Vulnerability Intelligence
Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.
Beyondtrust Remote Support <= 26.2.3
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an…
Siemens Software Center < 4.0.9.8
Siemens Software Center Uncontrolled Search Path Element Vulnerability
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker…
Freebsd Freebsd 15.1
When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the counter to wrap to zero, resulting in a near-zero-length allocation followed by…
Jetbrains Teamcity < 2025.11.8
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible
Nodejs Undici >= 4.0.0, < 6.29.1
undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone…
Nodejs Undici >= 7.0.0, < 7.30.1
undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a…
E-guardian Siteguard >= 2.20, < 8.00
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Collabora Online < 26.4.303
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is…
Cisco Asyncos >= 15.0, < 15.5.5-014
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is…
Paloaltonetworks Pan-os < 10.2.0
Palo Alto Networks PAN-OS Code Injection Vulnerability
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the…