Sat, Sep 19 · 12:16 PM CDTCVE-2026-93985
9.9/10 · Must read/watchNVDvuln
Summary
OpenPanel js-runtime through 2.3.0 contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed member access to constructor chains. Attackers with project write access can create webhook templates using computed property notation to access Function constructor and e
CVECVE-2026-93985
SeverityCRITICAL
TypeUPDATED
PublishedSat, Sep 19 · 12:16 PM CDT
ModifiedFri, Oct 02 · 03:17 PM CDT
CVE-2010-2861
9.8/10 · Must read/watchNVDvuln
Summary
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm
CVECVE-2010-2861
SeverityCRITICAL
TypeUPDATED
PublishedWed, Aug 11 · 06:47 PM CDT
ModifiedFri, Oct 02 · 02:55 PM CDT
CVE-2018-7602
9.8/10 · Must read/watchNVDvuln
Summary
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution -
CVECVE-2018-7602
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jul 19 · 05:29 PM CDT
ModifiedFri, Oct 02 · 02:54 PM CDT
CVE-2020-12812
9.8/10 · Must read/watchNVDvuln
Summary
An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.
CVECVE-2020-12812
SeverityCRITICAL
TypeUPDATED
PublishedFri, Jul 24 · 11:15 PM CDT
ModifiedFri, Oct 02 · 02:54 PM CDT
CVE-2026-100075
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters When srpt_alloc_rw_ctxs() fails partway through a multi-buffer indirect descriptor, the unwind path destroys RDMA contexts but leaves stale n_rw_ctx and n_rdma values (and a dangling rw_ctxs pointer).
CVECVE-2026-100075
SeverityCRITICAL
TypeUPDATED
PublishedFri, Sep 25 · 02:17 PM CDT
ModifiedFri, Oct 02 · 03:06 PM CDT
CVE-2026-20272
9.8/10 · Must read/watchNVDvuln
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked
CVECVE-2026-20272
SeverityCRITICAL
TypeUPDATED
PublishedWed, Aug 05 · 05:16 PM CDT
ModifiedSat, Oct 03 · 12:16 AM CDT
CVE-2026-63993
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() skb_tunnel_check_pmtu() can change skb->head. Reusing old_iph afer skb_tunnel_check_pmtu() can cause an UAF. Use instead ip_hdr(skb) as done in drivers/net/bareudp.c and drivers/ne
CVECVE-2026-63993
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 04:17 PM CDT
ModifiedFri, Oct 02 · 07:57 PM CDT
CVE-2026-66402
9.8/10 · Must read/watchNVDvuln
Summary
FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in tls_verify_certificate(), tls_match_hostname(), and x509_utils_get_dns_names(). Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware identity
CVECVE-2026-66402
SeverityCRITICAL
TypeUPDATED
PublishedSat, Aug 01 · 01:16 PM CDT
ModifiedFri, Oct 02 · 07:08 PM CDT
CVE-2026-67289
9.8/10 · Must read/watchNVDvuln
Summary
FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's ServerHostname and, when the client connects through an HTTP proxy, is written directly into the proxy CONNECT request
CVECVE-2026-67289
SeverityCRITICAL
TypeUPDATED
PublishedSat, Aug 01 · 01:16 PM CDT
ModifiedFri, Oct 02 · 07:12 PM CDT
CVE-2026-77987
9.8/10 · Must read/watchNVDvuln
Summary
A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated the scheme and host of a user-supplied URL but did not validate the port, allowing requests to be directed to internal services listening on other ports of the same applian
CVECVE-2026-77987
SeverityCRITICAL
TypeUPDATED
PublishedTue, Sep 22 · 09:17 PM CDT
ModifiedFri, Oct 02 · 06:37 PM CDT
CVE-2026-64849
9.3/10 · Must read/watchNVDvuln
Summary
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/
CVECVE-2026-64849
SeverityCRITICAL
TypeUPDATED
PublishedMon, Aug 17 · 10:17 PM CDT
ModifiedFri, Oct 02 · 07:16 PM CDT
CVE-2026-20267
9.0/10 · Must read/watchNVDvuln
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked
CVECVE-2026-20267
SeverityCRITICAL
TypeUPDATED
PublishedWed, Aug 05 · 05:16 PM CDT
ModifiedSat, Oct 03 · 12:16 AM CDT
CVE-2026-79687
9.0/10 · Must read/watchNVDvuln
Summary
Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access.
CVECVE-2026-79687
SeverityCRITICAL
TypeUPDATED
PublishedTue, Sep 01 · 04:17 PM CDT
ModifiedFri, Oct 02 · 05:29 PM CDT
CVE-2026-55676
8.8/10 · Worth your timeNVDvuln
Summary
Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at `POST /server/php/submit.php` and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array by default (`file-up
CVECVE-2026-55676
SeverityHIGH
TypeUPDATED
PublishedTue, Aug 11 · 09:17 PM CDT
ModifiedFri, Oct 02 · 09:16 PM CDT
CVE-2026-58567
8.8/10 · Worth your timeNVDvuln
Summary
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
CVECVE-2026-58567
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 01 · 04:17 PM CDT
ModifiedFri, Oct 02 · 05:29 PM CDT
CVE-2026-58569
8.8/10 · Worth your timeNVDvuln
Summary
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges..
CVECVE-2026-58569
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 01 · 03:17 PM CDT
ModifiedFri, Oct 02 · 05:29 PM CDT
CVE-2026-58571
8.8/10 · Worth your timeNVDvuln
Summary
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
CVECVE-2026-58571
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 01 · 02:17 PM CDT
ModifiedFri, Oct 02 · 05:29 PM CDT
CVE-2026-58572
8.8/10 · Worth your timeNVDvuln
Summary
Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.
CVECVE-2026-58572
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 01 · 02:17 PM CDT
ModifiedFri, Oct 02 · 05:29 PM CDT
CVE-2026-63975
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp If dcid is received for an already-assigned destination CID the spec requires that both channels to be discarded, but calling l2cap_chan_del may invalidate the tmp cursor created by list_for_
CVECVE-2026-63975
SeverityHIGH
TypeUPDATED
PublishedSun, Jul 19 · 04:17 PM CDT
ModifiedFri, Oct 02 · 07:47 PM CDT
CVE-2026-79682
8.8/10 · Worth your timeNVDvuln
Summary
Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
CVECVE-2026-79682
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 01 · 04:17 PM CDT
ModifiedFri, Oct 02 · 05:29 PM CDT
CVE-2026-79684
8.8/10 · Worth your timeNVDvuln
Summary
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.
CVECVE-2026-79684
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 01 · 02:17 PM CDT
ModifiedFri, Oct 02 · 05:26 PM CDT
CVE-2026-79686
8.8/10 · Worth your timeNVDvuln
Summary
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.
CVECVE-2026-79686
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 01 · 03:17 PM CDT
ModifiedFri, Oct 02 · 05:26 PM CDT
CVE-2026-90444
8.8/10 · Worth your timeNVDvuln
Summary
A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process later constructs and runs a system command using the uploaded file's name, allowing an authenticated attacker to embed and execute arbitrary operating system com
CVECVE-2026-90444
SeverityHIGH
TypeUPDATED
PublishedFri, Sep 11 · 10:16 PM CDT
ModifiedFri, Oct 02 · 10:16 PM CDT
CVE-2026-98115
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multiple connections. Wait for all channels bound to a session before freeing shared session objects. A deferred byte-range lock remains counted as a
CVECVE-2026-98115
SeverityHIGH
TypeUPDATED
PublishedFri, Sep 25 · 11:17 AM CDT
ModifiedFri, Oct 02 · 03:10 PM CDT
CVE-2026-20268
8.6/10 · Worth your timeNVDvuln
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked
CVECVE-2026-20268
SeverityHIGH
TypeUPDATED
PublishedWed, Aug 05 · 05:16 PM CDT
ModifiedSat, Oct 03 · 12:16 AM CDT
