Posts of last 24 hours

CVE-2026-5260 | libgnutls Key Exchange improper validation of specified quantity in input (RHSA-2026:20611 / EUVD-2026-32009)
A vulnerability categorized as critical has been discovered in libgnutls. Affected is an unknown function of the component Key Exchange Handler. Such manipulation leads to improper validation of specified quantity in input. This vulnerability is referenced as CVE-2026-5260. It is possible to launch the attack remotely. No exploit is available.
https://vuldb.com/vuln/365871
CVE-2026-4480 | Samba Print Command os command injection (EUVD-2026-31828 / Nessus ID 316801)
A vulnerability, which was classified as critical, was found in Samba. This vulnerability affects unknown code of the component Print Command Handler. Such manipulation leads to os command injection. This vulnerability is traded as CVE-2026-4480. The attack may be launched remotely. There is no exploit available.
https://vuldb.com/vuln/365655
CVE-2026-3985 | constantcontact Creative Mail Plugin up to 1.6.9 on WordPress has_checkout_consent checkout_uuid sql injection (CNNVD-202605-4471)
A vulnerability described as critical has been identified in constantcontact Creative Mail Plugin up to 1.6.9 on WordPress. This affects the function has_checkout_consent. Executing a manipulation of the argument checkout_uuid can lead to sql injection. This vulnerability appears as CVE-2026-3985. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.
https://vuldb.com/vuln/364769
CVE-2025-15621 | Sparx Systems Sparx Enterprise Architect up to 16.1.1627/17.1.1713 OAuth2 Credential insufficiently protected credentials (EUVD-2025-209499 / WID-SEC-2026-1163)
A vulnerability identified as problematic has been detected in Sparx Systems Sparx Enterprise Architect up to 16.1.1627/17.1.1713. Affected by this issue is some unknown functionality of the component OAuth2 Credential Handler. This manipulation causes insufficiently protected credentials. The identification of this vulnerability is CVE-2025-15621. The attack can only be executed locally. There is no exploit available. You should upgrade the affected component.
https://vuldb.com/vuln/357920
CVE-2026-20065 | Cisco Secure Firewall Threat Defense Software Binder locking (cisco-sa-snort3-multi-dos-XFWkWSwz)
A vulnerability was found in Cisco Secure Firewall Threat Defense Software and UTD SNORT IPS Engine Software. It has been classified as problematic. Impacted is an unknown function of the component Binder Module. The manipulation leads to improper locking. This vulnerability is referenced as CVE-2026-20065. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.
https://vuldb.com/vuln/348816
CVE-2026-20054 | Cisco Cyber Vision Snort 3 VBA infinite loop (cisco-sa-ftd-snort3-vbavuls-96UcVVed / Nessus ID 311459)
A vulnerability described as problematic has been identified in Cisco Cyber Vision, Secure Firewall Threat Defense Software and UTD SNORT IPS Engine Software. Affected by this issue is some unknown functionality of the component Snort 3 VBA. The manipulation results in infinite loop. This vulnerability is reported as CVE-2026-20054. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.
https://vuldb.com/vuln/348823
CVE-2026-20057 | Cisco Cyber Vision Snort 3 Visual Basic for Applications divide by zero (cisco-sa-ftd-snort3-vbavuls-96UcVVed / Nessus ID 311459)
A vulnerability classified as problematic has been found in Cisco Cyber Vision, Secure Firewall Threat Defense Software and UTD SNORT IPS Engine Software. This affects an unknown part of the component Snort 3 Visual Basic for Applications. This manipulation causes divide by zero. This vulnerability appears as CVE-2026-20057. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.
https://vuldb.com/vuln/348824
CVE-2026-20058 | Cisco Secure Firewall Threat Defense Software Snort 3 VBA access of memory location before start of buffer (cisco-sa-ftd-snort3-vbavuls-96UcVVed / Nessus ID 311459)
A vulnerability classified as problematic was found in Cisco Secure Firewall Threat Defense Software and UTD SNORT IPS Engine Software. This vulnerability affects unknown code of the component Snort 3 VBA. Such manipulation leads to access of memory location before start of buffer. This vulnerability is traded as CVE-2026-20058. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.
https://vuldb.com/vuln/348825
CVE-2026-20066 | Cisco Secure Firewall Threat Defense Software HTTP resource consumption (cisco-sa-snort3-multi-dos-XFWkWSwz)
A vulnerability, which was classified as problematic, has been found in Cisco Secure Firewall Threat Defense Software and UTD SNORT IPS Engine Software. This issue affects some unknown processing of the component HTTP Handler. Performing a manipulation results in resource consumption. This vulnerability is known as CVE-2026-20066. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.
https://vuldb.com/vuln/348826
CVE-2026-20067 | Cisco Cyber Vision HTTP out-of-bounds write (cisco-sa-snort3-multi-dos-XFWkWSwz)
A vulnerability, which was classified as critical, was found in Cisco Cyber Vision, Secure Firewall Threat Defense Software and UTD SNORT IPS Engine Software. Impacted is an unknown function of the component HTTP Handler. Executing a manipulation can lead to out-of-bounds write. This vulnerability is handled as CVE-2026-20067. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.
https://vuldb.com/vuln/348827

Managed ad