CVE-2026-49310: Undefined Security Weakness

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49309: Undefined Security Weakness

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49313: Undefined Security Weakness

Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41987: Undefined Security Weakness

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-12855: Improper Input Validation

Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects...

CVE-2026-87088: Improper Neutralization of Special Elements used in an OS Command

Tanium addressed an unauthorized code execution vulnerability in Enforce...

CVE-2026-87072: Missing Authorization

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87034: Improper Neutralization of Special Elements used in an SQL Command

Tanium addressed a SQL injection vulnerability in Comply...

CVE-2026-87032: Exposure of Sensitive Information to an Unauthorized Actor

Tanium addressed an information disclosure vulnerability in Tanium Server...

CVE-2026-79635: Server-Side Request Forgery (SSRF)

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery SSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-11838: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

CVE-2026-77974: Missing Authentication for Critical Function

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...

CVE-2026-85132: Missing Authorization

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its cookie scanner AJAX actions, allowing any authenticated user, such as a subscriber, to read back the automated scan schedule the administrator configured...

CVE-2026-77120: Improper Neutralization of Special Elements used in an OS Command

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause privilege escalation to root and unauthorized execution of administrative functions when an authenticated user with SSH enabled interacts with the operating syste...

CVE-2026-83530: Memory Allocation with Excessive Size Value

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...

CVE-2026-19733: Server-Side Request Forgery (SSRF)

Server-Side request forgery SSRF vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. This issue affects Library Information and Document Automati...

PT-2026-88958

Name of the Vulnerable Software and Affected Versions CyberPanel versions 2.4.3 through 2.4.5 Description Unauthenticated AI Scanner debugging endpoints expose sensitive information, including administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. This...

CVE-2026-87023: Improper Limitation of a Pathname to a Restricted Directory

Tanium addressed a path traversal vulnerability in Comply...

CVE-2025-46808: Insertion of Sensitive Information into Log File

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...

CVE-2026-49311: Undefined Security Weakness

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...