CVE-2025-15545

CVE-2025-15545 Information Vendor: TP-Link Vendor's website: TP-Link Model: Archer RE605X Hardware version: RE605X v3.0 Firmware version: RE605XEUV31.1.5 Build 20240905 Firmware download address: TP-Link A chain of vulnerabilities — including the use of hardcoded cryptographic keys and a command...

CVE-2026-11813

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...

EUVD-2026-75753

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...

CVE-2021-21551

CVE-2021-21551 Dell Driver EoP CVE-2021-21551 Description Dell dbutil23.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required. This exploit was tested o...

CVE-2026-78221

A flaw was found in OpenVPN. An incorrect buffer size calculation within the Windows Interactive Service allows local authenticated users to trigger memory corruption or disclose sensitive information. This vulnerability can be exploited by providing specially crafted inputs...

CVE-2026-82325

CVE-2026-82325 is a use-after-free vulnerability in the OpenVPN ovpn-dco-win driver, affecting versions 2.5.0 through 2.8.6 . A local authenticated user can trigger a system crash by sending crafted control messages to the driver. The CVSS 4.0 score is 6.8 (MEDIUM) , with a local attack vector, l...

CVE-2026-82325

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages...

EUVD-2026-72348

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages...

CVE-2026-84226

OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...

CVE-2026-82312

OpenVPN 2.0.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects...

CVE-2026-78221

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs...

CVE-2026-78043

The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

EUVD-2026-71470

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser...

CVE-2026-17469 IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser...

EUVD-2026-71461

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to improper neutralization of special elements...

CVE-2026-18073

CVE-2026-18073 affects the Debug Server component of IBM i (versions 7.3 through 7.6). A local authenticated attacker can inject parameters into a CL command due to improper neutralization of special elements (CWE-78, OS Command Injection). The CVSS 3.1 base score is 4.4 (Medium) , with impacts t...

CVE-2026-18858

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH...

EUVD-2026-58812

The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks...

CVE-2026-13196

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

CVE-2026-16896

IBM i versions 7.3–7.6 are affected by CVE-2026-16896 (TOCTOU race condition in Network Authentication Service). Local authenticated attackers could obtain unauthorized access to files due to a TOCTOU flaw. Affected products: IBM i 7.3, 7.4, 7.5, 7.6. Remediation: apply the fixed PTFs per version...