CVE-2026-14973 — Critical vulnerability brief
IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected…
Tag: Critical CVE
CVE-2026-14446 — Critical vulnerability brief
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console.
CVE-2026-14512 — Critical vulnerability brief
IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass…
CVE-2026-55971 — Critical vulnerability brief
Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to…
CVE-2026-48144 — Critical vulnerability brief
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are…
CVE-2026-58630 — Critical vulnerability brief
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-61174 — Critical vulnerability brief
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is…
CVE-2026-60296 — Critical vulnerability brief
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and…
CVE-2026-64620 — Critical vulnerability brief
FreeRDP before 3.28.0 (affected
CVE-2026-8297 — Critical vulnerability brief
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software…