CVE-2026-76839 Grav before 2.0.16 Information Disclosure via offsetGet

Grav before 2.0.16 allows sandboxed Twig templates to access sensitive User fields through allow-listed offsetGet and offsetexists methods that lack field filtering. Attackers with page-edit permissions can call offsetGet on User objects to extract hashed passwords and 2FA secrets, enabling offli...

CVE-2026-75575

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes. The method is reachable over DDP and over the HTTP route POST /api/v1/method.callAnon/sendForgotPasswordEmail, and it triggers a password reset...

CVE-2026-75575

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, allowing an unauthenticated caller to invoke it via DDP or the HTTP route POST /api/v1/method.callAnon/sendForgotPasswordEmail. Because no DDPRateLimiter rule is registered, an attacker can send an unbounded v...

CVE-2026-72700

The getgrav/grav-plugin-login Composer plugin (used by Grav CMS ) before version 3.9.1 compares password reset and account activation tokens using a non-constant-time === string comparison instead of hash_equals() in classes/Controller.php (taskReset()) and login.php (activation handler). Because...

CVE-2026-72700 Grav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison

The getgrav/grav-plugin-login Composer plugin before 3.9.1 used by Grav compares password reset and account activation tokens using a non-constant-time === string comparison instead of hashequals in classes/Controller.php taskReset and login.php activation handler. Because the token-submission...

CVE-2026-72700 Grav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison

The getgrav/grav-plugin-login Composer plugin before 3.9.1 used by Grav compares password reset and account activation tokens using a non-constant-time === string comparison instead of hashequals in classes/Controller.php taskReset and login.php activation handler. Because the token-submission...

EUVD-2026-65214

The getgrav/grav-plugin-login Composer plugin before 3.9.1 used by Grav compares password reset and account activation tokens using a non-constant-time === string comparison instead of hashequals in classes/Controller.php taskReset and login.php activation handler. Because the token-submission...

PT-2026-81147

Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes. The method is reachable over DDP and over the HTTP route POST /api/v1/method.callAnon/sendForgotPasswordEmail, and it triggers a password reset...

EulerOS Virtualization 2.13.1 : samba (EulerOS-SA-2026-3197)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers tha...

JetBrains TeamCity < 2022.10 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2022.10. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settings CVE-2022-44623 - In JetBrains...

JetBrains TeamCity < 2021.2.3 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2021.2.3. It is, therefore, affected by multiple vulnerabilities: - JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration. CVE-2022-25263 - In JetBrains TeamCity...

PT-2026-81246

Name of the Vulnerable Software and Affected Versions femanager versions 8.x Description The invitation controller fails to stop processing after redirecting when it encounters invalid input, such as a missing hash or users that are non-existent, disabled, or deleted. This allows an unauthenticat...

PT-2026-82020

Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison in github.com/coder/coder...

PT-2026-81192

A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import...

PT-2026-81143

The getgrav/grav-plugin-login Composer plugin before 3.9.1 used by Grav compares password reset and account activation tokens using a non-constant-time === string comparison instead of hash equals in classes/Controller.php taskReset and login.php activation handler. Because the token-submission...

VulnCheck KEV: CVE-2026-18963

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the...

RHEL 10 : pam (RHSA-2026:59379)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59379 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...

JetBrains TeamCity < 2019.1.5 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2019.1.5. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages. CVE-2020-7908 - In JetBrains TeamCity before 2019.1.5, some...

Wazuh Server 4.9.0 < 4.10.4 / 4.11.0 < 4.14.6 Incorrect Authorization (CVE-2026-41424)

The version of Wazuh Server on the remote host is 4.9.0 prior to 4.10.4, or 4.11.0 prior to 4.14.6. It is, therefore, affected by an incorrect authorization vulnerability: - PUT /security/users/userid passes request.get'user' instead of request.context'tokeninfo''sub' as currentuser. An...

CVE-2026-47624: Protection Mechanism Failure

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi...