BELL-CVE-2026-63803

Bulletin has no description...

MINI-W9XM-P3WR-CQQR

Bulletin has no description...

MINI-6CVR-273W-JV43

Bulletin has no description...

MINI-RPJ6-VRG4-FF6X

Bulletin has no description...

MINI-WGQ4-MCVH-FHHF

Bulletin has no description...

MINI-4HGM-528M-327R

Bulletin has no description...

MINI-66Q4-9QGW-73WJ

Bulletin has no description...

MINI-644W-28F6-PCXC

Bulletin has no description...

EUVD-2026-47590

Missing Authorization CWE-862 in Kibana can lead to unauthorized cross-space information disclosure via user-supplied input that circumvents space-level access control...

EUVD-2026-47580

Missing Authorization CWE-862 in Kibana can lead to unauthorized information disclosure via Privilege Abuse CAPEC-122. A user with limited feature privileges can access workflow execution outputs in their Kibana space without the authorization required to do so through the documented API. The...

CGA-XM52-M35J-46XG

Bulletin has no description...

CGA-3G96-C3PM-XPPP

Bulletin has no description...

CGA-M6PQ-MVW5-QJ2V

Bulletin has no description...

CGA-5CCG-5FC6-H242

Bulletin has no description...

CVE-2026-63262

Missing Authorization CWE-862 in Kibana can lead to unauthorized cross-space information disclosure via user-supplied input that circumvents space-level access control...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the QUIC transport parameters extension handler during the processing of HelloRetryRequest messages. An attacker can cause increased memory consumption by repeatedly triggering...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the modules/activate dialog handler, which returns the full plaintext commercial license key to any authenticated user with the access.system permission. An attacker can obtain sensitive license information by...

ECHO-4C0D-898E-3E31

Bulletin has no description...

PT-2026-63462

An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomplete set of required fields. The issue stems from inconsistent validation across related transaction command parameters, resulting in a fat...

PT-2026-63392

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions prior to 1.25.2 Description A heap buffer overflow occurs when the validator builds the canonical RDATA form for an RRSIG-covered PX, RP, MINFO, or SOA RRset. The system computes the address of the second embedded...