SUSE CVE-2026-95341

Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

SUSE CVE-2026-95374

Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-18490

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution due to a Java native deserialization flaw. The issue resides in the PayDir Business Rules Manager RMI SSL endpoint, specifically within BrmRMISSLServerSocketFactory.java:95, EP8. An...

EUVD-2026-85352

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint BrmRMISSLServerSocketFactory.java:95, EP8. An adjacent-network attacker can deliver a crafted...

CVE-2026-73586

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism...

CVE-2026-73587

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering,...

CVE-2026-73587

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering,...

EUVD-2026-85312

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering,...

CVE-2026-73587

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected by an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could exploit this flaw to cause Information disclosure , Information tampering , and a Protecti...

CVE-2026-73587

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering,...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the NMS component including Streaming Telemetry with a Service Pack update. The publication of this security bulletin represents a change in our communication process, not an increase in security...

Vulnerability concealment in F5 Networks BIG-IP Access Policy Manager

F5 Networks has identified a vulnerability in BIG-IP Access Policy Manager APM. This vulnerability allows unauthorized malicious actors to execute malicious code. To do this, the malicious actor needs to send malicious network traffic to the vulnerable system. BIG-IP APM systems are only vulnerab...

CVE-2026-15358

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-12370

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

CVE-2026-15358 Path Traversal Vulnerability

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

EUVD-2026-85237

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-15358

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions prior to 12.8.671 are susceptible to an unauthorized Path Traversal vulnerability. This flaw allows for unauthorized access to restricted file system paths. Specific exploitation details and links are not provided in the d...

CVE-2026-15358 Path Traversal Vulnerability

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...

CVE-2026-77164

A flaw was found in Nextcloud. An unauthenticated remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability in the Circles component. By sending a specially crafted request to the public endpoints, the attacker can force the server to make GET requests to internal network...