2026

Azure Function Information Disclosure Vulnerability

User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attac

Webpack is a module bundler. From version 5.49.0 to before 5.104.1, when experiments.buildHttp is enabled, webpack’s HTT

Webpack is a module bundler. From version 5.49.0 to before 5.104.0, when experiments.buildHttp is enabled, webpack’s HTT

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut

Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exp

A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform

A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the

A vulnerability was found in WeKan up to 8.20. This affects an unknown function of the file models/attachments.js of the

A vulnerability has been found in WeKan up to 8.20. The impacted element is an unknown function of the file server/attac

In vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to l

A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.

In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated ar

Tanium addressed an incorrect default permissions vulnerability in Enforce.

Tanium addressed an improper access controls vulnerability in Reputation.

Tanium addressed an incorrect default permissions vulnerability in Benchmark.

Tanium addressed an incorrect default permissions vulnerability in Comply.

Tanium addressed an incorrect default permissions vulnerability in Discover.

Tanium addressed an incorrect default permissions vulnerability in Partner Integration.

Tanium addressed an incorrect default permissions vulnerability in Patch.

Tanium addressed an incorrect default permissions vulnerability in Performance.

Tanium addressed an information disclosure vulnerability in Threat Response.

Tanium addressed an information disclosure vulnerability in Threat Response.

Tanium addressed an information disclosure vulnerability in Threat Response.

Tanium addressed an information disclosure vulnerability in Threat Response.

Tanium addressed an uncontrolled resource consumption vulnerability in Connect.

Tanium addressed an improper input validation vulnerability in Deploy.

Tanium addressed an information disclosure vulnerability in Threat Response.

Tanium addressed an improper link resolution before file access vulnerability in Enforce.

Tanium addressed an improper access controls vulnerability in Deploy.

Tanium addressed an improper access controls vulnerability in Patch.

Tanium addressed an improper input validation vulnerability in Discover.

Tanium addressed a documentation issue in Engage.

Tanium addressed an improper certificate validation vulnerability in Tanium Appliance.

Tanium addressed an improper input validation vulnerability in Tanium Appliance.

Tanium addressed an improper output sanitization vulnerability in Tanium Appliance.

Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.

Tanium addressed an improper access controls vulnerability in Interact.

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when run

An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between th

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which

An Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on

The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is get

Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provide

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption o

Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19. An attacker can manipu

Cross Site Scripting vulnerability in the "/admin/order/abandoned" endpoint of Microweber 2.0.19. An attacker can manipu

Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies o