FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration

Description An insecure default configuration in FUXA allows an unauthenticated, remote attacker to gain administrative access and execute arbitrary code on the server. This affects FUXA through version 1.2.9 when authentication is enabled, but the administrator JWT secret is not configured. This...

Tanium Patch 安全漏洞

Tanium Patch is a patch management module developed by the American company Tanium. Tanium Patch has a security vulnerability, which stems from improper default permission settings...

Tanium Partner Integration 安全漏洞

Tanium Partner Integration is a set of open interfaces provided by the American company Tanium. There are security vulnerabilities associated with Tanium Partner Integration, and these vulnerabilities stem from improper default permission settings...

CVE-2025-15338: Incorrect Default Permissions

Tanium addressed an incorrect default permissions vulnerability in Partner Integration...

CVE-2025-15336: Incorrect Default Permissions

Tanium addressed an incorrect default permissions vulnerability in Performance...

Tanium Discover 安全漏洞

Tanium Discover is an asset scanning module developed by the American company Tanium. Tanium Discover has a security vulnerability, which stems from improper default permission settings...

PT-2026-6632

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions through 7.6.6 Description Fortinet FortiOS through version 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files. This issue was exploited in the wild between December 16, 2025, and...

PT-2026-6621

Name of the Vulnerable Software and Affected Versions Tanium Performance affected versions not specified Description Tanium Performance had an issue with incorrect default permissions. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2025-10314: Incorrect Default Permissions

Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation FREQSHIP-mini for Windows versions 8.0.0 to 8.0.2 allows a local attacker to execute arbitrary code with system privileges by replacing service executable files EXE or DLLs in the installation directory with specially...

CVE-2025-15340: Incorrect Default Permissions

Tanium addressed an incorrect default permissions vulnerability in Comply...

CVE-2026-25815: Use of Default Cryptographic Key

Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exploited in the wild from 2025-12-16 through 2026 by default, the encryption key is the same across all customers' installations. NOTE: the Supplier's position is that the instanc...

CVE-2025-15339: Incorrect Default Permissions

Tanium addressed an incorrect default permissions vulnerability in Discover...

PT-2026-6623

Name of the Vulnerable Software and Affected Versions Tanium Partner Integration affected versions not specified Description An incorrect default permissions issue exists in Tanium Partner Integration. Recommendations At the moment, there is no information about a newer version that contains a fi...

PT-2026-6624

Name of the Vulnerable Software and Affected Versions Tanium Discover affected versions not specified Description Tanium Discover was found to have an incorrect default permissions setting. This could potentially allow unauthorized access or modification of data. Recommendations At the moment,...

CVE-2025-15337: Incorrect Default Permissions

Tanium addressed an incorrect default permissions vulnerability in Patch...

Tanium Comply 安全漏洞

Tanium Comply is a risk assessment and compliance checking module developed by the American company Tanium. Tanium Comply has security vulnerabilities, which stem from improper default permission settings...

Tanium Benchmark 安全漏洞

Tanium Benchmark is a security and operations status assessment module developed by the American company Tanium. Tanium Benchmark has security vulnerabilities, which stem from improper default permission settings...

Tanium Enforce 安全漏洞

Tanium Enforce is a terminal policy and configuration management module provided by the American company Tanium. Tanium Enforce has a security vulnerability, which stems from improper default permission settings...

PT-2026-6626

Name of the Vulnerable Software and Affected Versions Tanium Enforce affected versions not specified Description Tanium Enforce has an issue with incorrect default permissions. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Tanium Performance 安全漏洞

Tanium Performance is a terminal performance monitoring and troubleshooting module provided by the American company Tanium. Tanium Performance has a security vulnerability, which stems from improper default permission settings...