612844 matches found
CVE-2026-51696
CVE-2026-51696 affects the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ), where an incorrect access control flaw in the setPortForwardRules function allows an unauthenticated attacker to expose internal services by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The vulnerability i...
EUVD-2026-68715
Incorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove parental-control rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
EUVD-2026-68592
Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter IPTV service configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51670
TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) contains an incorrect access control flaw in the getSlaveUpdate function. An unauthenticated remote attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to query slave upgrade status and affect upgrade bookkeeping. CISA SSVC rates t...
PT-2026-84023
Name of the Vulnerable Software and Affected Versions EasyAdmin versions 4.0.0 through 4.29.15 EasyAdmin versions 5.x through 5.5.0 Description EasyAdmin serves backend requests through a single dashboard route. For custom actions using Action::linkToRoute and MenuItem::linkToRoute, the software...
CVE-2026-51706
TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 are affected by an incorrect access control flaw in the setSmartQosCfg function. An unauthenticated attacker on an adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to degrade traffic handling , resulting in a low a...
CVE-2026-51706
Incorrect access control in the setSmartQosCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to degrade traffic handling via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51695
An incorrect access control flaw in the setDdnsCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows an unauthenticated attacker to alter the device's dynamic DNS configuration by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The flaw scores CVSS 3.1: 7.5 (High...
PT-2026-84047
Name of the Vulnerable Software and Affected Versions Sulu versions prior to 2.6.25 Sulu versions prior to 3.0.8 Description An issue exists in the media move endpoint where permission checks are derived from the client-supplied collection value rather than the actual source collection of the med...
Fedora 43 : hcloud (2026-b661d1a235)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b661d1a235 advisory. Update to 1.67.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
Fedora 44 : nebula (2026-08fe186b29)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-08fe186b29 advisory. Update to 1.11.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
PT-2026-83969
A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. Affected by this issue is the function ExampleDetail of the file /v1/projects/1/examples/ of the component...
PT-2026-83799
Name of the Vulnerable Software and Affected Versions bbPress versions prior to 2.6.15 Description A missing authorization issue exists that allows the exploitation of incorrectly configured access control security levels. Recommendations Update to version 2.6.15 or later...
CVE-2026-51679
TOTOLINK T6 router firmware 4.1.5cu.748_B20211015 is affected by an incorrect access control flaw in the setPasswordCfg function. An unauthenticated remote attacker can change the administrator account password by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The vulnerability is rated ...
SUSE SLES12 Security Update : kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3808-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3808-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: -...
RockyLinux 9 : nodejs:24 (RLSA-2026:61386)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61386 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...
SUSE SLES15 Security Update : kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3807-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3807-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed:...
PT-2026-84011
Subscriber Broken Access Control in Booking and Rental Manager = 2.7.6 versions...
ALSA-2026:61386 Important: nodejs:24 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion...
RockyLinux 9 : nodejs:22 (RLSA-2026:61383)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61383 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...