Threat IntelOpenRemote Missing Authorization Flaw Disclosed
CVE-2026-114661 in OpenRemote (Missing Authorization) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.31.0 and later.
Topic
466 articles
Threat IntelCVE-2026-114661 in OpenRemote (Missing Authorization) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.31.0 and later.
Threat IntelCVE-2026-114575 in TOTOLINK Flaw has been found in TOTOLINK A950RG (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Pa
Threat IntelCVE-2026-114383 in TOTOLINK Weakness has been identified in TOTOLINK EX200 (Memory Corruption) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-91403 in Vulnerability in the Oracle Java SE, Oracle GraalV (Missing Authentication) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-111811 in Apache Traffic Server's experimental tsmemcache pl (Missing Authentication) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-111816 in Apache Traffic Server forwarded a malformed 302 re (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-114125 in Storybook (Code Injection) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch release.
Threat IntelCVE-2026-111834 in Kitae Unrestricted Upload of File with Dangerous Type vu (Unrestricted File Upload) allows remote attackers to trigger arbitrary code ex
Threat IntelCVE-2026-87095 in Sensitive information disclosure and manipulation (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Pat
Threat IntelCVE-2026-114108 in HKUDS Vibe-Trading from (Missing Authentication) allows remote attackers to trigger arbitrary code execution. Patch: Version 0.1.7.
Threat IntelCVE-2026-71195 in In OpenStack Manila (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 23.0.1 and later.
Threat IntelCVE-2026-114119 in Best Practice Software Bp Premier (Hard-Coded Credentials) allows remote attackers to trigger arbitrary code execution. Patch: Version 1
OT / SCADACVE-2026-110936 in Siemens Software Center (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security p
Threat IntelCVE-2026-113744 in Tenda Security vulnerability has been detected in Tenda (Memory Corruption) allows remote attackers to trigger arbitrary code execution.
Active ExploitCVE-2026-96655 in Plex Media Server (Server-Side Request Forgery) allows remote attackers to trigger active system exploitation. Patch: Version 1.43.3.1086
Active ExploitCVE-2026-96654 in Plex Media Server (Input Validation) allows remote attackers to trigger active system exploitation. Patch: Vendor security patch release.
Active ExploitCVE-2026-106931 in EG Secure Solutions SiteGuard Server Edition (OS Command Injection) allows remote attackers to trigger active system exploitation. Patch
Active ExploitCVE-2026-96656 in Plex Media Server (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Version 1.43.3.10861 and
Threat IntelCVE-2026-113620 in In Eclipse ioFog Controller versions (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Versio
Threat IntelCVE-2026-43838 in A Stack-based buffer overflow vulnerability in the l (Stack Buffer Overflow) allows remote attackers to trigger arbitrary code execution.
KubernetesCVE-2026-105312 in A Kubernetes tenant with create permission on Consol (Privilege Escalation) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-9589 in Missing authorization in the configuration cascade (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-43845 in A Vulnerability in the password reset mechanism coul (Input Validation) allows remote attackers to trigger arbitrary code execution. Patc
Threat IntelCVE-2026-43844 in A Vulnerability in the proprietary protocol could al (Input Validation) allows remote attackers to trigger arbitrary code execution. Patc