Vuldb Updates

A vulnerability categorized as problematic has been discovered in XMLRPC-C up to 1.67.01. The affected element is an unknown function of the component Error Page. Executing a manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2026-15928. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in Red Hat Keycloak and classified as problematic. This vulnerability affects unknown code of the component User-Event Metrics Recording. Performing a manipulation results in resource consumption. This vulnerability is known as CVE-2026-16100. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability categorized as problematic has been discovered in Red Hat Keycloak. This affects an unknown function of the component LDAP storage provider. Such manipulation leads to improper access controls. This vulnerability is referenced as CVE-2026-16071. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in Google SecOps up to 6.3.84 and classified as critical. The affected element is an unknown function. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-15587. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability has been found in Cisco Unified Computing System and classified as very critical. This issue affects some unknown processing of the component Web-based Management Interface. The manipulation leads to code injection. This vulnerability is documented as CVE-2026-20200. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Cisco Unified Computing System and Unified Computing System E-Series Software and classified as very critical. Impacted is an unknown function of the component Web-based Management Interface. The manipulation results in code injection. This vulnerability is reported as CVE-2026-20288. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in Jenkins Project Jenkins up to 2.567.x. The affected element is an unknown function. Executing a manipulation can lead to improper privilege management. This vulnerability is handled as CVE-2026-70429. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability described as very critical has been identified in Jenkins Project Jenkins and Remoting. This affects an unknown function. The manipulation results in deserialization. This vulnerability was named CVE-2026-70426. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in Jenkins Project Jenkins up to 2.567.x. This impacts an unknown function of the component Symbolic Links. This manipulation causes path traversal. The identification of this vulnerability is CVE-2026-70427. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Jenkins Project Jenkins up to 2.567.x. Affected is an unknown function of the component File Path Handler. Such manipulation of the argument File leads to path traversal. This vulnerability is referenced as CVE-2026-70428. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability classified as critical was found in RPM. The impacted element is an unknown function of the file lib/backend/ndb/rpmpkg.c of the component NDB Database Backend. The manipulation results in heap-based buffer overflow. This vulnerability is identified as CVE-2026-44605. The attack can only be performed from the local network. There is not any exploit available.

A vulnerability was found in OpenStack Neutron. It has been declared as critical. The impacted element is an unknown function of the component Subnetpool Onboarding. Executing a manipulation can lead to improper access controls. This vulnerability is handled as CVE-2026-55707. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in MaxSite CMS up to 109.5. It has been classified as critical. Affected by this vulnerability is the function unserialize. This manipulation of the argument maxsite_comuser causes deserialization. This vulnerability is tracked as CVE-2026-70554. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in open62541 up to 1.5.5. Affected by this vulnerability is an unknown functionality. The manipulation leads to resource consumption. This vulnerability is traded as CVE-2026-67856. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in open62541 up to 1.5.5. This vulnerability affects unknown code of the component MDNSD backend. Such manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2026-67858. The attack can be launched remotely. No exploit exists.

A vulnerability has been found in Soliton Systems MailZen Management Portal 2.62/2.63 and classified as problematic. This issue affects some unknown processing. Performing a manipulation of the argument Role Name/First Name/Last Name/Username results in cross site scripting. This vulnerability was named CVE-2026-51144. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in open62541 1.5.5. It has been rated as critical. This affects the function responseReadNamespacesArray of the file src/client/ua_client_connect.c. This manipulation causes out-of-bounds read. This vulnerability is tracked as CVE-2026-67857. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability, which was classified as problematic, has been found in M-Files Server. Impacted is an unknown function. This manipulation causes denial of service. The identification of this vulnerability is CVE-2026-0931. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability labeled as problematic has been found in Kong Event Gateway up to 1.1.1/1.2.0. This vulnerability affects unknown code of the component AWS IAM Encryption Feature. Executing a manipulation can lead to insufficiently random values. This vulnerability appears as CVE-2026-17578. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability, which was classified as problematic, has been found in Open62541 1.5.5. Impacted is an unknown function of the file src/client/ua_client_highlevel.c of the component High-Level Attribute Reading Logic. Performing a manipulation results in buffer overflow. This vulnerability is known as CVE-2026-67862. Remote exploitation of the attack is possible. No exploit is available.