio Compression Manager ACM allows an authorized attacker to elevate privileges locally...

CVE-2026-50325

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-50297

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-49805

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-50325

Technical details (affected versions, root cause, remediation) are not provided in the supplied documents; monitor for updates.

CVE-2026-50297

CVE-2026-50297 is a Windows Win32K local privilege escalation due to improper access control. The vulnerable component is Win32K; the condition allows an authorized attacker to elevate privileges locally. Base impact is high (C, I, A) with local attack vector and no user interaction required beyo...