2026

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In th

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP

On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a ca

On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Ca

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network

On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send

On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the V

On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker wi

On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vuln

An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load

An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality inten

Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an

An insecure direct object reference (IDOR) vulnerability in a CloudVision CUE file-serving interface may allow an authen

Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticate

An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticate

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload

A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to

A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store mali

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the

On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. A

Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a

Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, whe

Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct re

Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct re

Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS a

When `[migrations] ALLOWED_DOMAINS` was configured, a hostname matching the allow list was accepted without checking its

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote a

A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository

Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attac

Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnera

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory (

A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the u

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory (

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low

Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privile

In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permissio

In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This

In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalati

In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the c

In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code.

MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the Ze

The CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by dire

MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig

WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py p

Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instanti

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python

Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-o