CVE-2025-29296

H3C devices listed (BE18000 V200R007, NX400 V100R015, NX30 Pro V100R0011, R3010 V100R009, NX15 V100R017, R1510 V100R016, NE36 Pro V100R002) expose multiple command injection flaws in the /api/esps handler. Vulnerable interfaces include esps.dhcpd.vlan (getlist, delete), esps.filter.url (add, modi...

CVE-2026-51144

The CVE-2026-51144 entry concerns a Cross Site Scripting (XSS) vulnerability in Soliton Systems MailZen Management Protal versions 2.62 and 2.63. The flaw allows a remote attacker to execute arbitrary code via the Role Name, First Name, Last Name, and Username fields. Documented impact is user-co...

MiracleLinux 9 : php-8.0.30-6.el9_8 (AXSA:2026-1445:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1445:02 advisory. php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability CVE-2026-6722 PHP: PHP: Denial of Service via...

Linux Distros Unpatched Vulnerability : CVE-2026-15307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster b...

IBM Langflow Code Injection Vulnerability

Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments...

Important: nginx

Issue Overview: A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...

CVE-2026-18667

A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host...

CVE-2026-62870 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-62870

CVE-2026-62870 describes a use-after-free in Microsoft Excel that could allow a remote attacker to execute code over a network. The issue has a high impact (C/H/I/A) with network-based, low-attack-complexity exploitation and requires user interaction. Microsoft has published a security update (KB...

CVE-2026-62870

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-62870 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-66326

Technical details (affected products/versions, root cause, and remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-66326 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66326

Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66326 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66315 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66315

Technical details about CVE-2026-66315 are not publicly available in the provided documents. Monitor for updates from the vendors and security advisories to obtain affected products, vulnerable components, impact specifics, and remediations.

CVE-2026-66312 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66312 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66312

CVE-2026-66312 is a buffer over-read in Microsoft Edge (Chromium-based) that enables an authorized attacker to execute remote code over a network. The vulnerability is referenced across NVD, ENISA Europe and CVE listings, and Microsoft’s vulnerability advisory. Affected product is Edge (Chromium-...