Linux Distros Unpatched Vulnerability : CVE-2026-6790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host...

USN-8551-1: Tomcat vulnerabilities

It was discovered that Tomcat incorrectly handled authorization when multiple method constraints defined the same HTTP method. A remote attacker could possibly use this issue to bypass authorization restrictions. CVE-2026-43515 It was discovered that the Tomcat number guess example application di...

CVE-2026-5270

Technical details (affected product versions, components, root cause, exploitability, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official sources (NVD, ENISA EUVD, CVE listings) for concrete mitigation guidance.

CVE-2026-5270 Authentication Bypass in Navigator and Blue Planet Products

An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite NCS, Manage Control Plan MCP, and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate...

GHSA-PQG7-V6WH-3PFP TsDProxy: X-Forwarded-For header injection allows IP spoofing in proxied requests to backend services

Description The HTTP reverse proxy handler in tsdproxy does not strip the X-Forwarded-For or X-Real-IP header from incoming requests before calling r.SetXForwarded. This allows an authenticated Tailscale user to inject arbitrary X-Forwarded-For values that are forwarded verbatim to backend...

CVE-2026-50502

Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network...

USN-8542-1: Dnsmasq vulnerabilities

Yiwei Hou discovered that Dnsmasq incorrectly handled logging of DS or DNSKEY. A remote attacker could possibly use this issue to cause a denial of service. CVE-2026-12725 It was discovered that Dnsmasq incorrectly validated the length of fixed-length DNS record fields when parsing NS section...

CVE-2026-34348

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network...

CVE-2026-50502 Windows Event Logging Service Remote Code Execution Vulnerability

...

CVE-2026-50502 Windows Event Logging Service Remote Code Execution Vulnerability

...

CVE-2026-50502

CVE-2026-50502 corresponds to a Windows Event Logging Service remote code execution vulnerability. The issue is described as insufficient granularity of access control in the Event Logging Service, enabling an authenticated, network-accessing attacker to run code on the vulnerable system. For con...

CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability

...

CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability

...

CVE-2026-34348

CVE-2026-34348 affects the Windows Event Logging Service. The issue is a protection mechanism failure that can allow an authorized attacker to disclose information over a network. According to the available records, the exploit surface is network-based with low privileges required and no user int...

Windows Event Logging Service Information Disclosure Vulnerability

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network...

Windows Event Logging Service Remote Code Execution Vulnerability

Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network...

PT-2026-58476

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description Insufficient granularity of access control in the Windows Event Logging Service allows an authorized attacker to execute arbitrary code over a network. Recommendations A...

PT-2026-58117

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description A protection mechanism failure in the Windows Event Logging Service allows an authorized attacker to disclose information over a network. Recommendations Install the Jul...

KLA91153 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

PYSEC-2026-2441 dbt MCP Server Logs Tool Arguments Including SQL Queries and Credentials in Plaintext Without Redaction When File Logging Is Enabled

Discovered through manual source code review. Verified by PoC execution against a local dbt-mcp v1.15.1 installation. Summary DbtMCP.calltool in src/dbtmcp/mcp/server.py logs the complete raw arguments dictionary at INFO level on every tool invocation line 67 and again at ERROR level if the call...