A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.

CVE Database V5

CVE-2026-96293: CWE-312 in WatchGuard WatchGuard Agent

An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing executable content in a directory owned by a privileged service.

CVE-2026-115253: CWE-276 in WatchGuard WatchGuard Agent

CVE-2026-112242 is a high-severity vulnerability in Cozmoslabs Profile Builder that allows incorrect privilege assignment leading to privilege escalation. It affects versions from initial releases up to 4.0.4. The vulnerability can be exploited remotely with low attack complexity and no user interaction, potentially resulting in full confidentiality, integrity, and availability impact.

This vulnerability in Cozmoslabs Profile Builder (versions >=0 and <4.0.5) involves incorrect privilege assignment that enables privilege escalation. The CVSS 3.1 score is 8.8, indicating a high severity with network attack vector, low complexity, privileges required at a low level, no user interaction, and impacts confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vulnerability is publicly disclosed but no patch or remediation information is provided in the input data.

CVE-2026-112242 is a high-severity vulnerability in Cozmoslabs Profile Builder that allows incorrect privilege assignment leading to privilege escalation. It affects versions from initial releases up to 4.0.4. The vulnerability can be exploited remotely with low attack complexity and no user interac

CVE-2026-112242: Incorrect Privilege Assignment in Cozmoslabs Profile Builder

CVE-2026-112241 is a critical authentication bypass vulnerability in Brainstorm Force SureCart, affecting versions from initial release up to 4.9.5. The flaw allows an attacker to bypass authentication by spoofing, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability has a CVSS score of 9.8, indicating a severe impact with no privileges or user interaction required for exploitation. No patch or remediation information is currently provided.

CVE-2026-112241 describes an authentication bypass by spoofing vulnerability in Brainstorm Force SureCart. This vulnerability allows an attacker to abuse authentication mechanisms, effectively bypassing normal access controls. It affects all SureCart versions from the initial release up to version 4.9.5. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

CVE-2026-112241 is a critical authentication bypass vulnerability in Brainstorm Force SureCart, affecting versions from initial release up to 4.9.5. The flaw allows an attacker to bypass authentication by spoofing, potentially leading to full compromise of confidentiality, integrity, and availabilit

CVE-2026-112241: Authentication Bypass by Spoofing in Brainstorm Force SureCart

CVE-2026-111851 is a high-severity vulnerability in WProyal Royal Elementor Addons (versions before 1.7.1069) that allows code injection via unsafe reflection. The flaw arises from the use of externally-controlled input to select classes or code, which can lead to unauthorized code execution. The vulnerability has a CVSS 3.1 score of 7.6, indicating a significant risk. No known exploits are reported in the wild, and no official patch or remediation information is currently provided.

This vulnerability in Royal Elementor Addons involves unsafe reflection where externally-controlled input is used to select classes or code, enabling code injection. Affected versions are all releases from initial up to but not including 1.7.1069. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requires privileges, no user interaction, unchanged scope, with low confidentiality and integrity impact but high availability impact.

CVE-2026-111851 is a high-severity vulnerability in WProyal Royal Elementor Addons (versions before 1.7.1069) that allows code injection via unsafe reflection. The flaw arises from the use of externally-controlled input to select classes or code, which can lead to unauthorized code execution. The vu

CVE-2026-111851: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') in WProyal Royal Elementor Addons

CVE-2026-49155 has been rejected or withdrawn by its CVE Numbering Authority and does not represent a valid security vulnerability.

The identifier CVE-2026-49155 was assigned but subsequently rejected or withdrawn by the CVE Numbering Authority, indicating that it is not a recognized or valid security vulnerability.

GCVE Database

Detailed information about Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. (CVE-2026-49155). Get real-time updates, 

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. (CVE-2026-49155) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-49155

Description

AI-Powered Analysis

Technical Analysis

Potential Impact

Mitigation Recommendations

Technical Details

Community Reviews

Actions

External Links

Need more coverage?

Latest Threats

Check if your credentials are on the dark web

Lead Pen Test Professional