MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs

The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...

MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

PT-2026-90215

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ring-buffer page swap mechanism where the swap reader page callback may return -EBUSY if the writer moves the head before the remote reader catches it, which is...

CVE-2026-69297

Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73437

Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...

CVE-2026-69297

CVE-2026-69297 affects Windows DHCP Server , where passwords are stored in a recoverable format, allowing an authorized attacker (with low privileges) to disclose information over a network. The CVSS v3.1 score is 6.5 (MEDIUM) with high confidentiality impact and no integrity or availability impa...

Windows DHCP Server Information Disclosure Vulnerability

Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...

CVE-2026-69297: Storing Passwords in a Recoverable Format

Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...

PT-2026-87344

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Storing passwords in a recoverable format allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information...

Security in Low-Altitude ISAC with Coupled Communication and Sensing Information Leakage

Secure information transmission in integrated sensing and communication ISAC systems deployed in low-altitude wireless networks LAWN is particularly challenging due to the open airspace and the broadcast nature of wireless signals reused for both communication and sensing, which give rise to more...

Rockwell Automation Micro850/870 Dependency on Vulnerable Third-Party Component (CVE-2025-13823)

A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers. This issue occurs when the controllers receive multiple malformed packets, causing the controller to enter a recoverable fault fault code 0xFE60. To recover the controller, the fault must be cleared. This plugi...

EUVD-2025-210463

A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...

CVE-2025-11698

The CVE-2025-11698 vulnerability affects 5380/5480/5580 controllers with boot firmware versions below 1.072. It enables a denial-of-service by allowing a malicious actor to write invalid file data to the controller, potentially causing a major non-recoverable fault (MNRF). The documents do not pr...

EUVD-2025-210461

A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault MNRF...

CVE-2025-12012: Buffer Copy without Checking Size of Input

A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...

CVE-2025-12011: Buffer Copy without Checking Size of Input

A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault MNRF...

CVE-2026-53432

A flaw was found in fzf. An integer overflow vulnerability exists in the FuzzyMatchV2 function when processing exceptionally long input lines and patterns. This can lead to the application terminating unexpectedly with a non-recoverable panic, resulting in a Denial of Service DoS. A local user...

CVE-2026-53432

fzf is vulnerable to Integer Overflow leading to crash in FuzzyMatchV2 function. When input line length is approximately 2,200,000 bytes and pattern length is 999 bytes, the product overflows. The Go runtime detects the invalid slice bounds and terminates the process immediately with a...

blackbox-hunter

BlackBox Hunter Description BlackBox Hunter is a black-box v...

Automated Logic WebCTRL Storing Passwords in a Recoverable Format (CVE-2025-14295)

CWE-257 Storing Passwords in a Recoverable Format vulnerability exists in Automated Logic WebCTRL and Carrier i-Vu Building Automation System products. An attacker with elevated access can retrieve passwords stored in a recoverable format, potentially compromising credentials and neighboring...