CVE ID :CVE-2026-34499 Published : Oct. 7, 2026, 7:36 p.m. | 23 minutes ago Description :Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects ADVMS: before 3.10. Severity: 8.5 |…
CVE ID :CVE-2026-97714 Published : Oct. 7, 2026, 7:20 p.m. | 39 minutes ago Description :CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication…
Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6. Google’s own systems were not breached, but any domain ending in .gh (Ghana), .sl (Sierra Leone) or .as (American Samoa)…
CVE ID :CVE-2026-107211 Published : Oct. 7, 2026, 6:17 p.m. | 1 hour, 42 minutes ago Description :Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately parsed pivot-table field indices are used to…
CVE ID :CVE-2026-107213 Published : Oct. 7, 2026, 6:17 p.m. | 1 hour, 42 minutes ago Description :Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst but dereferences ws.Drawing without…
CVE ID :CVE-2026-101153 Published : Oct. 6, 2026, 7:38 p.m. | 15 minutes ago Description :On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to…
CVE ID :CVE-2026-101152 Published : Oct. 6, 2026, 7:37 p.m. | 15 minutes ago Description :Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes…
CVE ID :CVE-2026-101158 Published : Oct. 6, 2026, 7:36 p.m. | 16 minutes ago Description :A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation…
CVE ID :CVE-2026-102406 Published : Oct. 6, 2026, 7:31 p.m. | 21 minutes ago Description :Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, “tenant” refers to a user or team sharing the…
CVE ID :CVE-2026-96890 Published : Oct. 6, 2026, 7:18 p.m. | 34 minutes ago Description :A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled…