CVE-2026-78021

Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to a Generation of Error Message Containing Sensitive Information (CWE-209). An unauthenticated attacker with remote access can exploit this flaw to cause information disclosure and information exposur...

CVE-2026-78020

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , contains an Improper Certificate Validation vulnerability (CWE-295). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Remote execution , Information disclosure , and Denia...

CVE-2026-78019

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Inclusion of Functionality from Untrusted Control Sphere (CWE-829). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges , Filesystem access , and ...

CVE-2026-78018

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , is vulnerable to an Initialization of a Resource with an Insecure Default (CWE-1188). This flaw could allow a low privileged attacker with local access to cause information disclosure . To remediate this vulnerabilit...

CVE-2026-78017

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are susceptible to an Improper Check for Unusual or Exceptional Conditions vulnerability (CWE-754). A high privileged attacker with remote access could exploit this flaw to achieve Information tampering and a Protection...

CVE-2026-78016

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected by an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could exploit this flaw to cause Information exposure and Information tampering . No specific...

CVE-2026-78015

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , is affected by a Use of Less Trusted Source vulnerability (CWE-348). An unauthenticated attacker with remote access could potentially exploit this flaw to cause information tampering . No specific exploit details or ...

CVE-2026-78013

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Initialization of a Resource with an Insecure Default (CWE-1188). A high privileged attacker with local access could exploit this flaw to cause a Denial of service , Information disclosure , and Pro...

CVE-2026-76779

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Improper Restriction of Excessive Authentication Attempts (CWE-307). An unauthenticated attacker with remote access can exploit this flaw to bypass protection mechanisms, achieve Elevation of privil...

CVE-2026-104635

The elixir-protobuf library (version 0.8.0 and onward) is vulnerable to uncontrolled recursion during JSON decoding. Specifically, the Protobuf.JSON.decode/3, Protobuf.JSON.decode!/3, and Protobuf.JSON.from_decoded/3 functions fail to increment or check the depth counter when processing user-defi...

CVE-2026-76769

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are susceptible to a Missing Authorization vulnerability. A low-privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . To mitigate this risk, it is recommended to update the ...

CVE-2026-84220

The Kirki WordPress plugin prior to version 6.3.2 is vulnerable to unauthenticated arbitrary shortcode execution . The issue occurs because the plugin fails to prevent the execution of shortcodes contained within comments when they are rendered, and it displays these comments regardless of their ...

CVE-2026-84224

The Kirki WordPress plugin versions prior to 6.3.2 is vulnerable to a Blind SSRF flaw. The issue exists because the plugin fails to validate the host of a URL provided via a Remote Template URL before fetching it. This allows users with editor-level access or higher to force the site to issue req...

CVE-2026-97075

The WP Rocket plugin for WordPress is affected by a Missing Authorization vulnerability in versions prior to 3.23.5 . This Broken Access Control issue allows for the exploitation of incorrectly configured access control security levels. While the specific technical root cause is not detailed beyo...

CVE-2026-4264

The BeeTienda eCommerce platform (specifically the latest demo version ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the lack of proper sanitization of user input in the 'search' parameter of the product list endpoint. Malicious payloads sent via this parameter are r...

CVE-2025-14123

The Redux Framework plugin for WordPress (versions up to and including 4.5.11 ) is vulnerable to privilege escalation . The root cause is the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist restrictions. This allows authentica...

CVE-2026-98384

The Linux kernel contains an out-of-bounds read vulnerability in the bpf subsystem within the bpf_sock_destroy() function. The issue arises because the code attempts to read sk_protocol from a sock structure; however, for timewait or request sockets handed to the function by the tcp iterator, thi...

CVE-2026-98383

The Linux kernel contains a vulnerability where an LWT_SEG6LOCAL program can invalidate its cached SRH using bpf_lwt_seg6_adjust_srh() and subsequently call bpf_skb_pull_data(). This sequence can cause skb->head to be reallocated, resulting in a dangling per-CPU SRH pointer . Subsequent post-p...

CVE-2026-98381

The Linux kernel contains a vulnerability where the veth component fails to properly manage XDP program pointers during a channel resize. Specifically, the function veth_set_channels() tears down XDP resources for removed RX queues but fails to clear rq->xdp_prog. This allows queues to retain ...

CVE-2026-98382

The Linux kernel contains a vulnerability where bound-only BPF programs can incorrectly match sibling ports due to a fallback mechanism in __bpf_offload_dev_match(). Because these programs typically have NULL offdevs , unrelated netdevs can compare as equal on offload-registered netdevs. An attac...