NGINX_2026_CVE_Bundle_CTI_Report

🛡️ Investigation CTI Multi-CVE NGINX 2026 CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 Créé par Pratik Chhetri Date du rapport : 2026-07-28 📌 Résumé exécutif | CVE | Composant | Problème principal | Versions Open Source corrigées | Priorité | |---|---|---|---:|...

PT-2026-84761

Name of the Vulnerable Software and Affected Versions BIG-IP affected versions not specified BIG-IQ affected versions not specified Description An authenticated user with any role can escalate privileges by creating administrative user accounts. This is achieved through an undisclosed request sen...

day08-CISCO-fmc-sim

Day08 — محاكاة RCE لإدارة Cisco FMC محاكاة هذه محاكاة تعليمية بسيطة توضح فئة التأثير لثغرة RCE في تحليل مستوى الإدارة مستوحاة من CVE-2025-20265. تقوم عمدًا بتنفيذ أوامر من مدخلات مصممة للتعلم المحلي فقط. بدء سريع root@kitploit: chmod +x entrypoint.sh exploit.sh docker build -t fmc-sim . docker ru...

CVE-2020-5902

CVE-2020-5902 Exécution de code à distance dans l'interface utilisateur de gestion du trafic TMUI F5 BIG-IP Dans les versions BIG-IP 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1 et 11.6.1-11.6.5.1, l'interface utilisateur de gestion du trafic TMUI, également appelée utilitai...

CVE-2026-80705

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability arises from an insufficient check during the allocation of a 'phantom plane' within the display driver. If the allocation fails and this failure is not properly handled, it can lead to a system crash, resulting i...

kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Execution Manager GEM component. This vulnerability arises from an inconsistent calculation of plane dimensions, which can lead to incorrect memory allocation checks. A local attacker could exploit this by creating a...

CVE-2026-80693

A flaw was found in the Linux kernel's idpf component. A privileged control plane such as a Physical Function or a hypervisor device model could exploit a vulnerability by providing a malformed reply to an interrupt-vector allocation request. This malformed reply, where the sum of per-chunk vecto...

CVE-2026-20127

🛡️ CVE-2026-20127 — تجاوز المصادقة في Cisco Catalyst SD-WAN 📌 نظرة عامة CVE-2026-20127 هي ثغرة حرجة في تجاوز المصادقة تؤثر على مكونات Cisco Catalyst SD-WAN، بما في ذلك وحدات التحكم وأنظمة الإدارة. يمكن لمهاجم غير مصدق عن بُعد استغلال التحقق غير السليم من المصادقة في مستوى التحكم control plane الخا...

CVE-2026-46558

CVE-2026-46558 Le sous-système d'actifs V2 de Plane faisait confiance aux slugs d'espaces de travail et aux UUID d'actifs sans appliquer les vérifications d'appartenance appropriées, ce qui permettait à un utilisateur authentifié de lire, copier, supprimer et écraser des actifs dans d'autres...

RHEL 10 : kernel (RHSA-2026:61351)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61351 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: SCO: fix race...

CVE-2026-82641

Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt...

CVE-2026-82641 Keploy 3.1.0-3.6.25 Unauthenticated TLS Key Exposure

Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt...

CVE-2026-82641

Keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all network interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. An unauthenticated attacker on the network can retrieve NSS keylog lines via /agent/pcap/keylog and dec...

CVE-2026-82641 Keploy 3.1.0-3.6.25 Unauthenticated TLS Key Exposure

Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt...

EUVD-2026-68217

keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt recorded TLS...

CVE-2026-82641 Keploy 3.1.0-3.6.25 Unauthenticated TLS Key Exposure

Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

CVE-2026-55068

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

SUSE CVE-2026-80705

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if dml21addphantomplane is successful Verify that the phantom plane was allocated to avoid a later segfault. cherry picked from commit 5adb54abe5a8e82cbff7f8806db30a5f4924329f...

CVE-2026-80705

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if dml21addphantomplane is successful Verify that the phantom plane was allocated to avoid a later segfault. cherry picked from commit 5adb54abe5a8e82cbff7f8806db30a5f4924329f...