341318 matches found
CVE-2026-25212
CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...
CVE-2026-67269: Improper Privilege Management
Dell Container Storage Modules CSM Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privilege...
PT-2026-107126
Name of the Vulnerable Software and Affected Versions AOS-S affected versions not specified Description A privilege escalation issue exists in the API of AOS-S. This flaw allows an authenticated user with read-only permissions to elevate their privileges and obtain full administrative access to t...
The vulnerability of the Cloud Files Mini Filter Driver for operating systems Windows allows attackers to increase their privileges.
The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Debian dsa-6545 : roundcube - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6545 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6545-1 [email protected] https://www.debian.org/security/...
Cisco ASA Incorrect Authorization (CVE-2022-20928)
A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to establish a connection as a different user. This vulnerability is due to...
The vulnerability of the HU250 microprogramming software module of the modular remote terminal for telemechanics and automation by PowerLogic T300 (formerly Easergy T300 RTU) allows a intruder to gain enhanced privileges and control over the device entirely.
The vulnerability of the HU250 microprogramming software for modular remote terminals in telemechanics and automation systems from PowerLogic T300 formerly Easergy T300 RTU relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow attackers to...
PT-2026-107188
Name of the Vulnerable Software and Affected Versions CRI-O affected versions not specified Description An issue exists in the handling of the bind mount prefix configuration. When this prefix is non-empty, a local attacker or a malicious container can utilize a Container Runtime Interface CRI...
Rocky Linux 10.1 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_1690)
The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261690 advisory. kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability CVE-2025-37819 kernel: RDMA/core: Fix KASAN: slab-use-after-free Read in...
RHEL 8 : firefox (RHSA-2026:76894)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:76894 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
Privilege escalation vulnerability exists in the internal Command-Line Interface of Fabric OS (CVE-2026-94577)
: A privilege escalation vulnerability exists in the internal Command-Line Interface CLI authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user or local process that can manipulate the process execution environment can bypas...
Authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS
: An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing remote command execution IPC frames across the fabric, the receiving switch processes these...
Authenticated Privilege Escalation via Command Injection in Timezone Configuration Processing
: An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values...
Cross-Virtual-Fabric Context Switching and Horizontal Privilege Escalation in Brocade Fabric OS
: An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabric can exploit this issue by submitting a specially crafted request containing an arbitrary...
Local Privilege Escalation and Configuration Injection in Brocade Fabric OS System Logging Daemon
: A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...
ROS-20261006-73-0067
The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
PT-2026-107306
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.7 Description In certain environments, such as QNX 6 and SCO OpenServer 5, the sshd-session process can unexpectedly obtain root privileges. This issue occurs due to a lack of support for unprivileged allocation of...
PT-2026-106446
Unauthenticated Privilege Escalation in Tourfic Pro = 1.17.3 versions...