192 matches found
CVE-2026-16540
Technical details for CVE-2026-16540 are not publicly available in the provided documents. This reserved candidate has no disclosed affected products, impact, or remediation. Monitor for updates as new information is released.
CVE-2026-50055
Zimbra 10.1.20 patches include a fix for CVE-2026-50055, described as a mail forwarding restriction bypass that could allow authenticated users to exfiltrate email despite forwarding restrictions. The THN article also notes multiple other fixes (including SNMP command injection and four XSS flaws...
CVE-2022-35499
Technical details for CVE-2022-35499 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-63137
CVE-2026-63137 is reserved; the provided documents contain no public technical details (affected products, impact, or remediation). Monitor for updates from official sources.
CVE-2026-69212
Technical details for CVE-2026-69212 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-51788
CVE-2026-51788 affects cleverange_auth up to version 0.1.10. A flaw in the EmailOrUsernameBackend.authenticate path causes an attacker to trigger expensive password-hashing operations for non-existent usernames, leading to CPU exhaustion and potential denial of service on the authentication endpo...
CVE-2026-50979
CVE-2026-50979 affects oPanel v1.19.50 and earlier. The vulnerability is an Authenticated Command Injection/Remote Code Execution in the /advanced/curl endpoint where user input in the url parameter isn’t properly sanitized before invoking system curl, allowing an authenticated attacker to inject...
CVE-2026-52614
This CVE corresponds to a concrete PoC in RuoYi v4.8.3 where the code-generation endpoint /tool/gen/createTable improperly filters input. The filterKeyword() logic removes all whitespace and then checks for blacklisted keywords with trailing spaces (e.g., select, insert, drop), allowing a CTAS (C...
CVE-2026-55511
CVE-2026-55511 pertains to Yamcs Yarch SQL, involving a quoted-identifier code-generation issue. The connected exploit document provides a non-weaponized PoC that analyzes local Yamcs source paths, generates a Java model of the vulnerable pattern, and uses a benign JVM marker to indicate executio...
CVE-2026-14266
CVE-2026-14266 is complemented by PT-2026-60346, which details a heap-based buffer overflow in 7-Zip’s XZ decompression that enables remote code execution. The connected document specifies the vulnerability class and impact (RCE) but does not provide version ranges, affected products beyond 7-Zip...
CVE-2026-38165
Technical details for CVE-2026-38165 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-54337
Technical details for CVE-2026-54337 are not publicly available in the provided documents. Monitor for updates and new disclosures.
CVE-2026-36851
Technical details about CVE-2026-36851 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-54520
Technical details for CVE-2026-54520 are not provided in the supplied documents. The entry is reserved with no public details yet. Monitor for updates as information becomes available.
CVE-2026-50980
Technical details for CVE-2026-50980 are not publicly available in the provided documents. No affected products, impact, or remediation are disclosed. Monitor for updates as information is released.
CVE-2026-55494
Technical details for CVE-2026-55494 are not publicly available in the provided documents. Monitor for updates; no information on affected products, root cause, impact, or remediation is available here.
CVE-2026-53582
Technical details are not publicly available in the provided documents for CVE-2026-53582. Monitor for updates and future disclosures; no information on affected products, root cause, impact, or remediation is provided here.
CVE-2026-54597
Technical details for CVE-2026-54597 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-39949
CVE-2026-39949 affects Cacti ≤ 1.2.30. A vulnerability in Cacti’s graph-generation variable substitution engine lets authenticated users with graph-management privileges inject host metadata into RRDtool arguments, enabling remote code execution on the underlying OS. Details are documented by PT-...