EUVD-2026-55022

The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before setting a WordPress administrator authentication cookie during its scheduled content-synchronization task. On server configurations where the scheduled task executes before the HTTP...

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch

A flaw was found in Node.js. This flaw involves a mismatch in how Node.js handles TLS Transport Layer Security hostnames and unicode dot separators during authentication. This mismatch can lead to a wildcard-depth authentication bypass. An attacker could exploit this to bypass intended security...

PT-2026-69991

Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints. This issue results from improper...

PT-2026-69953

Name of the Vulnerable Software and Affected Versions TrustyAI Service affected versions not specified Description A flaw in the TrustyAI Service TAS deployment allows any pod on the cluster network to bypass authentication and directly access the TAS backend API. This could enable an attacker to...

CVE-2026-16742

systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...

PT-2026-69989

Name of the Vulnerable Software and Affected Versions PingFederate versions prior to 13.1 Description Cross-Site Request Forgery CSRF weaknesses in the Administrative Console may allow actors to perform unauthorized actions. This occurs when administrators with active sessions are triggered to...

The vulnerability of system calls unlinkat and funlinkat in the kernels of FreeBSD allows a attacker to compromise the integrity of the protected information.

The vulnerability of the unlinkat and funlinkat system calls in FreeBSD operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the Web Speech component in the Firefox web browser and the Thunderbird email client allows attackers to compromise data integrity.

The vulnerability of the Web Speech component in the Firefox web browser and the Thunderbird email client involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

The vulnerability of the VMware Directory Service, a component of the VMware vCenter Server virtualization infrastructure management tool, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the VMware Directory Service, a component of the VMware vCenter Server virtual infrastructure management tool, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

RHEL 9 : nodejs:22 (RHSA-2026:52399)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:52399 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

Linux Distros Unpatched Vulnerability : CVE-2026-68300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: auth: verify auth requirement when authchunk is NULL sctpauthchunkverify returns true unconditionally when chunk-authchunk is NULL, silently skipping...

UBUNTU-CVE-2026-16742

systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...

PT-2026-69700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SCTP authentication mechanism where the sctp auth chunk verify function returns true unconditionally when the auth chunk variable is NULL, which allows...

PT-2026-69986

Name of the Vulnerable Software and Affected Versions AnythingLLM versions 1.0.0 through 1.15.0 Description The unauthenticated account-recovery flow in the server/utils/PasswordRecovery/index.js file uses the recoverAccount function to deduplicate recoveryCodes values before they are trimmed. Th...

Photon OS 5.0: Bluez PHSA-2024-5.0-91-0207

An update of the bluez package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0207. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssh PHSA-2026-5.0-92-0926

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0926. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the WebExtensions component in the Firefox web browser and the Thunderbird email client allows a hacker to compromise data integrity.

The vulnerability of the WebExtensions component in the Firefox web browser and the Thunderbird email client involves bypassing authentication processes through spearfishing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

PT-2026-69283

Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0 Description An improper authentication issue exists within the Login component in the /index.php file. A remote attacker can bypass authentication by manipulating the Password argument...