CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-114713 UnrealIRCd Improper Neutralization of Delimiters Vulnerability CVE-2026-123039 Check Point Multiple Products Incorrect Permission Assignment for...

CVE-2026-112125

Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor. This issue affects HA Monitor: from 01-00 before 01-83-01...

CVE-2026-112125 Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor

Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor. This issue affects HA Monitor: from 01-00 before 01-83-01...

CVE-2026-112125

The HA Monitor software (versions 01-00 through 01-83-01 ) is affected by an Incorrect Permission Assignment for Critical Resource vulnerability (CWE-732 ). This flaw allows for unauthorized access to critical resources, potentially leading to high levels of impact on confidentiality , integrity ...

CVE-2026-112125 Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor

Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor. This issue affects HA Monitor: from 01-00 before 01-83-01...

EUVD-2026-120759

Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor. This issue affects HA Monitor: from 01-00 before 01-83-01...

CVE-2026-112125: Hitachi HA Monitor: Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor

Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor. This issue affects HA Monitor: from 01-00 before 01-83-01...

CVE-2026-119474

Incorrect Permission Assignment for Critical Resource vulnerability in HAVELSAN Inc. Liman Render Engine allows Privilege Escalation. This issue affects Liman Render Engine: before 1.2-81...

CVE-2026-124039

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

CVE-2026-124039

Gitleaks versions through 8.30.1 are affected by an incorrect permission assignment vulnerability (CWE-732). The root cause is located in cmd/root.go, where the --report-path file is created using os.Create with default permissions. This allows other local users on shared hosts or CI runners to r...

CVE-2026-124039

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

CVE-2026-124039 Gitleaks through 8.30.1 World-Readable Report Files via --report-path

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

EUVD-2026-118440

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

PT-2026-138411

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

CVE-2026-124039: gitleaks: Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan…

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

CVE-2026-91906

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

EUVD-2026-115145

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-91906

Dell OpenManage Enterprise , versions prior to 4.8.0 , is vulnerable to an Incorrect Permission Assignment for Critical Resource vulnerability (CWE-732). A low privileged attacker with local access could exploit this flaw to achieve a protection mechanism bypass . No specific exploit code or deta...

EUVD-2026-115143

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-91906

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass...