CVE-2026-86689 Cleartext Transmission of Sensitive Information in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86689

Bransys ELD (Electronic Logging Device) is shipped with hardcoded MQTT credentials , which grant read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker. The vulnerability is assessed at CVSS 3.1: 5.9 (MEDIUM) and CVSS 4.0: 8.2 (HIGH...

CVE-2026-86689 Cleartext Transmission of Sensitive Information in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

EUVD-2026-83133

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86520 Use of Hard-coded Credentials in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86520 Use of Hard-coded Credentials in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86520

Bransys ELD ships with hardcoded MQTT credentials that grant unauthenticated read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker. The flaw is rated HIGH with a CVSS 3.1 base score of 7.5 and a CVSS 4.0 score of 8.7, reflecting ne...

EUVD-2026-83127

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86689: Cleartext Transmission of Sensitive Information

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86520: Use of Hard-coded Credentials

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-77960: Use of Hard-coded Credentials

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

BIT-MONGODB-2026-82074 Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data

MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server's authorization subsystem to evaluate a different operation than what is actually...

CVE-2026-92783 Yeti through 2.11.0 Missing Authorization on RBAC Relationship Deletion

Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/id endpoint, allowing users with read access to delete access control relationships. Attackers can revoke the owner's grant and permanently lock legitimate owners out of objects...

UBUNTU-CVE-2026-87275

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

UBUNTU-CVE-2026-87281

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-83414

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle...

CVE-2026-83109

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83414

CVE-2026-83414 affects Oracle Coherence (Oracle Fusion Middleware, component: Core ), version 15.1.1.0.0 . The vulnerability is described as difficult to exploit and requires a low-privileged attacker with local logon to the infrastructure where Oracle Coherence executes. Successful exploitation ...

CVE-2026-54637 Dragonfly scheduler v1 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFile

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.4.4-rc.3, the scheduler's default unauthenticated v1 gRPC flow accepts attacker-controlled PeerHost.Ip and PeerHost.DownPort values through RegisterPeerTask and ReportPeerResult, storeHost copies tho...

CVE-2026-83414: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle...