CVE-2026-77089 Command Center API Authentication Bypass

Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center...

CVE-2026-77089

Commvault Command Center is affected by an authentication bypass in its API that impacts privilege management . A remote, unauthenticated attacker can exploit this over the network with low complexity, achieving high impact on confidentiality, integrity, and availability of the vulnerable system ...

CVE-2026-77098 Private Metrics Server SQL Injection

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

EUVD-2026-72726

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CLSA-2026-1788865685 TuxCare security update for org.springframework (9 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 9 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.5...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.0 release

Red Hat OpenShift distributed tracing platform Tempo 3.11.0 has been released This release of the Red Hat OpenShift distributed tracing platform Tempo provides new features, security improvements, and bug fixes. Breaking changes: High availability defaults for TempoStack deployment sizes: Before...

Important: Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update

Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub. Red Hat Ansible Automation Platform 2.2 delivers an Ansible-first Red Hat Developer...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

Important: Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update

Updated images are now available for Red Hat Ansible Automation Platform 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub. Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

CVE-2026-16005

Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification, which can corrupt data structures and cause a system crash BSOD.Refer to the ' Security Update for Armoury Crate App '...

PT-2026-87049

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

PT-2026-87044

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

PT-2026-87047

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

PT-2026-87050

Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X...

PT-2026-87957

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A release of an invalid pointer or reference in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. This issue occur...

CVE-2026-86307

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...

CVE-2026-86307 light0011 cms cross-site request forgery

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...

CVE-2026-86307

A cross-site request forgery (CSRF) vulnerability was identified in light0011 cms , affecting unknown code within commits c774dce and f72cf46. The attack is remotely initiated with low complexity and requires no authentication, but does require user interaction. Impact is limited to low integrity...

EUVD-2026-72399

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...