A vulnerability in Cockpit's cockpit-ws service allows unauthenticated remote attackers to send specially crafted fragmented WebSocket messages that accumulate without a size limit, causing unbounded memory exhaustion and denial of service. This flaw affects remote management services commonly exposed on Red Hat Enterprise Linux systems. The vulnerability has a high severity rating with a CVSS score of 7.5. No specific affected versions are provided in the data. Red Hat has acknowledged the issue and provided advisory information.
Dell OpenManage Ansible Modules versions 2.0.2 through 10.0.3 have a vulnerability in the OData filter processing component that allows improper neutralization of special elements in data query logic. This flaw could be exploited by a low privileged attacker with remote access to gain unauthorized data access, bypass authorization, and cause denial of service.
Dell OpenManage Ansible Modules versions 2.1.2 through 10.0.3 have an improper certificate validation vulnerability in the iDRACRedfishAPI component. This flaw allows an unauthenticated remote attacker to potentially cause information exposure and unauthorized access. The vulnerability has a high severity with a CVSS score of 8.7.
CVE-2026-0323 is a server-side request forgery (SSRF) vulnerability in Palo Alto Networks Checkov by Prisma® Cloud. It allows a local unauthenticated user to make unauthorized network requests from the host to internal services. The vulnerability has a medium severity rating with a CVSS score of 4.8. No affected versions or patch information are provided in the available data.
Dell OpenManage Ansible Modules versions 2.0.4 through 10.0.3 have an XML External Entity (XXE) vulnerability in their XML parsing component. This flaw allows a low privileged local attacker to potentially expose sensitive information. The vulnerability does not affect integrity or availability but can lead to confidentiality breaches.
Dell OpenManage Ansible Modules versions 6.0.0 through 10.0.3 contain an XML injection vulnerability due to improper neutralization of special elements in the XML data conversion component. A low privileged attacker with remote access could exploit this flaw to inject malicious XML content, potentially causing XML parsing errors and impacting system integrity.
Dell Terraform Provider for PowerFlex versions 1.5.0 through 1.8.0 contains an improper certificate validation vulnerability in its SSH client component. The provider uses ssh.InsecureIgnoreHostKey() by default, which disables SSH host key verification. This flaw could allow an unauthenticated remote attacker to cause information exposure and unauthorized access.
A buffer overflow vulnerability exists in Palo Alto Networks PAN-OS software that allows an unauthenticated attacker to cause a service process crash or memory corruption, disrupting service processing. This vulnerability does not affect Panorama or Prisma Access products. The issue is identified as CWE-787 and has a medium severity rating with a CVSS score of 6.3.
Dell Terraform Provider for PowerStore versions prior to 1.3.1 contain a vulnerability that may cause sensitive authentication data to be insufficiently redacted in diagnostic logs. This could allow an unauthenticated remote attacker to access sensitive information. The vulnerability has a high severity score of 7.5. No patch information is provided in the data.
Dell OpenManage Ansible Modules versions 5.0.0 through 10.0.3 contain an improper certificate validation vulnerability in the iDRACConnection component. This flaw allows an unauthenticated remote attacker to potentially cause information exposure and unauthorized access. The vulnerability has a high severity rating with a CVSS score of 8.7. No patch or remediation details are provided in the available data.
CVE-2026-0324 is a high-severity vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect app on Windows. It allows a locally authenticated non-administrative user to escalate privileges to NT AUTHORITY\SYSTEM due to incorrect privilege management.
Webmin versions up to 2.670 contain a privilege escalation vulnerability in the acl/save_group.cgi component. This flaw allows delegated administrators with access to the Webmin Users module to escalate privileges by submitting arbitrary module lists in the mod parameter. Exploiting this, attackers can assign themselves membership in groups with powerful modules such as Command Shell, enabling command execution as root.
Spatie Browsershot versions from 2.2.0 up to but not including 5.5.0 contain a local file read vulnerability. This flaw allows attackers to read arbitrary server files by supplying root-relative paths in HTML content passed to the setHtml() method. By embedding elements such as iframe, img, link, or script referencing file paths like /etc/passwd, attackers can cause the contents of these files to be included in generated PDFs or screenshots.
Webmin versions up to 2.670 have a file injection vulnerability in the acl/cert_issue.cgi component. Authenticated users can exploit this by injecting newline characters in certificate DN fields, allowing them to add a root entry with a known password hash. This can lead to full root access after the miniserv service restarts.
Traccar versions from 3.15 up to but not including 6.17.0 contain an authentication bypass vulnerability in the LdapProvider.login() function. This flaw allows unauthenticated attackers who know a valid username to log in with an empty password if the LDAP directory permits unauthenticated binds. This can lead to unauthorized access to any account, including administrator accounts.
Wallos versions from 4.4.0 up to but not including 5.10.3 contain a stored cross-site scripting (XSS) vulnerability in the sendnotifications.php endpoint. This flaw allows registered users to inject malicious scripts through unescaped notification service responses. An attacker can exploit this by directing Mattermost webhook URLs or Web Push endpoints to a server under their control that returns JavaScript. When an administrator opens sendnotifications.php, the injected script executes in their session, potentially compromising confidentiality and integrity.
OpsTree REMS versions through 1.0.0 have a missing authentication vulnerability that permits unauthenticated remote attackers to access Governance API endpoints. Attackers can exploit this by sending requests without valid Authorization headers or with tampered JWT tokens, allowing them to retrieve sensitive database credentials such as hosts, usernames, and passwords.
OpsTree REMS versions through 1.0.0 have an improper attribution vulnerability that allows authenticated users with lower privileges to post comments as if they were the incident creator. This occurs via the POST /api/v1/incidents/{incident_id}/comment endpoint. Attackers can impersonate higher-privileged users, such as Super Users, thereby corrupting the incident timeline and audit trail.
OpsTree REMS versions up to 1.0.0 have a server-side request forgery (SSRF) vulnerability that allows authenticated users to make the backend server connect to arbitrary destinations via the database Test Connection feature. This can be exploited by setting a database entry's host and port to internal or attacker-controlled addresses, enabling probing of internal hosts and ports accessible from the REMS server.
OpsTree REMS versions through 1.0.0 have an improper authorization vulnerability that allows authenticated users to change the reporter of an incident to another user. This is done by supplying a client-controlled reporter field in POST or PATCH requests, enabling falsification of incident attribution and corruption of the accountability audit trail.