PT-2026-58260

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description Missing...

PT-2026-63410

Name of the Vulnerable Software and Affected Versions Check Point Security Management affected versions not specified Multi-Domain Security Management affected versions not specified Description An authentication bypass allows an unauthenticated remote attacker to execute administrative commands ...

SIP Sustainable Irrigation Platform 5.x (cli_control) Remote Code Execution

Summary SIP is a free Raspberry Pi based Python program for controlling irrigation systems sprinkler, drip, hydroponic, etc. It uses web technology to provide an intuitive user interface UI in several languages. The UI can be accessed in your favorite browser on desktop, laptop, and mobile device...

EulerOS 2.0 SP10 : curl (EulerOS-SA-2026-2644)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libcurl might in some circumstances reuse the wrong connection for SMBS transfers. libcurl features a pool of recent connections so that subsequent...

ROS-20260714-73-0048

The vulnerability of the KILLCLIENT command in the PostgreSQL PgBouncer connection pool software is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2026-58856

Name of the Vulnerable Software and Affected Versions VMware Avi Load Balancer versions 31.1.1 through 31.2.2 VMware Avi Load Balancer versions 30.1.1 through 30.2.6 VMware Avi Load Balancer versions 22.1.1 through 22.1.7 Description An authentication bypass exists in the Avi Controller control...

CVE-2026-62145 - Local privilege escalation in Gaia Portal

Symptoms - A vulnerability in Gaia Portal allows an authenticated attacker with read-only access to run commands as root. - Affected Products and Versions: Versions: R77.30, R80, R80.10, R80.20, R80.30, R81 R81.10, R81.20, R82, R82.10 Products: Security Gateway, Security Management Note: Check...

CVE-2026-62144 - Management Authentication Bypass and Privilege Escalation

Symptoms - Impact: An unauthenticated attacker can run any command on the Management including run-script and exec-command on Security Gateway Check Point Firewall. - Affected Products and versions: Products: Security Management, Multi-Domain Security Management Server MDS Product Versions: R77.3...

PT-2026-63408

Name of the Vulnerable Software and Affected Versions Check Point SmartConsole affected versions not specified Description An authentication bypass in the login process allows an unauthenticated remote attacker to obtain an application login token and authenticate with full administrative...

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network...

RHEL 10 : nodejs22 (RHSA-2026:39246)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39246 advisory. Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenSSH vulnerabilities (USN-8533-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8533-1 advisory. It was discovered that OpenSSH sftp did not properly constrain the location of downloaded files when connecting to an...

UBUNTU-CVE-2026-47303

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

PT-2026-58697

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An authentication bypass occurs due to the use of assumed-immutable data, which allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there i...

PT-2026-58682

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An incorrect implementation of the authentication algorithm allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information abo...

PT-2026-58004

Name of the Vulnerable Software and Affected Versions Opcenter X versions prior to V2604 Description An issue exists where the application fails to properly validate the algorithm specified in the JSON Web Token JWT header. This flaw allows an unauthenticated remote attacker to forge arbitrary...

PT-2026-58347

Name of the Vulnerable Software and Affected Versions Windows RPC API affected versions not specified Description Improper authentication in the Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network. Remote Procedure Call RPC is a protocol that allows a...

PT-2026-58045

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Weak authentication in the JWT token validation pipeline allows an unauthenticated remote attacker to bypass security features over a network. Successful exploitation...

PT-2026-58266

Name of the Vulnerable Software and Affected Versions Windows Admin Center affected versions not specified Description Improper authentication allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that contains a...

GHSA-C67F-GMXW-MJ93 FacturaScripts: Account takeover of any 2FA-enabled user

Authentication bypass in FacturaScripts: /login?action=two-factor-validation accepts brute-forceable TOTP without password or CSRF protection Summary Core/Controller/Login.php::twoFactorValidationAction accepts an unauthenticated POST containing only fsNick and fsTwoFactorCode. If the TOTP value...