PT-2026-86248

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

PT-2026-86229

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description A privilege escalation issue exists in the DirectIo64.sys driver. Local users can...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106165 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10,...

CVE-2026-75171

HubCore v.14.1.1 is affected by a privilege escalation vulnerability in its HUBCOREID session cookie handling component , which allows a remote attacker to escalate privileges. No CVSS metrics, patch version, or confirmed exploitation details have been published in the provided documents. The vul...

CVE-2026-71625

ThinkSNS+ v.2.4 (slimkit plus) contains a privilege escalation vulnerability in the ResetPasswordController.php component. A remote attacker can exploit this to escalate privileges, with the referenced advisory further describing the mechanism as account takeover via an expired verification code ...

CVE-2026-75160

CVE-2026-75160 is a critical remote privilege escalation vulnerability in MBS Solutions X-Serie Gateway running Firmware V6_00_05 . The vulnerability is exploitable via the web endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi, allowing a remote, unauthenticated attacker to escalate priv...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106186 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106207)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106207 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication GCS. Supported versions that are affected are MySQL...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106210 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10,...

Linux Distros Unpatched Vulnerability : CVE-2026-84962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106205)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106205 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106181 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106182)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106182 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106159 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106172 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

CVE-2026-75160

An issue in X-Serie Gateway Firmware V60005 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi...

EUVD-2026-71455

An issue in X-Serie Gateway Firmware V60005 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi...

CVE-2026-75166

MBS-Solutions X-Serie Gateway firmware V6_00_05 contains an insecure permission configuration that allows a low-privileged service user to execute /usr/bin/tcpdump as root without a password. By exploiting the tcpdump -z option, an authenticated attacker can achieve arbitrary command execution wi...

EUVD-2026-71447

Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V60005 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password. By leveraging the tcpdump -z option, an authenticated attacker can achieve arbitrary command execution...

PT-2026-86264

ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-administrators to delete all host pools and member bindings. Attackers can issue POST requests to the delete pools endpoint to irreversibly destroy every host pool, removing traff...