The vulnerability of the attr_collapse_range() function in the fs/ntfs3/attrib.c module of the NTFS file system in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the attr-collapse-range function in the fs/ntfs3/attrib.c module of the NTFS file system in the Linux operating system is related to insufficient handling of exception conditions. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the check_command_size_inblocks() function in the drivers/usb/gadget/function/f_mass_storage.c file of the Linux operating system’s USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkcommandsizeinblocks function in the drivers/usb/gadget/function/fmassstorage.c file of the Linux device driver framework is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerabilities of the functions etm_event_start() (drivers/hwtracing/coresight/coresight-etm-perf.c) and tmc_etr_get_buffer() (drivers/hwtracing/coresight/coresight-tmc-etr.c) in the Linux operating system’s hardware tracing driver software allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions etmeventstart drivers/hwtracing/coresight/coresight-etm-perf.c and tmcetrgetbuffer drivers/hwtracing/coresight/coresight-tmc-etr.c in the Linux kernel’s hardware tracing driver are related to improper compliance with the specifications of the calling side...

The vulnerability of the rxkad_decrypt_ticket() function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxkaddecryptticket function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, stems from the lack of checking for the return value. Exploiting this vulnerability could allow a remote attacker to compromise...

CVE-2026-55419: Unrestricted Upload of File with Dangerous Type

Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the uploadsound method in src/reachymini/daemon/app/routers/media.py without authentication, file-extension checks, content validation, or...

JetBrains TeamCity < 2021.1.1 (CVE-2021-37545)

The version of JetBrains TeamCity installed on the remote host is prior to 2021.1.1. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made. CVE-2021-37545 Note that Nessus has not tested for this iss...

PT-2026-81446

Name of the Vulnerable Software and Affected Versions Reachy Mini versions prior to 1.8.2 Description The Reachy Mini daemon exposes the '/api/media/sounds/upload' endpoint, implemented by the upload sound function, without authentication, file-extension checks, content validation, or size...

Wazuh Server 4.6.0 < 4.14.6 SQL Injection (CVE-2026-49392)

The version of Wazuh Server on the remote host is at least 4.6.0 and prior to 4.14.6. It is, therefore, affected by a SQL injection vulnerability: - DB::getFile and DB::searchFile concatenate a monitored file path into SQLite row filters without proper escaping on non-Windows systems. A local use...

Dotnetnuke < 10.3.3 GroupEdit postback tampering lets one group owner update another group (GHSA-4q79-2m2q-gw8w)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - An authorization vulnerability in the Social Groups module could allow a group owner to modify another group's information. Site...

The vulnerability of the mshv_partition_create_region() function in the drivers/hv/mshv_root_main.c file of the Linux operating system’s Microsoft HyperV guest mode driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mshvpartitioncreateregion function in the drivers/hv/mshvrootmain.c file of the Microsoft HyperV kernel driver for Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the...

hauler-2.0.3-1.1 on GA media (moderate)

hauler-2.0.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11574-1 Rating: moderate Cross-References: CVE-2026-41888 CVE-2026-72817 CVSS scores: CVE-2026-41888 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2026-41888 SUSE : 6.3...

Fedora 44 : jfrog-cli (2026-39186e6ecd)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-39186e6ecd advisory. Update to 2.120. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

JetBrains TeamCity < 2021.2.2 XSS (CVE-2022-25261)

The version of JetBrains TeamCity installed on the remote host is prior to 2021.2.2. It is, therefore, affected by a vulnerability: - JetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS. CVE-2022-25261 Note that Nessus has not tested for this issue but has instead relied only on th...

The vulnerability of the i915_fence_release() function in the Linux kernel’s drivers/gpu/drm/i915/i915_request.c module allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the i915fencerelease function in the Linux kernel’s drivers/gpu/drm/i915/i915request.c module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the ufshcd_uic_cmd_compl() function in the drivers/ufs/core/ufshcd.c module exposes the security of UFS-host controllers in the Linux operating system. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ufshcduiccmdcompl function in the drivers/ufs/core/ufshcd.c module relates to the support for UFS Universal Flash Storage host controllers in the Linux operating system. This vulnerability is an unmanaged, exploitable flaw. Exploitation of this vulnerability could allow a...

The vulnerability of the xt_ct_tgDestroy() function in the net/netfilter/xt_CT.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xtcttgDestroy function in the net/netfilter/xtCT.c module of the netfilter component of the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...

CVE-2026-59651

A flaw was found in Bouncy Castle for Java. The BKS keystore, which is used for storing cryptographic keys, accepts legacy versions that utilize a 16-bit integrity Message Authentication Code MAC key. This weak integrity protection could allow an attacker to tamper with the keystore's contents...

CVE-2026-59642

A flaw was found in Bouncy Castle for Java. This vulnerability allows a remote attacker to bypass cryptographic integrity checks in the Cryptographic Message Syntax CMS AuthenticatedData content without requiring user interaction or elevated privileges. Specifically, when authentication attribute...

CVE-2026-72714

A flaw was found in Rocq Prover. When a module that locally disabled the universe checking flag is closed, the prover fails to restore the universe graph's copy of this flag. This desynchronization allows the kernel to accept terms that are inconsistent with the universe, even though the system...

CVE-2026-71506 Dolibarr < 24.0.0 Payments REST API Improper Authorization via Delete Endpoint

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API delete endpoint that allows authenticated attackers with invoice-deletion rights to permanently delete any payment record by bypassing the intended payment-issuance rights check. Attackers can exploit...