A Reflected Cross-site Scripting (XSS) vulnerability exists in the Autodesk Fusion desktop application due to a maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL. When a user invokes such a URL, the vulnerability can be triggered, potentially allowing an attacker to read local files or execute arbitrary code within the context of the current process.
A stored cross-site scripting (XSS) vulnerability exists in the Autodesk Fusion desktop application due to a maliciously crafted HTML payload embedded in a design name. When another user opens the manipulated design, the payload is executed, potentially allowing arbitrary code execution or local file reading within the context of the application process.
CVE-2026-93864 is a link following vulnerability in the WatchGuard Fireware OS firewall daemon. It allows a local attacker with low-privileged code execution to overwrite arbitrary files with root privileges and tamper with firewall IP set data by planting a crafted file system object and triggering a list update. This vulnerability can lead to privilege escalation and manipulation of firewall configurations.
A vulnerability in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to execute arbitrary code with SYSTEM privileges by supplying a signed executable through a forged IPC response that loads a malicious DLL from a user-writable temporary directory.
CVE-2026-93862 is an out-of-bounds read vulnerability in the FireCluster Sync processing component of a firewall cluster. An attacker with network access to the cluster interconnect, such as a compromised cluster peer or an on-path attacker, can exploit this flaw by sending specially crafted traffic. This causes repeated crashes of the cluster synchronization process, resulting in a sustained denial of service condition. The vulnerability has a high severity rating with a CVSS score of 7.2. No patch or remediation information is currently available.
An integer overflow vulnerability exists in the WebSocket connection handling of WatchGuard Fireware OS's Access Portal. This flaw allows a remote, unauthenticated attacker to perform a heap buffer overflow by sending a specially crafted request when the Access Portal feature is enabled. The vulnerability is rated critical with a CVSS score of 9.2. No affected versions or patch information are provided.
A stack-based buffer overflow vulnerability exists in the SIP proxy component of Fireware OS. This flaw allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy. The vulnerability is critical with a CVSS score of 9.2, indicating high impact and ease of exploitation. No affected versions or patch information is provided.
CVE-2025-64394 is a vulnerability in Veeam Backup for Microsoft 365 that allows a low-privileged local user to write arbitrary files with SYSTEM privileges during the software installation process. This flaw can enable privilege escalation or denial of service conditions. The vulnerability has a medium severity rating with a CVSS score of 4.3. No affected versions or patch information are provided, and there are no known exploits in the wild.
CVE-2026-93865 is a critical vulnerability in the Fireware OS FireCluster synchronization daemon. It allows a remote, unauthenticated attacker to perform privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when clustering is enabled. This flaw is due to missing authentication in the synchronization daemon.
An XPath injection vulnerability exists in WatchGuard Fireware OS's SSH authentication process. This flaw allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting specially crafted requests. The vulnerability has a high severity rating with a CVSS score of 8.7. No affected versions or patch information are provided in the available data.
An improper access control vulnerability exists in the IPC communication between TeamViewer Full Client or Host versions prior to 15.83 and the Remote Management Monitoring component prior to 26.10.1. This flaw allows a local authenticated attacker with low privileges to execute scripts with SYSTEM or root privileges.
A path traversal vulnerability exists in Dexmal Dexbotic up to version 0.2.0 in the load_pretrained_gr00t function of the gr00tsonic Checkpoint Loader component. This flaw allows remote attackers to manipulate the weight_map argument to perform path traversal. Exploit code has been published, but the vendor has not yet responded or issued a fix.
CVE-2026-90465 is a critical vulnerability in the FireCluster Sync processing component where missing authentication allows an attacker on the cluster interconnect to execute privileged firewall management actions as root. This can be exploited by a compromised cluster peer or an on-path network attacker sending specially crafted requests.
An improper authentication vulnerability exists in WatchGuard Fireware OS's AuthPoint multi-factor authentication process. This flaw allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by sending a specially crafted request and tricking the victim into accepting an MFA push notification. The vulnerability has a medium severity rating with a CVSS score of 5.7. No affected versions or patches are explicitly stated in the provided data.
CVE-2026-90442 is a stack-based buffer overflow vulnerability in the Fireware OS certd process. It allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request. The vulnerability has a high severity score of 8.6. No patch or remediation information is currently provided.
A TOCTOU race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host for macOS prior to version 15.83 allows a local attacker with low privileges to bypass installer package verification and install a malicious package. This can lead to local privilege escalation to root.
A command injection vulnerability exists in the desmondmorris node-tesseract package up to version 0.2.7. The flaw is in the process function of lib/tesseract.js, specifically in the Command Builder component, where manipulation of the image argument can lead to OS command injection. This vulnerability can be exploited remotely. Public exploit code has been disclosed, but the project has not yet responded or issued a fix.
A vulnerability in TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker. This leads to the Monitoring service executing arbitrary code with SYSTEM privileges, resulting in local privilege escalation.
A vulnerability in WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with read-only Device Monitor privileges and management CLI access to create, truncate, or overwrite arbitrary files and modify kernel parameters with root privileges by submitting a specially crafted command. The written content is limited to numeric values.
An out-of-bounds write vulnerability exists in the screen-image decoder of TeamViewer Full Client for Linux and macOS versions prior to 15.83. This flaw allows a remote attacker to execute arbitrary code by sending crafted screen-image data during a remote-control session or by tricking a user into opening a malicious TeamViewer session recording (.tvs) file. Exploitation requires user interaction. The vulnerability arises from missing destination bounds checking in the decoder, leading to an out-of-bounds write to the image buffer.