Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 2.3 CVE-2025-69274

Spectrum broken authorization scheme_CVE-2025-69274

Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation.This is...

Broadcom DX NetOps Spectrum 24.3.10 and earlier CVE
LOW 3.7 CVE-2026-22611

AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value_CVE-2026-22611

AWS SDK for .NET works with Amazon Web Services to help build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. From ve...

aws aws-sdk-net >= 4.0.0, < 4.0.3.3 CVE
LOW 2.7 CVE-2026-22691

pypdf has possible long runtimes for malformed startxref_CVE-2026-22691

pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref. An attac...

py-pdf pypdf < 6.6.0 CVE
LOW 2.7 CVE-2026-22690

pypdf has possible long runtimes for missing /Root object with large /Size values_CVE-2026-22690

pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for missing /Root object with lar...

py-pdf pypdf < 6.6.0 CVE
LOW 3.5 CVE-2026-22602

OpenProject is Vulnerable to User Enumeration via User ID_CVE-2026-22602

OpenProject is an open-source, web-based project management software. Prior to version 16.6.2, a low‑privileged logged-in user can view the full na...

opf openproject < 16.6.2 CVE
LOW 3.5 CVE-2025-62487

Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended access to the uploaded files._CVE-2025-62487

### Details On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the...

Palantir com.palantir.acme:gotham-default-apps-bundle 100.30251002.0 CVE
LOW 2.7 CVE-2025-46676

CVE-2025-46676_CVE-2025-46676

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release versio...

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) Feature Release 7.7.1.0 CVE
LOW 2.3 CVE-2025-46643

CVE-2025-46643_CVE-2025-46643

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release versio...

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) Feature Release 7.7.1.0 CVE
LOW 3.5 CVE-2025-3950

Exposure of Private Personal Information to an Unauthorized Actor in GitLab_CVE-2025-3950

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that coul...

GitLab GitLab 10.3 CVE
LOW 2.1 CVE-2026-20975

CVE-2026-20975_CVE-2026-20975

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary ...

Samsung Mobile Samsung Cloud 5.6.11 CVE