CVE-2026-70423

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

EUVD-2026-62436

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection...

CVE-2026-56088

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection...

CVE-2026-56088

Dell OpenManage Enterprise versions before 4.7.0 contain an SQL injection vulnerability exploitable by a low-privileged remote attacker, with HIGH confidentiality impact (CVSS 7.1). Upgrade to 4.7.0 or apply Dell's DSA-2026-359 security update. No in-the-wild exploitation reported in the provided...

CVE-2026-54795

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

EUVD-2026-62435

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-54795

Dell OpenManage Enterprise versions prior to 4.7.0 have an OS Command Injection flaw; a low-privileged remote attacker can inject special characters into input to execute arbitrary commands. Dell's DSA-2026-359 advisory recommends updating to 4.7.0 or later. No exploitation details are provided i...

mysql: JSON unspecified vulnerability (CPU Jul 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: JSON. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily...

mysql: Optimizer unspecified vulnerability (CPU Jul 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified several vulnerabilities in various components of Oracle Enterprise Manager. The vulnerabilities in Oracle Enterprise Manager Base Platform and Oracle Enterprise Manager for Systems Infrastructure involve multiple issues where an attacker with low privileges—or even without...

BIT-ELASTICSEARCH-2026-72638 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

PT-2026-78380

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An Improper Neutralization of Special Elements used in an SQL Command, commonly known as SQL Injection, allows a low privileged attacker with remote access to potentially cause...

PT-2026-78378

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An Improper Restriction of XML External Entity Reference XXE occurs, where the application fails to properly restrict external entity references within XML documents. A low...

PT-2026-78692

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.3.2 Description An authenticated low-privileged user can cause the platform to authenticate to an attacker-controlled SSH server, leading to the disclosure of another user's stored SSH password or private-key materia...

PT-2026-78358

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An OS Command Injection issue exists where special elements used in an OS command are not properly neutralized. A low privileged attacker with remote access can exploit this flaw t...

PT-2026-78379

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows a low privileged attacker with remote access to potentially cause information...

PT-2026-78440

Name of the Vulnerable Software and Affected Versions Dell Command Update DCU versions prior to 5.7.1 Description An issue exists involving the deserialization of untrusted data. A low privileged attacker with local access could exploit this to achieve elevation of privileges. Deserialization is...

PT-2026-78377

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An Improper Neutralization of Special Elements used in an SQL Command, commonly known as SQL Injection, exists in the software. A low privileged attacker with remote access could...

PT-2026-78360

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An Improper Neutralization of Special Elements used in an SQL Command, commonly known as SQL Injection, allows a low privileged attacker with remote access to potentially execute...

PT-2026-78736

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A low-privileged user without admin or power roles can...