GHSA-xvgh-hmx8-9xxfPublished
Backstage: Improper task state validation in Scaffolder backend
osv · CVE-2026-106500
npm: @backstage/plugin-scaffolder-backend
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
698132 source statements · aliases may refer to the same vulnerabilityGHSA-826h-28h9-65hgPublished
Backstage: Improper authentication in the OIDC provider
osv · CVE-2026-106488
npm: @backstage/plugin-auth-backend-module-oidc-provider
GHSA-4488-j8vj-vqqvPublished
Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
osv · CVE-2026-106510
npm: @backstage/plugin-techdocs-node
GHSA-qgvj-qcf8-xq73Published
Backstage: Improper URL validation in catalog entity placeholder resolution
osv · CVE-2026-106498
npm: @backstage/plugin-catalog-backend
CVE-2026-106493Published
Backstage: Cloud storage catalog locations may cross configured storage boundaries
cve-program ·
Vendor product: backstage · Vendor product: plugin-catalog-backend-module-azure · Vendor product: plugin-catalog-backend-module-aws
CVE-2026-58704Published
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed …
cve-program ·
Vendor product: Android
CVE-2026-55255Published
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
cve-program ·
Vendor product: langflow
CVE-2026-48282Published
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
cve-program ·
Vendor product: ColdFusion 2025 · Vendor product: ColdFusion 2023
CVE-2016-1000031Published
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
cve-program ·
Vendor product: n/a
CVE-2026-48172Published
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/…
cve-program ·
https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/download/: WHM Plugin/cPanel Plugin · Vendor product: WHM Plugin/cPanel Plugin
CVE-2021-21347Published
XStream is vulnerable to an Arbitrary Code Execution attack
cve-program ·
Vendor product: xstream
CVE-2021-39297Published
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
cve-program ·
Vendor product: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
CVE-2021-39299Published
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
cve-program ·
Vendor product: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
CVE-2026-20230Published
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
cve-program ·
Vendor product: Cisco Unified Communications Manager
CVE-2026-107102Published
Account Takeover Vulnerability in Manacle Technologies ERP System
cve-program ·
Vendor product: Multi-tenant ERP System
CVE-2026-107103Published
SQL Injection Vulnerability in Manacle Technologies ERP System
cve-program ·
Vendor product: Multi-tenant ERP System
CVE-2026-107104Published
Unsafe Deserialization Vulnerability in Manacle Technologies ERP System
cve-program ·
Vendor product: Multi-tenant ERP System
CVE-2026-79809Published
Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass
cve-program ·
Vendor product: ClearPass Policy Manager (CPPM)
CVE-2021-39301Published
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
cve-program ·
Vendor product: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
CVE-2026-5703Published
Path Traversal in Satel Iberia SenNet Datalogger Serie 200
cve-program ·
Vendor product: SenNet Datalogger Serie 200
CVE-2026-20038Published
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability
cve-program ·
Vendor product: Cisco NX-OS System Software in ACI Mode
CVE-2026-76437Published
Cisco Smart Software Manager On-Prem Command Injection Vulnerability
cve-program ·
Vendor product: Cisco License On-Prem
CVE-2021-21350Published
XStream is vulnerable to an Arbitrary Code Execution attack
cve-program ·
Vendor product: xstream
CVE-2026-95605Published
WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability
cve-program ·
https://wordpress.org/plugins: wp-data-access
CVE-2021-39300Published
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
cve-program ·
Vendor product: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
CVE-2026-103416Published
Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger than the cache writes past it and on into the rest of the session control block, which holds …
cve-program ·
Vendor product: Eclipse ThreadX - NetX Duo
CVE-2021-27703Published
Sercomm Model Etisalat Model S3- AC2100 is affected by Cross Site Scripting (XSS) via the firmware update page.
cve-program ·
Vendor product: n/a
CVE-2021-39298Published
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security me…
cve-program ·
Vendor product: AGESA · Vendor product: AGESA · Vendor product: AGESA
CVE-2026-79812Published
Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager
cve-program ·
Vendor product: ClearPass Policy Manager (CPPM)
CVE-2026-106509Published
Backstage: Improper validation of MkDocs theme configuration in TechDocs
cve-program ·
Vendor product: backstage · Vendor product: plugin-techdocs-node
CVE-2026-19490Published
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
cve-program ·
Vendor product: ADC · Vendor product: Gateway
CVE-2026-46438Published
wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entry
cve-program ·
Vendor product: wger
CVE-2026-1281Published
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
cve-program ·
Vendor product: Endpoint Manager Mobile
CVE-2026-79815Published
Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent
cve-program ·
Vendor product: ClearPass Policy Manager (CPPM)
CVE-2026-79816Published
Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface
cve-program ·
Vendor product: ClearPass Policy Manager (CPPM)
CVE-2026-79817Published
Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software
cve-program ·
Vendor product: ClearPass Policy Manager (CPPM)
CVE-2025-5777Published
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
cve-program ·
Vendor product: ADC · Vendor product: Gateway
CVE-2026-97146Published
Apache YuniKorn: Admission control bypass via system label forgery
cve-program ·
https://golang.org/pkg: github.com/apache/yunikorn-k8shim
CVE-2025-55182Published
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-d…
cve-program ·
Vendor product: react-server-dom-webpack · Vendor product: react-server-dom-turbopack · Vendor product: react-server-dom-parcel
CVE-2026-79818Published
Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager
cve-program ·
Vendor product: ClearPass Policy Manager (CPPM)
CVE-2025-55177Published
Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing …
cve-program ·
Vendor product: WhatsApp Desktop for Mac · Vendor product: WhatsApp Business for iOS · Vendor product: WhatsApp for iOS
CVE-2026-107212Published
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days
cve-program ·
Vendor product: excelize
CVE-2026-76741Published
Authenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-S
cve-program ·
Vendor product: AOS-Switch (AOS-S)
CVE-2025-39682Published
tls: fix handling of zero-length records on the rx_list
cve-program ·
Vendor product: Linux · Vendor product: Linux
GHSA-4vpg-gwqq-w44cPublished
SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers
osv · CVE-2026-74904 · GO-2026-6654
Go: github.com/siyuan-note/siyuan/kernel
GHSA-p23f-cm6q-2qp8Published
SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)
osv · CVE-2026-82233 · GO-2026-6655
Go: github.com/siyuan-note/siyuan/kernel
GO-2026-6655Published
SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass) in github.com/siyuan-note/siyuan/kernel
osv · CVE-2026-82233 · GHSA-p23f-cm6q-2qp8
Go: github.com/siyuan-note/siyuan/kernel
GHSA-h9q6-hc68-35rpPublished
Denial of service in github.com/shamaton/msgpack
osv · CVE-2026-32284 · GO-2026-4513
Go: github.com/shamaton/msgpack/v2 · Go: github.com/shamaton/msgpack/v3
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.