CVE-2026-79625 Improper Synchronization in Monitoring in CODESYS Control Runtime

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...

PT-2026-103104

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...

Security Bulletin: Multiple vulnerabilities within WebSphere Application Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-16184 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to...

CVE-2026-97553

A flaw was found in the Linux kernel's XFS file system. When unmounting a file system, the health monitoring subsystem fails to acquire the necessary lock before inserting an unmount event into the event list. A local user with permissions to unmount file systems could trigger this race condition...

CVE-2026-97538

A flaw was found in the Linux kernel's ASUS ROG RYUJIN hardware monitoring driver. The driver fails to validate the length of incoming Human Interface Device HID reports before parsing response headers and data fields. An attacker capable of supplying truncated HID reports can cause the driver to...

CVE-2026-98001

A flaw was found in the Linux kernel's LTC4282 hardware monitoring driver. This vulnerability can lead to a Denial of Service DoS due to the use of uninitialized stack memory. The driver fails to initialize its clock data structure during setup, leaving member fields uninitialized. A local attack...

HPESBNW05146 rev.1 - Multiple Vulnerabilities in HPE Unified OSS Console (UOC) and HPE Unified OSS Console Assurance Monitoring (UOCAM)

Potential Security Impact: Local: Cross-Site Request Forgery CSRF; Remote: Denial of Service DoS, Disclosure of Privileged Information, Gain Unauthorized Access, Unauthorized Privileged Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified OSS Console UOC UOC Version...

SUSE CVE-2026-67233

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's isauthorized/2 delegates to rabbitmgmtutil:isauthorizedmonitor/2, which accepts the monitoring tag. But allowedmethods includes DELETE, and deleteresource/2...

CVE-2026-85290

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Cron::recur method writes an invalid cron key from the URL path directly to the application log without neutralizing CRLF characters. An unauthenticated requester can...

CVE-2026-85290 InvoicePlane: Log Injection via Unsanitized User Input in Cron Key Error Logging

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Cron::recur method writes an invalid cron key from the URL path directly to the application log without neutralizing CRLF characters. An unauthenticated requester can...

The vulnerability of the Application Performance Monitoring (APM) component of the Kibana data visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Application Performance Monitoring APM component of the Kibana data visualization service is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protecte...

Linux Distros Unpatched Vulnerability : CVE-2026-96746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the...

Linux Distros Unpatched Vulnerability : CVE-2026-67233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's isauthorized/2...

Ubuntu 24.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-8793-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8793-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Linux Distros Unpatched Vulnerability : CVE-2026-96745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored...

CVE-2026-93290

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...

EUVD-2026-86411

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...

CVE-2026-93290 Use of Hard-coded Credentials in Eufy Omni C20

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...

CVE-2026-96746

A flaw was found in the MongoDB C Driver. An unauthenticated remote attacker who controls network name resolution and server responses for hosts specified in a client's connection string can trigger an out-of-bounds write in the connection-monitoring logic. By delivering manipulated responses, th...

SUSE CVE-2026-66069

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...