Infrastructure. Vulnerabilities and trust incidents in the software and hardware node operators run.
10 items match, 0 of them low signal.
BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.CISA KEV catalog
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.CISA KEV catalog
N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.CISA KEV catalog
N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.CISA KEV catalog
N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556.CISA KEV catalog
SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature.CISA KEV catalog
ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.CISA KEV catalog
Everything here already leads the page above.