CVE ID :CVE-2026-54583 Published : Sept. 17, 2026, 5:16 p.m. | 1 hour, 3 minutes ago Description :mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport did not consistently reject empty, dot, dot-dot, or slash-containing bundle filenames before composing package download…
CVE ID :CVE-2026-89084 Published : Sept. 16, 2026, 7:54 p.m. | 20 minutes ago Description :HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain…
CVE ID :CVE-2026-89083 Published : Sept. 16, 2026, 7:53 p.m. | 21 minutes ago Description :HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain…
CVE ID :CVE-2026-89082 Published : Sept. 16, 2026, 7:50 p.m. | 24 minutes ago Description :HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain…
CVE ID :CVE-2026-86831 Published : Sept. 16, 2026, 7:49 p.m. | 25 minutes ago Description :Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement…
CVE ID :CVE-2026-92729 Published : Sept. 16, 2026, 7:18 p.m. | 56 minutes ago Description :SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit arbitrary funnel definitions to…
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a…
CVE ID :CVE-2026-47094 Published : Sept. 16, 2026, 5:39 p.m. | 35 minutes ago Description :SIMAC MyPHR 1.1 contains an insecure direct object reference (IDOR) vulnerability that allows authenticated attackers to access and modify arbitrary employee records due to missing server-side…
CVE ID :CVE-2026-92720 Published : Sept. 16, 2026, 5:31 p.m. | 43 minutes ago Description :Kubero through 3.1.1 fails to apply authentication guards to the notifications API endpoints, allowing unauthenticated attackers to read webhook secrets and service URLs. Attackers can retrieve…
CVE ID :CVE-2026-92719 Published : Sept. 16, 2026, 5:31 p.m. | 43 minutes ago Description :Quickwit through 0.9.0 fails to validate the host and scheme of the queue_url parameter in SQS file sources, allowing attackers to make the node issue requests…