CVE Vulnerability Advisory Database

[Affected Scope] On-premise deployments of VeloCloud Orchestrator (VCO).

[Impact] Authenticated users can escalate to 'superuser operator' privileges, leading to full system compromise and data breach.

[Mitigation] Apply official security patches immediately and restrict network access to the management interface.

[Affected Scope] Ivanti Connect Secure 22.8R2.4 and prior versions.

[Impact] Local attackers can manipulate DSCache configuration to gain root privileges and full system control.

[Mitigation] Apply the latest security patches from Ivanti and run the Integrity Checker Tool (ICT).

[Affected Scope] All unpatched versions of SiteGuard Server Edition

[Impact] Local attackers with low privileges can execute arbitrary OS commands as root or SYSTEM, leading to full system compromise

[Mitigation] Immediately apply the official security patch from EG Secure and audit local server access permissions

[Affected Scope] Zammad installations using DEB or RPM packages built via packager.io (Source and Docker excluded).

[Impact] A local attacker with 'zammad' service account access can escalate to full 'root' privileges on the host.

[Mitigation] Immediately update Zammad to the latest patched version via package manager.

[Affected Scope] Arista VeloCloud Orchestrator (VCO) On-premise deployments.

[Impact] Unauthenticated remote attackers can access privileged internal functions, leading to full compromise of the orchestrator and managed SD-WAN infrastructure.

[Mitigation] Immediately apply the latest security patches from Arista and restrict access to management interfaces via VPN/ACLs.

[Affected Scope] Acronis Backup plugins for Linux-based hosting panels (cPanel, Plesk, DirectAdmin) prior to specific builds.

[Impact] Local attackers can exploit insecure file permissions to gain root-level privileges on the host server, leading to full system compromise.

[Mitigation] Immediate update to the latest plugin versions (cPanel 1.9.3.1021+, Plesk 1.8.11.638+, DirectAdmin 1.2.3.238+).

[Affected Scope] Google Pixel devices and Android hardware utilizing specific cellular modem chipsets.

[Impact] Remote (proximal/adjacent) attackers can bypass permissions to escalate privileges without user interaction, leading to full modem compromise.

[Mitigation] Immediately apply the September 2026 or later Android security patches (2026-09-01).

[Affected Scope] ConnectWise ScreenConnect client software (Servers are not impacted)

[Impact] Attackers can exploit active remote sessions to transfer and execute malicious files without host confirmation, leading to full system compromise.

[Mitigation] Immediately update all ScreenConnect clients to the latest patched version and enforce session consent policies.

[Affected Scope] Locally authenticated users across Microsoft Windows operating systems

[Impact] Local attackers can elevate privileges to SYSTEM level, gaining full control over the target system and executing arbitrary code

[Mitigation] Apply the official Microsoft security patches immediately and restrict local access on unpatched assets

[Affected Scope] Microsoft Windows operating systems utilizing the Windows Update Stack

[Impact] A local authorized attacker can exploit improper link resolution to elevate privileges to SYSTEM, leading to complete system compromise

[Mitigation] Apply the official Microsoft security updates immediately, or restrict local symbolic link creation privileges as a temporary mitigation

[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to security patches.

[Impact] Unauthenticated remote attackers can manipulate the trusted policy mask via specially crafted SSH usernames, leading to full privilege escalation.

[Mitigation] Immediately upgrade to versions 6.49.21, 7.23.4, or 7.24.2 and restrict SSH access to trusted source IPs.

[Affected Scope] JFrog Artifactory Self-Managed instances running under default configurations

[Impact] Unauthenticated network-facing attackers can bypass authentication mechanisms to obtain full administrative privileges

[Mitigation] Immediately upgrade to the latest patched version recommended by JFrog and restrict network access to the instance

[Affected Scope] All versions of Adobe Commerce and Magento Open Source (2.4.7 and earlier)

[Impact] Unauthenticated remote attackers can escalate privileges to gain administrative access and compromise sensitive data

[Mitigation] Apply Adobe security patch APSB26-92 immediately and implement IP whitelisting for the admin panel

[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Ancillary Function Driver for WinSock (afd.sys)

[Impact] An authorized local attacker can exploit kernel memory corruption to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local access

[Affected Scope] Web interface of Cisco Secure Firewall Management Center (FMC) Software

[Impact] Unauthenticated remote attackers can log in using hardcoded low-privileged credentials to access sensitive data, which can be chained with other flaws to escalate privileges

[Mitigation] Apply the official Cisco security updates immediately and restrict public internet access to the FMC management interface

[Affected Scope] JFrog Artifactory Self-Hosted versions prior to 7.133.11

[Impact] Low-privileged users can escalate to administrative privileges by exploiting insufficient token scope validation, leading to full system compromise

[Mitigation] Immediately upgrade to version 7.133.11 or later and conduct a comprehensive audit of all existing access tokens

[Affected Scope] Microsoft Office SharePoint Server environments

[Impact] Unauthenticated remote attackers can bypass authentication mechanisms over the network to elevate privileges to administrative levels

[Mitigation] Immediately apply the official Microsoft security patches and restrict external network access to SharePoint management endpoints

[Affected Scope] Windows Server environments with Active Directory Federation Services (AD FS) enabled

[Impact] An authorized local attacker with low privileges can exploit insufficient access control granularity to elevate privileges to SYSTEM

[Mitigation] Apply the official Microsoft security updates immediately and audit AD FS service account and directory permissions

[Affected Scope] Linux systems utilizing ebtables SNAT targets within bridge netfilter configurations.

[Impact] Local attackers can trigger kernel memory corruption, leading to Denial of Service (DoS) or Privilege Escalation.

[Mitigation] Apply the latest kernel security patches provided by your distribution and reboot.

[Affected Scope] LiteSpeed cPanel plugin versions prior to 2.4.8 (distributed in LiteSpeed WHM PlugIn prior to 5.3.2.0)

[Impact] An attacker with FTP or web shell access on a shared hosting server running CloudLinux/CageFS can exploit symlinks to bypass isolation, escalate privileges, and compromise the server

[Mitigation] Immediately upgrade the LiteSpeed WHM plugin to version 5.3.2.0 or higher to apply the patched cPanel plugin (v2.4.8+)