25853 matches found
CVE-2026-89047: Improper Neutralization of Input During Web Page Generation
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
Rocky Linux 8.6 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_0252)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260252 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7383, CVE-2024-7409. Tenable h...
Rocky Linux 8.6 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_0836)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260836 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...
CentOS Linux 7.9 [CIQ] Security Update: net-snmp / net-snmp-agent-libs / net-snmp-debuginfo / etc (ciqsa-2026_0724)
The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260724 advisory. This advisory aggregates security fixes for the net-snmp SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2025-68615. Tenable has extracted the preceding...
Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3963)
The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5226.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3963 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a...
Critical: amazon-ssm-agent
Issue Overview: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-42505 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2...
Rocky Linux 9.2 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_0489)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260489 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7409, CVE-2023-2680. Tenable h...
CVE-2026-9864: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...
CVE-2026-97662: Improper Neutralization of Argument Delimiters in a Command
An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...
CVE-2026-51874: Undefined Security Weakness
In Devika v1.0, the Patcher Agent savecodetoproject function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace...
MIRROR: Multipath Quorum Integrity for LLM Multi-Agent Communication
Inter-agent communication is central to Large Language Model Multi-Agent Systems LLM-MAS, but it introduces an underexplored vulnerability: Agent-in-the-Middle AiTM attacks that manipulate messages in transit without compromising the agents themselves. Prior work reports Attack Success Rates ASR...
@agent-tool-platform/agent-kit (>=0.2.0, <=0.4.0), @agent-tool-platform/ast-summarizer (>=0.1.0, <=0.1.1) +589 more potentially affected by CVE-2026-84504 via fastify (>=5.0.0, <=5.12.1)
fastify NPM version =5.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =1.0.4, =0.0.0-vBETA-20260417080530, =0.0.1, =1.60.2, =1.0.0, =0.0.0, =2.0.1, =0.1.0, =0.2.7 and more Source cves: CVE-2026-84504 Source advisory: OSV:GHSA-667R-XXJV-C9MM...
CVE-2026-51870
DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute...
CVE-2026-51866
In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through the real /api/v1/chat/react-agent flow...
CVE-2026-51852
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.savefileb64. The savefileb64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks...
CVE-2026-51853
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.init. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction...
GHSA-9J54-FG26-WV3R vulnerabilities
Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...
CVE-2026-102266 vulnerabilities
Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...
GHSA-HXM8-2XGR-2P9M vulnerabilities
Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...
GHSA-W2CX-738M-MC7W vulnerabilities
Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...