PT-2026-96925

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description OAuthConfig writes a plaintext fallback file containing access token and refresh token within the user's .mcp-atlassian directory. This file is created using process-default permissions rather...

CVE-2026-79315: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting vulnerability exists in x-ui 0.3.2. The management interface reflects the raw request URI into a client-side template binding expression used for sidebar menu highlighting. Server-side HTML entity escaping is ineffective in this context: the browser decodes the...

PT-2026-96712

Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to build 7001 Description A remote code execution issue exists in the GINA client, which could lead to full system compromise. Recommendations Update to build 7001...

Zoho ManageEngine ADSelfService Plus: CVE-2026-74849: Remote code execution vulnerability

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client...

PT-2026-96832

Name of the Vulnerable Software and Affected Versions Postiz affected versions not specified Description Postiz uses Math.random instead of a cryptographically secure source to generate security-sensitive credentials. This affects OAuth access tokens, authorization codes, client secrets,...

CVE-2026-79315

A reflected cross-site scripting vulnerability exists in x-ui 0.3.2. The management interface reflects the raw request URI into a client-side template binding expression used for sidebar menu highlighting. Server-side HTML entity escaping is ineffective in this context: the browser decodes the...

CVE-2026-83603: External Control of File Name or Path

Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socketpath from the low-privileged netdata service account. The account can direct root fail2ban-client...

Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco ThousandEyes Virtual Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of DHCP client configuration data. The issue results fro...

AlmaLinux 10 : openssh (ALSA-2026:69129)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69129 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...

openssh security update

9.9p1-11.0.1 - Restore pamsshagentrel values that were used for initial release - Fix PerSourcePenalties grace-exceeded using the crash penalty value Orabug: 39825354 - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el102 ML-KEM/NIST backport Orabug: 39423076 - Upstream...

AlmaLinux 9 : openssh (ALSA-2026:69130)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69130 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...

RockyLinux 10 : openssh (RLSA-2026:69129)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69129 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrec...

RockyLinux 9 : openssh (RLSA-2026:69130)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69130 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...

RockyLinux 8 : openssh (RLSA-2026:69266)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69266 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...

AlmaLinux 8 : freerdp (ALSA-2026:69387)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:69387 advisory. FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway CVE-2026-55193 Tenable has extracted the preceding description block directly fro...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-090675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090675 advisory. A flaw was found in Python, specifically in the FTP File Transfer Protocol client library in PASV passive mode. The issue is how the FTP client trusts the host from...

CVE-2026-74849: Improper Neutralization of Special Elements used in an OS Command

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client...

Malicious Package

Overview google-cloud-datacatalog-lineage-producer-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

GHSA-2MJX-QC3C-RQVC vulnerabilities

Vulnerabilities for packages: linkerd-network-validator, linkerd2-proxy, vector, rustls-openssl-client, xh, sentry-cli, garage, qdrant, sdp-k8s-injector, zellij, pixi, fnm, ztunnel-fips, cloud-hypervisor, tealdeer, ntpd-rs, ztunnel, cargo-audit, lychee, graphql-hive-router-query-planner, pnpm,...

EUVD-2026-84121

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy normally matches the raw request path, while servlet backends such as Apache Tomcat strip semicolon matrix parameters from each path segment before resolving...