CVE-2026-77537

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

CVE-2026-77537

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

CVE-2026-18794 OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...

CVE-2026-18794

OpenRGB is vulnerable in its network protocol due to insufficient input data validation. An attacker can pass inconsistent data over the network to cause memory exhaustion and out-of-bounds memory reads and writes , leading to denial-of-service and potential memory corruption. The vulnerability i...

CVE-2026-18794 OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...

CVE-2026-18794 OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77535

CVE-2026-77535 is an Improper Input Validation vulnerability in UniFi Network Application that allows a network-based, high-privilege actor to achieve Command Injection on an adopted device. The CNA-assigned CVSS 3.1 score is 9.1 (Critical) with a Changed Scope and High impact across Confidential...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77533

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

Moderate: Red Hat Security Advisory: polkit security update

An update for polkit is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

polkit: Polkit: Denial of Service via unbounded input processing through standard input

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...

Vulnerabilities found in DrayTek VigorAP

DrayTek has addressed several vulnerabilities in the VigorAP product line. These vulnerabilities exist in various functions and components of the DrayTek VigorAP devices, including tr069TestInform, ExportSettings, setLan, setcamset, meshstartspeedtest, InquierTime, apautotest, uploadsettings.cgi,...

EUVD-2026-66378

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

CVE-2026-77533

UniFi Protect Application (Ubiquiti) is affected by an Improper Input Validation flaw that enables Command Injection on the host device. An attacker with network access and low privileges can exploit this without user interaction. The CVSS 3.1 score is 9.9 (Critical) , reflecting changed scope wi...

CVE-2026-77533

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

CVE-2026-77533

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

Security Bulletin: RMC daemon (part of Reliable Scalable Cluster Technology) is vulnerable to Denial-of-Service attack

Summary RMC daemon part of Reliable Scalable Cluster Technology is vulnerable for Denial-of-Service attack while handling malformed packets during a RMCAPI session establishement. Vulnerability Details CVEID:CVE-2026-14514 DESCRIPTION: IBM Reliable Scalable Cluster Technology RSCT 3.0 could allow...

CVE-2026-78237

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended...

CVE-2026-6178

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's 'iconbox2' shortcode in all versions up to, and including, 28.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...