SolarWinds Serv-U Privilege Escalation

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker, operating remotely, to elevate their privileges to that of a system...

SolarWinds Serv-U Authentication Bypass Code Execution

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor to elevate their privileges and execute arbitrary code as the root...

SolarWinds Serv-U Auth Bypass RCE

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on behalf of the root user remotely...

SolarWinds Serv-U Authentication Bypass

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the account...

SolarWinds Serv-U Authentication Bypass

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the ability to bypass authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely intercept sessions and gain control of the user account...

SolarWinds Serv-U Authentication Bypass Code Execution

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...

SolarWinds Serv-U Authentication Bypass Code Execution

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...

SolarWinds Serv-U Authentication Bypass Privilege Escalation

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an intruder to enhance their privileges and gain unauthorized access to protected...

Kibana 7.x / 8.x < 8.19.16 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 Path Traversal (ESA-2026-160)

The version of Kibana installed on the remote host is 7.11.0 through 7.17.29, or 8.x prior to 8.19.16, or 9.0.x prior to 9.3.5, or 9.4.x prior to 9.4.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-160 advisory. - Improper Limitation of a Pathname to a Restricted...

Linux Distros Unpatched Vulnerability : CVE-2026-82065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent...

CVE-2026-88001: Server-Side Request Forgery (SSRF)

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, server-side web fetches did not reapply WEBFETCHFILTERLIST or private-address controls to HTTP redirect destinations when AIOHTTPCLIENTALLOWREDIRECTS was enabled. An authenticated user...

CVE-2026-61911: Exposure of Sensitive System Information to an Unauthorized Control Sphere

An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An authenticated user could install a Sieve script that probed whether another user's private mailbox existed, or read the value of shared mailbox annotations, by observing which fileinto branch fired...

CVE-2026-61910: Incorrect Authorization

An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special-use role on shared mailboxes. An authenticated user with maySetKeywords on another user's mailbox could change that mailbox's specialuse annotation. This could allow the sharee to change the shared...

CVE-2026-67403: Authorization Bypass Through User-Controlled Key

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...

CVE-2026-86774: Improper Access Control

Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files method cascades from assets.files permission, allowing authenticated users to upload and delete file attachments on Asset Model records without the required models.files permission...

CVE-2026-87821: Server-Side Request Forgery (SSRF)

Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can read internal HTTP services and cloud metadata including IA...

CVE-2026-75927: Improper Privilege Management

The PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.50.0. This is due to the addPluginCapabilities function unconditionally granting the Editor role...

CVE-2026-85133: Missing Authorization

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on several of its settings AJAX actions, allowing any authenticated user, such as a subscriber, to read and destroy scan data belonging to the administrator and to overwrite the WPLP Cookie Consent...

CVE-2026-16960: Exposure of Sensitive Information to an Unauthorized Actor

The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records including email addresses and roles and arbitrary site options...

CVE-2026-19797: Improper Neutralization of Input During Web Page Generation

The User Access Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tabgroupsection' parameter in all versions up to, and including, 2.3.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...