CVE-2026-20707

Hardware logic contains race conditions for some 3rd Gen IntelR XeonR Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

CVE-2026-68354

In the Linux kernel, the following vulnerability has been resolved: firewire: net: Fix fragmented datagram reassembly fwnetfragnew keeps a sorted list of received fragments for a partial datagram. When a new fragment is adjacent to an existing fragment, the code checks whether the new fragment al...

CVE-2026-68165

The CVE affects the Linux kernel DAMON subsystem (mm/damon/core) where damon_set_regions() did not validate zero-length regions created by certain callers (DAMON_SYSFS, DAMON_RECLAIM, DAMON_LRU_SORT). This could trigger WARN_ONCE on CONFIG_DAMON_DEBUG_SANITY and cause a divide-by-zero in damon_me...

CVE-2026-68165 mm/damon/core: validate ranges in damon_set_regions()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damonsetregions DAMON core logic assumes zero length regions don't exist. However, a few DAMON API callers including DAMONSYSFS, DAMONRECLAIM and DAMONLRUSORT allow users to set empty monitoring...

CVE-2026-70395

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to forge a relationship to a record they cannot name, and to recover the secret value used to look it up. When managerelationship is used with onlookup: :relate on a belongsto...

Why Generative AI Needs a New Kind of Security

This is Post 2 of a three-part series. Start withPost 1: Agentic AI Security: The Chatbot Era Is Over, then continue to Post 3: OWASP LLM Top 10: What Comes Next – Agentic & MCP. There is a moment every CISO is having right now, often without warning. A developer shows a working internal demo of ...

K000162784: NLnet Labs Unbound vulnerability CVE-2026-42534

Security Advisory Description NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its purpose and degrade resolution performance. Retransmits of the same query could renew the age of slow running queries and not allow the jostle logic to...

August 2026 Security Advisory Ivanti Neurons for MDM

August 2026 Security Advisory Ivanti Neurons for MDM Summary Ivanti has released updates for Ivanti Neurons for MDM which addresses one medium vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: Description | CVS...

EUVD-2026-54320

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

CVE-2026-56161

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability

...

CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability

...

CVE-2026-56161

Azure Logic Apps is identified in CVE-2026-56161 as having improper access control that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 9.6 (CRITICAL) with NETWORK attack vector, LOW attack complexity, LOW privileges required, and no user interacti...

CVE-2026-56161

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

Azure Logic Apps Information Disclosure Vulnerability

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

CVE-2025-15039 Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products

The Conditional Authentication Adaptive Authentication script does not correctly enforce the completion of all required authentication steps when a specific multi-step pattern involving certain authenticators is configured. This allows an attacker to bypass intermediate authentication challenges ...

KLA91190 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

Schneider Electric SCADAPack and RemoteConnect Improper Check For Unusual or Exceptional Conditions (CVE-2026-0667)

CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause remote code execution, denial of service, and loss of confidentiality and integrity of the RTU controller when an unauthenticated attacker sends specially crafted Modbus TCP packets to the device...

MiracleLinux 9 : unbound-1.24.2-3.el9_8.2 (AXSA:2026-1474:09)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1474:09 advisory. unbound: Unbound: Denial of Service via excessive EDNS options CVE-2026-41292 unbound: Unbound: Cache manipulation via 'ghost domain names' attack...

AlmaLinux 8 : unbound (ALSA-2026:37282)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:37282 advisory. unbound: Unbound: Denial of Service via excessive EDNS options CVE-2026-41292 unbound: Unbound: Cache manipulation via 'ghost domain names' attack...