CVE-2026-54470: CWE-611: Improper Restriction of XML External Entity Reference in Dell Unisphere for PowerMax
Dell Unisphere for PowerMax versions 10.3.0.5 and earlier contain an XML External Entity (XXE) vulnerability (CWE-611). This vulnerability allows a low privileged attacker with remote access to…
Read the full articleYou might also wanna read
How Does XML External Entity Injection (XXE) Impact Customers?
In 2017, OWASP included XML External Entities within their top 10 list of vulnerabilities. It can lead to unauthorized access or code execut
Cisco Unified CM Vulnerability (CVE-2026-20230, CVSS 8.6) Actively Exploited for Root Privilege Escalation
CVE-2026-20230 has a CVSS score of 8.6 and stems from improper input validation for specific HTTP requests. Successful exploitation can let
briefly.co·16d ago
CVE-2026-48800 Bypass: Path Traversal Vulnerability Discovered in Notepad++ v8.9.6.1
## Vulnerability Summary **Product**: Notepad++ v8.9.6.1 (latest patched version) **Type**: CWE-42 (Path Traversal) / CWE-59 (Improper Link
github.com·1mo ago
Critical Security Vulnerability CVE-2025-66478 in React Server Components Protocol
A critical vulnerability (CVE-2025-66478) has been identified in the React Server Components protocol. Users should upgrade to patched versi
nextjs.org·7mo ago
Microsoft patches high-severity SharePoint RCE vulnerability CVE-2026-45659
A high-severity remote code execution vulnerability (CVE-2026-45659) in SharePoint may be exploited in low-complexity attacks.
helpnetsecurity.com·1mo ago
CISA adds actively exploited SharePoint RCE flaw to KEV catalog after Microsoft downplayed risk
Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers
theregister.com·8d agoCISA adds actively exploited SharePoint RCE flaw to KEV catalog after Microsoft downplayed risk
Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers
theregister.com·8d agoCISA adds actively exploited SharePoint RCE flaw to KEV catalog after Microsoft downplayed risk
Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers
theregister.com·8d ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.