Advisories 29 July 2026

GitHub MCP Server – NULL Pointer Dereference Denial of Service (CVE-2026-47427)

Scope: GitHub MCP Server, Versions Prior

Advisories 29 July 2026
NVIDIA DCGM Exporter – Uncontrolled Resource Consumption Denial of Service (CVE-2026-47483)

Scope: NVIDIA DCGM Exporter

Advisories 29 July 2026
Adobe Photoshop Installer – Uncontrolled Search Path Element (DLL Hijacking) (CVE-2026-48388)

Scope: Adobe Photoshop Installer Componen

Advisories 27 July 2026
Devolutions PowerShell Universal Cleartext Storage of Secret Variables Allows Local Credential Theft (CVE-2026-16802)

Scope: Devolutions PowerShell Universal Versions 2026.2.2 and Earlier (No Vault Configured

Advisories 27 July 2026
Microsoft Azure Portal Unauthenticated Information Disclosure Server-Side Patched (CVE-2026-62835)

Scope: Microsoft Azure Portal (All Tenants, Exclusively Cloud-Hosted Service)

Advisories 27 July 2026
Devolutions PowerShell Universal Authenticated Code Injection Enables Full Server Compromise (CVE-2026-16801)

Scope: Devolutions PowerShell Universal Versions 2026.2.2 and Earlier

Advisories 24 July 2026
WP Foodbakery WordPress Plugin Subscriber-Level Path Traversal Allows Arbitrary File Deletion Leading to RCE (CVE-2026-15802)

Scope: WP Foodbakery Plugin for WordPress Versions up to and Including 4.9 (No Patch Curre

Subscribe to Advisories