PT-2026-95900

Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1 Description The Web Management Interface contains a stack-based buffer overflow that can be triggered remotely. The issue exists within the get css path from uri function located in the /cgi-bin/mbox-config...

CVE-2026-82967

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

CVE-2026-61714

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...

CVE-2026-82967 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

CVE-2026-82967

IBM Guardium Data Protection 12.2 is affected by an authentication bypass vulnerability that allows an unauthenticated remote attacker to bypass IP-based access controls and gain access to the Guardium management interface. The flaw effectively nullifies the IP-restriction layer that would otherw...

CVE-2026-82967 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

EUVD-2026-83412

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

CVE-2026-85478

A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...

EUVD-2026-83046

A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...

CVE-2026-85478 CareCam CM2507 Missing Authentication for Critical Function

A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...

CVE-2026-85478

The CareCam CM2507 IP camera running firmware HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface with no authentication required . An attacker with physical access can interrupt the normal boot process and inspect or modify boot configuration, firmware da...

CVE-2026-56592

HCL BigFix Service Management is affected by an Improper Authentication vulnerability caused by inadequate account lockout mechanisms. An unauthenticated attacker can execute sustained brute-force attacks against the login interface, potentially achieving unauthorized system access . The CVSS v3....

CVE-2026-56592 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access...

Fedora 43 : gnatcoll (2026-d5c7f91202)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d5c7f91202 advisory. Patched the vulnerabilities GNATCOLL-CORE-0162 and GNATCOLL-CORE-0164 in a way that avoids interface changes. Tenable has extracted the preceding description...

PT-2026-95329

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description Improper authentication validation occurs due to inadequate account lockouts. This allows an unauthenticated attacker to perform sustained brute-force attacks against th...

PT-2026-96729

Name of the Vulnerable Software and Affected Versions D-Link DAP-1360 versions 6.14 and earlier Description An unauthenticated remote code execution issue exists in the web management interface. Remote attackers can execute arbitrary commands with root privileges by sending crafted HTTP requests ...

PT-2026-95502

A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...

PT-2026-95670

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authentication bypass exists that allows an unauthenticated remote attacker to circumvent IP-based access controls and gain access to the Guardium management interface. Recommendations A...

The vulnerability of the REST API web interface component based on artificial intelligence allows a hacker to induce a service failure.

The vulnerability of the REST API web interface component based on artificial intelligence is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability in the web interface for managing Tenda AC7 router micro-programming software allows a hacker to inject any HTML or JavaScript code they desire.

The vulnerability in the web interface for managing Tenda AC7 router micro-programming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML or JavaScript code remotely...