rapid7

CVE-2026-28327: Uncontrolled Search Path Element

SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine ...
rapid7

CVE-2026-95752: Hewlett Packard Enterprise (HPE) Fabric Composer: A local privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer

A local privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged local attacker to elevate their privileges on the ...
rapid7

CVE-2026-76955: Zyxel NWA110AX firmware: A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could…

CVE-2026-76955: Zyxel NWA110AX firmware: A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12 (ABTG.0)C0 could…. View severity, references, and ...
rapid7

CVE-2026-91911: Improper Limitation of a Pathname to a Restricted Directory

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with adjacent ...
rapid7

CVE-2026-58977: Improper Restriction of Operations within the Bounds of a Memory Buffer

In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges ...
rapid7

CVE-2026-58937: Undefined Security Weakness

In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed.
rapid7

CVE-2026-116606: Authentication Bypass Using an Alternate Path or Channel

An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, ...
rapid7

CVE-2026-59044: Use After Free

In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional ...
rapid7

CVE-2026-113511: Apache Software Foundation Apache Syncope: Authorization bypass through User-Controlled key vulnerability in Apache Syncope

Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocate a Realm subtree across administrative realm boundaries without permission for ...
rapid7

CVE-2026-103419: joomshaper.com Helix Ultimate extension for Joomla: Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2 ...

CVE-2026-103419: joomshaper.com Helix Ultimate extension for Joomla: Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.. View severity, ...
rapid7

CVE-2026-105476: WebPros cPanel: Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned…

CVSS 3.1 Base Score: 8.8 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) With curated Threat Intelligence, you can see which vulnerabilities truly put ...
rapid7

CVE-2026-49903: Google Android: The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and…

The `ClusterRenderingService.dump ()` method, accessible to processes holding `android.permission.DUMP` and `android.permission.PACKAGE_USAGE_STATS`, acts as a confused deputy. It allows attackers to ...