EUVD-2026-48614

Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 released 2013-03-20. That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decode...

CVE-2026-66139

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...

CVE-2026-66139

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...

CVE-2026-66139

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...

EUVD-2026-48477

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...

CVE-2026-66139

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...

Fedora 43 : cryptlib (2026-47575c76a5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-47575c76a5 advisory. A third update after 3.4.9 to prepare for deprecation of obsolete algorithms and attributes in the upcoming 3.5 release. Tenable has extracted the preceding...

CVE-2026-15719

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

CVE-2026-15718

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

CVE-2026-14291

The security-ninja-premium WordPress plugin before 5.290 does not verify the second authentication factor in one of its two-factor authentication code paths, allowing an unauthenticated attacker who knows a user's password to complete authentication without the one-time code and bypass enforced...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64646 Source advisory:...

Incorrect Authorization

Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to Incorrect Authorization via the genericAuthType in the HTTP Request node. An attacker can gain unauthorized access to credentials belonging to other users by referencing another user's credential...

@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @a700/n8n-nodes-agent700 (>=1.0.5, <=1.0.7) +2129 more potentially affected by unknown CVE via n8n-workflow (>=2.0.0, <=2.31.2)

n8n-workflow NPM version =2.0.0, =1.0.0, =1.0.5, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.2.2, =0.3.6, =0.1.0, =1.0.0, =1.3.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-N8NWORKFLOW-18323974...

@2gis/deck2gis-layer (>=3.0.0, <=3.0.13), @3cr/viewer-browser (>=0.0.327, <=0.0.333) +773 more potentially affected by CVE-2026-45820 via fflate (>=0.7.1, <=0.7.4)

fflate NPM version =0.7.1, =3.0.0, =0.0.327, =0.0.308, =1.0.29, =0.1.0, =3.0.17, =3.0.0-b.2, =1.3.1-isan.0, =1.3.3-isan.0, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =1.0.1, =2.7.3 and more Source cves: CVE-2026-45820 Source advisory: OSV:GHSA-PX8P-9VWX-VF98...

CVE-2026-56578

HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions...

CVE-2026-56580 HCL MyCloud was affected by Using Components with Known Vulnerability

HCL MyCloud was affected by Using Components with Known Vulnerability IIS Server . It may allow attackers to exploit publicly disclosed weaknesses and compromise the system...

CVE-2026-56580

Technical details (affected product components, root cause, impact specifics, or remediation steps) are not publicly provided in the provided documents. Monitor for updates.

EUVD-2026-46343

HCL MyCloud was affected by Using Components with Known Vulnerability IIS Server . It may allow attackers to exploit publicly disclosed weaknesses and compromise the system...

CVE-2026-56578 HCL MyCloud was affected by Server Version Disclosure

HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions...

CVE-2026-56578

Technical details about CVE-2026-56578 are not provided in the supplied documents; monitor for updates as information on affected versions, impact, and fixes is not publicly available here.