CVE-2026-81997

Acrobat Reader is affected by an Incorrect Authorization vulnerability (CWE-863) that can result in a security feature bypass , allowing an attacker to gain unauthorized write access . Exploitation requires user interaction — a victim must open a malicious file — and the attack vector is local wi...

CVE-2026-81976

Adobe Acrobat Reader is affected by a Use After Free vulnerability (CWE-416) that can lead to arbitrary code execution in the context of the current user. Exploitation requires a local attack vector with user interaction — the victim must open a malicious file — and no privileges are required. Th...

CVE-2026-81985

Adobe Acrobat Reader is affected by a Use After Free vulnerability (CWE-416) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction — the victim must open a malicious file. The CVSS 3.1 score is 7.8 (High) , with a local attack vector,...

CVE-2026-81994

Adobe Acrobat Reader is affected by a Prototype Pollution (CWE-1321) vulnerability that can lead to arbitrary file system read , allowing an attacker to access sensitive files and directories outside the intended access scope. Exploitation requires user interaction —a victim must open a malicious...

CVE-2026-81979

Acrobat Reader is affected by an out-of-bounds write (CWE-787) vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as the victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) with a local attack vecto...

CVE-2026-80160

Adobe Acrobat Reader is affected by an out-of-bounds read (CWE-125) that can lead to disclosure of sensitive memory . Exploitation requires user interaction — a victim must open a crafted malicious file. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector, low complexity, no req...

CVE-2026-81992

Acrobat Reader is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , specifically opening a malicious file. The CVSS v3.1 score is 7.8 (HIGH) with a local attack vector, low comp...

CVE-2026-81996

Adobe Acrobat Reader is affected by an Incorrect Authorization vulnerability (CWE-863) that enables a low-privileged local attacker to escalate privileges and gain elevated access, with no user interaction required. The CVSS v3.1 score is 8.8 (HIGH) , with a vector of AV:L/AC:L/PR:L/UI:N/S:C/C:H/...

CVE-2026-81982

Adobe Acrobat Reader is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to disclosure of sensitive memory . Exploitation requires user interaction —specifically, a victim must open a malicious file. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low compl...

CVE-2026-82001

Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability (CWE-400) that can lead to an application denial-of-service by exhausting system resources. Exploitation requires user interaction —specifically, a victim must open a malicious file. The CVSS 3.1 score is 5.5 (Medium...

CVE-2026-81978

Acrobat Reader is affected by an out-of-bounds read (CWE-125) vulnerability that can lead to disclosure of sensitive memory . Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 score is 5.5 (MEDIUM) , with a local attack vector , no privileges required, and...

CVE-2026-81983

Acrobat Reader is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as a victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) , with a local attack vec...

CVE-2026-79908

Adobe Acrobat Reader is affected by an out-of-bounds write (CWE-787) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file. The CVSS 3.1 base score is 7.8 (HIGH) with a local attack ...

CVE-2026-81975

Adobe Acrobat Reader is affected by a Use After Free vulnerability (CWE-416) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CNA-assigned CVSS 3.1 score is 7.8 (HIGH) , with a local a...

CVE-2026-86819

Waves Central for macOS contains a local privilege escalation in its privileged helper service. The root cause is improper XPC client authentication : the helper validates connecting clients by comparing the caller's code-signing certificate chain for equality with its own, rather than checking a...

CVE-2026-77827

Maono Link version 3.8.13 contains a local privilege escalation vulnerability in its MaonoAiServices Windows service. The root cause is improper write permissions on C:\ProgramData\Maono, allowing a standard user to modify service files and escalate privileges. The CVSS 3.1 score is 7.1 (HIGH) an...

CVE-2026-69774

CVE-2026-69774 is a vulnerability in Microsoft Windows Hyper-V with a CVSS score of 9.00 , allowing execution of arbitrary code. It is one of 32 high-severity vulnerabilities (CVSS ≥ 9.0) identified in Microsoft's advisory of 666 total Windows vulnerabilities. While the NVD entry remains reserved...

CVE-2026-69639

CVE-2026-69639 affects the Libarchive component in Microsoft Windows , carrying a CVSS score of 9.80 . The vulnerability allows execution of arbitrary code , meaning that actors with access to the affected component can potentially run code or gain unauthorized access to the system without authen...

CVE-2026-19625

CVE-2026-19625 is a cross-tenant authentication bypass in the OIDC extension of IBM Enterprise Build of Quarkus . When an optional token-introspection cache is enabled, a valid token issued by one OIDC provider tenant can be used to access endpoints secured by a different tenant, because the shar...

CVE-2026-84685

The react-native-auth0 SDK 's web platform implementation fails to scope its in-memory token cache to individual user sessions in server-side rendering (SSR) environments where module state persists across HTTP requests. As a result, tokens cached in module memory can be retrieved by subsequent r...

CVE-2026-85983

CVE-2026-85983 is a local privilege escalation in the Auth0 AD/LDAP Connector . The connector improperly processes a configuration value during service startup, allowing a low-privileged user on the host to modify the connector's configuration. Upon service restart, the altered configuration can ...

CVE-2026-81192

CVE-2026-81192 is an untrusted search path vulnerability in the OpenTelemetry.Resources.Host NuGet package, affecting macOS only. The host.id resource attribute detector invokes sh and ioreg by bare name, resolving them through the PATH environment variable rather than by absolute path. A less-pr...

CVE-2026-85982

The Auth0 AD/LDAP Connector is affected by a stored Cross-Site Scripting (XSS) vulnerability caused by improper HTML encoding in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes—or a low-privileged local user...

CVE-2026-85981

The Auth0 AD/LDAP Connector (versions 6.5.0 and earlier ) has an unauthenticated administrative panel that listens on the local loopback interface without requiring credentials. A local, low-privileged user or process on the host can access the panel's management endpoints to read configuration d...

CVE-2026-78622

Okta Verify for Windows uninstaller is vulnerable to improper link resolution . The uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive ...

CVE-2026-78631

Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This improper restriction of sensitive information makes a live authentication credential readable by any local user with access to that log ...

CVE-2026-81961

CVE-2026-81961 affects Azure Resource Manager (ARM) and carries a CVSS score of 9.90 with an impact of access to elevated rights , as reported in the Dutch NCSC advisory (NCSC-2026-0347). The CVE is currently in a reserved state in the CVE database, awaiting public disclosure by the reserving org...

CVE-2026-78630

CVE-2026-78630 affects Okta Access Gateway due to improper input neutralization in SNMP configuration processing. Shell metacharacters in SNMP configuration values are not sanitized before a privileged script uses them to construct OS commands, allowing an authenticated local user with access to ...

CVE-2026-78629

The Okta Hyperdrive agent plugin contains an improper authentication verification flaw in its MFA response handling. When an organization's policy does not require MFA for a given user, the plugin returns a success response that contains only a bare boolean validation indicator rather than a sign...

CVE-2026-19651

CVE-2026-19651 affects the quarkus-spring-web extension in IBM Enterprise Build of Quarkus versions 3.27.1–3.27.5 and 3.33.1–3.33.3 . The root cause is that the system incorrectly reads the URL query string as a request header, resulting in incorrect mapping of values to untrusted query string in...

CVE-2026-78635

Okta Privileged Access SSH client contains an improper input validation vulnerability in its URL handler . The handler fails to insert an option terminator before appending the target value to command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen...

CVE-2026-78620

CVE-2026-78620 affects the Okta Access Gateway , specifically its Kerberos configuration handler , which fails to validate file paths supplied in event payloads before writing file contents. Because the attacker-controlled path is used directly as the write destination, files can be written to un...

CVE-2026-78579

CVE-2026-78579 affects the Okta Access Gateway , specifically its LDAP datastore configuration . The root cause is that SAML assertion attribute values are not sanitized before being interpolated into LDAP search filters, allowing an attacker with low privileges to modify the intended query logic...

CVE-2026-78627

Okta Hyperdrive Integration installer exposes the OAuth client secret in plaintext when it is passed as an MSI property. The credential is recorded in three locations readable by an authenticated local user: the installer log , the Application Event Log , and the process command line . The CVSS 3...

CVE-2026-78574

CVE-2026-78574 affects the Okta Hyperdrive Integration plugin , which resolves a required assembly via a registry path in the current user's hive without integrity verification. The assembly is loaded through Assembly.LoadFrom without signature validation, allowing an unverified assembly to execu...

CVE-2026-78626

Okta Access Gateway is vulnerable to an authorization bypass in its Protected Rule authorization check. The root cause is improper input sanitization and regular expression evaluation within that check, allowing a bypass when an administrator has explicitly configured a Protected Rule policy on o...

CVE-2026-78625

Okta Access Gateway is affected by an insufficient validation vulnerability in its dashboard site configuration . The product fails to sanitize dashboard application label values before writing them into generated PHP configuration files . Since the generated file is automatically included during...

CVE-2026-78624

Okta Access Gateway contains an improper path validation flaw in its backup restore function . The function does not validate the filename embedded in an encrypted backup payload, allowing file contents to be written to unintended locations on the appliance filesystem. The vulnerability is rated ...

CVE-2026-78560

CVE-2026-78560 affects the Okta Access Gateway , specifically its optional pass-through authentication source , which accepts user identity from a client-supplied HTTP header without cryptographic validation. When this source is enabled without an upstream reverse proxy or firewall that sanitizes...

CVE-2026-85630

HTML::FormHandler versions before 0.410002 (Perl) fail to escape field attributes in the process_attrs method when rendering HTML. Any application where field attributes are built from data rather than literals allows an attacker to inject text that overrides attributes or embeds JavaScript, enab...

CVE-2026-85485

HTML::FormHandler for Perl (versions before 0.410002 ) fails to HTML-escape error messages in the Table form layout and the Bootstrap 2 and 3 wrappers , splicing raw error strings directly into surrounding markup. Attacker-influenced content, such as rejected field values, could embed JavaScript ...

CVE-2026-78552

CVE-2026-78552 is a validation bypass in Okta Access Gateway where the application-level custom configuration field is not subject to the same Lua directive restriction as other fields. Because this field is interpolated directly into the nginx server block without inspection, an authenticated us...

CVE-2026-85484

HTML::FormHandler versions before 0.410002 for Perl contain an HTML injection flaw. The Select , RadioGroup , CheckboxGroup , and HorizCheckboxGroup widgets render option group labels and radio button labels into HTML without escaping. When an application builds its option list from data (via opt...

CVE-2026-19872

HTML::FormHandler versions before 0.410000 for Perl are vulnerable to cross-site scripting (XSS) because its error wrappers and renderers interpolate error strings directly into HTML without escaping. The library's own no_match and not_allowed messages splice a submitted value into the error stri...

CVE-2026-78623

Okta Access Gateway contains an SQL injection vulnerability in its advanced mode datastore configuration . The root cause is that SAML assertion values are interpolated directly into database query strings without sanitization , prior to query preparation, allowing unintended SQL execution agains...

CVE-2026-78550

The Okta Access Gateway management console is vulnerable to improper input handling in its exception handler . During an authenticated administrator SSH session, user-supplied input is passed to eval() without sanitization, resulting in arbitrary code execution with the privileges of the manageme...

CVE-2026-78545

Okta Access Gateway is vulnerable to improper input sanitization in the application label field. The unsanitized value is interpolated directly into an nginx server block directive within the generated configuration file, allowing an attacker to inject arbitrary directives. This requires high pri...

CVE-2026-84197

Eclipse Ditto's Node.js JavaScript client hard-codes rejectUnauthorized: false in its WebSocket transport, disabling TLS certificate chain and hostname validation for every wss:// connection. All released versions of @eclipse-ditto/ditto-javascript-client-node (2.0.0–3.9.0) and its predecessor @e...

CVE-2026-86810

Open-Web-Analytics (up to 1.9.1) contains an improper authentication vulnerability in the checkCapabilityAndAuthenticateUser function within Core/Controller.php (Controller component). A remote, unauthenticated attacker can manipulate this function to bypass authentication checks. The CVSS 3.1 sc...

CVE-2026-87049

A flaw in operator-foundry allows untrusted external actors to exploit over-permissive GitHub access tokens and GCP Workload Identity Federation credentials granted to a third-party reusable workflow. By invoking the workflow on untrusted-triggerable events (e.g., pull_request_target, issue_comme...