CVE-2026-76194 CAI Content Credentials | Improper Input Validation (CWE-20)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...

CVE-2026-76194 CAI Content Credentials | Improper Input Validation (CWE-20)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...

EUVD-2026-84764

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...

CVE-2026-82011 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthoriz...

PT-2026-97015

Name of the Vulnerable Software and Affected Versions Apache Lounge Windows distribution of Apache HTTP Server affected versions not specified Description This issue involves insecure installation directory permissions within the default install directory on C:. The directory inherits write acces...

PT-2026-97055

Name of the Vulnerable Software and Affected Versions Vaultwarden versions prior to 1.37.4 Description Organization membership status validation is omitted from three cipher access-restriction queries. This allows members with revoked or not-yet-confirmed status to maintain read, write, delete, a...

PT-2026-96933

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An improper input validation issue exists that allows a remote attacker to bypass security features. This flaw can be leveraged to gain unauthorized write access without...

PT-2026-96993

Name of the Vulnerable Software and Affected Versions HPE Analytics and Location Engine versions 5.0.0.0 and earlier Description A flaw in the internal administrative component allows an unauthenticated remote attacker to obtain unauthorized write access to the file system with elevated privilege...

CVE-2026-82011: Improper Neutralization of Special Elements used in an SQL Command

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthoriz...

CVE-2026-76709: Improper Access Control

A vulnerability exists in the internal administrative component of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting i...

PT-2026-96910

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Neutralization of Special Elements used in an SQL Command, known as SQL Injection, allows a low-privileged attacker to bypass security features. This issue...

CVE-2026-75743: Cross-Site Request Forgery (CSRF)

Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery CSRF vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to...

PT-2026-96989

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms JEE affected versions not specified Description Cross-Site Request Forgery CSRF is a flaw where a victim is tricked into performing actions they did not intend to do. This issue allows an attacker to bypass...

PT-2026-96939

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...

PT-2026-97012

Name of the Vulnerable Software and Affected Versions Premiere Pro affected versions not specified Description Premiere Pro contains a Server-Side Request Forgery SSRF flaw, which occurs when an attacker can induce the server-side application to make requests to an unintended location. This issue...

CVE-2026-75634: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...

CVE-2026-76194: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...

PT-2026-96938

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...

CVE-2026-84395: Server-Side Request Forgery (SSRF)

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-89282: Incorrect Permission Assignment for Critical Resource

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...