EUVD-2026-2820

Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...

CVE-2026-22909

Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...

CVE-2026-22909

Technical details about CVE-2026-22909 are not publicly detailed in the provided documents. Monitor for updates from sources like NVD, Red Hat, and vendor PSIRTs for affected products, versions, and fixes.

CVE-2026-22907

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data...

CVE-2026-22907

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data...

EUVD-2026-2821

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data...

CVE-2026-22907

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data...

CVE-2026-22907

CVE-2026-22907 : The included sources describe an unauthorized host filesystem access risk with read/modify data implications. The materials do not provide concrete mappings to a specific affected product/vendor/version nor explicit root cause details. CVSS data indicates a critical impact on con...

Exploit for CVE-2026-23478

🔐 CVE-2026-23478 — Critical Authentication Bypass !Critical...

CVE-2025-14389

The WPBlogSyn plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to update the plugin's remote sync settings via a forged request granted...

Ambassador API Gateway Diagnostics Sensitive Information Disclosure

Ambassador API Gateway includes a diagnostics portal that provides detailed information about the API Gateway's configuration and operation. If this portal is accessible without proper authentication, it can expose sensitive information such as service mappings, API endpoints, routing...

PT-2026-2990

Name of the Vulnerable Software and Affected Versions versions prior to 2026 Description Certain system functions may be accessed without proper authorization. This could allow attackers to start, stop, or delete installed applications, potentially disrupting system operations. Recommendations At...

PT-2026-3058

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 10.0.21 GLPI versions prior to 11.0.3 Description An unauthorized user can access GLPI documents attached to any item, such as tickets or assets. If the public FAQ is enabled, this unauthorized access can be performed by...

JetBrains TeamCity Registration Enabled

JetBrains TeamCity is a continuous integration and build management system. By default, TeamCity allows users to self-register for an account. If the self-registration feature is enabled, an attacker can create an account without any authorization, potentially leading to unauthorized access to th...

SICK TDC-X401GL has security vulnerabilities

The SICK TDC-X401GL is a edge computing gateway developed by the German company SICK. The SICK TDC-X401GL has a security vulnerability. This vulnerability allows attackers to access the host file system without authorization, potentially leading to the reading and modification of system data...

SICK TDC-X401GL has security vulnerabilities

The SICK TDC-X401GL is a edge computing gateway developed by the German company SICK. The SICK TDC-X401GL has a security vulnerability. This vulnerability stems from certain system functions that can access resources without proper authorization, potentially allowing attackers to initiate, stop, ...

CVE-2025-67822

A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 7.3.0.0.50 through 7.8 SP1 7.8.1.0.14 could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gai...

PT-2026-2988

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data. The issue could allow an attacker to...

SICK TDC-X401GL has security vulnerabilities

The SICK TDC-X401GL is a edge computing gateway developed by the German company SICK. The SICK AG TDC-X401GL has a security vulnerability, which stems from the use of a weak and publicly available default password during device deployment. This may increase the risk of unauthorized access...

Private Key File Detected

Private keys are cryptographic credentials used for secure communications in protocols like SSL/TLS, SSH, and JWT signing. If exposed, an attacker can impersonate the server, decrypt sensitive communications, or forge authentication tokens to gain unauthorized access to systems and data. No sourc...