Reserved but Public CVEs

CVE-2026-100206 is a Microsoft Office information disclosure vulnerability caused by insertion of sensitive information into a log file. The exposed information can include a user's work-account sign-in access token.

CVE-2026-100206First seen Sep 25, 2026

0mentions

#1045

CVE-2026-61408

First seen Sep 8, 2026

0mentions

#1046

Stored XSS in Adobe Experience ManagerCWE-79

CVE-2025-64552 is a stored cross-site scripting vulnerability in Adobe Experience Manager. Available reporting identifies it as CWE-79 and places it among multiple AEM XSS issues addressed by Adobe. The vulnerability allows attacker-controlled content to be stored and later rendered in a victim’s browser without proper neutralization, causing execution of injected script in the context of the affected AEM application. Advisory language indicates that exploitation of the affected AEM vulnerabilities could lead to arbitrary code execution, arbitrary file system read, and privilege escalation, but the specific vulnerable component or function for CVE-2025-64552 is not currently available from the provided information.

CVE-2025-64552First seen Mar 19, 2026

0mentions

#1047

Adobe Experience Manager Vulnerability

CVE-2025-64860First seen Jul 30, 2026

0mentions

#1048

CVE-2025-64874

First seen Jul 30, 2026

0mentions

#1049

Adobe product vulnerability addressed in July 2025 security updates

CVE-2025-64540First seen Jul 30, 2026

0mentions

#1050

Missing HSTS Header in HCL AppScan Enterprise Security Rules Update Administration SectionCWE-319

CVE-2020-4326 is a transport security weakness in HCL AppScan Enterprise affecting the security rules update administration section of the web application console. The application does not set the HTTP Strict-Transport-Security (HSTS) header for that interface, allowing browsers to access the affected functionality without being forced to use HTTPS on subsequent connections. This weakens protection against protocol downgrade and interception scenarios on untrusted networks.

CVE-2020-4326First seen Aug 23, 2026

0mentions