CVE-2026-76891

A flaw was found in the sharkd component of Wireshark. A remote attacker could exploit this vulnerability, which requires user interaction and has high attack complexity, by triggering a crash. This issue leads to a denial of service DoS, making the sharkd component unavailable. Mitigation Avoid...

CVE-2026-20908

A flaw was found in the Intel NPU Driver for Windows. This time-of-check time-of-use TOCTOU race condition vulnerability allows an unprivileged, authenticated local attacker to cause a denial of service. The attack has high complexity and requires no user interaction. This could lead to a...

CVE-2026-76993 GreyDGL PentestGPT Web-Page Crawling injection

A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection. The attack can be executed remotely. A high complexity level is associated with...

EUVD-2026-63377

A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection. The attack can be executed remotely. A high complexity level is associated with...

CVE-2026-76993 GreyDGL PentestGPT Web-Page Crawling injection

A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection. The attack can be executed remotely. A high complexity level is associated with...

CVE-2026-76993 GreyDGL PentestGPT Web-Page Crawling injection

A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection. The attack can be executed remotely. A high complexity level is associated with...

PT-2026-79126

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A privilege elevation issue exists in the Import component. A remote attacker could use social engineering to trick a user into opening a crafted file, potentially allowing the executi...

Fedora 44 : ntpsec (2026-80887c367d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-80887c367d advisory. Update to the latest upstream release, which has a security fix for CVE-2026-18321, and other bug fixes and improvements. Tenable has extracted the preceding...

PT-2026-78905

A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files to arbitrary locations on the server, potentially achieve arbitrary code execution due to improper validation of...

PT-2026-79127

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description Incorrect authorization in Workers allows a remote attacker who has compromised the renderer process and used social engineering to bypass the web origin policy through a crafted HTML...

Splunk Enterprise 9.4.0 < 9.4.14, 10.0.0 < 10.0.9, 10.2.0 < 10.2.6, 10.4.0 < 10.4.2 (SVD-2026-0801)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0801 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Linux Distros Unpatched Vulnerability : CVE-2026-71127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2026-71134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...

cve-2026-59284 - HIGH - Spring Cloud Commons no allow list for writable env actuator endpoint

cve-2026-59284 - HIGH - Spring Cloud Commons no allow list for writable env actuator endpoint...

PT-2026-79117

Name of the Vulnerable Software and Affected Versions lin-snow Ech0 versions prior to 5.4.2 Description A security flaw exists in the MD5Encrypt function within the internal/util/crypto/crypto.go file. This issue involves the use of a risky cryptographic algorithm, which could allow for remote...

cve-2026-41707 - HIGH - Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay

cve-2026-41707 - HIGH - Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay...

cve-2026-47841 - HIGH - WebAuthn User Verification Bypass via Session Serialization

cve-2026-47841 - HIGH - WebAuthn User Verification Bypass via Session Serialization...

cve-2026-47851 - HIGH - Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader

cve-2026-47851 - HIGH - Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader...

Linux Distros Unpatched Vulnerability : CVE-2026-71115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2026-71140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...