EUVD-2026-56188

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic attacker-in-the-middle to compromise the confidentiality and integrity of the affected device. This issue is limited to certain...

CVE-2026-11814 Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic attacker-in-the-middle to compromise the confidentiality and integrity of the affected device. This issue is limited to certain...

Azure CycleCloud Elevation of Privilege Vulnerability

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Heap-based buffer overflow in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over an adjacent network...

Windows Graphics Kernel Denial of Service Vulnerability

Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network...

Microsoft SharePoint Server Spoofing Vulnerability

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

Microsoft QUIC Information Disclosure Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

Windows TCP/IP Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

Microsoft Exchange Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an authorized attacker to execute code over a network...

Microsoft Remote Registry Service Denial of Service Vulnerability

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...

Microsoft Remote Registry Service Denial of Service Vulnerability

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...