CVE-2026-80127

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploi...

CVE-2026-80127

Dell SCG 5.0 (Secure Connect Gateway) is affected by an OS Command Injection vulnerability in both the Appliance and Application editions. Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . A high-privileged attacker with remote access could exploit the impr...

CVE-2026-78488

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...

CVE-2026-78488

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...

CVE-2026-80130

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution...

CVE-2026-80128

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass...

CVE-2026-80128

Dell SCG 5.0 Appliance (versions prior to 5.36.00.16 ) and Dell SCG 5.0 Application (versions prior to 5.36.00.00 ) are affected by an Improper Authentication vulnerability. A low-privileged attacker with remote network access could potentially exploit this flaw to achieve a protection mechanism ...

CVE-2026-80178

Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Privilege Management vulnerability. Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected. A low-privileged attacker with local access could potentially exploit this flaw to achieve privilege esc...

EUVD-2026-72322

Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile because the ACL entry for templates/uploadFile used the wildcard . This bypasses the intended role restrictions applied to neighboring template-management operations. The upload handler accepts...

PT-2026-86822

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...

PT-2026-86737

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

PT-2026-86782

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022350 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

CVE-2026-86114

Arcane (an application for managing containers) versions before 2.0.0 lack proper administrator authorization on compose template mutation endpoints. This allows accounts with the default user role to create, modify, and delete compose templates, including instance-wide defaults. An attacker can ...

EUVD-2026-71946

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-wide defaults. Attackers can inject malicious container configurations with privileged settings or host path mounts th...

SUSE CVE-2026-71479

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

CVE-2026-18858

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH...

CVE-2026-18858

IBM i 7.5 and 7.6 are affected by an information disclosure vulnerability in the OpenSSH component (5733-SC1). A local authenticated attacker can obtain information from a privileged file when using SSH, rooted in CWE-267 (Privilege Defined With Unsafe Actions). The impact is limited to confident...

EUVD-2026-71600

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH...

CVE-2026-18858 IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH []

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH...