CVE Notifier

CVE-2026-92860 CWE-20 9.1

rcourtman Pulse Quick Security Setup quick-setup fmt.Sprintf input validation

A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fmt.Sprintf of the file /api/security/quick-setup of the component Quick Security Setup Handler. The m…

cve.org rcourtman:Pulse 6 hari lalu

CVE-2026-90823 CWE-121 9.8

CVE-2026-90823

FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticated remote attacker with access to the af…

cve.org FatPipe · Networks:MPVPN · FatPipe 6 hari lalu

CVE-2026-90822 CWE-78 9.8

CVE-2026-90822

FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon. An unauthenticated remote attacker with access to the …

cve.org FatPipe · Networks:MPVPN · FatPipe 6 hari lalu

CVE-2026-81441 CWE-306 4.0

CVE-2026-81441

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulner…

cve.org Dell:OpenManage · Server · Administrator 6 hari lalu

CVE-2026-92925 CWE-125 7.1

Redis: redis: out-of-bounds read via crafted cluster bus packets

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows…

cve.org Red · Hat:Pen · Drive 6 hari lalu

CVE-2026-81440 CWE-798 7.3

CVE-2026-81440

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leadi…

cve.org Dell:OpenManage · Server · Administrator 6 hari lalu

CVE-2026-81479 CWE-187 5.8

CVE-2026-81479

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to D…

cve.org Dell:OpenManage · Server · Administrator 6 hari lalu

CVE-2026-81478 CWE-321 8.1

CVE-2026-81478

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,…

cve.org Dell:OpenManage · Server · Administrator 6 hari lalu

CVE-2026-92917 CWE-200 7.5

Grav 2.0.0-rc.1 through 2.0.21 Configuration Disclosure via print_r

Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and serialize filters (print_r, vardump, json_encode, yaml_encode, string): GravExtension::assertSandbox…

cve.org getgrav:grav 6 hari lalu

CVE-2026-92916 CWE-200 7.5

Grav through 2.0.21 Unauthenticated Information Disclosure via Clockwork

Grav is a flat-file CMS. In Grav 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21, when the debugger is enabled (system.debugger.enabled: true, which is not the default), the Clockwork profiler endpoint is exposed without…

cve.org getgrav:grav · getgrav:grav 6 hari lalu

CVE-2026-92915 CWE-770 7.3

WWBN AVideo userVerifyEmail.php Unauthenticated Access Control

WWBN AVideo through commit e01e41ecc (no patched version available) contains a broken access control flaw in objects/userVerifyEmail.php. The script disables the login requirement ($global['ignoreUserMustBeLoggedIn'] = 1…

cve.org WWBN:AVideo 6 hari lalu

CVE-2026-92914 CWE-287 8.1

AVideo LoginControl PGP Second Factor Authentication Bypass

AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares challenge responses using loose equality against an uninitialized session variable. Attackers with a…

cve.org WWBN:AVideo 6 hari lalu