CVE-2026-90812 cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...

CVE-2026-90812 cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...

CVE-2026-90812 cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...

CVE-2026-90812

cosmicstack-labs mercury-agent (versions up to 1.2.0 ) contains a vulnerability in the checkShellCommand function within src/capabilities/permissions.ts , part of the Shell Command Permission component. Manipulation of this function leads to incorrect privilege assignment , and the attack can be ...

[SECURITY] [DSA 6498-1] network-manager-l2tp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6498-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 14, 2026 https://www.debian.org/security/faq -...

CVE-2026-85921

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-86836

In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes FIFOs under a predictable path derived from the agent name and a hash of the workload's runtime configuration. If a directory or FIFO already exists at that path when the agent...

CVE-2026-85892

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...

CVE-2026-54087

EasyAdmin is a fast and modern admin generator for Symfony applications. From 5.0.0 until 5.0.13, FileField and ImageField can accept browser-executable uploads while templates/crud/field/file.html.twig links to stored files for inline same-origin rendering without a download attribute or...

EUVD-2026-77757

MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container root by supplying a crafted container image with symlinks pointing to arbitrary paths. Attackers can exploit...

CVE-2026-86830 Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...

CVE-2026-86830

CVE-2026-86830 is an incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center, versions prior to 1.5.1 . An authenticated remote user with application-level access can read, approve, modify, or revoke arbitrary access requests , enabling them to ob...

EUVD-2026-77769

Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...

CVE-2026-86830 Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...

CVE-2026-86830 Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...

EUVD-2026-77709

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.15 and 7.0.47, HasMany and MorphMany handling through attachManyRelation during CRUD create and update...

CVE-2026-86836

Eclipse Ankaios versions 0.1.0 through 1.0.2 are affected by a local privilege escalation issue in the agent's handling of Control Interface named pipes (FIFOs) . The agent creates workload files and FIFOs under a predictable path derived from the agent name and a hash of the workload's runtime c...

WordPress Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter vulnerability

WordPress Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce plugin = 4.1.23 - Authenticated Subscriber+ Privilege Escalation via mapmetacap Filter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Event Solution versions = 4.1.23...

EUVD-2026-77693

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...

CVE-2026-85892

CVE-2026-85892 is a race condition vulnerability in Microsoft Edge (Chromium-based) , caused by concurrent execution using a shared resource with improper synchronization. An authorized attacker can exploit this to elevate privileges locally , with the scope changed to allow full compromise of co...