CVE-2026-63650

A flaw was found in OpenVPN when using mbedTLS. A remote authenticated user could be misidentified due to the software ignoring the configured X.509 username identity lookup field. This could lead to incorrect user authentication and potential security bypasses...

Dahua IPC/VTH/VTO - Authentication Bypass

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. id: CVE-2021-33045 info: name: Dahua IPC/VTH/VTO - Authentication Bypass author: phantomowl severity:...

GHSA-2QJ4-MMR9-4V2F vulnerabilities

Vulnerabilities for packages: celeborn, management-api-for-apache-cassandra-5.0, thingsboard, trino, tez...

GHSA-PRG7-HCFM-MFCR vulnerabilities

Vulnerabilities for packages: mlflow, mycli, airflow...

EUVD-2026-62193

Tapo C200 v5 contains an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls and obtain administrative session tokens. Successf...

OpenJDK 8 <= 8u502 / 11.0.0 <= 11.0.32 / 17.0.0 <= 17.0.20 / 21.0.0 <= 21.0.12 / 25.0.0 <= 25.0.4 / 26.0.0 <= 26.0.2 Multiple Vulnerabilities (2026-08-18)

The version of OpenJDK installed on the remote host is 8 prior to 8u502 / 11.0.0 prior to 11.0.32 / 17.0.0 prior to 17.0.20 / 21.0.0 prior to 21.0.12 / 25.0.0 prior to 25.0.4 / 26.0.0 prior to 26.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026-08-18 advisory...

PT-2026-78459

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Improper authentication allows a remote attacker to gain unauthorized access to NFS-exported filesystems. NFS Network File System is a distributed file system protocol that...

PT-2026-78423

Name of the Vulnerable Software and Affected Versions stigmem-node version 0.9.0a1 Description stigmem-node accepts federation peer key material during peer registration without requiring a separate administrator out-of-band fingerprint approval step. On nodes that accept federation peer...

PT-2026-78782

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 10.4 through 10.4.1 Description An unauthenticated user can retrieve information from Edge Processor pipeline configurations when the Edge Processor is enabled. This occurs because the Edge Processor service REST API...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: resource-agents (UTSA-2026-103693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-103693 advisory. urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via...

UBUNTU-CVE-2026-61634

The RabbitMQ Java client library allows Java and JVM-based application...

UBUNTU-CVE-2026-75032

A flaw was found in BlueZ. Insufficient validation of packet length fi...

PT-2026-78564

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware version FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2...

PT-2026-78391

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.6 Description Failure to validate the security.enableRegistration setting in API endpoints allows the creation of user accounts even when registration is disabled. This bypasses the restriction enforced on the HT...

UBUNTU-CVE-2026-23931

The frontend validatate.api.exists action can be exploited by authenti...

PT-2026-78396

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description The software fails to persist the WebAuthn login challenge generated by the prepareForLogin function because the WebAuthn controller does not save the mutated key objects back to the database. Durin...

PT-2026-78547

Name of the Vulnerable Software and Affected Versions Multicluster Engine for Kubernetes affected versions not specified Description A flaw in the cluster-proxy-addon component allows an unauthenticated attacker with access to the user-facing route to bypass authentication and authorization check...

ROS-20260819-73-0060

The vulnerability in Tomcat10 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, who operate remotely, to gain increased privileges...

PT-2026-78449

Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory 6.2.3 - Ownership could be changed using attacker-supplied company and user IDs, including for listings that already had an owner. 6.2.3 binds the action to the authenticated user and only allows...

Linux Distros Unpatched Vulnerability : CVE-2026-72889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the...