RLSA-2026:54178 Moderate: grafana security, bug fix, and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Privilege escalation via dashboard overwrite CVE-2026-33377 grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default...

CVE-2026-73607 SiYuan before v3.7.4 Information Disclosure via getOutlineStorage

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage endpoint that performs no authorization checks. Attackers can retrieve outline state including heading identifiers for any document by supplying its identifier, even for documents...

CVE-2026-73607

SiYuan: Information disclosure vulnerability in /api/storage/getOutlineStorage on versions before v3.7.4 allows retrieving outline state (including heading IDs) for any document without authorization. This affects confidentiality; upgrade to v3.7.4+ (the fix) or apply vendor advisories. Per sourc...

CVE-2026-73488

Flowise CVE-2026-73488: An insecure direct object reference (IDOR) vulnerability in Flowise before 3.1.3 affects the GET /api/v1/organization/customer-default-source endpoint. Authenticated attackers can manipulate the customerId parameter to enumerate predictable customer IDs and access other cu...

CVE-2026-73488 Flowise before 3.1.3 IDOR via customer-default-source endpoint

Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the GET /api/v1/organization/customer-default-source endpoint that allows authenticated attackers to access other customers' payment and profile data by manipulating the customerId parameter. Attackers can...

CVE-2026-59499

: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions.. This issue affects Portal Generator addon to Priority ERP developed by Soft Solutions.: All versions without Priwall v3...

WordPress InstaWP Connect plugin <= 0.1.3.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by rajukani100 in WordPress Plugin InstaWP Connect versions = 0.1.3.7...

CVE-2026-59507 Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control

: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solution...

CVE-2026-59507

CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control...

CVE-2026-59505

CWE-284: Improper Access Control...

CVE-2026-59503

CVE-2026-59503 describes exposure of sensitive information to an unauthorized actor with a CVSS v3.1 base score of 9.1 (CRITICAL). The attack vector is NETWORK with no privileges required and no user interaction, and it impacts confidentiality and integrity (both HIGH) while availability remains ...

CVE-2026-59503 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Sof...

CVE-2026-59503

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor...

EUVD-2026-57770

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor...

CVE-2026-59499 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions.. This issue affects Portal Generator addon to Priority ERP developed by Soft Solutions.: All versions without Priwall v3...

EUVD-2026-57760

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2026-59499

Technical details about CVE-2026-59499 are not publicly available in the provided documents. No affected products, root cause, or remediation are disclosed here. Monitor for updates from official sources.

CVE-2026-59499

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2026-59499 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions.. This issue affects Portal Generator addon to Priority ERP developed by Soft Solutions.: All versions without Priwall v3...

PT-2026-71780

A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key...