A critical vulnerability affecting Remote Support (RS) is remotely exploitable without authentication or user interaction.
The targeted management interfaces seem to have been exposed to the public Internet, which is contrary to security best practices. All organisations using the affected refrigeration equipments should ...
Affected software: Multiple Microsoft products. Type: Several types, ranging from Information Disclosure to Remote Code Execution and Privilege Escalation. CVE/CVSS: Microsoft patched 1407 ...
Buffer Overflows, Authentication bypass, Remote Code Execution. Juniper Networks has disclosed multiple critical vulnerabilities affecting Junos OS and Junos OS Evolved. These critical vulnerabilities ...
The vulnerability is exploited in the wild, according to Ivanti and CISA. Given the possibility of exploitation without ...
Fortinet FortiSIEM Fortinet FortiAnalyzer 7.6.0 through 7.6.4, 7.4.0 through 7.4.7, 7.2 all versions Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, 7.4.1 through 7 ...
This vulnerability allows unauthenticated remote attackers to remotely execute arbitrary code on the device running Secure Email Gateway. This gives an attacker full control over the device, having a ...
Successful exploitation could lead to Remote Code Execution (RCE) or Denial of Service (DoS), affecting the integrity and availability of the appliance. A memory overflow vulnerability exists in ...
Palo Alto PAN-OS (< 12.2.4, < 12.1.4-h12 < 12.1.7-h8 < 12.1.10-h2, < 11.2.4-h22 < 11.2.7-h21 < 11.2.10-h15 < 11.2.13-h3 < 11.2.16, < 11.1.4-h37 < 11.1.6-h39 < 11.1.7 ...
A critical pre-authentication vulnerability has been identified in AnyDesk for Linux (<8.0.3). Successful exploitation enables an unauthenticated remote attacker to achieve arbitrary code execution ...
GitLab Community Edition (CE) and Enterprise Edition (EE) versions 19.1 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2 A critical severity vulnerability affects GitLab CE/EE. An ...
CVE-2026-102255: CWE-918: Server-Side Request Forgery (SSRF); CWE-441: Unintended Proxy or Intermediary ('Confused Deputy') CVE-2026-102256: CWE-78: Improper Neutralization of Special Elements used in ...