31537 matches found
CVE-2026-15913 Path Traversal in Fortra's GoAnywhere MFT Endpoint
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
EUVD-2026-66233
On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco's Secure Firewall Management Center FMC Software. First, CVE-2026-20079 is an authentication bypass vulnerability in unpatched instances of Cisco's Secure FMC Software, which allows an unauthenticated, remote attack...
Cisco Advance Notification for Publication of September 16, 2026, Security Advisories
On September 16, 2026, the Cisco Product Security Incident Response Team PSIRT published the advisories that are listed in the following tables. To remediate these vulnerabilities, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. For more...
CVE-2026-79732
Dell Secure Connect Gateway (SCG) 5.0 Appliance , versions prior to 5.36.00.xx , is affected by an Improper Certificate Validation vulnerability. An unauthenticated attacker with network access could potentially exploit this flaw to achieve a protection mechanism bypass . The CVSS 3.1 base score ...
AZL-100017 CVE-2026-6485 affecting package qemu 10.1.0-1
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-6485
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
AZL-99990 CVE-2026-6485 affecting package edk2 20240524git3e722403cd16-20
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-6485
CVE-2026-6485 affects UEFI BIOS firmware that embeds the TianoCore EDK II UEFI Shell in SPI Flash. A logic error in the Shell boot option removal process allows an attacker with root privileges to create multiple boot entries, bypassing the Secure Boot check and gaining access to the Shell's phys...
EUVD-2026-74613
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, due to lack of access control, allows a perpetrator to elevate their privileges and execute commands as the root user.
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute code under the identity of “root”...
CVE-2026-6485: Active Debug Code
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
PT-2026-88810
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
PT-2026-89050
Dell Secure Connect Gateway SCG 5.0 Appliance, versions prior to 5.36.00.xx, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass...
CVE-2026-79732: Improper Certificate Validation
Dell Secure Connect Gateway SCG 5.0 Appliance, versions prior to 5.36.00.xx, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass...
CVE-2026-83939
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...