153367 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-52132
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service std::badalloc and HTTP 500 via a...
Linux Distros Unpatched Vulnerability : CVE-2026-65108
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable CVE-2026-65108...
VMware Workstation 25H2, 26H1.x < 26H1u1 Multiple Vulnerabilities (VMSA-2026-0007)
The version of VMware Workstation installed on the remote host is 25H2, 26H1.x prior to 26H1u1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...
...[ More ]
This Metasploit module exploits an unauthenticated command execution vulnerability in MCPJam Inspector. The /api/mcp/connect endpoint accepts a JSON serverConfig object containing a command and argument list used to start an MCP server. A remote attacker can abuse this endpoint to execute arbitra...
Oracle Linux 8 : ELSA-2026-61257-0: / iperf3 (ELSA-2026-612570)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-612570 advisory. 3.5-12.1 - Resolves: RHEL-236174 - Add JSON value checks for getparameters CVE-2026-71217 Tenable has extracted the preceding description block directly from...
GHSA-C5F6-2RM9-2W8G OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass)
Summary The OpenChoreo autobuild webhook endpoint POST /api/v1alpha1/autobuild selected the git provider used to authenticate an incoming webhook from a client-supplied request header rather than from the target component's configuration, and its Bitbucket provider accepted requests without a val...
OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass)
Summary The OpenChoreo autobuild webhook endpoint POST /api/v1alpha1/autobuild selected the git provider used to authenticate an incoming webhook from a client-supplied request header rather than from the target component's configuration, and its Bitbucket provider accepted requests without a val...
EUVD-2026-58546
OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion webhook signature bypass...
OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs
Summary The OpenChoreo control-plane cluster-gateway served its caller-facing management APIs on the same network listener that accepts data-plane agent connections. In the multi-cluster topology that listener is published outside the cluster, and the management APIs did not authenticate the...
EUVD-2026-58518
OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs...
GHSA-QH9R-J7RP-4X2M OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs
Summary The OpenChoreo control-plane cluster-gateway served its caller-facing management APIs on the same network listener that accepts data-plane agent connections. In the multi-cluster topology that listener is published outside the cluster, and the management APIs did not authenticate the...
EUVD-2026-63663
Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection...
EUVD-2026-63659
Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling...
CVE-2026-27825
CVE-2026-27825 — Path Traversal in mcp-atlassian via confluenceuploadattachment Severity : Critical CVSS 9.3 CWE : CWE-22 — Path Traversal Affected : sooperset/mcp-atlassian = 0.17.0 read-side twin of GHSA-xjgw-4wvw-rgm4 Advisory : GHSA NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-27825 TL;DR...
CVE-2026-69664
A flaw was found in Erlang/OTP inets httpd. An unauthenticated remote attacker can exploit this vulnerability by sending a malformed chunked HTTP request. Specifically, if the chunk-size line is not a hexadecimal number and arrives separately from the headers, the server worker handling the reque...
CVE-2026-59822
A flaw was found in LiteLLM, a proxy server designed for Large Language Model LLM APIs. An unauthenticated attacker could exploit a vulnerability in the MCP Streamable HTTP endpoint. By using a fabricated Authorization header, the attacker could bypass the standard key validation, gaining...
CVE-2026-84452
Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...
DEBIAN-CVE-2026-78662
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
CVE-2026-84452
Windows ML CLI (a command-line tool for building AI models for Windows) is vulnerable to arbitrary code execution via a CORS misconfiguration on its localhost HTTP API. Prior to version 0.4.0 , the cli_api.py and app.py components expose WinML CLI commands on localhost without authentication and ...
CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE
Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...