CVE-2026-94346 - PowerProtect Data Domain Virtual Edition, Feature
CVE ID :CVE-2026-94346
Published : Oct. 27, 2026, 1:23 p.m. | 42 minutes ago
Description :PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Severity: 7.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-94346
Published : Oct. 27, 2026, 1:23 p.m. | 42 minutes ago
Description :PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Severity: 7.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-10537 - Remote unauthenticated information disclosure and denial of service due to unauthenticated service access
CVE ID :CVE-2026-10537
Published : Oct. 27, 2026, 1:26 p.m. | 40 minutes ago
Description :A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability. This vulnerability affects : * Control-M/Enterprise Manager versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions. * Control-M/Server versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-10537
Published : Oct. 27, 2026, 1:26 p.m. | 40 minutes ago
Description :A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability. This vulnerability affects : * Control-M/Enterprise Manager versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions. * Control-M/Server versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-94347 - PowerProtect Data Domain Virtual Edition, Feature
CVE ID :CVE-2026-94347
Published : Oct. 27, 2026, 1:28 p.m. | 38 minutes ago
Description :PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Severity: 7.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-94347
Published : Oct. 27, 2026, 1:28 p.m. | 38 minutes ago
Description :PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Severity: 7.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-90727 - Dell PowerProtect Data Domain, Feature Release ver
CVE ID :CVE-2026-90727
Published : Oct. 27, 2026, 1:33 p.m. | 33 minutes ago
Description :Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
Severity: 3.8 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-90727
Published : Oct. 27, 2026, 1:33 p.m. | 33 minutes ago
Description :Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
Severity: 3.8 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-90726 - Dell PowerProtect Data Domain, Feature Release ver
CVE ID :CVE-2026-90726
Published : Oct. 27, 2026, 1:37 p.m. | 29 minutes ago
Description :Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
Severity: 6.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-90726
Published : Oct. 27, 2026, 1:37 p.m. | 29 minutes ago
Description :Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
Severity: 6.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-68866 - PowerProtect Data Domain, Feature Release versions
CVE ID :CVE-2026-68866
Published : Oct. 27, 2026, 1:43 p.m. | 23 minutes ago
Description :PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Relative Path Traversal vulnerability in the certificate. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-68866
Published : Oct. 27, 2026, 1:43 p.m. | 23 minutes ago
Description :PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Relative Path Traversal vulnerability in the certificate. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-117503 - a2aproject a2a-go REST SSE handler rest.go resource consumption
CVE ID :CVE-2026-117503
Published : Oct. 27, 2026, 1:45 p.m. | 21 minutes ago
Description :A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest.go of the component REST SSE handler. This manipulation causes resource consumption. It is possible to initiate the attack remotely. Upgrading to version 2.5.0 is recommended to address this issue. Patch name: ff6035bd21e44bb3ee1bfa547885b8c08327fa01. It is recommended to upgrade the affected component.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-117503
Published : Oct. 27, 2026, 1:45 p.m. | 21 minutes ago
Description :A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest.go of the component REST SSE handler. This manipulation causes resource consumption. It is possible to initiate the attack remotely. Upgrading to version 2.5.0 is recommended to address this issue. Patch name: ff6035bd21e44bb3ee1bfa547885b8c08327fa01. It is recommended to upgrade the affected component.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-90725 - Dell PowerProtect Data Domain, Feature Release ver
CVE ID :CVE-2026-90725
Published : Oct. 27, 2026, 1:47 p.m. | 19 minutes ago
Description :Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Severity: 4.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-90725
Published : Oct. 27, 2026, 1:47 p.m. | 19 minutes ago
Description :Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Severity: 4.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-116658 - Tanium addressed a denial of service vulnerability in Enforce.
CVE ID :CVE-2026-116658
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed a denial of service vulnerability in Enforce.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-116658
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed a denial of service vulnerability in Enforce.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108309 - Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
CVE ID :CVE-2026-108309
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-108309
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87086 - Tanium addressed a denial of service vulnerability in Provision.
CVE ID :CVE-2026-87086
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed a denial of service vulnerability in Provision.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87086
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed a denial of service vulnerability in Provision.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108304 - Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE ID :CVE-2026-108304
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-108304
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108301 - Tanium addressed an improper access controls vulnerability in Comply.
CVE ID :CVE-2026-108301
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed an improper access controls vulnerability in Comply.
Severity: 6.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-108301
Published : Oct. 27, 2026, 5:35 p.m. | 32 minutes ago
Description :Tanium addressed an improper access controls vulnerability in Comply.
Severity: 6.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108332 - Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
CVE ID :CVE-2026-108332
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-108332
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108329 - Tanium addressed an unauthorized code execution vulnerability in Threat Response.
CVE ID :CVE-2026-108329
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-108329
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108306 - Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE ID :CVE-2026-108306
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-108306
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108302 - Tanium addressed an improper access controls vulnerability in Comply.
CVE ID :CVE-2026-108302
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an improper access controls vulnerability in Comply.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-108302
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an improper access controls vulnerability in Comply.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-116659 - Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
CVE ID :CVE-2026-116659
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-116659
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108325 - Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
CVE ID :CVE-2026-108325
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
Severity: 6.6 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-108325
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
Severity: 6.6 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-116656 - Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
CVE ID :CVE-2026-116656
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-116656
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-108316 - Tanium addressed an information disclosure vulnerability in Tanium Server.
CVE ID :CVE-2026-108316
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an information disclosure vulnerability in Tanium Server.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-108316
Published : Oct. 27, 2026, 5:35 p.m. | 31 minutes ago
Description :Tanium addressed an information disclosure vulnerability in Tanium Server.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...