CVE tracker
279 subscribers
3.61K links
News monitoring: @irnewsagency

Main channel: @orgsecuritygate

Site: SecurityGate.org
Download Telegram
CVE-2026-3606 - Ettercap etterfilter ef_output.c add_data_segment out-of-bounds

CVE ID : CVE-2026-3606
Published : March 5, 2026, 10:02 p.m. | 22 minutes ago
Description : A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function add_data_segment of the file src/ettercap/utils/etterfilter/ef_output.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-27770 - ePower epower.ie Insufficiently Protected Credentials

CVE ID : CVE-2026-27770
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-27778 - ePower epower.ie Improper Restriction of Excessive Authentication Attempts

CVE ID : CVE-2026-27778
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28709 - Acronis Cyber Protect Unauthenticated Remote Code Execution

CVE ID : CVE-2026-28709
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28710 - Acronis Cyber Protect Authentication Bypass

CVE ID : CVE-2026-28710
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28711 - Acronis Cyber Protect DLL Hijacking Vulnerability

CVE ID : CVE-2026-28711
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28712 - Acronis Cyber Protect DLL Hijacking Vulnerability

CVE ID : CVE-2026-28712
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28713 - Acronis VMware Privileged User Default Credentials Vulnerability

CVE ID : CVE-2026-28713
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28714 - Acronis Cyber Protect SSL/TLS Information Disclosure

CVE ID : CVE-2026-28714
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28715 - Acronis Cyber Protect Sensitive Information Disclosure Vulnerability

CVE ID : CVE-2026-28715
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28716 - Acronis Cyber Protect Unauthorized Access and Data Tampering

CVE ID : CVE-2026-28716
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 4.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28717 - Acronis Cyber Protect Local Privilege Escalation Vulnerability

CVE ID : CVE-2026-28717
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
Severity: 5.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28718 - Acronis Cyber Protect Authentication Logging DoS Vulnerability

CVE ID : CVE-2026-28718
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28719 - Acronis Cyber Protect Authentication Bypass

CVE ID : CVE-2026-28719
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28720 - Acronis Cyber Protect Unauthenticated Configuration Manipulation Vulnerability

CVE ID : CVE-2026-28720
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28721 - Acronis Cyber Protect Privilege Escalation Vulnerability

CVE ID : CVE-2026-28721
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28722 - Acronis Cyber Protect Local Privilege Escalation

CVE ID : CVE-2026-28722
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28723 - Acronis Cyber Protect Unauthorized Report Deletion Vulnerability

CVE ID : CVE-2026-28723
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28724 - Acronis Cyber Protect Unauthorized Data Access Vulnerability

CVE ID : CVE-2026-28724
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28725 - Acronis Cyber Protect Headless Browser Configuration Sensitive Information Disclosure

CVE ID : CVE-2026-28725
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-28726 - Acronis Cyber Protect Sensitive Information Disclosure Vulnerability

CVE ID : CVE-2026-28726
Published : March 6, 2026, 12:16 a.m. | 2 hours, 9 minutes ago
Description : Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...