Rilevate quattro vulnerabilità di sicurezza, di cui 2 con gravità “alta”, in Chamilo LMS, sistema di e-learning e gestione dei contenuti. Tali vulnerabilità potrebbero consentire a un attaccante remoto, in determinate condizioni, di eseguire codice arbitrario o di compromettere un account esistente, anche amministrativo.
EPSS 0.00 CVE-2026-45144 CVE-2026-45145 Chamilo IT
Aggiornamenti di sicurezza sanano tre vulnerabilità con gravità “alta” che interessano i prodotti ManageEngine SharePoint Manager Plus, soluzione per la gestione e il monitoraggio degli ambienti SharePoint, nonché ManageEngine Password Manager Pro e PAM360, piattaforme per la gestione di credenziali, account privilegiati e accessi amministrativi.
EPSS 0.00 CVE-2026-119680 CVE-2026-119682 CVE-2026-18199 ManageEngine Zoho IT
Canonical heeft een kwetsbaarheid verholpen in LXD. De kwetsbaarheid (CVE-2026-112816) wordt veroorzaakt door onjuiste validatie van certificaatketens binnen de HTTPS API van Canonical LXD. De kwetsbaarheid treft LXD-versies vóór 4.0.15, 5.0.11, 5.21.9 en 6.10.1 binnen de betreffende releasebranches. Hierdoor kunnen niet-geauthenticeerde aanvallers die netwerktoegang hebben tot de HTTPS API en beschikken over het publieke certificaat van een vertrouwde client, zich voordoen als die client. Dit…
EPSS 0.00 CVE-2026-112816 Canonical NL
De multiples vulnérabilités ont été découvertes dans Ivanti Connect Secure. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un contournement de la politique de sécurité. Ivanti indique que les vulnérabilités CVE-2026-104935,...
KEV ✓ EPSS 0.87 CVSS 8.6 CVE-2026-104935 Ivanti Microsoft FR HU IT FI US
Tenable ha rilasciato aggiornamenti di sicurezza per risolvere 3 vulnerabilità, di cui una con gravità "critica", in Tenable Identity Exposure, piattaforma dedicata al rilevamento e alla gestione delle esposizioni negli ambienti Microsoft Active Directory. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un utente autenticato con privilegi limitati di eseguire codice arbitrario con privilegi elevati sul controller di dominio interessato.
Une vulnérabilité a été découverte dans les produits GitLab. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
EPSS 0.00 CVE-2026-111943 GitLab eMudhra Mozilla Microsoft Google Apple FR US
Elastic ha rilasciato aggiornamenti di sicurezza per Elastic Cloud Enterprise (ECE), piattaforma per la gestione centralizzata di ambienti Elastic, che sanano alcune vulnerabilità, di cui 3 con gravità "alta". Tali vulnerabilità, riconducibili a una risoluzione non adeguata dei collegamenti prima dell'accesso ai file, potrebbero consentire a un attaccante locale di accedere a informazioni riservate, modificare o causare la perdita di dati ed eludere i meccanismi di autenticazione.
EPSS 0.00 CVE-2026-115708 CVE-2026-115709 CVE-2026-115713 Elastic IT
View CSAF Summary Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Mendix SAML Module are affected: Mendix SAML (Mendix 10 compatible) vers:intdot/<4.2.4 (CVE-2026-89209) Mendix SAML …
EPSS 0.00 CVE-2026-89209 Siemens Mendix výroba a průmysl US IT
This vulnerability allows remote attackers to escalate privileges on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.4. The following CVEs are assigned: CVE-2026-118626.
CVSS 5.4 CVE-2026-118626 MLflow US
Serial number: AV26-028 Date: October 28, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients. The Canadian Centre for Cyber Security ("Cyber Centre") is also available to provide additional assistance regarding the content of this Alert to recipients as requested. Details The…
Cisco heeft kwetsbaarheden verholpen in Secure Firewall ASA, Threat Defense en Management Center softwareproducten. Cisco heeft de kwetsbaarheden gegroepeerd naar acht verschillende kwetsbaarheidsklassen (CWE's) en aan iedere groep één CVE-kenmerk toegekend. De kwetsbaarheden betreffen verschillende beveiligingsproblemen, waaronder onvoldoende toegangscontrole, onjuiste verwerking van invoergegevens, fouten in beveiligingsmechanismen en onjuiste afhandeling van uitzonderingssituaties. Vier van…
KEV ✓ · ransomware EPSS 0.89 CVE-2026-20079 CVE-2026-20316 CVE-2026-20329 CVE-2026-20330 CVE-2026-20331 CVE-2026-20332 Cisco NL
Aggiornamenti di sicurezza sanano una vulnerabilità con gravità "alta" in OAuthLib, libreria open source per Python ampiamente utilizzata per l'implementazione dei protocolli di autorizzazione OAuth 1.0 e OAuth 2.0. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati.
SQL injection (SQLi) in the user authentication module of Futurum Software Wed, 10/28/2026 - 09:52 Aviso Affected Resources User authentication module for the business management platform. Description INCIBE has coordinated the disclosure of a critical severity vulnerability affecting the user authentication module of Futurum Software, a cloud-based business management platform designed to create and manage multi-level marketing businesses. The vulnerability was discovered by Diego González…
EPSS 0.00 CVSS 9.1 CVE-2026-14571 Futurum Software ES
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2026-118601.
EPSS 0.00 CVSS 6.3 CVE-2026-118601 Alpine US
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates. [...]
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more. [...]
Tailscale US
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-107145 to CVE-2026-107147) found in twofactor_gauthenticator plugin for Roundcube.
EPSS 0.00 CVE-2026-107145 CVE-2026-107147 Roundcube twofactor_gauthenticator PL
Splunk investigated and determined which products were affected by the compromised eMudhra Intermediate Certificate Authorities.
Serial number: AV26-1083 Date: October 26, 2026 As of October 26, 2026, Siemens is affected by a vulnerability in the following products: Mendix SAML (Mendix 10 compatible) Prior to V4.2.4 Mendix SAML (Mendix 11 compatible) Prior to V4.2.4 Mendix SAML (Mendix 9 compatible) Prior to V3.6.29 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. SSA-137528: Authentication Bypass Vulnerability in Mendix SAML…
Siemens CA
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1, CVEs: CVE-2026-114820, Summary: This Security Alert addresses CVE-2026-114820 by providing Java updates which removes the set of impacted root CA certificates related to eMudhra. To address this CVE, update to the latest Java version or apply the recommended mitigations. Affected Products and Versions: - Oracle GraalVM Enterprise Edition, version 21.3.20.0.2 - Oracle GraalVM for JDK, versions 17.0.21…
EPSS 0.00 CVSS 9.1 CVE-2026-114820 Oracle FI
Executive Summary A critical certificate authority incident disclosed on October 17, 2026, impacts eight eMudhra intermediate CA certificates. A flaw in the key generation process could allow attackers to recover private keys and issue fraudulent TLS or code-signing certificates. The affected intermediates have been revoked and blocked by major platform vendors, including Chrome, Mozilla, Apple, and Microsoft. The issue is tracked as CVE-2026-111943 and CVE-2026-111944. The eMudhra Certificate…
EPSS 0.00 CVE-2026-111943 CVE-2026-111944 eMudhra Qualys US
Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an unprecedented error in their Key Generation Ceremony (KGC) in April 2025. This allows anyone to brute-force acquire these private keys within seconds. For more information, see eMudhra Intermediate CA Compromise…
eMudhra US
Serial number: AV26-1078 Date: October 22, 2026 As of October 22, 2026, MongoDB is affected by vulnerabilities in the following product: C# Driver Prior to 3.13.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserialization Authentication bypass via issuer-and-serial-only certificate equality in shared cluster…
MongoDB CA
È stata resa pubblica la compromissione delle chiavi private associate ai certificati di otto autorità di certificazione (CA) intermedie di eMudhra , sei destinate all'emissione di certificati TLS e due alla firma del codice. Risultano interessate anche le corrispondenti versioni dei certificati intermedi oggetto di certificazione incrociata (cross-signing) da parte di Sectigo.
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]
Railway US
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-97785 US
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device. The following versions of InterSystems Corporation InterSystems IRIS for Health are affected: InterSystems IRIS for Health 2026.2.0.221, 2026.1.0.235, 2025.3.0.226 (CVE-2026-111594, CVE-2026-111594, CVE-2026-111594) CVSS Vendor Equipment v3 8.1 InterSystems Corporation InterSystems IRIS for Health 1 Vulnerability Cleartext Transmission of…
EPSS 0.00 CVE-2026-111594 InterSystems zdravotnictví US
View CSAF Summary Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update information. The following versions of Siemens RUGGEDCOM APE1808 Devices are affected: RUGGEDCOM APE1808 vers:all/* (CVE-2026-33387, CVE-2026-33388, CVE-2026-33389, CVE-2026-33391, CVE-2026-33920) CVSS Vendor Equipment v3 7.5…
EPSS 0.00 CVE-2026-33387 CVE-2026-33388 CVE-2026-33389 CVE-2026-33391 CVE-2026-33920 Siemens Nozomi Networks výroba a průmysl doprava energetika zdravotnictví US
View CSAF Summary RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version. The following versions of Siemens RUGGEDCOM CROSSBOW…
EPSS 0.00 CVE-2026-89196 CVE-2026-89197 CVE-2026-89198 CVE-2026-89199 CVE-2026-89200 CVE-2026-89201 CVE-2026-89202 CVE-2026-89203 CVE-2026-89204 CVE-2026-89205 CVE-2026-89206 Siemens výroba a průmysl doprava energetika zdravotnictví US
Oracle heeft meerdere kwetsbaarheden verholpen in diverse producten, waaronder Oracle SOA Suite, Oracle WebLogic Server, Oracle Data Integrator, Oracle Identity Manager, Oracle Access Manager, Oracle WebCenter Content, Oracle Fusion Middleware (inclusief Helidon) en Oracle HTTP Server. De kwetsbaarheden betreffen onder andere onveilige deserialisatie, onvoldoende authenticatie- en toegangscontroles, kwetsbaarheden in netwerkprotocollen zoals HTTP, HTTP/2, SOAP, T3, IIOP en LDAP, en fouten in…
Oracle NL
GitLab heeft 12 kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE). Eén kwetsbaarheid is als kritiek aangemerkt. GitLab heeft een kwetsbaarheid verholpen in GitLab Community Edition en Enterprise Edition binnen de versies vanaf 7.0 tot bepaalde 19.x releases. De kwetsbaarheid met kenmerk CVE-2026-110264 heeft een CVSS-score van 10,0 en betreft een integer overflow bij het compileren van een speciaal vervaardigde reguliere expressie. Onder bepaalde…
EPSS 0.01 CVE-2026-110264 CVE-2026-112212 CVE-2026-15723 GitLab NL IT
Disponibile Proof of Concept (PoC) per lo sfruttamento della CVE-2026-114509 presente in Laravel, noto framework open source per lo sviluppo di applicazioni web. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati, consentendo di impersonare un altro utente.
EPSS 0.01 CVE-2026-114509 Laravel IT
Rilasciati aggiornamenti di sicurezza per sanare alcune vulnerabilità, di cui 3 con gravità “critica”, in Apache Tomcat, noto server web open source sviluppato da Apache Software Foundation. Tali vulnerabilità potrebbero consentire a un attaccante remoto non autenticato di eludere i meccanismi di autenticazione o di accedere a informazioni sensibili sui sistemi interessati.
EPSS 0.01 CVE-2026-101296 CVE-2026-101356 CVE-2026-103119 Apache IT
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-97406, Summary: An authentication bypass vulnerability in the Xerj Console API allows sessions to bypass passkey-backed requirements during token issuance. By exploiting this flaw, an attacker with an existing valid token can create independent, persistent successor credentials directly through the console API. This allows the attacker to maintain access and potentially escalate…
EPSS 0.01 CVE-2026-97406 Xerj FI
The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks.
US
Stormshield ha rilasciato aggiornamenti di sicurezza per sanare alcune vulnerabilità, di cui 2 con gravità “alta”, nel prodotto Stormshield Network Security. Tali vulnerabilità potrebbero consentire a un attaccante non autenticato di eludere i meccanismi di autenticazione sui sistemi interessati.
EPSS 0.00 CVE-2026-111090 CVE-2026-113469 Stormshield IT
Multiple vulnerabilities in FacturaScripts Tue, 10/20/2026 - 09:34 Aviso Affected Resources FacturaScripts:2025.61 Description INCIBE has coordinated the disclosure of two medium-severity vulnerabilities affecting FacturaScripts, an open-source accounting and invoicing programme. The vulnerabilities were discovered by daffi1238 && nandoll. These vulnerabilities have been assigned the following codes, CVSS v4.0 base score, CVSS vector and CWE vulnerability type for each vulnerability: CVE-2026…
EPSS 0.00 CVSS 6.9 CVE-2026-11959 CVE-2026-11960 FacturaScripts ES
Classification: Critical, Solution: Official Fix, Exploit Maturity: Proof-of-Concept, CVSSv4.0: 9.3, CVEs: CVE-2026-102503, Summary: A SAM node exposes its registered backend services (MCP / A2A / inference, including command/stdio-backed MCP servers) over two libp2p paths. The MCP-protocol path is wrapped in WithBiscuitAuth -> Authorize, which enforces the node's biscuit policy (allowed_tools / allowed_targets). The parallel /libp2p-http ingress reaches the same backend service handlers with…
EPSS 0.00 CVSS 9.3 CVE-2026-102503 Google FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Proof-of-Concept, CVSSv4.0: 9.3, CVEs: CVE-2026-103091, Summary: SAM's MCP proxy has no authorization. Any authenticated mesh member can invoke any tool on any node, with full read/write/exec on the backend. The only prerequisite is the control plane URL (via Shodan, I currently found a few via a header, but since this project is still in its very early adoption stage it makes sense the numbers aren't big right now, it's got…
EPSS 0.01 CVSS 9.3 CVE-2026-103091 Google FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: 7.4, CVEs: CVE-2026-112146, Summary: A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.
EPSS 0.00 CVSS 7.4 CVE-2026-112146 D-Link FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: 9.3, CVEs: CVE-2026-102764, Summary: BeyondTrust has remediated a critical vulnerability in Remote Support (RS) that could allow a remote attacker to perform file operations on an affected appliance. The vulnerability exists within internal components of Remote Support. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could be used to…
KEV ✓ EPSS 0.19 CVSS 9.3 CVE-2026-102764 BeyondTrust FI CA SE US NL IT
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1, CVEs: CVE-2026-62927, CVE-2026-63252, CVE-2026-58080, CVE-2026-63248, CVE-2026-60007, CVE-2026-61387, Summary: Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. Incorrect Authorization, Missing Release of Memory after Effective Lifetime,…
EPSS 0.01 CVSS 9.1 CVE-2026-58080 CVE-2026-60007 CVE-2026-61387 CVE-2026-62927 CVE-2026-63248 CVE-2026-63252 Eclipse Foundation výroba a průmysl energetika vodárenství FI US
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.1, CVEs: CVE-2026-107336, CVE-2026-107333, CVE-2026-107362, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334, Summary: Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF), Authentication Bypass Using an Alternate Path or Channel, Cross-Site Request Forgery (CSRF), Improper Handling of Highly Compressed Data (Data Amplification)
EPSS 0.01 CVSS 8.1 CVE-2026-107333 CVE-2026-107334 CVE-2026-107335 CVE-2026-107336 CVE-2026-107337 CVE-2026-107361 CVE-2026-107362 CISA energetika vodárenství FI US
Rilevate 27 vulnerabilità, di cui 1 con gravità “alta”, in Mattermost, piattaforma di collaborazione open-source progettata per la comunicazione interna di organizzazioni e aziende. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato autenticato tramite SAML di unirsi arbitrariamente a team ai quali non dovrebbe avere accesso, inclusi team configurati come invite-only, ottenendo l'accesso ad informazioni sensibili.
EPSS 0.00 CVE-2026-16453 Mattermost IT
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1, CVEs: CVE-2026-71575, Summary: The max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a milliseconds/seconds unit mismatch and an inverted comparison polarity. Any relying party using setMaxAgeOffset to enforce re-authentication would silently accept sessions of any age, bypassing step-up authentication policies. Users are recommended to upgrade to versions 4…
EPSS 0.00 CVSS 9.1 CVE-2026-71575 Apache FI
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-80092 Microsoft US
Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.
EPSS 0.00 CVE-2026-109461 Microsoft US
Authentication bypass in Stela by Diaple Networking Thu, 10/15/2026 - 10:10 Aviso Affected Resources Stela, versions prior to 1.60.1. Description INCIBE has coordinated the publication of a critical severity vulnerability affecting Stela by Diaple Networking, an event and institutional management software product. The vulnerability was discovered by Xavi Márquez Gonzalez. The CVSS v4.0 base score, vector and CWE weakness type are as follows: CVE-2026-101287: CVSS v4.0: 9.3 | CVSS:4.0/AV:N/AC:L…
EPSS 0.00 CVSS 9.3 CVE-2026-101287 Diaple Networking ES
This vulnerability allows remote attackers to bypass authentication on affected installations of Fortinet FortiSandbox. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-107656.
EPSS 0.01 CVSS 9.6 CVE-2026-107656 Fortinet US FI
Multiple vulnerabilities in TSplus Remote Access Wed, 10/14/2026 - 10:54 Aviso Affected Resources TSplus Remote Access, version 19.20.3.10. It has been confirmed that this version is affected, although other earlier versions may also be affected. Description INCIBE has coordinated the disclosure of three vulnerabilities: two high-severity and one medium-severity that affect TSplus Remote Access by TSplus, a remote access and Windows application publishing software that allows users to connect…
EPSS 0.00 CVSS 8.7 CVE-2026-108070 CVE-2026-108071 CVE-2026-108072 TSplus ES
CISA added CVE-2026-105133 to the Known Exploited Vulnerabilities catalog. Affected product: Ahsay AhsayCBS. Remediation due date: 2026-10-17.
KEV ✓ EPSS 0.79 CVE-2026-105133 Ahsay US
Microsoft heeft kwetsbaarheden verholpen in Exchange. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen en willekeurige code uit te voeren met rechten van het proces. Van de kwetsbaarheid met kenmerk CVE-2026-96940 is eerder al een out-of-band update verschenen, maar is ook opgenomen in deze cumulatieve update.
EPSS 0.03 CVSS 8.8 CVE-2026-96940 Microsoft NL FI CA FR US
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]
EPSS 0.00 CVE-2026-105445 Docker US
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-108131 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-103568 US
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-96252 US
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-85922 US
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83907 US
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83790 US
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-83511 US