MINI-FXM7-7PVQ-67P6

Bulletin has no description...

MINI-8333-C376-3CXC

Bulletin has no description...

MINI-7J52-CJCV-X28M

Bulletin has no description...

MINI-VRVF-P4G3-6CVJ

Bulletin has no description...

MINI-MQXJ-6R57-R2M6

Bulletin has no description...

MINI-CFX9-JQ6G-G47X

Bulletin has no description...

MINI-4989-44FR-5J6V

Bulletin has no description...

MINI-7PWV-V949-P58H

Bulletin has no description...

CVE-2026-49342

creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:42+00:00| published-proof-of-concept| https://github.com/lsegal/yard/security/advisories/GHSA-pxcc-8665-phx8...

CVE-2026-49339

creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:09+00:00| published-proof-of-concept| https://github.com/sentriz/gonic/security/advisories/GHSA-2fp4-5v5c-4448...

Photon OS 4.0: Erlang PHSA-2026-4.0-1038

An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1038. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-53225

Name of the Vulnerable Software and Affected Versions mcp Python SDK versions prior to 1.27.2 Description Principal confusion exists in the HTTP transports of the mcp Python SDK. Specifically, the SSE and Streamable HTTP stateful mode routed sessions fail to verify if the principal matches the...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the id parameter in playlist operations. An attacker can access or delete other users' playlists, and probe for the existence of arbitrary files by supplying a crafted base64-encoded...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the ServeCreateOrUpdatePlaylist process. An attacker can overwrite or create arbitrary files on the host system by supplying a crafted playlist ID that resolves to an...

CVE-2026-0685

creationtimestamp| type| source ---|---|--- 2026-06-26 23:20:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa3iaoqql2z...

EUVD-2026-37950

Relyra SAML SignatureValue not cryptographically verified - authentication bypass...

CVE-2026-50137

Budibase prior to 3.39.0 is affected by CVE-2026-50137: unauthenticated POST /api/attachments/:datasourceId/url allows anonymous callers to mint 15-minute AWS S3 pre-signed PUT URLs using the datasource’s IAM credentials, with the bucket not pinned to the datasource. The attack discloses the targ...

GHSA-GM7F-V959-FR2G Fleet DM Vulnerable to Cross-Team Policy Data Exposure via Global Policy Read Endpoint

Summary The global policy read endpoint GET /api/latest/fleet/policies/policyid performs authorization against an empty fleet.Policy struct with nil TeamID, then fetches any policy by ID from the database without verifying the fetched policy actually belongs to the global scope. This allows a use...

CVE-2026-46601 vulnerabilities

Vulnerabilities for packages: rclone, kubescape, seaweedfs, bento, gitea, mattermost, pdfcpu, mailpit, ollama...

DEBIAN-CVE-2026-53310

In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix cross-fabric target timeout lookup When a fabric receives an error interrupt, the error may have occurred on a different fabric. The target timeout lookup was using the wrong base address cbb-regs with offsets...