EUVD-2026-52022

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper...

CVE-2026-59652 LDAP filter injection in legacy jdk1.4 LDAPStoreHelper

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper...

PT-2026-76185

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control characters in subscription filters that were later forwarded as NATS protocol data to route or leafnode connections, corrupti...

EUVD-2026-52478

An issue in the CFCFDPRecvMd component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure...

PT-2026-67245

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Description An LDAP filter injection issue exists in the legacy jdk1.4 LDAPStoreHelper class. LDAP filter injection occurs when an application fails to properly sanitize user-supplied input used to...

PT-2026-67458

Name of the Vulnerable Software and Affected Versions TP-Link Omada affected versions not specified Description A cryptographic weakness exists in the Omada adoption protocol. The protocol uses hard-coded cryptographic keys to establish trust and protect authentication exchanges between controlle...

CVE-2026-67973

An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via replaying final CFDP PDUs...

CVE-2026-67973

An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via replaying final CFDP PDUs...

CVE-2026-67973

An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via replaying final CFDP PDUs...

CVE-2026-67973

NASA cFS v7.0.1 contains a vulnerability in the CFDP receive path that allows an attacker to trigger a Denial of Service (DoS) . The root cause is the ability for attackers to replay final CFDP PDUs . While the vulnerability is confirmed as High severity (CVSS 3.1: 7.5) and automatable, the provi...

PT-2026-67538

Name of the Vulnerable Software and Affected Versions NASA cFS version 7.0.1 Description A flaw in the CFDP receive path allows a remote attacker to trigger a Denial of Service DoS by replaying final CFDP PDUs Protocol Data Units. Recommendations At the moment, there is no information about a new...

CVE-2025-15627: Use of Hard-coded Cryptographic Key

A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers o...

CVE-2025-15629: Insufficient Entropy

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...

CVE-2026-18593: Undefined Security Weakness

A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...

HP LaserJet Printers Classic Buffer Overflow (CVE-2019-6327)

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an IPP Parser potentially vulnerable to Buffer Overflow. This plugin only works with Tenable.ot. Please visit...

PT-2026-76186

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an authenticated MQTT client could subscribe to the internal $MQTT.deliver.pubrel subject family, bypassing configured subscribe permissions and exposing MQTT QoS2 protoc...

Important: frr security, bug fix, and enhancement update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fixes: frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: Zebra is not...

Important: frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fixes: frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 For more details about the security issues,...

CVE-2026-67978

An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via transmitting a crafted SBN frame...

PT-2026-67460

Name of the Vulnerable Software and Affected Versions TP-Link Omada affected versions not specified Description A cryptographic weakness exists in the Omada adoption protocol. Session encryption keys used to protect communications between controllers and managed devices may be predictable because...