Extreme Network Fabric Engine < 9.3 Authentication Bypass (SA-2025-115)

The version of Extreme Networks Fabric Engine installed on the remote host is missing a security update. It is, therefore, affected by an authentication bypass vulnerability. - A vulnerability in Extreme Networks Fabric Engine VOSS before 9.3 was discovered. When SD-WAN AutoSense is enabled on a...

Dell Wyse Management Suite < 2605.0.3.683 Multiple Vulnerabilities (DSA-2026-387)

The version of Dell Wyse Management Suite installed on the remote host is prior to 2605.0.3.683. It is, therefore, affected by multiple vulnerabilities, including: - Dell Wyse Management Suite WMS, versions prior to WMS 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type...

SUSE SLES12 Security Update : hplip (SUSE-SU-2026:4335-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4335-1 advisory. - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of...

PT-2026-99137

Name of the Vulnerable Software and Affected Versions Horilla versions prior to 1.6.0 Description An issue exists where the search parameter at the '/employee/employee-filter-view' endpoint is reflected via the jQuery .html method in the employee/templates/employee nav.html file without proper HT...

PT-2026-99003

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/ldaputil/client.go GetUserDN. With the LDAP authentication...

CVE-2026-89406: Missing Authorization

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up to, and including, 3.0.1. This is due to the ModulaMeta::addmetas function being hooked to wphead on every frontend request and looking up...

PT-2026-99122

Name of the Vulnerable Software and Affected Versions Mediawiki - Translate Extension versions prior to 1.46.1 Mediawiki - Translate Extension version 1.45.5 Mediawiki - Translate Extension version 1.43.10 Description An authorization flaw exists where functionality is not properly constrained by...

The vulnerability of the Python programming language’s pip module allows attackers to gain unauthorized access to protected information.

The vulnerability of the Python programming language’s pip module is related to incorrect pathname restrictions for directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-61837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, AMQP 1.0 management GET /bindings exposes full binding topology...

ROS-20260925-73-0191

The vulnerability of thehdrfinde function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

PT-2026-98458

Name of the Vulnerable Software and Affected Versions Akia keyless entry cloud service affected versions not specified Description An Insecure Direct Object Reference IDOR exists due to missing object-level authorization. The unlock action relies on a client-supplied room or door identifier that...

The vulnerability of the Reporting component of the Kibana data visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Reporting component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the access control mechanism of the Kibana data visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the access control mechanism of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the permission checking mechanism when accessing data from Jenkins automation servers allows a violator to gain unauthorized access to protected information.

The vulnerability of the permission checking mechanism when accessing data from Jenkins automation servers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected informatio...

The vulnerability of the confidential data storage mechanism in the Jenkins automation server configuration allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the confidential data storage mechanism in the Jenkins automation server configuration is related to the lack of measures taken to encrypt secret data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Git repository management system Gitea, related to deficiencies in the authentication process, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git repository management system Gitea is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Kibana data visualization service, related to deficiencies in the authentication process, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the mechanism for working with identifiers of objects in the Kibana visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Kibana visualization service’s object identifier handling mechanism relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Apache Tomcat application server, related to incorrect session duration, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Tomcat application server is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Python library for interacting with git repositories, GitPython, arises from the lack of protection for service data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...