PT-2026-71371

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to a query-specified location. This allows an attacker to create a specially-crafted URL to an MRBS installation that wil...

RockyLinux 9 : isns-utils (RLSA-2026:53847)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:53847 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly...

RHEL 9 : iscsi-initiator-utils (RHSA-2026:53844)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:53844 advisory. The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as th...

RockyLinux 8 : isns-utils (RLSA-2026:53848)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:53848 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly...

AlmaLinux 9 : isns-utils (ALSA-2026:53847)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:53847 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly...

RHEL 8 : isns-utils (RHSA-2026:53848)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:53848 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows...

open-iscsi: open-iscsi: Privilege Escalation via Path Traversal

A flaw was found in open-iscsi. This vulnerability, known as Path Traversal, allows remote Man-in-the-Middle MITM attackers to manipulate file paths. By doing so, attackers can create files with root privileges outside the intended database and inject malicious content into system records. This...

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...

Important: Red Hat Security Advisory: iscsi-initiator-utils security, bug fix, and enhancement update

An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

open-iscsi: open-iscsi: Privilege Escalation via Path Traversal

A flaw was found in open-iscsi. This vulnerability, known as Path Traversal, allows remote Man-in-the-Middle MITM attackers to manipulate file paths. By doing so, attackers can create files with root privileges outside the intended database and inject malicious content into system records. This...

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...

pingcastle v4.0.0.20

PingCastle by Netwrix Stay Connected & Contribute We welcome all PingCastle users: open source contributors, IT admins, and security professionals, to get involved and help shape the future of PingCastle. Join the Netwrix Community : community.netwrix.com Get announcements, view the roadmap, subm...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

CVE-2026-71848 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-50159 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, langfuse...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

Important: Red Hat Security Advisory: isns-utils security update

An update for isns-utils is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CVE-2026-73241

FreeRDP vulnerability CVE-2026-73241 affects the server-side RDSTLS implementation (libfreerdp/core/rdstls.c). An attacker-supplied RDSTLS_TYPE_CAPABILITIES PDU can be processed while the server awaits RDSTLS_TYPE_AUTHREQ, leaving resultCode as RDSTLS_RESULT_SUCCESS and allowing a remote unauthen...

CVE-2026-73241 FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`)

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP server-side RDSTLS in libfreerdp/core/rdstls.c accepts an attacker-supplied RDSTLSTYPECAPABILITIES PDU while rdstlsserverauthenticate is waiting for RDSTLSTYPEAUTHREQ, leaving resultCode at RDSTLSRESULTSUCCE...