75242 matches found
UBUNTU-CVE-2026-85089
FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...
CVE-2026-15933
OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...
CVE-2026-79679 Use of Weak Credentials
Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0...
CVE-2026-79679 Use of Weak Credentials
Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0...
EUVD-2026-70412
Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0...
CVE-2026-79679
CVE-2026-79679 is a Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit as used in mapp Services, affecting versions before 6.8.0 . The weakness allows network-based exploitation with no privileges required. The CVSS 3.1 base score is 8.7 (HIGH) , with High impact o...
CVE-2026-85166 n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node
n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline workflow JSON of nodes that execute an inline sub-workflow e.g., the Workflow Tool node. A shared-workflow editor, or any user creating/updating a workflow via the REST API, Public API, or MCP, can...
CVE-2026-15933 Cleartext Storage of Sensitive Credentials in OptimiDoc Server (On-Premise)
OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...
CVE-2026-15933
OptimiDoc Server (On-Premise) stores credentials for external services in cleartext, allowing an authenticated administrator to view previously configured passwords—SMTP , FTP (scan delivery), Active Directory (user list import), and SharePoint —in cleartext through the web administration panel p...
CVE-2026-38577-by-deepak-Anmol
CVE-2026-38577 — Tenda HG21 Hardcoded Root Credentials Summary Field| Value ---|--- CVE ID| CVE-2026-38577 Vendor| Tenda Product| Tenda HG21 XPON Fiber Modem Affected Version| V4.0.0-260302 Product Key| HG21-V1.0-TDE01 Hardware Version| V1.0 Firmware Build Date| 2026-03-02 Firmware File|...
Exploit for Insufficiently Protected Credentials in Wazuh
Automated research artifact — not the upstream project...
PT-2026-85379
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing operations on the device...
PT-2026-85008
Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0...
CVE-2026-85178: Authorization Bypass Through User-Controlled Key
Helicone's VaultManager.getDecryptedProviderKeyById function in the GET /v1/vault/key/providerKeyId endpoint fails to validate the requester's organization against the vault key's organization identifier. Attackers with admin or owner privileges in any organization can retrieve decrypted upstream...
CVE-2026-85451: Use of Hard-coded Credentials
MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast command authorization. Any multicast-reachable peer can enumerate MOOS processes and send termination commands to trigger process...
CVE-2026-8862: Insufficiently Protected Credentials
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code,...
PT-2026-84978
OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...
Linux Distros Unpatched Vulnerability : CVE-2026-85089
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in...
PT-2026-85378
CVE-2026-82684: Missing authorization in Tycon Systems TPDIN-Monitor-WEB3 ≤2.2.9 lets attackers dump system credentials, configs, or flash contents. CVSS 8.1. Unpatched—assume exposure. Isolate affected units and restrict access https://t.co/MztgdxQJ6F CVE CVEAlert infosec SysAdmin cybersecurity...
PT-2026-85255
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code,...