Articles posted by Atos
Improper device certificate validation enables AiTM attacks in Siemens SICAM Toolbox II device communicationDue to insufficient validation of device certificates during connections used for device management, Siemens SICAM TOOLBOX II was vulnerable to Adversary-in-...Multiple cross-site scripting vulnerabilities in VertiGIS WebOrderSystem (KundenManager, AuftragsManager)The WebOrderSystem by VertiGIS is affected by multiple cross-site scripting (XSS) vulnerabilities. This allows an attacker to execute malicious JavaScript co...Multiple Vulnerabilities in Quanos Content Solutions SCHEMA ST4All on-premise versions of SCHEMA ST4 are affected by a local privilege escalation vulnerability that can also result in arbitrary file overwrite. The vulner...Broken Access Control in Config Endpoint in LiteLLMAn incomplete authorization check in LiteLLM allowed low privileged attackers to access sensitive data on the host system.CVE-2026-35029 Read the full adviso...Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaSKiuwan SAST did not properly enforce the configuration of locked accounts and allowed a login to the WebUI through SSO authentication, even though the locall...Broken Access Control in Open WebUIAn incomplete authorization check in Open WebUI allowed low privileged attackers to access sensitive tool data.CVE-2026-34222 Read the full advisory hereLocal Privilege Escalation in Vienna Assistant (MacOS) – Vienna Symphonic LibraryThe Vienna Symphonic Library – Vienna Assistant software for MacOS utilizes a privileged helper to perform privileged actions. The NSXPC listener of the priv...Multiple Privilege Escalation Vulnerabilities in Arturia Software Center MacOSThe Arturia Software Center was found to be vulnerable to local privilege escalation via multiple vectors. The privileged helper utilized by Arturia Software...Multiple Vulnerabilities in PEGA Infinity PlatformAn attacker could distinguish between valid and invalid usernames based on the server’s response time which can be used for username enumeration in the PEGA...Is it still worth investing in mainframe computing?When you think of mainframe computing, what images does it conjure up? Whatever comes to mind, one thing is clear: Mainframe has come a long way since its in...The mainframe resource drain: Threat or opportunity?Mainframe was the first enterprise-class IT platform, powering business growth and success since the 1960s. Today, many mainframe experts are nearing retirem...