Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-09-11 | 2026-09-24 |
|---|---|---|
| ≥90 % | 0 | 484 |
| ≥50 % | 0 | 1436 |
| ≥10 % | 0 | 16 |
| <10 % | 300 | 30 |
CVE-2026-71959 | Bitwarden Server up to 2026.7.1 Audit Log privileges management (WID-SEC-2026-2737)
A vulnerability labeled as problematic has been found in Bitwarden Server up to 2026.7.1. Affected by this issue is some unknown functionality of the component Audit Log. Executing a manipulation can lead to improper privilege management. T
CVE-2026-69102 | dromara MaxKey up to 4.1.11 Authentication application-maxkey.properties improper authorization
A vulnerability, which was classified as critical, has been found in dromara MaxKey up to 4.1.11. Affected by this issue is some unknown functionality of the file application-maxkey.properties of the component Authentication. Performing a m
CVE-2026-65660 | Microsoft SharePoint Enterprise/SharePoint Server code injection
A vulnerability was found in Microsoft SharePoint Enterprise and SharePoint Server. It has been classified as critical. This affects an unknown part. This manipulation causes code injection. This vulnerability is tracked as CVE-2026-65660.
CVE-2026-6811 | MongoDB PHP Driver 1.21.5/2.1.8 recursion
A vulnerability categorized as problematic has been discovered in MongoDB PHP Driver 1.21.5/2.1.8. The impacted element is an unknown function. The manipulation results in uncontrolled recursion. This vulnerability was named CVE-2026-6811.
CVE-2026-24181 | NVIDIA DALI array index
A vulnerability identified as critical has been detected in NVIDIA DALI. This vulnerability affects unknown code. The manipulation leads to improper validation of array index. This vulnerability is documented as CVE-2026-24181. The attack n
CVE-2026-24180 | NVIDIA DALI heap-based overflow
A vulnerability categorized as critical has been discovered in NVIDIA DALI. This affects an unknown part. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is registered as CVE-2026-24180. The attack needs
CVE-2026-97152 | Nanomsg up to 1.2.2 WebSocket Transport snprintf buffer overflow (Nessus ID 349708)
A vulnerability described as critical has been identified in Nanomsg up to 1.2.2. This affects the function snprintf of the component WebSocket Transport. Such manipulation leads to buffer overflow. This vulnerability is traded as CVE-2026-
CVE-2026-67218 | RabbitMQ up to 4.0.21/4.1.10/4.2.5 HTTP API rabbit_stream_reader.erl accept_content privileges management (Nessus ID 349709)
A vulnerability, which was classified as problematic, has been found in RabbitMQ up to 4.0.21/4.1.10/4.2.5. This affects the function accept_content of the file rabbit_stream_reader.erl of the component HTTP API. The manipulation leads to i
CVE-2026-66072 | RabbitMQ up to 4.3.0 Stream Plugin get_chunk_selector/1 input validation (Nessus ID 349710)
A vulnerability, which was classified as problematic, has been found in RabbitMQ up to 3.13.14/4.0.19/4.1.10/4.2.5/4.3.0. Affected is the function get_chunk_selector/1 of the component Stream Plugin. Performing a manipulation results in imp
CVE-2026-67231 | RabbitMQ up to 3.13.14/4.0.19/4.1.10/4.2.5 trust-store plugin extract_issuer_id certificate validation (Nessus ID 349713)
A vulnerability was found in RabbitMQ up to 3.13.14/4.0.19/4.1.10/4.2.5. It has been classified as problematic. The affected element is the function extract_issuer_id of the component trust-store plugin. Performing a manipulation results in
CVE-2026-66080 | RabbitMQ up to 4.1.10/4.2.5 Stream Management validate_partitions allocation of resources (Nessus ID 349714)
A vulnerability, which was classified as problematic, was found in RabbitMQ up to 4.1.10/4.2.5. Affected by this vulnerability is the function validate_partitions of the component Stream Management. Executing a manipulation can lead to allo
CVE-2026-67229 | RabbitMQ up to 3.13.14/4.0.19/4.1.10/4.2.5 Data Coercion rabbit_data_coercion:atomize_keys resource consumption (Nessus ID 349716)
A vulnerability was found in RabbitMQ up to 3.13.14/4.0.19/4.1.10/4.2.5. It has been declared as problematic. This issue affects the function rabbit_data_coercion:atomize_keys of the component Data Coercion. Such manipulation leads to resou
CVE-2026-83452 | Oracle Document Management and Collaboration up to 12.2.15 Internal Operations privileges management (Nessus ID 349717)
A vulnerability, which was classified as critical, has been found in Oracle Document Management and Collaboration up to 12.2.15. This affects an unknown part of the component Internal Operations. Performing a manipulation results in imprope
CVE-2026-83462 | Oracle Mobile Application Server up to 12.2.15 MWA Terminal Server privileges management (Nessus ID 349717)
A vulnerability was found in Oracle Mobile Application Server up to 12.2.15. It has been classified as critical. This issue affects some unknown processing of the component MWA Terminal Server. This manipulation causes improper privilege ma
CVE-2026-83327 | Oracle Applications Framework up to 12.2.15 Personalization privileges management (Nessus ID 349717)
A vulnerability has been found in Oracle Applications Framework up to 12.2.15 and classified as critical. Affected is an unknown function of the component Personalization. The manipulation leads to improper privilege management. This vulner
CVE-2026-19915 | HP Support Assistant up to 9.53.2.0 access control (Nessus ID 349720)
A vulnerability was found in HP Support Assistant 8.1.52.1/8.7.50.3/9.44.18.0/9.47.41.0/9.53.2.0. It has been declared as problematic. The impacted element is an unknown function. Such manipulation leads to improper access controls. This vu
USN-8820-1: curl vulnerabilities
Eunsoo Kim discovered that curl incorrectly handled SASL negotiation for LDAP authentication in certain circumstances. A machine-in-the-middle attacker could possibly use this issue to bypass peer validation. This issue only affected Ubuntu
CVE-2023-2426 | vim up to 9.0.1498 out-of-range pointer offset (EUVD-2023-33915)
A vulnerability identified as problematic has been detected in vim up to 9.0.1498. The affected element is an unknown function. This manipulation causes use of out-of-range pointer offset. This vulnerability is handled as CVE-2023-2426. It
CVE-2023-0433 | Apple macOS up to 13.2.1 Vim heap-based overflow (HT213670 / EUVD-2023-12490)
A vulnerability labeled as problematic has been found in Apple macOS up to 13.2.1. Affected by this vulnerability is an unknown functionality of the component Vim. Such manipulation leads to heap-based buffer overflow. This vulnerability is
CVE-2023-0288 | Apple macOS up to 13.2.1 Vim heap-based overflow (HT213670 / EUVD-2023-12366)
A vulnerability identified as problematic has been detected in Apple macOS up to 13.2.1. Affected is an unknown function of the component Vim. This manipulation causes heap-based buffer overflow. This vulnerability appears as CVE-2023-0288.
CVE-2023-0433 | vim up to 9.0.1189 heap-based overflow (EUVD-2023-12490)
A vulnerability was found in vim. It has been rated as critical. This issue affects some unknown processing. Performing a manipulation results in heap-based buffer overflow. This vulnerability is known as CVE-2023-0433. Remote exploitation
CVE-2022-3296 | vim up to 9.0.0552 stack-based overflow (EUVD-2022-42688 / Nessus ID 211239)
A vulnerability was found in vim and classified as critical. This vulnerability affects unknown code. Executing a manipulation can lead to stack-based buffer overflow. This vulnerability is tracked as CVE-2022-3296. The attack can be launch
CVE-2026-75743 | Adobe Experience Manager Forms JEE 6.5 cross-site request forgery (EUVD-2026-84793)
A vulnerability was found in Adobe Experience Manager Forms JEE 6.5. It has been classified as problematic. Affected by this issue is some unknown functionality. Performing a manipulation results in cross-site request forgery. This vulnerab
CVE-2022-44731 | Siemens SIMATIC WinCC OA up to 3.14/3.15/3.16/3.17 Web Interface argument injection (ssa-547714 / EUVD-2022-47663)
A vulnerability was found in Siemens SIMATIC WinCC OA up to 3.14/3.15/3.16/3.17. It has been rated as critical. Affected is an unknown function of the component Web Interface Handler. This manipulation causes argument injection. This vulner
CVE-2022-44726 | TouchDown Timesheet Tracking Component 4.1.4 on Jira Calendar View cross site scripting (SYSS-2022-050 / EUVD-2022-47660)
A vulnerability was found in TouchDown Timesheet Tracking Component 4.1.4 on Jira. It has been rated as problematic. This impacts an unknown function of the component Calendar View. Performing a manipulation results in cross site scripting.
CVE-2022-44725 | OPC Foundation Local Discovery Server up to 1.04.403.478 Configuration File race condition (EUVD-2022-47659)
A vulnerability was found in OPC Foundation Local Discovery Server up to 1.04.403.478. It has been rated as critical. Affected by this issue is some unknown functionality of the component Configuration File Handler. Performing a manipulatio
CVE-2022-44724 | Stiltsoft Handy Macros for Confluence Server and Data Center Handy Tip Macro cross site scripting (EUVD-2022-47658)
A vulnerability marked as problematic has been reported in Stiltsoft Handy Macros for Confluence Server and Data Center up to 3.5.4. This affects an unknown part of the component Handy Tip Macro. The manipulation leads to cross site scripti
CVE-2026-97368 | A weakness has been identified in chillzhuang SpringBlade up to 5.0.2. This affects the function UserServiceImpl.userInfo of the file blade-service/blade-system/src/main/java/org/springblade/system/service/impl/UserServiceImpl.java of the component user-auth-info Endpoint. This manipulation of the argument userId causes authorization bypass. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
A weakness has been identified in chillzhuang SpringBlade up to 5.0.2. This affects the function UserServiceImpl.userInfo of the file blade-service/blade-system/src/main/java/org/springblade/system/service/impl/UserServiceImpl.java of the c
CVE-2026-93353 | copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitrary paths outside permitted volume boundaries by exploiting three handlers that bypass the xvol volflag enforcement. The _mkdir, _rmdir, and _chattr handlers construct destination paths using vfs.get(), vn.canonical(), and os.path.join() without invoking the chk_ap access check, enabling attackers to tra
copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitrary paths outside permitted volume boundaries by exploiting three handlers that by
CVE-2026-82585 | The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacker capable of intercepting communications on the device's WiFi network could obtain stored recordings, live video, location information, images, diagnostic logs, or other sensitive information exchanged between the device and its mobile application.
The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacker capable of intercepting communications on the device's WiFi network could obtain stored recordings, live video, l
CVE-2026-79959 | The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface.
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obta
CVE-2026-82708 | The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the web server. Exposed files could include recordings, images, diagnostic logs, or firmware files.
The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage tha
CVE-2026-87118 | The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the affected process to terminate and the device to restart, resulting in a temporary denial of service.
The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, pot
CVE-2026-97366 | A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument host results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not re
A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument h
CVE-2026-81630 | The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cryptographic signature. A suitably positioned attacker who intercepts a firmware download, or an authenticated attacker who submits a crafted update, could install modified firmware and execute unauthorize
The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware inst
CVE-2026-75558 | The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic material from the firmware could recover the WiFi password and gain unauthorized access to the device network.
The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic mat
CVE-2026-84403 | The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications and GATT characteristics. An unauthenticated attacker within Bluetooth range could intercept or directly retrieve sensitive device information, including device identifiers, firmware information, and protected WiFi credentials.
The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications and GATT characteristics. An unauthenticated attacker within Bluetooth range cou
CVE-2026-14443 | Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential compromise of encrypted network tunnels.
Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archive
CVE-2026-82716 | The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with physical access to the storage media could retrieve the logs and obtain sensitive device information.
The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support op
CVE-2026-97365 | A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandbox::mount of the file crates/littrs/src/lib.rs. Executing a manipulation of the argument relative can lead to path traversal. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandbox::mount of the file crates/littrs/src/lib.rs. Executing a manipulation of the argument relative can lead to path traversal. The attack may be
CVE-2026-88956 | The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The affected account does not require a password before granting access to a privileged system interface, and the interface also displays the device's WiFi password during startup. An unauthenticated attacker with physical access to the device could connect to the UART interface, obtain root privileges, and recover t
The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The affected account does not require a password before granting access to a privileged system
CVE-2026-93354 | Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration endpoint, which is enabled by default and requires no authentication. Attackers can send a POST request to the registration endpoint to obtain a client_id and client_secret, then craft a malicious authorization link pointing
Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration e
CVE-2026-88761 | The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the product. An unauthenticated attacker within WiFi range could potentially determine the remaining password characters through limited guessing and gain unauthorized access to the device network.
The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the product. An unauthenticated attacker within WiFi range could potentially determine the
CVE-2026-77967 | The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting client. An unauthenticated attacker with adjacent network access who captures a valid authentication value could replay it from another client to establish an authenticated session and access privileged device functionality.
The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting client. An unauthenticated attacker with adjacent network access who captures a val
CVE-2026-85496 | The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session identifier and use it to bypass intended authorization controls.
The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active ses
CVE-2026-97326 | A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d. Affected by this issue is some unknown functionality of the file chat-server/src/main/java/cn/sinjinsong/chat/server/ChatServer.java of the component chat-server. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. This product uses a rolli
A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d. Affected by this issue is some unknown functionality of the file chat-server/src/main/java/cn/sinjinsong/chat/server/ChatServer.java of th
CVE-2026-48543 | Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the web form description field. Attackers can craft a web form description containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execu
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the web form
CVE-2026-82566 | The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing client while previously established session state remains active until a separate expiration mechanism invalidates it. An unauthenticated attacker with adjacent network
The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a
CVE-2026-48542 | Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product name field. Attackers can craft a product name containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supp
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product n
CVE-2026-48541 | Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person name field. Attackers can craft a person name containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-suppli
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person na
CVE-2026-97325 | A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected by this vulnerability is the function validOAuthClientFromCache of the file yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/service/oauth2/OAuth2ClientServiceImpl.java of the component OAuth2 Client. The manipulation of the argument redirect_uri results in open redirect. The attack can be launched remotely. The exploit has been released to the pu
A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected by this vulnerability is the function validOAuthClientFromCache of the file yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/s
CVE-2026-48540 | Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the lead title field. Attackers can craft a lead title containing double-brace template syntax that reaches the Vue template compiler, enabling prototype chain traversal to retrieve the Function constructor and execute attacker-supplied
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the lead titl
CVE-2026-93291 | Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.
Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.
CVE-2026-84399 | The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privileged operations rely on possession of a valid session identifier without adequately validating the requesting client's authenticated context. An unauthenticated attacker with adjacent network access cou
The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it,
CVE-2026-93290 | Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data.
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data.
CVE-2026-93289 | The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.
CVE-2026-97324 | A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function updateDemoOrderPaid of the file yudao-module-pay/src/main/java/cn/iocoder/yudao/module/pay/controller/admin/demo/PayDemoOrderController.java of the component Demo-order Payment Callback Handler. The manipulation of the argument ID leads to improper authorization. The attack can be initiated remotely. The exploit is publicly available and might be used.
A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function updateDemoOrderPaid of the file yudao-module-pay/src/main/java/cn/iocoder/yudao/module/pay/controller/admin/demo/PayDemoOrderContro
CVE-2026-82372 | Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the potential exposure of keys used to secure network tunnels.
Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or su
CVE-2026-82164 | Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to In
CVE-2026-96883 | pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user to execute arbitrary code as the postgres operating system user via crafted SQL statements that rely on mismatched type metadata in collection value retrieval and array conversion functions. To remediate this issue, users should upgrade to version 2.1.2 or later.
pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user to execute arbitrary code as the postgres operating system user via crafted SQL