CVE-2026-96419

Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution...

CVE-2026-86158

Missing authentication in the local .NET backend Fiddler.WebUi of Progress Software Fiddler Everywhere 8.0.2 allows a local unauthenticated attacker to mint OAuth tokens and read the machine-in-the-middle root certificate through an unauthenticated localhost HTTP and SignalR RPC channel...

EUVD-2026-88649

Missing authentication in the local .NET backend Fiddler.WebUi of Progress Software Fiddler Everywhere 8.0.2 allows a local unauthenticated attacker to mint OAuth tokens and read the machine-in-the-middle root certificate through an unauthenticated localhost HTTP and SignalR RPC channel...

CVE-2026-86158

Progress Software Fiddler Everywhere 8.0.2 contains a vulnerability due to missing authentication in its local .NET backend (Fiddler.WebUi ). A local unauthenticated attacker can exploit unauthenticated localhost HTTP and SignalR RPC channels to mint OAuth tokens and read the machine-in-the-middl...

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices, related to insufficient entropy, allows a perpetrator to bypass authentication procedures and execute an attack using brute-force methods.

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices related to insufficient entropy. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures and execute an attack using brute-force methods...

CVE-2026-86158: Missing Authentication for Critical Function

Missing authentication in the local .NET backend Fiddler.WebUi of Progress Software Fiddler Everywhere 8.0.2 allows a local unauthenticated attacker to mint OAuth tokens and read the machine-in-the-middle root certificate through an unauthenticated localhost HTTP and SignalR RPC channel...

HPESBNW05149 rev.1 -HPE Networking Advance Notification of Security Advisories for October 6, 2026.

Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Enterprise Software N/A - In this advance notification, HPE Networking will not provide vulnerability details, CVEs, affected software versions, or...

Library panel can be moved into a folder without library panel create permission

An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination...

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices, related to insufficient verification of input data, allows a intruder to bypass authentication procedures and gain unauthorized access to the device.

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices related to insufficient verification of input data during the processing of generated values. Exploiting this vulnerability could allow an attacker to bypass authentication procedures and gain unauthorized access to the...

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices, related to the execution of operations outside the buffer in memory, allows a intruder to cause malfunctions during maintenance.

The vulnerability of the microprogramming software in relay protection and automation devices from Reyrolle 7SR5 lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause malfunctions in the equipment...

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices, related to the inclusion of service information in the debugging code, allows a intruder to gain access to read and modify data.

The vulnerability of the microprogramming software in relay protection and automation devices from Reyrolle 7SR5 lies in the inclusion of functional information within the debugging code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read and modify da...

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices, related to the loading of code without checking its integrity, allows a perpetrator to execute arbitrary code.

The vulnerability of the microprogramming software in relay protection and automation devices from Reyrolle 7SR5 relates to the loading of code without checking its integrity. Exploiting this vulnerability can allow an intruder to execute arbitrary code...

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices, related to the distribution of resources without any restrictions or regulation, allows a intruder to cause malfunctions during maintenance operations.

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices for relay protection and automation systems lies in the fact that resources are allocated without any restrictions or controls during the processing of HTTP requests. Exploiting this vulnerability allows a remote attacker...

Security Advisory 0184

Security Advisory 0184 PDF September 29, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 29, 2026 | Initial release 1.1 | October 6, 2026 | Updated information Update Type: Informational Background Recent enhancements to our vulnerability detection processes have resulted in a...

CVE-2026-101144

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly...

CVE-2026-101145

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

CVE-2026-101141

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

CVE-2026-101145

A vulnerability exists in Eleveo Call Recording Software 9.7.0 within the User Management component. Specifically, the file /callrec/userAddAction.do is susceptible to ldap injection due to the improper handling of the Username argument. This flaw can be exploited remotely . An exploit is publicl...

CVE-2026-101145 Eleveo Call Recording Software User Management userAddAction.do ldap injection

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

CVE-2026-101145 Eleveo Call Recording Software User Management userAddAction.do ldap injection

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...