Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto...
CVE-2026-0257
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software all
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题An improper certificate validation vulnerability in the Prisma Access Agent® for Android and...
CVE-2026-0248
An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attack
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app...
CVE-2026-0251
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to e
Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™...
CVE-2026-0249
Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacke
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally...
CVE-2026-0235
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to b
An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500...
CVE-2026-0259
An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables u
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an...
CVE-2026-0262
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with
Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an...
CVE-2026-0261
Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator
An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION...
CVE-2026-0244
An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (
Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to...
CVE-2026-0245
Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configura
Hermes WebUI prior to 0.51.44 - Release T contains a path traversal vulnerability in the session...
CVE-2026-22677
Hermes WebUI prior to 0.51.44 - Release T contains a path traversal vulnerability in the session import endpoint that al
A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to...
CVE-2026-0242
A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL c
Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access...
CVE-2026-0247
Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attack
Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables...
CVE-2026-33584
Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensit
An information disclosure vulnerability in Trust Protection Foundation enables an authenticated...
CVE-2026-0240
An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensi
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing...
CVE-2026-4873
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the s
Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass...
CVE-2026-0241
Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and per
An information disclosure vulnerability in the Chronosphere Chronocollector enables an...
CVE-2026-0239
An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with net
Strapi has a rate limit bypass on users-permissions plugin via attacker-controlled email keying
CVE-2025-64526
### Summary of CVE-2025-64526 Vulnerability Details - CVE: CVE-2025-64526 - CVSS v3.1 Vector: `CVSS:4.0/AV:N/AC:L/AT:N/
A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former...
CVE-2026-2695
A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premi