PT-2026-85371

Name of the Vulnerable Software and Affected Versions Rockwell Automation 1756-ENBT affected versions not specified Description A denial-of-service flaw exists in the 1756-ENBT module, which serves as an EtherNet/IP bridge for ControlLogix controllers. An attacker can crash the device by sending ...

CVE-2026-18401 vulnerabilities

Vulnerabilities for packages: logstash, cass-config-builder-fips, camunda-zeebe, gradle, zookeeper, jenkins, tritonserver-backend-vllm-cuda-13.0, commercial-elasticsearch, pinot, apache-nifi, flyway-fips, akhq, kafbat-ui-fips, s3proxy-fips, knative-kafka-broker-fips, kafbat-ui, apache-tika-fips,...

[SECURITY] Fedora 44 Update: rkcommon-1.15.3-1.fc44

This project represents a common set of C++ infrastructure and CMake utilities used by various components of Intel oneAPI rendering toolkit...

CVE-2026-53682

Dogtag PKI (pki-core) exposes the Security Domain hosts inventory via the REST endpoint GET /ca/rest/securityDomain/hosts without requiring authentication (no principal, client certificate, or session). An unauthenticated client can receive a structured response enumerating internal PKI/CA hosts ...

CVE-2026-53682 Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles security domain topology and participating subsystems, without requiring a principal, client certificate, or...

CLEANSTART-2026-NM54655 Security fixes in newrelic-infrastructure-agent 1.78.1-r4

Package newrelic-infrastructure-agent version 1.78.1-r4 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-FY98026 Security fixes in newrelic-infrastructure-agent 1.76.2-r1

Package newrelic-infrastructure-agent version 1.76.2-r1 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-41178, ghsa-259r-337f-4rfw...

CLEANSTART-2026-PP67363 Security fixes in newrelic-infrastructure-agent 1.79.0-r1

Package newrelic-infrastructure-agent version 1.79.0-r1 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-259r-337f-4rfw...

CLEANSTART-2026-ZB65236 Security fixes in newrelic-infrastructure-agent 1.78.1-r1

Package newrelic-infrastructure-agent version 1.78.1-r1 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-259r-337f-4rfw...

CLEANSTART-2026-PI75213 Security fixes in newrelic-infrastructure-agent 1.78.1-r2

Package newrelic-infrastructure-agent version 1.78.1-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

PT-2026-84458

Name of the Vulnerable Software and Affected Versions GeoNetwork versions prior to 4.4.12 GeoNetwork versions prior to 4.2.17 Description The Saxon XSLT processor used to render formatters is configured without secure processing FEATURE SECURE PROCESSING and without disabling Java extension...

PT-2026-84456

Name of the Vulnerable Software and Affected Versions GeoNetwork versions prior to 4.2.17 GeoNetwork versions prior to 4.4.12 Description An unauthenticated server-side request forgery SSRF exists where the server performs a server-side HTTP GET request without destination validation. This occurs...

PT-2026-84457

🚨 CVE-2026-57582 - high 🚨 GeoNetwork - Reflected Cross-Site Scripting GeoNetwork versions 4.4.5 through 4.4.11 are vulnerable to reflected cross-site scrip... 👾 https://t.co/d5ACzb8SNg @pdnuclei NucleiTemplates cve...

PT-2026-84459

Name of the Vulnerable Software and Affected Versions GeoNetwork versions prior to 4.4.12 GeoNetwork versions prior to 4.2.17 Description An unprotected API endpoint used for creating new formatters via file upload allows unauthenticated attackers to upload arbitrary .xsl or .zip files. This...

CVE-2026-79749 MCPHub: SSRF Guard Bypass via IPv6 Transition Addresses in URL Validation

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, MCPHub's SSRF guard in src/utils/ssrf.ts uses a custom isBlockedIpv6 function that only checks for loopback,...

CVE-2026-79749

MCPHub (a hub for centrally managing and orchestrating multiple MCP servers/APIs) has an SSRF guard bypass in its isBlockedIpv6 function within src/utils/ssrf.ts. Prior to version 1.0.32 , the guard only blocked loopback, link-local, unique-local, IPv4-mapped, and IPv4-compatible IPv6 addresses, ...

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional...

CVE-2026-79749: Server-Side Request Forgery (SSRF)

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, MCPHub's SSRF guard in src/utils/ssrf.ts uses a custom isBlockedIpv6 function that only checks for loopback,...

CVE-2026-41012

Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...

CVE-2026-80636

CVE-2026-80636 affects the Linux kernel netfilter conntrack subsystem. The vulnerability stems from the ct extension genid infrastructure (introduced by commit c56716c69ce1), which disables all ct extensions for unconfirmed conntracks—causing them to be NULL —when this behavior should only apply ...