CVE-2026-103540 formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engine

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of the file global/code/Clients.class.php of the component Client Settings. The manipulation of the argument pagetitles leads to improper...

CVE-2026-103540

A security vulnerability exists in formtools.org Form Tools (versions up to 3.1.1 ) within the Client Settings component. Specifically, the Clients::updateClientSettingsTab function in the file global/code/Clients.class.php fails to properly neutralize special elements used in a template engine w...

EUVD-2026-90497

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of the file global/code/Clients.class.php of the component Client Settings. The manipulation of the argument pagetitles leads to improper...

CVE-2026-103540 formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engine

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of the file global/code/Clients.class.php of the component Client Settings. The manipulation of the argument pagetitles leads to improper...

CVE-2026-37236 affecting package cri-tools for versions less than 1.32.0-8

CVE-2026-37236 affecting package cri-tools for versions less than 1.32.0-8. A patched version of the package is available...

CLEANSTART-2026-PD40538 (*x509

Security vulnerability affects the cri-tools package. x509...

CLEANSTART-2026-LG89593 When returning errors, functions in the net/textproto package would include its input as part of the error

Security vulnerability affects the cri-tools package. When returning errors, functions in the net/textproto package would include its input as part of the error...

CLEANSTART-2026-NB79781 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Security vulnerability affects the cri-tools package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

CLEANSTART-2026-GK62523 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the cri-tools package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

CLEANSTART-2026-AH78680 Within HostnameError

Security vulnerability affects the cri-tools package. Within HostnameError...

CLEANSTART-2026-PG31480 On Unix systems, opening a file in an os

Security vulnerability affects the cri-tools package. On Unix systems, opening a file in an os...

CLEANSTART-2026-FP06754 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Security vulnerability affects the cri-tools package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate...

CLEANSTART-2026-NB75490 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Security vulnerability affects the cri-tools package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

PT-2026-103715

Name of the Vulnerable Software and Affected Versions ByteCoreStack – MCP Connector for AI Tools versions prior to 1.2.4 Description Authenticated users with Subscriber-level access or higher can elevate their privileges to Administrator. The issue exists in the execute tool function within the w...

AlmaLinux 9.6 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (ALMALINUX9.6:CLSA-2025:1764886460)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1764886460 advisory. - A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file...

Rocky Linux 9.2 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0408)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260408 advisory. This advisory aggregates security fixes for the edk2 SRPM in CIQ LTS 9.2. It addresses 11 CVEs: CVE-2022-36763, CVE-2022-36764, CVE-2022-36765,...

Rocky Linux 8 [CIQ] Security Update: kexec-tools / kexec-tools-debuginfo / kexec-tools-debugsource (crlsa-2021_4404)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214404 advisory. kexec-tools: incorrect permissions on kdump dmesg file CVE-2021-20269 Tenable has extracted the preceding description block directly from the CIQ security advisory...

CentOS Linux 7.9 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0739)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260739 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2021-40153. Tenable has extracted the...

Rocky Linux 9.2 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0494)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260494 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2021-41072. Tenable has extracted the preceding...

AlmaLinux 9.2 [TuxCare] Security Update: open-vm-tools / open-vm-tools-desktop / open-vm-tools-devel / etc (ALMALINUX9.2:CLSA-2025:1751133361)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1751133361 advisory. - VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tampe...