182611 matches found
CVE-2026-68847 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
CVE-2026-68849 Windows Bluetooth Port Driver Information Disclosure Vulnerability
...
CVE-2026-68841 Windows NTFS Elevation of Privilege Vulnerability
...
CVE-2026-68835 Windows Print Spooler Components Elevation of Privilege Vulnerability
...
CVE-2026-68833 Windows NTFS Remote Code Execution Vulnerability
...
CVE-2026-68832 Windows NTFS Elevation of Privilege Vulnerability
...
CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
CVE-2026-68830 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
...
CVE-2026-68787 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-68785 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-68784 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-67633 Microsoft SQL Server Denial of Service Vulnerability
...
CVE-2026-68781 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-67630 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-67631 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-67629 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-67370 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-67373 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-50349 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-67368 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-62801 Microsoft PowerShell Security Feature Bypass Vulnerability
...
CVE-2026-55007 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2026-57098 Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
...
CVE-2026-77482 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-85360 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-83941 Entra ID Elevation of Privilege Vulnerability
...
CVE-2026-69782 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-70091 Windows DNS Denial of Service Vulnerability
...
CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability
...
CVE-2026-69341 Windows Image Acquisition Elevation of Privilege Vulnerability
...
CVE-2026-62895 Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
...
CVE-2026-62744 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
...
CVE-2026-62706 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
...
CVE-2026-62694 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-9216 Insufficient input validation vulnerability exists in certain NETGEAR RAX Models
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...
CVE-2026-9215 A CSRF vulnerability exists in certain NETGEAR XR series devices
A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...
CVE-2026-86073 n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.1, the OAuth token endpoint bound an authorization code's first access token to the consented resource but did not bind its refresh token. Refreshing checked only that the requested resource was registered, not that it...
CVE-2026-82533 DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing
DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection origin. On the default configuration, a...
CVE-2026-81531 Unauthenticated Account Information Disclosure in Multiple Omada Controllers
An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization remains accessible after completion and may disclose account-related information to unauthenticated remote users. Successful exploitation may allow an attacker...
CVE-2026-75156 Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass
Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...
CVE-2026-86668 aircheng-org iWebShop-5 pic.php uploadFile cross site scripting
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function uploadFile of the file controllers/pic.php. Such manipulation of the argument outerSrc/selectPhoto leads to cross site scripting. The attack may be performed from remote. The...
CVE-2026-78216 AshLua eval read operations can read field-policy-protected fields via aggregates
AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation list, min, max, first, sum, avg that builds an ad-hoc Ash.Query.Aggregate over a named field and returns its raw value. Ash field policies redact forbidden fields on returned records...
CVE-2026-22575
An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator ...
CVE-2026-84393
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via...
CVE-2026-84385
A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7....
CVE-2026-84389
A url redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via...
CVE-2026-78230 AshAi aggregate tool can read field-policy-protected fields
AshAi exposes Ash read actions to language-model tool calls. The read tool accepts an aggregate result type min, max, sum, avg that builds an ad-hoc Ash.Query.Aggregate over a named field and returns its raw value. Ash field policies redact forbidden fields on returned records replacing them with...
CVE-2026-84387
A improper neutralization of special elements used in a command 'command injection' vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via...
CVE-2026-86667 aircheng-org iWebShop-5 member.php member_list sql injection
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function memberlist of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...
CVE-2026-82076 Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server
An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query...