Zohocorp Unauthenticated Remote Code Execution Vulnerability (CVE-2026-6516)
– Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API.
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability (CVE-2026-50325)
– This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows.
Read More
ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability (CVE-2026-8921)
– This vulnerability allows local attackers to escalate privileges on affected installations of ASUS Business Manager.
Read More
7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2026-14266)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip.
Read More
Cisco Identity Services Engine Path Traversal Vulnerability (CVE-2026-20146)
– A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system to either read or delete arbitrary files.
Read More
JuiceFS – Authentication Bypass via pprof and metrics Endpoints (CVE-2026-59092)
– JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics endpoints by exploiting improper handler registration on the shared http.DefaultServeMux.
Read More
Authorization Bypass Through User-Controlled Key in Prospero Flow CRM calendar event deletion (CVE-2026-59234)
– Authorization Bypass Through User-Controlled Key (CWE-639) in CalendarDeleteEventController (app/Http/Controllers/Calendar/CalendarDeleteEventController.php), exposed at GET /calendar/event/delete/{id}, in Prospero Flow CRM before 5.5.3.
Read MoreCisco Catalyst Center Arbitrary File Read Vulnerability (CVE-2026-20191)
– A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.
Read More
X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability (CVE-2026-50263)
– This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server.
Read MoreCisco Finesse Remote File Inclusion Vulnerability (CVE-2026-20175)
– A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks.
Read More