Google Chrome Microsoft Edge Information Disclosure

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

TabGroups Component Google Chrome Microsoft Edge Information Disclosure

The vulnerability of the TabGroups component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of the DOM components in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Transactions Platform XSS

The vulnerability of the Transactions Platform web browsers Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Sensor Component Protected Information Access

The vulnerability of the Sensor component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

Loader Component Protected Information Access

The vulnerability of the Loader component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Password Component Access Information Disclosure

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to authentication errors. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

WebProtect Components Protected Information Access

The vulnerability of the WebProtect components for Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Editing Component Protected Information Access

The vulnerability of the Editing component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Netcore NR268 CGI User Ok Data Compromise

The vulnerability of the userok function in the CGI interface of Netcore NR268 microprogramming systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Network Device Enrollment Service Code Execution

The vulnerability of the Network Device Enrollment Service NDES for Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2026-114425

Name of the Vulnerable Software and Affected Versions curl versions prior to 8.23.0-1.1 Description When processing an HTTP redirect to a URL containing userinfo a username:password component, curl may incorrectly retain and re-transmit the HTTP Negotiate authentication state from the original...

PT-2026-113741

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description When using an ambient user during an initial transfer with Negotiate authentication, curl may incorrectly transmit credential details to an unrelated second origin if it is instructed to follow...

RockyLinux 10 : curl (RLSA-2026:80512)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:80512 advisory. curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies CVE-2026-6253 curl: libcurl: Authentication bypass due to incorrect HT...

Fedora 44 : curl (2026-a06b828d65)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a06b828d65 advisory. - Fix incomplete mTLS config matching in conn reuse CVE-2026-8932 - Fix OpenLDAP SASL authentication bypass CVE-2026-13608 - Fix OpenSSL pinning...

Rocky Linux 9 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (crlsa-2026_80511)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202680511 advisory. curl: curl: Cookie injection via malicious HTTP server using super cookies CVE-2026-8924 curl: curl: Information disclosure via incorrect Digest...

Linux Distros Unpatched Vulnerability : CVE-2026-109949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in its virtual smartcard GIDS implementation, which stores the...

Linux Distros Unpatched Vulnerability : CVE-2026-70179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-70179 Note that Nessus relies on...

Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value (CVE-2026-25085)

A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass. This plugin only works with Tenable.ot. Please visit...

PT-2026-113989

Name of the Vulnerable Software and Affected Versions PgBouncer versions 1.17.0 through 1.26.0 Description Improper authentication occurs during the SCRAM authentication process. A remote attacker who possesses the password of a user listed in the auth file can authenticate as any other user that...