CVE-2026-15435 — Critical vulnerability brief
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system.…
Tag: critical
CVE-2026-44101 — Critical vulnerability brief
Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead…
CVE-2026-48449 — Critical vulnerability brief
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of…
CVE-2026-14529 — Critical vulnerability brief
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side…
CVE-2026-41939 — Critical vulnerability brief
Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to…
CVE-2026-47876: VMware ESX VMXNET3 Out-of-Bounds Write VM Escape
A critical out-of-bounds write vulnerability in the VMXNET3 virtual network adapter of VMware ESX with a CVSS score of 9.3. An attacker…
CVE-2026-60113 — Critical vulnerability brief
AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension (SLE)…
CVE-2026-65887 — Critical vulnerability brief
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to reset any…
CVE-2026-65888 — Critical vulnerability brief
Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any…
CVE-2026-65890 — Critical vulnerability brief
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL…