Linux Distros Unpatched Vulnerability : CVE-2026-56705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via...

PT-2026-81394

The Kaltura HTML5 player mwEmbed / html5lib contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialization and unsanitized filesystem path construction. mwEmbedLoader.php accepts a user‑controlled ServiceUrl, whose response is passed to unserialize, and the...

PT-2026-81848

Name of the Vulnerable Software and Affected Versions dbgpt-app versions prior to 0.8.1 Description An issue exists in the skill upload endpoint within packages/dbgpt-app/src/dbgpt app/openapi/api v1/agentic data api.py where the destination path for uploaded skills is constructed using the...

CVE-2026-51368

CVE-2026-51368 is a critical (CVSS 9.8) vulnerability in Beijing Tongtech tongweb v.7.0.24 , affecting the Spring HttpInovkerServiceExporter component. A remote attacker with no privileges or user interaction can execute arbitrary code by sending a crafted request to the console/heimdall endpoint...

PT-2026-81901

Name of the Vulnerable Software and Affected Versions Compliance-trestle versions prior to 3.12.4 Compliance-trestle versions 4.0.0 through 4.0.3 Description Compliance-trestle is subject to server-side template injection, which can lead to remote code execution. This occurs because the...

Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write

Description The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across...

FreeBSD -- Multiple vulnerabilities in ppp(8)

Problem Description: ppp8 contained three memory safety errors in its handling of multilink endpoint discriminator options. mpEnddisc used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result...

Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura Servers

Overview The Kaltura HTML5 Player V2 Library mwEmbed / html5lib contains two vulnerabilities, both involving the same insecure deserialization flaw, that enable arbitrary file read and remote code execution. Affected versions include html5lib v2.45, v2.103 and earlier, and other v2.x releases tha...

VulnCheck KEV: CVE-2026-63520

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE

!/usr/bin/env python3 """ CVE-2026-42167 — ProFTPD modsql post-authentication SQL injection - RCE postauthstorrce.py --host --port 21 \ --user --password \ --shell-host --shell-port 4444 SUMMARY ------- ProFTPD's modsql logs FTP activity through user-supplied SQL. Its escaping helper isescapedtex...

PT-2026-81520

Name of the Vulnerable Software and Affected Versions Next.js versions 13.4 through 15.5.23 Next.js versions 16.0 through 16.3.2 Description Two unauthenticated remote code execution issues affect Next.js. The first issue is a path traversal in the filesystem cache that specifically affects serve...

AlmaLinux 9 : python-urwid (ALSA-2026:58952)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:58952 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description block...

PT-2026-81522

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in the WebRTC component, which can be triggered by a remote attacker using a specially crafted HTML page. This flaw allows for the execution of arbitrary code...

PT-2026-81836

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A use-after-free issue exists in ANGLE, which occurs when software continues interacting with memory after it has been released. This memory-corruption flaw allows a remote...

PT-2026-81754

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in Chromoting allows a remote attacker to execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is a memory corruption fla...

RHEL 8 : gstreamer1-plugins-good (RHSA-2026:59179)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59179 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:59152)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59152 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

RockyLinux 8 : gstreamer1-plugins-good (RLSA-2026:59179)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59179 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution v...

PT-2026-81268

Name of the Vulnerable Software and Affected Versions All-in-One WP Migration and Backup versions prior to 7.110 Description An unauthenticated second-order SQL injection exists in the archive restore functionality. This occurs because user-supplied parameters are insufficiently escaped and SQL...

VulnCheck KEV: CVE-2026-66066

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...