PT-2026-90366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the CephFS client kernel when processing CEPH MSG MDS MAP messages. The function ceph mdsmap decode in fs/ceph/mdsmap.c reads the num export targets...

PT-2026-90510

ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated low-privileged user with coarse Events=View and/or Snapshots=View permissions to directly fetch media for events belonging to monitors they are n...

PT-2026-89524

Name of the Vulnerable Software and Affected Versions zstd-jni versions 1.4.8-4 through 1.5.7-13 Description An issue exists where negative length parameters are not validated in the read function of ZstdInputStreamNoFinalizer. An attacker can provide negative length values to trigger an infinite...

Linux Distros Unpatched Vulnerability : CVE-2026-89045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read, allowing attackers to trigger infinit...

worldmonitor v2.10.0

World Monitor 简体中文 | 日本語 | Русский Real-time global intelligence dashboard — AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface. !Happy...

CVE-2026-47837

A flaw was found in Spring Cloud Config Server. This vulnerability allows an unauthenticated remote attacker to send webhook requests to the /monitor endpoint without validation. This lack of authentication for a critical function could lead to a denial of service DoS condition, making the server...

Denial-of-Service (DoS)

Spring Cloud Config is vulnerable to a Denial-of-Service DoS. The vulnerability is due to the Spring Cloud Config Monitor processing maliciously crafted payloads, which allows an attacker to send specially crafted requests that can exhaust application resources and cause the affected service to...

CVE-2026-69324

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-81821 AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information...

CVE-2026-81821 AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information...

CVE-2026-81821

CVE-2026-81821 affects AVEVA Pipeline Integrity Monitor (PIMBoards) due to the use of a hard-coded cryptographic key . An attacker with local read access to PIMBoards project files can decrypt and view sensitive information stored within them. The CVSS 3.1 score is 8.4 (HIGH) with changed scope, ...

CVE-2026-81822 AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user...

CVE-2026-81823 AVEVA Pipeline Integrity Monitor Missing Authorization

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted...

CVE-2026-81823 AVEVA Pipeline Integrity Monitor Missing Authorization

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted...

CVE-2026-81824

CVE-2026-81824 affects AVEVA Pipeline Integrity Monitor (PIMBoards) and is a cross-site scripting (XSS) vulnerability. If exploited, it allows an attacker to execute arbitrary JavaScript code in the browser session of a PIMBoards user who was socially engineered into clicking a malicious link. Th...

CVE-2026-69542

CVE-2026-69542 is a heap-based buffer overflow in Windows Camera Frame Server Monitor that allows an authorized attacker to elevate privileges locally . The vulnerability is scored CVSS 7.8 (High) with a local attack vector, low complexity, low privileges required, and no user interaction, result...

EUVD-2026-73538

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

EUVD-2026-73455

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-69324

CVE-2026-69324 is a local privilege elevation vulnerability in Windows Performance Monitor caused by type confusion (access of resource using incompatible type). An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, in...

Windows Performance Monitor Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...