CVE-2026-65400

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials...

CVE-2026-65400

An authentication bypass in the screensharingd daemon on macOS allows a network attacker to authenticate to Screen Sharing without valid credentials. The vulnerability stems from a stale success status returned by the SRP (Secure Remote Password) frame-length validator, meaning the connection is ...

CVE-2026-65400

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials...

PT-2026-68882

Name of the Vulnerable Software and Affected Versions WordPress affected versions not specified Description WordPress is subject to a pre-authentication reflected cross-site scripting XSS issue on the login screen. This allows an attacker to execute arbitrary JavaScript in the site origin without...

About the security content of macOS Sequoia 15.7.9

About the security content of macOS Sequoia 15.7.9 This document describes the security content of macOS Sequoia 15.7.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of macOS Sonoma 14.8.9

About the security content of macOS Sonoma 14.8.9 This document describes the security content of macOS Sonoma 14.8.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

CVE-2026-65400: Improper Authentication

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials...

PT-2026-68772

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.6.1 macOS Sequoia versions prior to 15.7.9 macOS Sonoma versions prior to 14.8.9 Description An authentication bypass exists in the built-in Screen Sharing functionality, which allows a network attacker to...

macOS 15.x < 15.7.9 (148171)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.7.9. It is, therefore, affected by a vulnerability: - An attacker on the network may be able to authenticate to Screen Sharing without valid credentials CVE-2026-65400 Note that Nessus has not tested for this issue...

About the security content of macOS Tahoe 26.6.1

About the security content of macOS Tahoe 26.6.1 This document describes the security content of macOS Tahoe 26.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

NPM: Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size

NPM: Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size vulnerability discovered by ? in WordPress Npm electron versions 39.8.10...

CVE-2026-11977

The affected software is the WordPress plugin WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars . The vulnerability is a generic SQL Injection via the parameter wpma_metabox_authors_list in all versions up to and including 3.9.1, caused by insufficient escaping and lac...

Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access

Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom software updates, business document reviews, and system maintenance utilities to stealthily deploy Remote Monitoring and Management RMM programs li...

SUSE SLED15 / SLES15 Security Update : python-urwid (SUSE-SU-2026:3460-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3460-1 advisory. This update for python-urwid fixes the following issue: - CVE-2026-9323: web session IDs generated by Screen.start are...

PT-2026-67652

The Nested Pages WordPress plugin before 3.2.15 does not properly escape post titles before outputting them into HTML attributes on an administrative listing screen, allowing users with the Editor role or Contributor/Author when the Nested Pages WordPress plugin before 3.2.15 is enabled for the...

CVE-2026-15233: Improper Neutralization of Input During Web Page Generation

The Nested Pages WordPress plugin before 3.2.15 does not properly escape post titles before outputting them into HTML attributes on an administrative listing screen, allowing users with the Editor role or Contributor/Author when the Nested Pages WordPress plugin before 3.2.15 is enabled for the...

Security update for python-urwid

This update for python-urwid fixes the following issue: CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:3460-1 Security update for python-urwid

This update for python-urwid fixes the following issue: - CVE-2026-9323: web session IDs generated by Screen.start are not cryptographically secure bsc1271868...

Chromium: CVE-2026-17938 Inappropriate implementation in FullScreen

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE SLED15 / SLES15 Security Update : python-urwid (SUSE-SU-2026:3425-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3425-1 advisory. This update for python-urwid fixes the following issue CVE-2026-9323: web session IDs generated by Screen.start are not...