CVE-2026-21028

Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-21028

Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-21026

Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information...

CVE-2026-21026

The CVE-2026-21026 entry relates to the Android app SpriteWallpaper, where an improper export of Android components enables local attackers to access sensitive information. AFFECTED: SpriteWallpaper (Android). ROOT CAUSE: components exported improperly, allowing local access to confidential data....

EUVD-2026-34797

Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-21025

Technical details (affected Telephony component, vulnerable version range, root cause, exploit scenarios, and mitigations) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2026-21025

Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information...

WordPress WP Go Maps – Google Maps, OpenStreetMap, Leaflet Map plugin <= 10.0.09 - Unauthenticated Sensitive Information Disclosure vulnerability

Unauthenticated Sensitive Information Disclosure vulnerability discovered by Sudhanshu Chauhan - RedHunt Labs in WordPress Plugin WP Go Maps versions = 10.0.09...

PT-2026-46926

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 30.0.0.39 Description Improper authorization allows local attackers to access sensitive information. Recommendations Update to version 30.0.0.39 or later...

CVE-2026-21036: Undefined Security Weakness

Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information...

PT-2026-46916

Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information...

PT-2026-46918

Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-21026: Undefined Security Weakness

Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information...

CVE-2026-21028: Undefined Security Weakness

Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information...

RIELLO UPS NetMan Access Control Vulnerability

RIELLO UPS NetMan is a network adapter developed by the Italian company RIELLO UPS. The RIELLO UPS NetMan 204 has a vulnerability related to access control. This vulnerability arises from the lack of authentication for management pages and command endpoints. Unauthenticated remote attackers can...

CVE-2026-11238

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

CVE-2026-11140

Google Chrome and Microsoft Edge (Chromium-based) are vulnerable to an out-of-bounds read in Chromecast due to insufficient validation of input data. A remote attacker who has already compromised the renderer process can use a crafted HTML page to extract potentially sensitive information from th...

EUVD-2026-34241

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember: from n/a through v10.2.2...

CVE-2025-52606: Generation of Error Message Containing Sensitive Information

HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expecte...

CVE-2026-50205: Insertion of Sensitive Information into Log File

System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data...