CVE tracker
406 subscribers
5.99K links
News monitoring: @irnewsagency

Main channel: @orgsecuritygate

Site: SecurityGate.org
Download Telegram
CVE-2026-47486 - NVIDIA PhysX for all platforms contains a vulnerab

CVE ID :CVE-2026-47486
Published : Oct. 27, 2026, 1:16 p.m. | 49 minutes ago
Description :NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-65119 - NVIDIA TensorRT-LLM for any platform contains a vu

CVE ID :CVE-2026-65119
Published : Oct. 27, 2026, 1:16 p.m. | 49 minutes ago
Description :NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, information disclosure, data tampering, and denial of service.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-65120 - NVIDIA TensorRT-LLM contains a vulnerability where

CVE ID :CVE-2026-65120
Published : Oct. 27, 2026, 1:16 p.m. | 49 minutes ago
Description :NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-65145 - NVIDIA NeMo Agent Toolkit contains a vulnerability

CVE ID :CVE-2026-65145
Published : Oct. 27, 2026, 1:16 p.m. | 49 minutes ago
Description :NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-65151 - NVIDIA NeMo Agent Toolkit contains vulnerability w

CVE ID :CVE-2026-65151
Published : Oct. 27, 2026, 1:16 p.m. | 49 minutes ago
Description :NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-92546 - Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally

CVE ID :CVE-2026-92546
Published : Oct. 27, 2026, 1:17 p.m. | 49 minutes ago
Description :Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass. This issue affects Agentic AI / Agentic Ally: before 0ef61f2e.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-16307 - IDOR in Netiket Information Technologies' EdoWEB

CVE ID :CVE-2026-16307
Published : Oct. 27, 2026, 1:23 p.m. | 43 minutes ago
Description :Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-94346 - PowerProtect Data Domain Virtual Edition, Feature

CVE ID :CVE-2026-94346
Published : Oct. 27, 2026, 1:23 p.m. | 42 minutes ago
Description :PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Severity: 7.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10537 - Remote unauthenticated information disclosure and denial of service due to unauthenticated service access

CVE ID :CVE-2026-10537
Published : Oct. 27, 2026, 1:26 p.m. | 40 minutes ago
Description :A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability. This vulnerability affects : * Control-M/Enterprise Manager versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions. * Control-M/Server versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-94347 - PowerProtect Data Domain Virtual Edition, Feature

CVE ID :CVE-2026-94347
Published : Oct. 27, 2026, 1:28 p.m. | 38 minutes ago
Description :PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Severity: 7.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-90727 - Dell PowerProtect Data Domain, Feature Release ver

CVE ID :CVE-2026-90727
Published : Oct. 27, 2026, 1:33 p.m. | 33 minutes ago
Description :Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
Severity: 3.8 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-90726 - Dell PowerProtect Data Domain, Feature Release ver

CVE ID :CVE-2026-90726
Published : Oct. 27, 2026, 1:37 p.m. | 29 minutes ago
Description :Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
Severity: 6.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-68866 - PowerProtect Data Domain, Feature Release versions

CVE ID :CVE-2026-68866
Published : Oct. 27, 2026, 1:43 p.m. | 23 minutes ago
Description :PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Relative Path Traversal vulnerability in the certificate. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-117503 - a2aproject a2a-go REST SSE handler rest.go resource consumption

CVE ID :CVE-2026-117503
Published : Oct. 27, 2026, 1:45 p.m. | 21 minutes ago
Description :A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest.go of the component REST SSE handler. This manipulation causes resource consumption. It is possible to initiate the attack remotely. Upgrading to version 2.5.0 is recommended to address this issue. Patch name: ff6035bd21e44bb3ee1bfa547885b8c08327fa01. It is recommended to upgrade the affected component.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-90725 - Dell PowerProtect Data Domain, Feature Release ver

CVE ID :CVE-2026-90725
Published : Oct. 27, 2026, 1:47 p.m. | 19 minutes ago
Description :Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Severity: 4.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-116658 - Tanium addressed a denial of service vulnerability in Enforce.

CVE ID :CVE-2026-116658
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed a denial of service vulnerability in Enforce.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108309 - Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

CVE ID :CVE-2026-108309
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87086 - Tanium addressed a denial of service vulnerability in Provision.

CVE ID :CVE-2026-87086
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed a denial of service vulnerability in Provision.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108304 - Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

CVE ID :CVE-2026-108304
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108301 - Tanium addressed an improper access controls vulnerability in Comply.

CVE ID :CVE-2026-108301
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed an improper access controls vulnerability in Comply.
Severity: 6.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108332 - Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

CVE ID :CVE-2026-108332
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...