CVE-2026-66301

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2026-66301

The provided connected records identify CVE-2026-66301 as an information disclosure vulnerability affecting Microsoft Dynamics 365 (on-premises). The attack surface involves a network exposure where an unauthorized actor can disclose sensitive information. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N...

EUVD-2026-56566

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

CVE-2026-65815

CVE-2026-65815 affects Microsoft Dynamics 365 On-Premises. The vulnerability arises from deserialization of untrusted data, enabling an authenticated attacker to execute code remotely over a network. Affected component is the on-premises Dynamics 365 deployment; the underlying root cause is impro...

CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

Structurizr on-premises - Cross Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194. id: CVE-2023-5556 info: name: Structurizr on-premises - Cross Site Scripting author: shankaracharya severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository...

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency CISA. The vulnerability in question is CVE-2026-63077 CVSS score: 9.8, a case of deserialization...

CVE-2026-12118

IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-12118 IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data

IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity

Overview On July 27, 2026, JetBrains published a security advisory for CVE-2026-63077, a critical unauthenticated vulnerability affecting all versions of TeamCity On-Premises. The issue is classified as deserialization of untrusted data and has a CVSS score of 9.8. An unauthenticated remote...

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution. The vulnerability, assigned CVE-2026-63077 CVSS score: 9.8, affects all TeamCity On-Premises version...

CVE-2026-16812

CVE-2026-16812 affects VeloCloud Orchestrator (VCO) On-Prem. The vulnerability is an OS command injection that could allow a remote attacker to access privileged internal functionality and impact the VCO host, compromising confidentiality, integrity, and availability of the orchestrator and manag...

CVE-2026-16812

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator an...

PT-2026-64991

Name of the Vulnerable Software and Affected Versions VeloCloud Orchestrator VCO on-prem affected versions not specified Description A security issue in the on-premises version of the orchestrator allows a remote attacker to access privileged internal functionality, which may lead to OS command...

VulnCheck KEV: CVE-2026-16812

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...