Browse CVEs

HIGH 7.8 CVE-2026-21765 HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptographic keys located on a Windows host mach… Bigfix Platform after 11.0.5 Fix from $1,9502026-04-02 HIGH 7.3 CVE-2026-22768 Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with loc… Appsync 4.6.1.0+ Fix from $1,9502026-04-01 CRITICAL 9.8 CVE-2026-34352 In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, b… Tigervnc 1.16.2+ Fix from $2,3002026-03-26 MEDIUM 5.5 CVE-2026-3113 Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to set permissions on downloaded bulk export which… Mattermost Server 10.11.12 / 11.2.4+ Fix from $1,6002026-03-26 HIGH 7.3 CVE-2026-33430 Briefcase is a tool for converting a Python project into a standalone native application. Starting in version 0.3.0 and prior to version 0.3.26, if a… Briefcase 0.3.26+ Fix from $1,9502026-03-26 HIGH 7.5 CVE-2026-4761 When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the p… Panorama Collaborative Operation \& Execution Mitigation only Fix from $1,9502026-03-25 MEDIUM 5.5 CVE-2026-28829 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A… macOS 14.8.5 / 15.7.5+ Fix from $1,6002026-03-25 CRITICAL 9.9 CVE-2026-32048 OpenClaw versions prior to 2026.3.1 fail to enforce sandbox inheritance during cross-agent sessions_spawn operations, allowing sandboxed sessions to … Openclaw 2026.3.1+ Fix from $2,3002026-03-21 MEDIUM 5.5 CVE-2026-32810 Halloy is an IRC application written in Rust. In versions on \*nix and macOS prior to commit f180e41061db393acf65bc99f5c5e7397586d9cb, halloy creates… Halloy after 2026.4 Fix from $1,6002026-03-20 HIGH 7.2 CVE-2026-25770 Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, … Wazuh 4.14.3+ Fix from $1,9502026-03-17 MEDIUM 6.5 CVE-2026-26929 Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made wi… Airflow 3.1.8+ Fix from $1,6002026-03-17 MEDIUM 6.5 CVE-2026-32704 SiYuan is a personal knowledge management system. Prior to 3.6.1, POST /api/template/renderSprig lacks model.CheckAdminRole, allowing any authenticat… Siyuan 3.6.1+ Fix from $1,6002026-03-16 MEDIUM 6.8 CVE-2025-15037 An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by … Mitigation only Fix from $1,6002026-03-12 HIGH 7.8 CVE-2026-3315 Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA… Visionline 1.34.0+ Fix from $1,9502026-03-10 HIGH 7.8 CVE-2026-24291 Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate… Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 MEDIUM 6.5 CVE-2025-41712 An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is… Mitigation only Fix from $1,6002026-03-10 MEDIUM 5.5 CVE-2026-28725 Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (… Cyber Protect 17.0.41186+ Fix from $1,6002026-03-06 HIGH 8.1 CVE-2026-29188 File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Pr… Filebrowser 2.61.1+ Fix from $1,9502026-03-05 HIGH 7.8 CVE-2026-29126 Incorrect permission assignment (world-writable file) in /etc/udhcpc/default.script in International Data Casting (IDC) SFX2100 Satellite Receiver al… Sfx2100 Firmware No fix yet Fix from $1,9502026-03-05 MEDIUM 6.5 CVE-2025-12801 A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privi… Openshift Container Platform Mitigation only Fix from $1,6002026-03-04 HIGH 7.8 CVE-2025-70341 Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files. App Auto Patch after 3.4.2 Fix from $1,9502026-03-04 MEDIUM 6.6 CVE-2025-70342 erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json. This allows an unauthentic… Erase Install 41.0+ Fix from $1,6002026-03-04 MEDIUM 6.6 CVE-2026-24732 Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpic… Mitigation only Fix from $1,6002026-03-04 HIGH 7.1 CVE-2026-2915 HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated… System Event Utility 3.2.16+ Fix from $1,9502026-03-03 HIGH 7.8 CVE-2025-14604 IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentiona… Storage Scale 5.2.3.6 / 6.0.0.2+ Fix from $1,9502026-03-03 HIGH 7.8 CVE-2026-2637 iBoysoft NTFS for Mac contains a local privilege escalation vulnerability in its privileged helper daemon ntfshelperd. The daemon exposes an NSConnec… Ntfs For Mac No fix yet Fix from $1,9502026-03-03 CRITICAL 9.8 CVE-2026-21902EPSS 18% An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved… Junos Os Evolved Mitigation only Fix from $2,3002026-02-25 HIGH 7.8 CVE-2026-26102 Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request. Opds Talon Mitigation only Fix from $1,9502026-02-20 MEDIUM 5.5 CVE-2026-26095 Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request. Opds Talon Mitigation only Fix from $1,6002026-02-20 MEDIUM 5.5 CVE-2026-26096 Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request. Opds Talon Mitigation only Fix from $1,6002026-02-20