270017 matches found
CVE-2026-76313
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, the REST API knowledge bundle upload endpoint lacks the edit_dist_peer capability check, allowing non-admin users to upload malicious bundles used by distributed search, enabling RCE. Splunk's advisory (SVD-2026-0801) provide...
CVE-2026-76139
A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub access tokens and registry passwords, used in the build...
CVE-2026-75569
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-12522
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...
EUVD-2026-63087
A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub access tokens and registry passwords, used in the build...
CVE-2026-76139 Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials
A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub access tokens and registry passwords, used in the build...
CVE-2026-76139
The acm-operator-bundle build process executes an unpinned script from stolostrum/release@master using full build credentials (GitHub tokens, registry passwords) without verifying authenticity or integrity. A remote attacker controlling that script could inject malicious code, gaining unauthorize...
CVE-2026-75569 Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-75569 Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-53545
Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing. Prior to 2.3.2 , the DELETE /ssh/tunnel/disconnect/:tunnelName endpoint in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into single-quoted pki...
CVE-2026-61634 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, traccar, traccar-fips, logstash, logstash-fips, conductor...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, logstash, logstash-fips, conductor...
CVE-2026-69220 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, traccar, traccar-fips, logstash, logstash-fips, conductor...
GHSA-5M9F-RPHJ-C435 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, traccar, traccar-fips, logstash, logstash-fips, conductor...
GHSA-5XWG-CFVJ-GFF5 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, traccar, traccar-fips, logstash, logstash-fips, conductor...
CVE-2026-63337 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, traccar, traccar-fips, logstash, logstash-fips, conductor...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: zipkin, cassandra-reaper, thingsboard, druid, logstash...
GHSA-QX7J-JV8M-FPPR vulnerabilities
Vulnerabilities for packages: zipkin, cassandra-reaper, thingsboard, druid, logstash...