REDAXO core versions before 5.21.4 have an authorization bypass vulnerability that allows authenticated editors to modify slices in categories they are not authorized to access. By pairing a permitted article with a foreign slice ID, attackers can delete, toggle, move, or overwrite slices belonging to other editors via content editing and slice management APIs.
CVE-2026-117466 is a privilege escalation vulnerability in Octopus Deploy's Octopus Server. Users with the System Manager role can escalate their privileges to full system Administrator. This affects specific versions prior to fixed releases in 2026.2.13469 and 2026.3.15863. The vulnerability has a high severity score of 8.6 and does not require user interaction for exploitation.
CVE-2026-111548 is a stack-based buffer overflow vulnerability in the web management interface of Moxa NPort W2150A-W4 and W2250A-W4 series wireless device servers. An authenticated remote attacker with low privileges can exploit insufficient bounds checking of user input to cause the web management service to become unresponsive. Recovery requires power cycling the affected device, though other device functions continue operating.
CVE-2026-76939 is a critical heap-based buffer overflow vulnerability in Hitachi JP1/Automatic Job Management System 3 - Manager and Agent components. It affects versions from 11-00 up to but not including 13-50-31. The flaw allows remote attackers to execute arbitrary code or cause denial of service without requiring authentication. A fix is available in version 13-50-31.
CVE-2026-76936 is a critical stack-based buffer overflow vulnerability in Hitachi's JP1/Automatic Job Management System 3 - Manager affecting versions from 10-00 up to but not including 13-50-31. The flaw allows an attacker to execute code remotely without privileges or user interaction, potentially leading to full system compromise. A fix is available in version 13-50-31.
CVE-2026-76937 is a heap-based buffer overflow vulnerability in Hitachi's JP1/Automatic Job Management System 3 - Manager affecting versions from 10-00 up to but not including 13-50-31. This flaw allows an attacker to potentially execute arbitrary code or cause a denial of service. The vulnerability has a critical severity with a CVSS score of 9.4. A fix is available in version 13-50-31.
CVE-2026-76938 is a critical authentication bypass vulnerability in Hitachi JP1/Automatic Job Management System 3 - Manager versions from 10-00 up to but not including 13-50-31. This flaw allows an attacker to bypass authentication mechanisms, potentially leading to full system compromise. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. A fixed version 13-50-31 is available to remediate this issue.
CVE-2026-76935 is a critical stack-based buffer overflow vulnerability in Hitachi's JP1/Automatic Job Management System 3 - Manager affecting versions from 13-10 up to but not including 13-50-31. This flaw allows unauthenticated remote attackers to execute arbitrary code with high impact on confidentiality and integrity, and a lower impact on availability. A fix is available in version 13-50-31.
CVE-2026-76934 is a critical stack-based buffer overflow vulnerability affecting Hitachi JP1/Automatic Job Management System 3 - Manager and Agent components. It impacts versions from 10-00 up to but not including 13-50-31. The flaw allows remote attackers to execute arbitrary code or cause denial of service without requiring privileges or user interaction. A fix is available in version 13-50-31.
CVE-2026-76932 is a critical stack-based buffer overflow vulnerability affecting Hitachi JP1/Automatic Job Management System 3 - Manager and Agent versions from 11-00 up to but not including 13-50-31. The flaw allows an attacker to potentially execute arbitrary code with high impact on confidentiality and integrity, and a lower impact on availability. A fix is available in version 13-50-31.
CVE-2026-76933 is a critical heap-based buffer overflow vulnerability in Hitachi JP1/Automatic Job Management System 3 - Manager and Agent components. It affects versions from 10-00 up to but not including 13-50-31. The flaw allows remote attackers to execute code or cause denial of service without requiring privileges or user interaction. A fix is available in version 13-50-31.
CVE-2026-86577 is a critical out-of-bounds write vulnerability affecting multiple Hitachi JP1 products, including JP1/Integrated Management 3 - Manager and JP1/Automatic Job Management System 3 components. The flaw exists in versions from 13-00 up to but not including 13-50-31 for Integrated Management and Automatic Job Management System 3, and from 11-00 up to but not including 12-50-54 for JP1/Base. This vulnerability can lead to high confidentiality and integrity impact, with some availability impact. Fixed versions are available.
CVE-2026-86576 is a critical heap-based buffer overflow vulnerability affecting multiple Hitachi JP1 products, including JP1/Integrated Management 3 - Manager and JP1/Automatic Job Management System 3 components. The flaw exists in versions from 13-00 up to but not including 13-50-31 for Integrated Management and Automatic Job Management System Managers and Agents, and from 11-00 up to but not including 12-50-54 for JP1/Base. This vulnerability allows an unauthenticated remote attacker to execute arbitrary code with high impact on confidentiality and integrity, and a low impact on availability. Fixed versions are available for all affected products.
CVE-2026-86575 is a critical stack-based buffer overflow vulnerability affecting multiple Hitachi JP1 products, including JP1/Integrated Management 3 - Manager and JP1/Automatic Job Management System 3 components. The flaw exists in versions from 13-00 up to but not including 13-50-31 for Integrated Management and Automatic Job Management System, and from 11-00 up to but not including 12-50-54 for JP1/Base. This vulnerability allows an unauthenticated attacker to execute arbitrary code with high impact on confidentiality and integrity, and a low impact on availability. Fixed versions are available for all affected products.
A Cross-Site Request Forgery (CSRF) vulnerability exists in the category management functionality of the Phoca Download extension for Joomla versions 3.1.0 through 6.1.5. This vulnerability allows an attacker to trick an authenticated user into performing unwanted actions without their consent.
An authenticated IPMI Administrator can exploit this vulnerability to read arbitrary files from the BMC filesystem, exposing sensitive data beyond the intended IPMI management scope. The vulnerability has a CVSS score of 4.9, indicating medium severity. No patch or remediation details are currently provided.
An authenticated IPMI Administrator can read and write arbitrary physical memory on the Baseboard Management Controller (BMC), potentially allowing execution of code on the BMC operating system. This vulnerability has a high severity with a CVSS score of 7.2, indicating significant confidentiality, integrity, and availability impacts. No specific affected versions or patches are provided in the available data.
An IPMI authenticated administrator may be able to execute commands as the operating system root user on the Baseboard Management Controller (BMC). This vulnerability has a CVSS score of 6.6, indicating a medium severity level. It involves command execution with high impact on confidentiality, integrity, and availability. No affected versions or patch information are provided.
A logic flaw in the Baseboard Management Controller (BMC) IPMI implementation allows an attacker with limited privileges to send specially crafted RAKP+ messages and escalate their account to administrator privileges. This vulnerability can lead to full control over the BMC, impacting confidentiality, integrity, and availability.
An OS command injection vulnerability exists in the OnCell G3150A-LTE Series devices. This vulnerability occurs when the SMS management functionality is enabled and configured, allowing a remote attacker with required privileges to execute arbitrary commands due to insufficient input validation.