Vulnerability Intelligence
Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.
Dell Secure Connect Gateway < 5.36.00.00
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An…
Dell Secure Connect Gateway < 5.36.00.00
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An…
Dell Secure Connect Gateway < 5.36.00.00
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit…
N-able N-central < 2026.3
N-able N-central Static Code Injection Vulnerability
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
Mikrotik Routeros >= 6.0, < 6.49.21
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits…
Mikrotik Routeros >= 6.0, < 6.49.21
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation…
Mikrotik Routeros >= 6.0, < 6.49.21
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On…
Mikrotik Routeros >= 7.0, < 7.23.6
MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting…
Traefik Traefik < 3.7.11
Traefik versions from v3.7.1 fail to enforce crossProviderNamespaces restrictions on the traefik.ingress.kubernetes.io/service.middlewares Service annotation in the Kubernetes Ingress provider. A namespace-limited tenant excluded from the allowlist can attach an operator-owned middleware to…
Traefik Traefik < 2.11.55
Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnerability in the digestAuth middleware where unknown usernames receive an empty secret instead of rejection. Attackers can compute a…