EUVD-2026-98772

Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access such as WiFi credentials to predict valid session identifiers and hijack an authenticated administrator session on the web management portal...

CVE-2026-11730 Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models

Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access such as WiFi credentials to predict valid session identifiers and hijack an authenticated administrator session on the web management portal...

CVE-2026-90173

A flaw was found in the Linux kernel's SMB Direct smbdirect component. This vulnerability occurs because the system attempts to access memory that has already been freed when handling network communication. A remote attacker could exploit this timing issue, potentially leading to system instabili...

CVE-2026-9218 Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access

Insufficient input validation vulnerability in time server NTP setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the...

CVE-2026-9218

Certain NETGEAR routers are vulnerable to an insufficient input validation vulnerability within the time server (NTP) setting . An attacker who is connected to the router's local network and possesses administrator credentials can exploit this flaw to execute unauthorized commands on the device. ...

CVE-2026-9218 Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access

Insufficient input validation vulnerability in time server NTP setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the...

EUVD-2026-98771

Insufficient input validation vulnerability in time server NTP setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the...

EUVD-2026-98767

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access...

CVE-2026-108185

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access...

EUVD-2026-98765

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access...

CVE-2026-108184

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access...

EUVD-2026-98764

The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and...

CVE-2026-97334

The Commvault software is vulnerable to a denial of service due to the network messaging layer's improper handling of highly compressed data (CWE-409). This flaw can lead to a resource exhaustion that affects service availability. Affected components include the CommServe server, Web Server, Comm...

CVE-2026-97334 Network messaging layer decompression resource exhaustion

The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and...

CVE-2026-97334 Network messaging layer decompression resource exhaustion

The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and...

EUVD-2026-98754

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access...

CVE-2026-53420

A buffer overflow vulnerability exists in a Zoom Phone feature within Zoom Workplace Clients . This issue, categorized as CWE-120 (Buffer Copy without Checking Size of Input), could allow an unauthenticated user to perform an elevation of privilege via network access . The CVSS 3.1 score is 8.0 (...

CVE-2026-53420

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access...

CVE-2026-53418

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...

EUVD-2026-98747

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...