PT-2026-70575

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A stack-based buffer overflow occurs wh...

PT-2026-70878

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and...

PT-2026-70571

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An out-of-bounds write occurs in .NET, which could allow an unauthorized attacker to execute code locally. An out-of-bounds write is a memory corruption error that happens when a program writes...

PT-2026-70259

Name of the Vulnerable Software and Affected Versions Zoom Clients affected versions not specified Description A missing bounds check in the annotator function allows a buffer over-write. This issue occurs due to a 32-bit width x height overflow in a native video receive worker. A meeting...

PT-2026-70068

Name of the Vulnerable Software and Affected Versions Axis Communications VAPIX API affected versions not specified Description Improper input validation in a VAPIX API parameter allows for remote code execution and potential privilege escalation. This issue requires authentication with a service...

PT-2026-70886

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.1.3.6 via the top-level script function. This is due to the plugin stores its encrypted options file as options-migrate key.txt in...

PT-2026-70866

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Security Updates for Microsoft SharePoint Server Subscription Edition (August 2026)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Security Update for Microsoft Power BI Report Server (August 2026)

The Microsoft Power BI Report Server on the remote host is missing the February 2026 security update. It is, therefore, affected by an RCE vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...

Langflow validate/code exec() Remote Code Execution (CVE-2026-0770) (Direct Check)

Binary data langflowvalidatecodercecve20260770.nbin...

PT-2026-70113

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git clone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. Thi...

PT-2026-70704

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Deserialization is the process of...

PT-2026-70888

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete revision function in all versions up to, and including, 2.8.169. This makes it possible for...

PT-2026-70126

A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Developer role to execute arbitrary OS commands by exploiting a PHP-Sandbox allow-list bypass. The sandbox allow-list permits functions that transitively invoke system, enabling a developer to escape th...

PT-2026-70618

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

PT-2026-70684

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A use after free condition in Windows DNS allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the affected system. Use after free is ...

Linux Distros Unpatched Vulnerability : CVE-2026-73145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-58ph-q79f-7x9x: HTTP server: unbounded request accumulation CVE-2026-73145 Note that Nessus relies on the...

Security Update for Microsoft .NET Core SDK (August 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - .NET Elevation of Privilege Vulnerability CVE-2026-58641, CVE-2026-62871, CVE-2026-62886, CVE-2026-62909 - .NET Securit...

Security Updates for Microsoft Exchange Server (August 2026)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a...

Security Updates for Microsoft Outlook Products (August 2026)

The Microsoft Outlook Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-70329 - Heap-based buffer overflow in...