PT-2026-84497

Name of the Vulnerable Software and Affected Versions AOS-CX switches affected versions not specified Description The web-based management interface lacks Cross-Site Request Forgery CSRF protection for certain sessions. This allows a remote unauthenticated attacker to execute arbitrary input...

PT-2026-84567

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Improper input validation in the Omnibox allows a remote attacker to bypass the web origin policy through crafted network traffic, typically leveraging social engineering. Recommendatio...

PT-2026-84468

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Issues in the authentication module may lead to the improper processing of malformed or truncated input. An authenticated remote attacker can exploit this by...

PT-2026-84165

Name of the Vulnerable Software and Affected Versions ArmorStart® LT affected versions not specified Description Multiple stored cross-site scripting issues exist. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing an attacker to inject malicious...

PT-2026-84089

Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.apply constraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mapping only...

PT-2026-84467

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A daemon in AOS-CX improperly processes malformed input. An unauthenticated remote attacker can exploit this by sending specially crafted packets to the affected service, potentially leading t...

PT-2026-84236

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault MNRF, requiring a power cycle to recover...

PT-2026-84104

The Affiliate Super Assistent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘doCommentShortcode’ function in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

PT-2026-84116

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping. This...

PT-2026-84154

LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescription, vrf name, and mplsVpnVrfRouteDistinguisher fields from SNMP polling are rendered without sanitization. Attackers controlling a monitored network device can inject arbitrar...

ArcadeDB 26.8.0 Path Traversal

ArcadeDB contains a path traversal vulnerability in the create database and drop database server commands. An authenticated root user can supply a crafted database name containing directory traversal sequences to create database files outside the configured database directory or recursively delet...

PUB-A-492425798

Bulletin has no description...

PUB-A-510136422

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-84486

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A flaw in the command line interface allows for the improper processing of malformed input, which could enable an attacker to execute arbitrary commands with root privileges. Recommendations A...

ROS-20260901-73-0037

The vulnerability in Netty is related to incorrect syntax validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

ROS-20260901-73-0049

The vulnerability in Netty is related to the incorrect checking of the specified data type for input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Alibaba Cloud Linux 3 : 0263: python-idna (ALINUX3-SA-2026:0263)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0263 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-45409: Internationalized Domain Names in...

openSUSE 16 Security Update : rav1e (openSUSE-SU-2026:21681-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21681-1 advisory. This update for rav1e fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted log input can allow ANSI escape sequence injection and...

RockyLinux 9 : iperf3 (RLSA-2026:61389)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:61389 advisory. iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion CVE-2026-71217 Tenable has...

TencentOS Server 2: libsolv (TSSA-2026:0942)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0942 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...