ServiceNow AI Platform permission and access control issue vulnerability

The ServiceNow AI Platform contains a vulnerability related to permission and access control issues. This vulnerability stems from domain separation bypass, which may allow authenticated users with specific roles to create records in domains they are not authorized to access, resulting in...

Parse Platform parse-server information disclosure vulnerability

Versions prior to Parse Platform parse-server 8.6.107 and versions from 9.0.0 through 9.10.5-alpha.8 contain an information disclosure vulnerability. This vulnerability arises because object update responses return field storage values that are reverts triggered by the beforeSave trigger. Even...

Parse Platform parse-server improper exception handling vulnerability

Versions prior to 8.6.106 and versions 9.0.0 through 9.10.5-alpha.7 of the Parse Platform contain an improper exception handling vulnerability. This vulnerability arises from inadequate handling of null or undefined point notation keys when storing objects; as a result, writes are stored but...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.1.9 (RHSA-2026:92057)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92057 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release ...

CVE-2026-118082: BuddyBoss Buddyboss Platform: Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.

Subscriber Privilege Escalation in Buddyboss Platform = 3.5.0 versions...

Elastic Cloud Enterprise information disclosure vulnerability

Vulnerabilities related to information disclosure exist in Elastic Cloud Enterprise versions 2.6.0 through 3.8.5 and 4.0.0 through 4.2.0. These vulnerabilities arise when sensitive information is inserted into externally accessible files or directories. Data retained by the certificate rotation...

CVE-2026-103093: ServiceNow ServiceNow AI Platform: ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potential...

CVE-2026-115712: Elastic Elastic Cloud Enterprise: Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of…

Incorrect Authorization CWE-863 in Elastic Cloud Enterprise ECE can lead to unauthorized modification of platform-level settings via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read-only access to the platform can change an installation-wide accoun...

Vulnerability related to the software supply chain issue in Red Hat JBoss Enterprise Application Platform

Red Hat JBoss Enterprise Application Platform versions 7 and 8 contain a vulnerability related to the software supply chain. This vulnerability arises because the Wildfly IIOP listener permits deserialization of input streams prior to authentication, potentially allowing attackers to access the...

ServiceNow AI Platform permission and access control issue vulnerability

The ServiceNow AI Platform contains a vulnerability related to permission and access control issues. This vulnerability stems from a sandbox escape problem: authenticated users with the admin role can bypass Rhino’s sandbox restrictions and execute arbitrary code on the underlying host operating...

CVE-2026-115707: Elastic Elastic Cloud Enterprise: Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise…

Insertion of Sensitive Information into Externally-Accessible File or Directory CWE-538 in Elastic Cloud Enterprise ECE can lead to privilege escalation via Retrieve Embedded Sensitive Data CAPEC-37. After the ECE certificate rotation procedure runs, data that it retains contains platform...

RHEL 9 : Red Hat JBoss Enterprise Application Platform 8.1.9 (RHSA-2026:92056)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92056 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release ...

PT-2026-132786

ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could cause a user's plaintext password to be persisted in a system table, potentially exposing that password to a user who otherwise would not be entitled to vi...

RHEL 10 : Red Hat JBoss Enterprise Application Platform 8.1.9 (RHSA-2026:92059)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92059 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release...

PT-2026-132155

Incorrect Authorization CWE-863 in Elastic Cloud Enterprise ECE can lead to unauthorized modification of platform-level settings via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read-only access to the platform can change an installation-wide accoun...

RHCOS 4 : OpenShift Container Platform 4.22.20 (RHSA-2026:89196)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:89196 advisory. - crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates CVE-2026-111943 Note that Nessus has n...

RHCOS 4 : OpenShift Container Platform 4.21.40 (RHSA-2026:89229)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:89229 advisory. - crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates CVE-2026-111943 Note that Nessus has n...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

An update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 8. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...