PT-2026-78547

Name of the Vulnerable Software and Affected Versions Multicluster Engine for Kubernetes affected versions not specified Description A flaw in the cluster-proxy-addon component allows an unauthenticated attacker with access to the user-facing route to bypass authentication and authorization check...

The vulnerability of the jsonArrayContains() function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, allows an attacker to disclose protected information and execute arbitrary code.

The vulnerability of the jsonArrayContains function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, is related to the lack of protective measures for the SQL query structure during the processing of the CQLFILTER parameter...

Linux Distros Unpatched Vulnerability : CVE-2026-76039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain...

UBUNTU-CVE-2026-74961

Side-channel in the Web Audio component. This vulnerability was fixed...

PT-2026-78787

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description An authenticated user without an assigned role can access the '/rest/health' endpoint to collect system and cluster telemetry. This occurs due to a missing authorization check, as the endpoint...

CVE-2026-51367

An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...

ROS-20260819-73-0042

The vulnerability in Tomcat10 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-11817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments are not impacted. In a multi-organization...

UBUNTU-CVE-2026-74972

Information disclosure in the DOM: Push Subscriptions component. This...

Linux Distros Unpatched Vulnerability : CVE-2026-74972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird...

CVE-2026-74971

Information disclosure in the DOM: UI Events & Focus Handling componen...

UBUNTU-CVE-2026-74971

Information disclosure in the DOM: UI Events & Focus Handling componen...

CVE-2026-51367

Bottinelli Informatica Vedo Suite v.1.2.5 contains an Insecure Direct Object Reference (IDOR) vulnerability in the api_vedo/chat endpoint via the utente_chat parameter. A remote, unauthenticated attacker can manipulate this parameter to access sensitive information belonging to other users, resul...

Linux Distros Unpatched Vulnerability : CVE-2026-74948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1,...

CVE-2026-74945

Information disclosure in the Graphics: Text component. This vulnerabi...

Linux Distros Unpatched Vulnerability : CVE-2026-74971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1,...

Linux Distros Unpatched Vulnerability : CVE-2026-74958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

UBUNTU-CVE-2026-74958

Information disclosure in the WebRTC component. This vulnerability was...

PT-2026-78375

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An Improper Neutralization of Input During Web Page Generation, known as Cross-site Scripting XSS, allows a low privileged attacker with remote access to potentially cause...

PT-2026-78795

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with a role containing the playbooks:view permission can access metadata regarding a playbook repository they are not authorized to view. This occurs because the Playbook History feature...