2026

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite a

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. Thi

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3,

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service loc

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a net

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a networ

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS

BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-auth

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiC

Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnaly

Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a secu

SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password res

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Manag

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (compo

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to d

Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sh