ZTNA Portal Improper Certificate Validation

...

CVE-2026-20503

creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:05+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek...

CVE-2026-20504

creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:03+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek...

The vulnerability of the Portal component of the Kubernetes Helm package manager allows a attacker to perform cross-site scripting attacks.

The vulnerability of the Portal component of the Kubernetes Helm package management tool is related to the lack of security measures for protecting the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2026-78849

Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...

CVE-2026-19043

Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-19051

Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-19080

Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-18957

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-19080 Username Enumeration in Menulux Software's Menulux Portal

Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-19080 Username Enumeration in Menulux Software's Menulux Portal

Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-19080

Menulux Portal by Menulux Software Inc. is affected by an observable response discrepancy that enables account footprinting (username enumeration). An unauthenticated remote attacker can identify valid accounts by observing differing responses, leading to high confidentiality impact (CVSS 3.1: 7....

EUVD-2026-71040

Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-19051 Plaintext Storage of User Credentials in Menulux Software's Menulux Portal

Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-19051

Menulux Portal by Menulux Software Inc. is vulnerable to plaintext storage of a password , allowing an authenticated low-privilege attacker to retrieve embedded sensitive data over the network. The vulnerability affects versions prior to 20260903211448 . The CNA-assigned CVSS 3.1 score is 7.1 (Hi...

CVE-2026-19051 Plaintext Storage of User Credentials in Menulux Software's Menulux Portal

Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448...

EUVD-2026-71039

Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-19043 Authorization Bypass Critical POS Management Functions in Menulux Software's Menulux Portal

Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-19043

CVE-2026-19043 is a Missing Authorization (ACL bypass) vulnerability in Menulux Portal by Menulux Software Inc. , affecting the critical POS management functions where access is not properly constrained by access control lists. This allows an authenticated low-privilege user to access functionali...

EUVD-2026-71038

Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...