CVE-2026-54489

Dell Virtual Storage Integrator for VMware vSphere Client (pre-10.11.1.0) contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially disclose information and hijack active sessions, impersonating users (including admins). Dell recommends upgrad...

CVE-2026-54489

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This...

CVE-2026-54489

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This...

CVE-2026-67261

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

EUVD-2026-53930

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

CVE-2026-67261

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

CVE-2026-67261

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

CVE-2026-54489: Exposure of Sensitive Information to an Unauthorized Actor

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This...

CVE-2026-67261: Improper Neutralization of Special Elements used in an OS Command

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

PT-2026-68526

Name of the Vulnerable Software and Affected Versions Dell Virtual Storage Integrator for VMware vSphere Client versions prior to 10.11.1.0 Description A sensitive information disclosure issue allows an unauthenticated remote attacker to obtain active session credentials. This can lead to session...

Exploit for Path Traversal in Vmware Cloud_Foundation

VMware vCenter Server RCE — CVE-2021-21972 Research Lab Indep...

VMware vSphere Client (HTML5) - Remote Code Execution

The vSphere Client HTML5 contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with...

VMware Monitoring XSS

The vulnerability of the monitoring tools for VMware Aria, VMware Cloud Foundation, and VMware vSphere Foundation, as well as VMware Telco Cloud Platform, a telecommunications cloud platform, is related to the lack of security measures for website structures. Exploiting this vulnerability allows ...

VMware Monitoring XSS

The vulnerability of the monitoring tools for VMware Aria, VMware Cloud Foundation, and VMware vSphere Foundation, as well as VMware Telco Cloud Platform, a telecommunications cloud platform, is related to the lack of security measures for the website structure. Exploiting this vulnerability allo...

nautobot-ssot-aristacv (>=1.0.6, <=1.6.0), nautobot-ssot-infoblox (>=0.0.1.dev0, <=0.8.0) +3 more potentially affected by CVE-2025-62607 via nautobot-ssot (1.6.5)

nautobot-ssot PYPI version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot-ssot and may be impacted: - nautobot-ssot-aristacv =1.0.6, =0.0.1.dev0, =0.0.3.dev0, =0.1.0, =0.1.4 Source cves: CVE-2025-62607 Source advisory: OSV:PYSEC-2026-16...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: falcoctl, dask-gateway, apko, grafana-mimir, filebrowser, kubernetes-dashboard-metrics-scraper, custom-pod-autoscaler, govulncheck, amass, gitaly, buildah, terraform-provider-aws, sftpgo-plugin-pubsub, terraform-mcp-server, yace, gitlab-pages, prometheus-operator,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, kube-fluentd-operator, dask-gateway, cloud-sql-proxy, apko, etcd, redka, istio, osv-scanner, azure-service-operator, cue, grafana-mimir, libnvidia-container, spicedb-operator, chartmuseum, filebrowser, pulumi-language-yaml, authservice,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: kuma, neuvector-scanner-fips, influxd, knative-serving, kubernetes-csi-node-driver-registrar-fips, cosign, prometheus-podman-exporter-fips, gosu, pulumi-language-yaml, oras, docker-cli-buildx-fips, k8ssandra-client, elastic-agent-fips, kubevirt-cdi-uploadserver, kbld...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: kuma, neuvector-scanner-fips, influxd, knative-serving, kubernetes-csi-node-driver-registrar-fips, cosign, prometheus-podman-exporter-fips, gosu, pulumi-language-yaml, oras, docker-cli-buildx-fips, k8ssandra-client, elastic-agent-fips, kubevirt-cdi-uploadserver, kbld...

PT-2026-28315

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 3.16.3 Foreman versions prior to 3.17.2 Foreman versions prior to 3.18.1 Description A flaw exists in Foreman that allows a remote attacker to exploit a command injection vulnerability within the WebSocket proxy...