EUVD-2026-29438

Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have created clusters with an insecure default password which could have been exploited by a remote attacker to gain full administrative access to the database. Exploitation required...

CVE-2026-4827 Insufficient Entropy vulnerability on Multiple Products

CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections...

CVE-2026-41125

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions, blueplanet 105 TL3 All versions, blueplanet 105 TL3 GEN2 All versions, blueplanet 110 TL3 All versions, blueplanet 125 NX3 M10 All versions, blueplanet 125 TL3 All versions, blueplanet...

PT-2026-40272

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.7.14 and 4.0.5, a user with create Workflow permission can bypass templateReferencing: Strict to get host network access, switch service accounts, override pod...

PT-2026-40235

Name of the Vulnerable Software and Affected Versions Microsoft Data Formulator affected versions not specified Description Improper control of code generation in the AI data visualization feature allows an unauthorized attacker to execute code over a network. This issue occurs when uploaded data...

Siemens Teamcenter

SUMMARY Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS...

PT-2026-40189

Name of the Vulnerable Software and Affected Versions Windows Admin Center affected versions not specified Description Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. This issue can be triggered by abusing the update path,...

CVE-2026-20887: Improper Access Control

Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable remote code execution. This result may potentially...

GHSA-65H7-C7C4-MGHX MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability

A Server-Side Request Forgery SSRF vulnerability exists in MLflow versions prior to 3.9.0. The createwebhook function in mlflow/server/handlers.py accepts a user-controlled url parameter without validation, and the sendwebhookrequest function in mlflow/webhooks/delivery.py sends HTTP POST request...

CVE-2026-2393

A Server-Side Request Forgery SSRF vulnerability exists in MLflow versions prior to 3.9.0. The "createwebhook" function in "mlflow/server/handlers.py" accepts a user-controlled "url" parameter without validation, and the "sendwebhookrequest" function in "mlflow/webhooks/delivery.py" sends HTTP PO...

Server-side Request Forgery (SSRF)

Overview guarddog is a GuardDog is a CLI tool to Identify malicious PyPI packages Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the scanremote function for remote project scanning. An attacker can access sensitive authentication credentials and interact...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017686 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are 8.0.22 and prior. Difficul...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017445 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017698 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.22 and prior. Difficult to exploit...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017786 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.22 and prior. Easily exploitable...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017764 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.25 and prior. Easily exploitable...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017454 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable...

Apple iOS and Apple iPadOS security vulnerabilities

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. There were security vulnerabilities in versions of Apple iOS before 18.7.7, as well as versions before 26.4,...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017714 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.23 and prior. Easily...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017721 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.23 and prior. Easily exploitable...