PT-2026-58797

Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Description An unrestricted upload of files with dangerous types allows arbitrary code execution in the context of the current user. An attacker can inject malicious scripts into a web page to...

PT-2026-58684

Name of the Vulnerable Software and Affected Versions Audition affected versions not specified Description An out-of-bounds write issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a user opens a malicious file, requiring user interaction f...

AlmaLinux 8 : freerdp (ALSA-2026:38501)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:38501 advisory. freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution CVE-2026-45700 Tenable has extracted the preceding description bloc...

openSUSE 16 Security Update : perl-DBI (openSUSE-SU-2026:21293-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21293-1 advisory. This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead...

Adobe Bridge 15.1.5 < 15.1.6 / 16.x < 16.0.4 Multiple Vulnerabilities (APSB26-81)

The version of Adobe Bridge installed on the remote Windows host is prior to 15.1.6 or 16.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-81 advisory. - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution...

APSB26-72 : Security update available for Adobe Media Encoder

Adobe has released an update for Adobe Media Encoder. This update resolves critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure...

Adobe After Effects < 25.6.6 / 26.0.0 < 26.3.0 Multiple Arbitrary code execution (APSB26-78) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 25.6.6, 26.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-78 advisory. - After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code...

openSUSE 16 Security Update : python-Pillow (openSUSE-SU-2026:21296-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21296-1 advisory. This update for python-Pillow fixes the following issues - CVE-2026-42311: malicious PSD file processing can lead to arbitrary code execution...

RockyLinux 10 : perl-DBI (RLSA-2026:38513)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38513 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block...

SonicWall SMA1000 Appliances Code Injection Vulnerability

SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

CVE-2026-51807

Heap-based out-of-bounds write in j2kprecinctsubband::parsepacketheader in OpenHTJ2K versions 0.18.3 and earlier fixed in v0.18.4 caused by missing bounds validation before coding-pass lengths are written to j2kcodeblock::passlength128. A crafted JPEG 2000 codestream containing malformed PPM pack...

PT-2026-58838

Name of the Vulnerable Software and Affected Versions Adobe Illustrator affected versions not specified Description An out-of-bounds write issue exists that could allow arbitrary code execution within the context of the current user. This occurs when a user opens a specially crafted malicious fil...

PT-2026-58837

Name of the Vulnerable Software and Affected Versions Adobe Illustrator affected versions not specified Description An improper input validation issue exists that could allow arbitrary code execution within the context of the current user. This occurs when a user opens a specially crafted malicio...

The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, allows attackers to execute arbitrary JavaScript code (XSS).

The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code XSS using a specially created URL address...

PT-2026-58789

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description An out-of-bounds write flaw exists that could allow arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, meaning user interactio...

PT-2026-58781

Name of the Vulnerable Software and Affected Versions Creative Cloud Desktop affected versions not specified Description An Uncontrolled Search Path Element issue exists in the AdobeUpdateService. This flaw could allow an attacker to achieve local privilege escalation and execute arbitrary code...

PT-2026-58020

Name of the Vulnerable Software and Affected Versions Arena Simulation affected versions not specified Description A memory corruption issue exists in the expmt.exe Siman component. The flaw is caused by improper validation of user-supplied data, leading to an out-of-bounds write, which occurs wh...

PT-2026-58843

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description Improper input validation allows for arbitrary file system read, enabling an attacker to access sensitive files and directories outside the intended scope. Exploitation requir...

PT-2026-58720

Name of the Vulnerable Software and Affected Versions Podlove Podcast Publisher versions prior to 4.5.2 Description Missing file type validation in the podlove handle cache files function allows unauthenticated attackers to upload arbitrary files to the server. This flaw in the image cache can le...

PT-2026-58786

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description An Untrusted Pointer Dereference issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, meaning user...