poc-h2-CVE-2026-71554

CVE-2026-71554 - h2 Duplicate Host Header Request Smuggling Primitive This is my first CVE, and I have released this PoC to document the finding and help others understand and reproduce it. CVE: CVE-2026-71554 GHSA: GHSA-6hr6-w5qg-qmwg Affected: h2 = 4.4.0 Fixed: h2 4.4.1 Severity: Medium CWE-444...

CVE-2024-11040

CVE-2024-11040 vllm-project vllm version 0.5.2.2 is vulnerable to Denial of Service attacks...

CVE-2026-126196

The pgEdge Postgres MCP Server (prior to version 1.1.0 ) contains a vulnerability where the read_only mode can be bypassed via SQL statement smuggling through the query_database function. The root cause is that pgx Exec (without bind parameters) may select PostgreSQL's simple query protocol, allo...

CVE-2026-126644

A link-following flaw was found in the authorizedkey module of the ansible.posix collection, residual to the fix for CVE-2026-11837. That fix guards only the final path component os.chown with followsymlinks=False and ONOFOLLOW in safeopenwrite. When an unprivileged local user replaces their /.ss...

EUVD-2026-124343

A link-following flaw was found in the authorizedkey module of the ansible.posix collection, residual to the fix for CVE-2026-11837. That fix guards only the final path component os.chown with followsymlinks=False and ONOFOLLOW in safeopenwrite. When an unprivileged local user replaces their /.ss...

CVE-2026-126644

A link-following flaw exists in the authorized_key module of the ansible.posix collection. This vulnerability is residual to the fix for CVE-2026-11837 because the existing fix only guards the final path component. An unprivileged local user can replace their ~/.ssh directory with a symlink to a ...

PT-2026-145904

Name of the Vulnerable Software and Affected Versions pgEdge Postgres MCP Server versions prior to 1.1.0 Description The query database function on a read-only connection may send unrecognized statements through pgx Exec without bind parameters. This triggers the use of PostgreSQL's simple query...

Linux Distros Unpatched Vulnerability : CVE-2026-126644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A link-following flaw was found in the authorizedkey module of the ansible.posix collection, residual to the fix for CVE-2026-11837. That fix guards only the...

CVE-2026-40433

Heap-based buffer overflow for some IntelR PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-120014

SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator into visiting a malicious link. Visiting the link could cause...

CVE-2026-120014

The SAP HANA XSA Web Dispatcher is vulnerable to a Cross-Site Request Forgery (CSRF) flaw due to insufficient request validation in certain administrative functionalities. An unauthenticated attacker can trick a logged-on administrator into visiting a malicious link, causing unintended actions wi...

EUVD-2026-120697

SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator into visiting a malicious link. Visiting the link could cause...

CVE-2026-120014 Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager

SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator into visiting a malicious link. Visiting the link could cause...

AlmaLinux 8 : qt5-qtdeclarative (ALSA-2026:96075)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:96075 advisory. qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser CVE-2025-12385 Tenable has extracted the preceding description bloc...

CVE-2026-120014: SAP_SE SAP Web Dispatcher and Internet Communication Manager: SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality

SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator into visiting a malicious link. Visiting the link could cause...

RockyLinux 8 : qt5-qtdeclarative (RLSA-2026:96075)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:96075 advisory. qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser CVE-2025-12385 Tenable has extracted the preceding description blo...

Fedora 44 : sofia-sip (2026-b176109503)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b176109503 advisory. Upstream release 1.13.19. ---- Patch for out-of-bounds read in msgmultipartparse. Tenable has extracted the preceding description block directly fro...

Fedora 43 : sofia-sip (2026-046c8a7938)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-046c8a7938 advisory. Upstream release 1.13.19. ---- Patch for out-of-bounds read in msgmultipartparse. Tenable has extracted the preceding description block directly fro...

Slackware Linux 15.0 / current rsync Vulnerability (SSA:2026-308-01)

The version of rsync installed on the remote host is prior to 3.5.2. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-308-01 advisory. New rsync packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding descriptio...

Security update for cadvisor (important)

openSUSE Security Update: Security update for cadvisor Announcement ID: openSUSE-SU-2026:0365-1 Rating: important References: 1283657 Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE: 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE...