Oracle Linux 9 : glib2 (ELSA-2026-55440)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55440 advisory. - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58012: buffe...

Linux Distros Unpatched Vulnerability : CVE-2026-1199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: resource-agents (UTSA-2026-103693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-103693 advisory. urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via...

OpenJDK 8 <= 8u502 / 11.0.0 <= 11.0.32 / 17.0.0 <= 17.0.20 / 21.0.0 <= 21.0.12 / 25.0.0 <= 25.0.4 / 26.0.0 <= 26.0.2 Multiple Vulnerabilities (2026-08-18)

The version of OpenJDK installed on the remote host is 8 prior to 8u502 / 11.0.0 prior to 11.0.32 / 17.0.0 prior to 17.0.20 / 21.0.0 prior to 21.0.12 / 25.0.0 prior to 25.0.4 / 26.0.0 prior to 26.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026-08-18 advisory...

Linux Distros Unpatched Vulnerability : CVE-2026-69219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1,...

Linux Distros Unpatched Vulnerability : CVE-2026-69220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1,...

ROS-20260819-73-0042

The vulnerability in Tomcat10 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260819-73-0060

The vulnerability in Tomcat10 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, who operate remotely, to gain increased privileges...

PT-2026-78500

Name of the Vulnerable Software and Affected Versions Cisco Crosswork affected versions not specified Description Multiple issues related to missing authentication for critical functions were identified during an internal security review. These issues fall under the category of CWE-306, which...

PT-2026-78547

Name of the Vulnerable Software and Affected Versions Multicluster Engine for Kubernetes affected versions not specified Description A flaw in the cluster-proxy-addon component allows an unauthenticated attacker with access to the user-facing route to bypass authentication and authorization check...

Linux Distros Unpatched Vulnerability : CVE-2026-72889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the...

PT-2026-78449

Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory 6.2.3 - Ownership could be changed using attacker-supplied company and user IDs, including for listings that already had an owner. 6.2.3 binds the action to the authenticated user and only allows...

PT-2026-78458

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Improper authentication in the system could allow a remote attacker to gain root privileges. Recommendations At the moment, there is no information about a newer version tha...

SUSE SLED15: jetty-continuation / jetty-http / jetty-io / jetty-security / etc (SUSE-SU-2026:3631-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3631-1 advisory. - CVE-2026-10050: ISO-8859-1 lossy encoding allows authentication bypass via character substitution bsc1272393. Tenable...

PT-2026-78396

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description The software fails to persist the WebAuthn login challenge generated by the prepareForLogin function because the WebAuthn controller does not save the mutated key objects back to the database. Durin...

PT-2026-78497

Name of the Vulnerable Software and Affected Versions Cisco Secure Workload affected versions not specified Description Improper authentication issues were identified during an internal security review. These issues are categorized under CWE-287, which refers to a weakness where the software does...

Linux Distros Unpatched Vulnerability : CVE-2026-18691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used...

RDK-B WebUI contains multiple vulnerabilities

Overview RDK Central RDK-B WebUI version, rdkb-2025q4-kirkstone, contains multiple vulnerabilities involving memory corruption, improper authentication, race conditions, and insufficient input validation. An attacker with network access to an affected WebUI may be able to bypass authentication,...

traefik -- Multiple vulnerabilities

The traefik project releases a new version addressing multiple vulnerabilities: GHSA-5w68-77r2-r64c Complete authentication bypass in the digestAuth middleware GHSA-g55h-rg46-x9c5 TLS option confusion in multi-host routers can bypass mTLS for protected hosts GHSA-j994-9gqj-9hwq Same-host Ingress...

PT-2026-78290

The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, allowing unauthenticated attackers to log in as any registered user, including an administrator...