CVE-2026-2038: Critical Auth Bypass in GFI Archiver MArc.Core
CVE-2026-2038 is a missing authorization flaw in GFI Archiver MArc.Core on port 8017. Upgrade to GFI Archiver 15.11 and block the port from outside.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2026-2038 is a missing authorization flaw in GFI Archiver MArc.Core on port 8017. Upgrade to GFI Archiver 15.11 and block the port from outside.
CVE-2026-20223 is a CVSS 10.0 authentication flaw in Cisco Secure Workload REST APIs giving Site Admin access. Apply the fix in the Cisco advisory.
CVE-2026-20157 groups missing encryption flaws in Cisco RoomOS, fixed in the July 2026 hardening release. Update RoomOS per the Cisco advisory.
CVE-2026-20156 groups memory buffer bounds flaws in Cisco RoomOS, fixed in the July 2026 hardening release. Update RoomOS per Cisco advisory.
CVE-2026-2014 is a SQL injection in the itsourcecode Student Management System 1.0 billing page with a public exploit. Retire the app or fix the query.
CVE-2026-2011 is a SQL injection in itsourcecode Student Management System 1.0 with a public exploit and no fix. Retire the app or fix the query.
CVE-2026-1963 is a medium access control flaw in WeKan up to 8.20 in attachment storage. Upgrade to WeKan 8.21 and review board user accounts.
CVE-2026-19622 is a high severity authentication bypass in IBM Planning Analytics 2.0 and 2.1 via sub-request validation. Apply IBM bulletin 7291604.
CVE-2026-1962 is a medium access control flaw in WeKan up to 8.20 in attachment migration. Upgrade to WeKan 8.21 and check your dependency scan results.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.