CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-59131

Summary: CVE-2026-59131 pertains to AMD Zen and is described as an information-disclosure vulnerability that can be exploited by an authorized, local attacker to disclose information. The available documents indicate a CVSS v3.1 base score of 5.6 (Medium) with LOCAL attack vector, HIGH confidenti...

CVE-2026-59131 AMD Zen Information Disclosure Vulnerability

...

CVE-2026-59131 AMD Zen Information Disclosure Vulnerability

...

EUVD-2026-56447

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-65811

CVE-2026-65811 : This entry concerns Power BI with an issue described as improper input validation that allows an authorized attacker to execute code over a network. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). Affected component and root cause are stated onl...

CVE-2026-65660

A code injection vulnerability exists in Microsoft SharePoint Server (on-premises versions 2016, 2019, and 2022) due to unescaped quote injection into Register directives . This flaw allows an authorized low-privilege user to bypass SafeControls validation and achieve remote code execution (RCE) ...

CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-62913

CVE-2026-62913 describes a heap-based buffer overflow in Microsoft Exchange Server that allows an authorized attacker to execute code over a network. The CVSS v3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, ...

CVE-2026-59130 AMD Zen Information Disclosure Vulnerability

...

EUVD-2026-56286

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery SSRF. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery (CVE-2026-14529)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery vulnerability when sipServlet-1.1 is enabled. Vulnerability Details CVEID:CVE-2026-14529 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere...

EUVD-2026-56282

CAI Content Credentials is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed...

CVE-2026-47922 CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)

CAI Content Credentials is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed...

CVE-2026-43606

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...