Overview of incoming advisories.
2019 results found
CVE-2026-61775 affects NVIDIA Megatron Bridge, a component likely related to NVIDIA's AI/ML infrastructure. The vulnerability involves deserialization of untrusted data, a well-known class of security flaw that can be exploited remotely. A successful exploit could lead to arbitrary code execution, data tampering, and information disclosure. The vulnerability is currently undergoing analysis on the NVD. NVIDIA has published a security advisory referencing this CVE in their product-security GitHub repository. The potential for code execution makes this a high-severity issue. Organizations using NVIDIA Megatron Bridge should monitor for patches and apply mitigations as soon as they become available.
View original advisory →A SQL injection vulnerability has been identified in Teracity Software Technologies Inc. E-OSB product. The vulnerability is classified as an improper neutralization of special elements used in SQL commands. It allows attackers to perform SQL injection attacks against affected installations. All versions of E-OSB prior to V02.26.07.08.01 are affected. The issue has been assigned CVE-2026-18765 and reported via the Turkish cybersecurity authority. Users are advised to update to version V02.26.07.08.01 or later to mitigate the risk. The vulnerability poses a high risk due to the potential for unauthorized database access and data manipulation.
View original advisory →CVE-2026-61773 is a deserialization of untrusted data vulnerability affecting NVIDIA Megatron Bridge. An attacker who successfully exploits this vulnerability could achieve remote code execution, tamper with data, and disclose sensitive information. The vulnerability is currently undergoing analysis on the NVD. NVIDIA has published a security advisory referencing this CVE in their product-security GitHub repository. The severity has been assessed as High. No patch or mitigation details are currently described in the available content, but users of NVIDIA Megatron Bridge should monitor NVIDIA's security advisories for updates. Deserialization vulnerabilities of this nature are commonly exploited in AI and ML infrastructure components, making this particularly relevant given Megatron's use in large-scale model training environments.
View original advisory →CVE-2026-61776 is a high-severity vulnerability affecting NVIDIA Megatron Bridge, a component likely related to NVIDIA's AI/ML infrastructure. The vulnerability involves deserialization of untrusted data, a well-known attack vector that can allow remote or local attackers to supply malicious serialized objects. Successful exploitation could lead to arbitrary code execution, data tampering, and information disclosure. NVIDIA has published a security advisory on their GitHub product-security repository. The vulnerability is currently undergoing analysis on the NVD. No CVSS score or patch details are explicitly provided in the article, but the high Kans value suggests significant risk. Organizations using NVIDIA Megatron Bridge should monitor NVIDIA's security advisories for patches and mitigations.
View original advisory →The WPLP Cookie Consent plugin for WordPress is vulnerable to arbitrary file upload in all versions up to and including 4.4.1. The vulnerability stems from missing file type validation in the saas_upload_logo() function combined with an authorization bypass on WPLP connector REST endpoints. Unauthenticated attackers can exploit this flaw to upload arbitrary files to the affected server. Successful exploitation may lead to remote code execution. No authentication is required, making this a critical risk for any WordPress site running the affected plugin versions. The vulnerability affects the plugin used for GDPR, CCPA, and Google Consent Mode cookie banner management. A patch is available via the WordPress plugin repository changeset 3674117. The issue is tracked as CVE-2026-75865 and documented by both NVD and Wordfence.
View original advisory →CVE-2026-79687 affects Dell PowerStore SDNAS, which contains a Missing Authentication for Critical Function vulnerability. An unauthenticated remote attacker can potentially exploit this flaw to gain unauthorized access to the filesystem. The vulnerability requires no prior authentication, making it especially dangerous for exposed systems. Dell has issued a security advisory (DSA-2026-330) addressing this and multiple other vulnerabilities in PowerStore T. The issue highlights risks associated with missing access controls on critical storage management functions. Remote exploitation could lead to sensitive data exposure or manipulation at the filesystem level. Organizations using Dell PowerStore should apply the recommended security updates immediately.
View original advisory →CVE-2026-61755 is a deserialization of untrusted data vulnerability affecting NVIDIA Megatron Bridge. An attacker exploiting this flaw could achieve remote code execution, tamper with data, or disclose sensitive information. The vulnerability is classified as high severity. NVIDIA has published an advisory via their product-security GitHub repository. The issue is tracked by both NVD and the CVE Program. No specific patch details are included in the article, but references point to NVIDIA's official security advisories. Users of NVIDIA Megatron Bridge should monitor NVIDIA's security channels for mitigations and updates.
View original advisory →CVE-2026-61765 is a high-severity vulnerability affecting NVIDIA Megatron Bridge. The flaw involves deserialization of untrusted data, a class of vulnerability commonly exploited by attackers to achieve arbitrary code execution. A successful exploit could lead to code execution, data tampering, and information disclosure. The vulnerability is currently undergoing analysis by NVD. NVIDIA has published a security advisory on their GitHub product-security repository. The CVE record is also tracked on cve.org. Users and administrators of NVIDIA Megatron Bridge should monitor for patches and mitigations from NVIDIA. This type of deserialization vulnerability poses significant risk to affected deployments, particularly in AI and machine learning infrastructure contexts.
View original advisory →CVE-2026-61756 is a deserialization of untrusted data vulnerability affecting NVIDIA Megatron Bridge. An attacker who successfully exploits this flaw could achieve remote code execution, tamper with data, and disclose sensitive information. The vulnerability is tracked by NVD and NVIDIA's product security team. It has been assigned a high criticality rating. The issue stems from improper handling of serialized data inputs, a common but severe class of vulnerability. NVIDIA has published security advisory details via their GitHub product-security repository. Users and administrators of NVIDIA Megatron Bridge are advised to review the advisory and apply any available mitigations or patches promptly.
View original advisory →Kyverno versions before 1.16.2 contain a server-side request forgery (SSRF) vulnerability in its APICall feature. The URL field in a Policy's ServiceCall configuration lacks proper validation, allowing users with namespace-level Policy creation permissions to direct Kyverno to make HTTP requests to arbitrary internal resources. This includes cloud metadata endpoints such as 169.254.169.254 and other tenants' internal resources. Kyverno executes these requests using its cluster-wide high-privilege ServiceAccount, creating a Confused Deputy problem. The responses, which may contain sensitive data such as other tenants' secrets and cloud IAM credentials, are returned in the PolicyReport and accessible to the attacker. This effectively breaks multi-tenant isolation in Kubernetes clusters using Kyverno. Users are advised to upgrade to Kyverno 1.16.2 or later to remediate this vulnerability.
View original advisory →CVE-2026-61762 is a deserialization of untrusted data vulnerability affecting NVIDIA Megatron Bridge. An attacker who successfully exploits this vulnerability could achieve remote code execution, tamper with data, and disclose sensitive information. The vulnerability is currently undergoing analysis on the NVD. NVIDIA has published a security advisory referencing this CVE. The flaw represents a high-severity risk due to the potential for full code execution on affected systems. Organizations using NVIDIA Megatron Bridge should monitor for patches and apply mitigations as soon as they become available.
View original advisory →Wyoming before version 1.10.2 contains a server-side request forgery (SSRF) vulnerability identified as CVE-2026-8712. Unauthenticated attackers with network access can exploit this flaw by supplying a malicious `uri` query parameter to the HTTP API. The vulnerability allows attackers to force outbound connections to arbitrary targets using `tcp://` or `unix://` URI schemes. Affected endpoints include /api/info, /api/speech-to-text, and /api/text-to-speech. Exploitation enables attackers to override the server-configured backend and redirect connections to attacker-chosen hosts. No authentication is required, making this accessible to any network-adjacent attacker. The issue has been patched in Wyoming version 1.10.2. Users are advised to upgrade immediately to mitigate the risk of internal network probing or service abuse.
View original advisory →CVE-2026-61753 is a high-severity vulnerability affecting NVIDIA Megatron Bridge. The flaw involves deserialization of untrusted data, a class of vulnerability commonly exploitable by remote or local attackers to achieve arbitrary code execution. A successful exploit could lead to code execution, data tampering, and information disclosure. NVIDIA has published a security advisory referencing this CVE. The vulnerability is currently undergoing analysis by NVD. No patch or mitigation details are included in this article. The affected product, NVIDIA Megatron Bridge, is likely used in large-scale AI/ML training infrastructure, making the potential impact significant.
View original advisory →CVE-2026-79687 affects Dell PowerStore SDNAS, which contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this flaw to gain unauthorized access to the filesystem. The vulnerability requires no authentication, making it particularly dangerous as it lowers the barrier for exploitation. Dell has issued a security advisory (DSA-2026-330) addressing this and multiple other vulnerabilities in Dell PowerStore T. The impact is rated high due to the potential for full filesystem access by remote unauthenticated attackers. Users are advised to apply the security updates provided by Dell to mitigate the risk.
View original advisory →CVE-2026-61756 is a high-severity vulnerability affecting NVIDIA Megatron Bridge, a component likely associated with NVIDIA's AI and large-scale model training infrastructure. The vulnerability involves deserialization of untrusted data, a well-known attack vector that can allow remote or local attackers to inject malicious payloads. Successful exploitation could lead to arbitrary code execution, data tampering, and unauthorized information disclosure. Deserialization vulnerabilities are particularly dangerous because they can be exploited without authentication in some configurations. The vulnerability is currently undergoing analysis by NVD. NVIDIA has published an advisory via their product-security GitHub repository. Users and administrators of NVIDIA Megatron Bridge are advised to monitor NVIDIA's official security advisories for patches and mitigations. The CVE has been registered with both NVD and the CVE program. Given the potential for code execution and data compromise, this is considered a high-impact vulnerability.
View original advisory →CVE-2026-61752 is a high-severity vulnerability in NVIDIA Megatron Bridge involving deserialization of untrusted data. An attacker exploiting this flaw could achieve remote code execution, tamper with sensitive data, and extract confidential information. The vulnerability is catalogued in the NVD and has an associated NVIDIA product security advisory. NVIDIA has published details via their official product-security GitHub repository. The impact scope includes code execution, data integrity compromise, and information disclosure, making it a critical concern for organizations using NVIDIA Megatron Bridge. No additional exploit details or patch specifics are provided in the current article state, which is marked as 'Received' in NVD status.
View original advisory →CVE-2026-61761 is a deserialization of untrusted data vulnerability affecting NVIDIA Megatron Bridge. An attacker who successfully exploits this vulnerability could achieve remote code execution, tamper with data, and disclose sensitive information. The vulnerability is currently undergoing analysis on the NVD. NVIDIA has published security advisory details in their product-security GitHub repository. The flaw is classified as high criticality given its potential impact on code execution and data integrity. No patch or mitigation details are explicitly mentioned in the article content. Users of NVIDIA Megatron Bridge should monitor NVIDIA's security advisories for updates and remediation guidance.
View original advisory →CVE-2026-61778 is a high-severity vulnerability identified in NVIDIA Megatron Bridge. The flaw involves deserialization of untrusted data, which can be exploited by an attacker to achieve remote code execution, tamper with data, and disclose sensitive information. The vulnerability was published via the NVD and NVIDIA's product security advisory. No authentication bypass or exploit code details are provided in the article, but the potential impact is significant given the three major consequence categories: code execution, data tampering, and information disclosure. NVIDIA has published a security advisory on GitHub under their product-security repository. Users and administrators of NVIDIA Megatron Bridge are advised to review the advisory and apply any available patches or mitigations promptly.
View original advisory →CVE-2026-61757 is a high-severity vulnerability identified in NVIDIA Megatron Bridge involving deserialization of untrusted data. An attacker who successfully exploits this vulnerability could achieve remote code execution, tamper with data, and disclose sensitive information. The vulnerability is currently undergoing analysis on the NVD. NVIDIA has published security advisory details via their product-security GitHub repository. The flaw poses significant risk to systems running NVIDIA Megatron Bridge, particularly in AI and large-scale distributed computing environments. Organizations using this product should monitor NVIDIA's security advisories for patches and mitigations. The combination of code execution and data tampering potential classifies this as a critical finding requiring prompt attention.
View original advisory →CVE-2026-61772 is a high-severity vulnerability identified in NVIDIA Megatron Bridge. The flaw involves deserialization of untrusted data, which can be exploited by an attacker to achieve arbitrary code execution, data tampering, and information disclosure. The vulnerability was published via the NVD and is referenced in NVIDIA's official product security repository. No specific CVSS score or patch details are provided in the article, but the Current Kans Value is rated High. The affected product, NVIDIA Megatron Bridge, is likely used in AI and high-performance computing environments. Exploitation could have serious consequences for confidentiality, integrity, and availability of affected systems. Organizations using NVIDIA Megatron Bridge are advised to monitor NVIDIA's security advisories for patches and mitigations.
View original advisory →