CVE-2026-19610 Wildfly-platform-mbean: wildfly-platform-mbean: rbac sensitive attribute read bypass for platform runtimemxbean

A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and configurations. The issue occurs because the handler for the read-resource operation on the runtime management resource fails to perform required Role-Based Access Control RBAC...

CVE-2026-19610

A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and configurations. The issue occurs because the handler for the read-resource operation on the runtime management resource fails to perform required Role-Based Access Control RBAC...

CVE-2026-19610

A flaw exists in the platform-mbean component of JBoss EAP , which manages JVM-level metrics and configurations. The vulnerability stems from a failure to perform required Role-Based Access Control (RBAC) checks during the read-resource operation on the runtime management resource. This oversight...

EUVD-2026-112634

A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and configurations. The issue occurs because the handler for the read-resource operation on the runtime management resource fails to perform required Role-Based Access Control RBAC...

CVE-2026-19610 Wildfly-platform-mbean: wildfly-platform-mbean: rbac sensitive attribute read bypass for platform runtimemxbean

A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and configurations. The issue occurs because the handler for the read-resource operation on the runtime management resource fails to perform required Role-Based Access Control RBAC...

Sitecore Experience Platform - Deserialization of Untrusted Data

Sitecore Experience Platform before 8.2 Update-7 and 9.0 before Update-2 is vulnerable to a remote code execution vulnerability CVE-2019-9874. An attacker can exploit this issue to execute arbitrary code on the affected system via a crafted request to the...

XWiki Platform - SQL Injection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an...

CVE-2026-92092: Red Hat: A flaw was found in openshift-ansible

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

Red Hat JBoss Enterprise Application Platform authorization issue vulnerability

Red Hat JBoss Enterprise Application Platform versions 7 and 8 contain an authorization issue vulnerability. This vulnerability arises because the handler for read-resource operations within the runtime management resources of the platform-mbean component fails to perform the required role-based...

CVE-2026-103094: ServiceNow ServiceNow AI Platform: ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform

ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could cause a user's plaintext password to be persisted in a system table, potentially exposing that password to a user who otherwise would not be entitled to vi...

PT-2026-130671

This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management interface. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted SQL query through input...

RHEL 8 : Red Hat OpenStack Platform 16.2 security advisory (Important) (RHSA-2026:90330)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90330 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service...

PT-2026-132785

Name of the Vulnerable Software and Affected Versions ServiceNow AI Platform affected versions not specified Description A sandbox escape issue exists in the ServiceNow AI Platform. An authenticated user with the admin role can bypass Rhino sandbox restrictions to execute arbitrary code on the...

PT-2026-130656

A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and configurations. The issue occurs because the handler for the read-resource operation on the runtime management resource fails to perform required Role-Based Access Control RBAC...

CVE-2026-19610: Red Hat: A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics…

A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and configurations. The issue occurs because the handler for the read-resource operation on the runtime management resource fails to perform required Role-Based Access Control RBAC...

PT-2026-132256

Subscriber Privilege Escalation in Buddyboss Platform = 3.5.0 versions...

PT-2026-132151

Insertion of Sensitive Information into Externally-Accessible File or Directory CWE-538 in Elastic Cloud Enterprise ECE can lead to privilege escalation via Retrieve Embedded Sensitive Data CAPEC-37. After the ECE certificate rotation procedure runs, data that it retains contains platform...

Elastic Cloud Enterprise authorization issue vulnerability

Versions 3.8.0 through 3.8.5 and 4.0.0 through 4.2.0 of Elastic Cloud Enterprise contain an authorization issue vulnerability. This vulnerability stems from improper authorization; authenticated users with read-only access can modify account settings via functions not properly restricted by ACLs...

Radius Synergies Radius Xenia M2M Platform SQL injection vulnerability

The Radius Synergies Radius Xenia M2M Platform contains an SQL injection vulnerability. This vulnerability stems from insufficient input validation in the password recovery functionality within its web management interface. Unauthenticated remote attackers can supply specially crafted SQL queries...

CVE-2026-118082: BuddyBoss Buddyboss Platform: Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.

Subscriber Privilege Escalation in Buddyboss Platform = 3.5.0 versions...