CVE-2026-109411: Improper Handling of Case Sensitivity

An access control bypass flaw was identified in Samba's vfscephrgw module in it's openat function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfscephrgw module. When a client requests an existing file using...

PT-2026-129130

An access control bypass flaw was found in Samba's vfs ceph rgw module in it's openat function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs ceph rgw module. When a client requests an existing file using...

CVE-2026-86921

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files...

EUVD-2026-104720

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files...

CVE-2026-86921

A permissions issue in Apple software allows a local attacker to potentially overwrite restricted files . The root cause is linked to insufficient validation, and the issue has been addressed with improved validation. This vulnerability affects iOS (versions 26.7 and 27), iPadOS (versions 26.7 an...

CVE-2026-86921

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files...

CVE-2026-86921

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files...

PT-2026-117973

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files...

Apple iOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple’s operating systems and devices that are not up to version 26.7 including Apple iOS before version 26.7, Apple iPadOS before version 26.7, Apple iOS 27 before version 27, Apple iPadOS 27 before version 27, Apple macOS Golden Gate 27 before version 27, and Apple VisionOS 27 befor...

Path Traversal Vulnerability in Multiple Cisco Products

The Cisco RV160, among others, is a router from the U.S. company Cisco that is used in enterprise environments. A path traversal vulnerability exists in the Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers, which could be exploited by an unauthenticated, remote attacker t...