2026

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks

HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configur

HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its repor

HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation

In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `

### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and

NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment hand

gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen

A SQL injection vulnerability in `FilterEngine.create_sqla_query()` allows any authenticated Rucio user to execute arbit

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpo

An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Co

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social

A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to e

A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with

A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated,

Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series Managed Switches (SG

A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated,

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated,

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated,

A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to con

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote att

Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with onl

Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Pr

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling

Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allo

Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.

A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function verify of the file packages/se

A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown functiona

Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.

HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an outdated

HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Ty

HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This cou

HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed direct

HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) befo

HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while comm

HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. Expose

HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to co

HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead t

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a craf

A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the function Login of the file packag

Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Sessi

Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Gazelle incorrectl

A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image. Wh

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ec_bhf: Fix dma_free_coherent() dma

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix potential NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_in

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add bounds check on pat_index to prevent OO