CVE-2026-102813 is a vulnerability in the password-recovery functionality of the TP-Link RE305 V3 device. An unauthenticated attacker on the local network can trigger generation of an administrator password-reset verification code via a verification-code interface. This interface lacks effective attempt counters or lockout mechanisms and uses a predictable verification-code generation process, allowing brute-force or code prediction attacks. Successful exploitation enables the attacker to reset the administrator password and gain privileged device management access. A fix is available in version 1.1.8 Build 20260921 Rel. 42853.
CVE-2026-16491 is a missing authorization vulnerability in Grafana Enterprise's RBAC service. It causes the system to ignore the requested folder when verifying folder administrator status for deleted dashboard listings. As a result, users with dashboard permission-management rights on any folder could be mistakenly treated as administrators of all folders, potentially exposing deleted dashboard items from folders where they lack administrative access. The issue affects multiple versions of Grafana Enterprise 13.0.0 through 13.1.1. A fix requires proper permission checks on the specified folder, its ancestors, or a wildcard scope.
A vulnerability in Nextcloud Server versions 32.0.0 through 34.0.0 allows app passwords to bypass password confirmation on sensitive endpoints. This improper privilege management issue can lead to unauthorized actions without the usual password verification step.
Attackers compromised camera management software (CMS.exe) to gain initial access to multiple organizations. They deployed malware (rs.win32.exe) into user AppData directories and used DLL sideloading with the legitimate Windows binary WpcMon.exe and malicious DLLs to establish beaconing to a command-and-control server. Persistence was maintained via Run Key registry modifications. The affected camera management software, possibly linked to 3R Global and kvision.ai, lacked sufficient security controls and logging. Organizations are advised to treat camera systems and their management platforms as critical attack surfaces and implement access controls and monitoring to detect unusual activity.
A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to invoke privileged firewall management actions as root by sending a specially crafted request.
CVE-2026-93434 is an XPath injection vulnerability in WatchGuard Fireware OS affecting the SSH authentication process. It allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting specially crafted requests. The vulnerability affects multiple versions prior to 12.5.22, 2026.4, and 12.12.4. It has a high severity score of 8.7 and has been officially fixed in the specified versions.
CVE-2026-90442 is a stack-based buffer overflow vulnerability in the certd process of WatchGuard Fireware OS. It affects versions 2025.1 up to but not including 2026.4, 12.0 up to but not including 12.12.4, and 12.0 up to but not including 12.5.22. An authenticated attacker with access to the Firebox management interface can exploit this flaw by sending a specially crafted request, causing the certificate management service to crash and potentially allowing arbitrary code execution. The vulnerability has a high severity with a CVSS 4.0 score of 8.6. Fixed versions are 2026.4, 12.12.4, and 12.5.22.
CVE-2026-111107 is a high-severity vulnerability in WatchGuard Fireware OS management interface that allows remote unauthenticated attackers to crash the management service via a specially crafted login request. This causes a NULL pointer dereference, terminating all active administrator sessions and ongoing management operations. The vulnerability does not affect traffic processing through the device. Fixed versions are available.
A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is enabled.
A race condition vulnerability in the installation process of TeamViewer Remote Management - Patch Management for Windows versions prior to 26.9.1 allows a local authenticated user with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in a temporary directory during activation.
CVE-2026-111583 is a high-severity vulnerability in TeamViewer Full Client and Host for Windows prior to version 15.82. It involves improper access control in the installer staging directory during the installation of Advanced Asset Management. This flaw allows a local authenticated user with low privileges to execute arbitrary commands with SYSTEM-level privileges by placing a crafted installer options file processed during service activation.
CVE-2026-111582 is a DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows versions prior to 26.10.1. It allows a local authenticated user with low privileges to execute arbitrary code with elevated privileges. Exploitation requires user interaction. The vulnerability is fixed in version 26.10.1.
CVE-2026-92377 is a high-severity vulnerability in TeamViewer Full Client and Host for Windows prior to version 15.82. It involves improper access control in the Patch Management update mechanism, allowing a local authenticated attacker with low privileges to execute arbitrary code with SYSTEM privileges by supplying a signed executable through a forged IPC response. The issue is fixed in versions 15.82, 15.64.10 (Legacy Windows 7 & 8), 14.7.48868, and 13.2.36231.
CVE-2026-92376 is a high-severity vulnerability in TeamViewer Remote Management - Monitoring for Windows prior to version 26.10.1. It involves improper authentication in the inter-process communication mechanism, allowing a local low-privileged authenticated attacker to impersonate the IPC broker. This can lead to arbitrary code execution with SYSTEM privileges, resulting in local privilege escalation.
CVE-2026-92375 is an improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host versions prior to 15.83 and the Remote Management Monitoring component prior to 26.10.1. This flaw allows a local authenticated attacker with low privileges to execute scripts with SYSTEM or root privileges. The vulnerability has a high severity with a CVSS score of 7.8. Fixed versions include 15.83 and 26.10.1 among others.
vLLM versions prior to 0.32.0 contain a resource exhaustion vulnerability in the P2P secondary tier management. An API client can submit many unique peer addresses that never establish connections, causing vLLM to retain sessions and ZeroMQ sockets indefinitely. This leads to exhaustion of the ZeroMQ context socket quota, raising a ZMQError that terminates the EngineCore and shuts down the API server. The vulnerability allows denial of service without requiring privileged access or internal listener connectivity. A fix is available in vLLM 0.32.0.
HPE has released patches addressing 72 vulnerabilities in its Aruba networking products' AOS-8 and AOS-10 wireless operating systems, including eight maximum-severity flaws that could allow unauthenticated remote code execution and authentication bypass. These vulnerabilities affect various hardware and virtual machines compatible with these operating systems. HPE recommends restricting management interfaces and applying patches promptly. No exploitation in the wild has been reported.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain an improper privilege management vulnerability. This flaw allows a high privileged attacker with local access to potentially elevate their privileges further. The vulnerability has a CVSS score of 6.3, indicating a medium severity impact. No public exploits or known active exploitation have been reported. No patch or remediation information is currently provided.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain an improper privilege management vulnerability. This flaw could allow a high privileged attacker with remote access to elevate their privileges. The vulnerability has a CVSS score of 6.7, indicating a medium severity level. No public exploits or known in-the-wild exploitation have been reported. Patch or remediation information is not provided in the available data.
A critical stack-based buffer overflow vulnerability exists in multiple JP1 products, including JP1/Integrated Management 3 - Manager, JP1/Automatic Job Management System 3 - Manager and Agent editions, and JP1/Base. The affected versions range from 13-00 up to but not including 13-50-31 for most products, and from 11-00 up to but not including 12-50-54 for JP1/Base. This vulnerability allows for remote exploitation without privileges or user interaction, potentially leading to high confidentiality and integrity impact with limited availability impact.