Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2026-103094

ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could cause a user's plaintext password to be persisted in a system table, potentially exposing that password to a user who otherwise would not be entitled to vi...

CVE-2026-103093

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potential...

CVE-2026-103093

A sandbox escape security issue exists in the ServiceNow AI Platform . This vulnerability allows an authenticated user with the admin role to bypass Rhino sandbox restrictions , enabling the execution of arbitrary code on the underlying host operating system. Such an exploit could lead to further...

CVE-2026-103093 Sandbox Escape via Table Rotation in ServiceNow AI Platform

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potential...

EUVD-2026-113362

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potential...

EUVD-2026-113334

ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could cause a user's plaintext password to be persisted in a system table, potentially exposing that password to a user who otherwise would not be entitled to vi...

CVE-2026-103094 Cleartext Storage of OAuth Credentials in ServiceNow AI Platform

ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could cause a user's plaintext password to be persisted in a system table, potentially exposing that password to a user who otherwise would not be entitled to vi...

CVE-2026-103094

The ServiceNow AI Platform is affected by an information disclosure vulnerability where a user's plaintext password could be persisted in a system table. This unintended storage of plaintext credentials could expose passwords to unauthorized users. ServiceNow has released security updates to addr...

mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration is vulnerable to urllib3 vulnerabilities

Summary Platform Navigator in IBM Cloud Pak for Integration is vulnerable to urllib3 vulnerabilities CVE-2026-97687, CVE-2026-97688, CVE-2026-97689. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-97687 DESCRIPTION: urllib3 is an HTTP client library for Python. From...

CVE-2026-118082

Subscriber Privilege Escalation in Buddyboss Platform = 3.5.0 versions...

CVE-2026-118082 WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Buddyboss Platform = 3.5.0 versions...

EUVD-2026-112999

Subscriber Privilege Escalation in Buddyboss Platform = 3.5.0 versions...

CVE-2026-118082

The Buddyboss Platform plugin for WordPress (versions

CVE-2026-115712

Incorrect Authorization CWE-863 in Elastic Cloud Enterprise ECE can lead to unauthorized modification of platform-level settings via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read-only access to the platform can change an installation-wide accoun...

CVE-2026-115707

Insertion of Sensitive Information into Externally-Accessible File or Directory CWE-538 in Elastic Cloud Enterprise ECE can lead to privilege escalation via Retrieve Embedded Sensitive Data CAPEC-37. After the ECE certificate rotation procedure runs, data that it retains contains platform...

riskscanner

Open source multi-cloud security compliance scanning platform Chinese Version RiskScanner is an open source multi-cloud security compliance scanning platform, Based on Cloud Custodian、Prowler and Nuclei engines, it realizes security compliance scanning and vulnerability scanning of mainstream...

CVE-2026-115712

A security vulnerability in Elastic Cloud Enterprise (ECE) allows for Incorrect Authorization (CWE-863). An authenticated user with only read-only access can bypass intended Access Control Lists (ACLs) to modify installation-wide account settings that should be restricted to platform administrato...