EUVD-2026-63323

HCL IntelliOps Event Management IEM is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to unauthorized external interaction and potential exploitation...

EUVD-2025-210753

HCL IntelliOps Event Management IEM is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges...

CVE-2026-7485 Frozen BI aggregations leak host and service names to unauthorized users

Incorrect authorization in frozen BI aggregations in Checkmk 2.5.0p2, 2.4.0p29, 2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricted host and service visibility to learn the names and the existence of hosts and services they are not authorized to see...

EUVD-2026-63224

A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php...

kernel: smb: client: mask server-provided mode to 07777 in modefromsid

A flaw was found in the Linux kernel's Server Message Block SMB client. When processing server-provided file mode information, the system incorrectly applies these modes without proper security masking. This can result in unintended file permissions, potentially allowing unauthorized access to...

kernel: smb: client: mask server-provided mode to 07777 in modefromsid

A flaw was found in the Linux kernel's Server Message Block SMB client. When processing server-provided file mode information, the system incorrectly applies these modes without proper security masking. This can result in unintended file permissions, potentially allowing unauthorized access to...

CVE-2026-76341

creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:49+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

kernel: smb: client: mask server-provided mode to 07777 in modefromsid

A flaw was found in the Linux kernel's Server Message Block SMB client. When processing server-provided file mode information, the system incorrectly applies these modes without proper security masking. This can result in unintended file permissions, potentially allowing unauthorized access to...

CVE-2026-59711 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard, opensearch-dashboards, wazuh-dashboard-fips...

GO-2026-5966 vulnerabilities

Vulnerabilities for packages: filebrowser...

EUVD-2026-62957

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for connected container services. The use of hard-coded credentials is possible because Splunk AI Toolkit generates or stores credentials for...

EUVD-2026-62896

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could inject Search Processing Language SPL into saved-search dispatch requests. This could allow for unauthorized access to all relevant data and affect system...

EUVD-2026-63104

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.13, an unauthenticated user who tricks another user into visiting a malicious web page could run unauthorized JavaScript in that user's browser. This could allow for unauthorized access to all relevant data available to that user...

PT-2026-79152

The Library Corporation LS2 Admin v5.7 to v5.8.0 was discovered to contain an information disclosure vulnerability...

PT-2026-79201

Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An issue involving the use of an incorrectly-resolved name or reference allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

PT-2026-79210

Name of the Vulnerable Software and Affected Versions Azure Stack HCI affected versions not specified Description An observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no information...

The vulnerability of the pgcrypto module in the PostgreSQL database management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the pgcrypto module in the PostgreSQL database management system is related to the unencrypted storage of user credentials. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ALTER TABLE ALTER TYPE command in the PostgreSQL database management system allows a hacker to gain unauthorized access to delete or modify data.

The vulnerability of the ALTER TABLE/ALTER TYPE command in the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to delete or modify data...

PT-2026-79080

Name of the Vulnerable Software and Affected Versions Mongoose versions prior to 7.22 Description A remote unauthenticated attacker can exploit an HTTP/1.0 reverse-proxy deployment by sending a request with Transfer-Encoding: chunked and conflicting framing. The http cb function in src/http.c...

PT-2026-79212

Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...