Vulnerability Intelligence

Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.

Published records349
Critical309
High30
Known exploited77

CVE-2026-81240

Critical9.8

Dell Wyse Management Suite < 2605.0.3.683

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote…

Unrestricted file uploadRemote (network)No login neededNo user action

CVE-2026-81236

Critical9.8

Dell Wyse Management Suite < 2605.0.3.683

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote…

Unrestricted file uploadRemote (network)No login neededNo user action

CVE-2026-81238

Critical9.1

Dell Wyse Management Suite < 2605.0.3.683

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Missing authenticationRemote (network)No login neededNo user action

CVE-2026-81239

Critical9.8

Dell Wyse Management Suite < 2605.0.3.683

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote…

Unrestricted file uploadRemote (network)No login neededNo user action

CVE-2026-76461

Critical9.8

Cisco Asyncos < 15.5.5-014

Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating…

Known exploited (KEV)SQL injectionRemote (network)No login neededNo user action

CVE-2026-43790

Critical9.1

Apple Macos >= 15.0, < 15.8

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected…

Out-of-bounds writeRemote (network)No login neededNo user action

CVE-2026-65381

Critical10.0

Apple Macos >= 15.0, < 15.8

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS…

Missing authorizationRemote (network)No login neededNo user action

CVE-2026-18119

Critical9.0

Concretecms Concrete Cms < 9.5.3

Concrete CMS below 9.5.3 did not sanitize custom style values in the Block Design dialog before writing them into page CSS via a DOM sink, permitting stored cross-site scripting. An editor-level user…

Cross-site scripting (XSS)Remote (network)Login neededUser action needed

CVE-2026-85706

Critical10.0

Gitlab Gitlab >= 18.7.0, < 18.11.12

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions,…

Known exploited (KEV)Path traversalRemote (network)No login neededNo user action