CVE-2026-75338

disconf Distributed Configuration Management Platform 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/list and /api/config/simple/list are exposed without authentication. The LoginInterceptor explicitly whitelists these fo...

PT-2026-82047

Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description Broken access control allows a user with organization administrator permissions to delete dashboard snapshots belonging to other organizations hosted on the same instance. Additionally, an...

Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-111

This module enables you to disable access to the /user/login form unless a secret key is provided. The module does not invalidate the relevant caches when login page access restrictions are enabled. As a result, previously cached login page responses may remain accessible until caches are cleared...

PT-2026-82316

Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases...

Linux Distros Unpatched Vulnerability : CVE-2026-79213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions v...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098881 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory for...

Broken access control in dashboard snapshots

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot’s secret delete key using only its public share key broken access control...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098974 advisory. In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098894 advisory. In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061546 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098669 advisory. An out-of-bounds OOB memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: targetcli (UTSA-2026-093622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093622 advisory. Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files. Tenable has extracted the preceding...

IBM Java 7.1 < 7.1.5.32 / 8.0 < 8.0.8.71 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is 7.1 prior to 7.1.5.32 / 8.0 prior to 8.0.8.71. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle August 18 2026 CSPU advisory. - Vulnerability in Oracle Java SE component: 2D. Supported versions that are...

Linux Distros Unpatched Vulnerability : CVE-2026-79105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a craft...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: struts (UTSA-2026-031329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031329 advisory. ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrar...

Linux Distros Unpatched Vulnerability : CVE-2026-79089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-79254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restriction...

Linux Distros Unpatched Vulnerability : CVE-2026-78959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098840 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table in verifydfa The verifydfa function only chec...

The vulnerability of the keycloak-services component of the Keycloak identity and access management software allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to the system.

The vulnerability of the keycloak-services component of the Keycloak identity and access management software is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to bypass existing security measures and gain unauthorized access to the syst...