CVE-2026-84527: Insertion of Sensitive Information into Log File

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data...

CVE-2026-84525: Insertion of Sensitive Information into Log File

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data...

CVE-2026-90955: Insufficient Logging

Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions as a supplied MISP user ID. However, the legacy SysLogLogable behavior stored that identity in behavior-instance state...

The vulnerability of the Windows Event Logging service allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Event Logging service is related to overflow of the buffer in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-29812

CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cifs-utils (UTSA-2026-054012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054012 advisory. cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file. Tenabl...

CVE-2026-29812

CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list...

CVE-2026-29812

CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list...

CVE-2026-29812

CyberPanel versions prior to 2.4.4 lack logging for actions that could potentially manipulate the child domains list , reducing auditability of changes to that list. The vulnerability is scored CVSS 4.3 (Medium) with low integrity impact and no confidentiality or availability impact, requiring on...

PT-2026-90958

CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list...

EUVD-2026-77076

CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list...

CVE-2026-29812

CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list...

CVE-2026-29812: Insufficient Logging

CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list...

Malicious code in @biz44/id79-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

Malicious code in @biz44/id99-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

Malicious code in @biz44/id10-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

GHSA-MVXR-6M87-MV2Q vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

CVE-2026-63435 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.1

Logging for Red Hat OpenShift - 6.6.1 Red Hat OpenShift Logging 6.6.1 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

ImpactInvalid input to login resulted in unbounded logging output. Only form-based Authenticators the default PAM Authenticator, but not the more widely used OAuthenticator are affected. PatchesUpgrade to 5.5.0. WorkaroundsUse an Authenticator that doesn't use a login form, such as OAuthenticator...