1410 matches found
PT-2026-27616
Name of the Vulnerable Software and Affected Versions NATS-Server versions prior to 2.11.15 NATS-Server versions prior to 2.12.6 Description NATS-Server, a high-performance server for NATS.io, is affected by an issue where a malicious client connecting to the WebSockets port can cause unbounded...
CVE-2026-27623
CVE-2026-27623 affects Valkey (distributed key-value database). From 9.0.0 up to but not including 9.0.3, an attacker with network access can trigger an assertion by sending crafted requests, because Valkey fails to reset its networking state after processing an empty request. This can cause the ...
CVE-2026-27623 Valkey has Pre-Authentication DOS from malformed RESP request
Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system does not properly reset the networking...
CVE-2026-27623 Valkey has Pre-Authentication DOS from malformed RESP request
Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system does not properly reset the networking...
Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access
Security Unauthenticated Stored Cross-Site Scripting CVE-2026...
📄 BeyondTrust Remote Support / Privileged Remote Access Remote Code Execution
A critical pre‑authentication remote code execution vulnerability identified as CVE-2026-1731 affects products from BeyondTrust, specifically Remote Support and Privileged Remote Access. The vulnerability allows an unauthenticated attacker to execute arbitrary commands on a vulnerable system by...
PT-2026-8388
Name of the Vulnerable Software and Affected Versions Rocket TRUfusion Enterprise versions through 7.10.5 Description Rocket TRUfusion Enterprise through version 7.10.5 has a path traversal issue in the WsPortalV6UpDwAxis2Impl service, accessible via the API endpoint...
Exploit for CVE-2026-1731
CVE-2026-1731 — BeyondTrust RS/PRA Passive Vulnerability Scann...
Exploit for CVE-2025-40552
CVE-2025-40552 and CVE-2025-40553 SolarWinds Web Help Desk Pre...
Vulnerability fixed in BeyondTrust Remote Support
BeyondTrust has fixed a vulnerability in BeyondTrust Remote Support and some older versions of Privileged Remote Access. The vulnerability is in the software's pre-authentication, which allows unauthenticated attackers to execute operating system commands by sending specially crafted requests to...
Exploit for CVE-2026-1731
CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC...
CVE-2026-25611
CVE-2026-25611 affects MongoDB server. It describes a denial-of-service vector where a series of specifically crafted, unauthenticated messages can exhaust memory and crash the server. The entry provides CVSS metrics (3.1/7.5 HIGH and 4.0/8.7 HIGH) indicating network-based, unauthenticated impact...
CVE-2026-25611 Pre-Authentication Memory Exhaustion Denial of Service in MongoDB Server
A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server...
CVE-2026-25611 Pre-Authentication Memory Exhaustion Denial of Service in MongoDB Server
A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server...
Exploit for Deserialization of Untrusted Data in Facebook React
Affected Software: React Server Components versions 19.0.0, 1...
BeyondTrust Privileged Remote Access (PRA) <= 24.3.4 Pre-Authentication RCE (BT26-02)
The version of BeyondTrust Privileged Remote Access PRA running on the remote host is 24.3.4 or earlier. It is, therefore, potentially affected by a pre-authentication remote code execution vulnerability: - By sending specially crafted requests, an unauthenticated remote attacker may be able to...
BeyondTrust Remote Support (RS) < 25.3.2 Pre-Authentication RCE (BT26-02)
The version of BeyondTrust Remote Support RS running on the remote host is prior to 25.3.2. It is, therefore, potentially affected by a pre-authentication remote code execution vulnerability: - By sending specially crafted requests, an unauthenticated remote attacker may be able to execute...
BeyondTrust Fixes Critical Pre-Auth RCE Vulnerability in Remote Support and PRA
BeyondTrust has released updates to address a critical security flaw impacting Remote Support RS and Privileged Remote Access PRA products that, if successfully exploited, could result in remote code execution. "BeyondTrust Remote Support RS and certain older versions of Privileged Remote Access...
VulnCheck KEV: CVE-2026-1731
BeyondTrust Remote Support RS and certain older versions of Privileged Remote Access PRA contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the...