Nessus Network Monitor < 6.6.0 Multiple Vulnerabilities (TNS-2026-32)

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.6.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-32 advisory. - In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree ...

CentOS Linux 6 [TuxCare] Security Update: patch (CENTOS6:CLSA-2026:1793083677)

The CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793083677 advisory. - A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6. CVE-2018-6952 Note that Nessus has not tested for this...

n8n permission and access control issue vulnerability

Versions prior to n8n 2.42.6, versions 2.43.x prior to 2.43.3, and versions 3.x prior to 3.0.1 contain a permission and access control vulnerability. This vulnerability arises because the deprecated Function, Function Item, and LangChain Code nodes run outside the isolation of the task runner...

WordPress Content Egg authorization issue vulnerability

WordPress Content Egg versions 12.0.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from the absence of permission checks for each article within the ajaxUpdateProducts function. Although static nonces and the general editposts permission are validated,...

phpMyAdmin SQL injection vulnerability

PHPMyAdmin versions 5.2.3 and earlier contain an SQL injection vulnerability. This vulnerability stems from unescaped jsonencode output within Designer’s saveSetting function. It may allow authenticated users to inject SQL by sending specially crafted index or value parameters containing...

free5gc v4.2.3+ Root CA Private Key Exposure

free5gc versions v1.0.0 through v4.2.3+ contain a publicly committed Root CA private key that can be used to forge trusted network function certificates in deployments using its shipped TLS trust anchor. A proof of concept is provided. https://packetstorm.news/download/238561...

PT-2026-134459

Name of the Vulnerable Software and Affected Versions UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress versions prior to 1.2.79 Description Unauthorized account access is possible due to the use of predictable passwords for built-in dummy us...

PT-2026-134227

Name of the Vulnerable Software and Affected Versions LightSAML versions prior to 4.7.1 LightSAML versions prior to 5.0.1 Description LightSAML and xmlseclibs have a discrepancy regarding which assertion an inbound SAML signature covers. The Response::deserialize function uses manyElementsFromXml...

PT-2026-134489

Name of the Vulnerable Software and Affected Versions SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications versions prior to 3.10.3 Description An arbitrary file upload issue exists in the handle upload function. The flaw stems from a missing server-side file key...

PT-2026-133281

The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capability check on the ajaxUpdateProducts function in versions up to, and including, 12.0.0. The handler verifies a static nonce 'contentegg metabox' and the generic 'edit posts'...

PT-2026-134194

Name of the Vulnerable Software and Affected Versions Metalama versions 2023.0.101-rc through 2025.1.17 Metalama versions 2026.0.x through 2026.0.24 Metalama versions 2026.1.0 through 2026.1.18 Metalama + PostSharp extension versions 2024.1 through 2026.1.4 Metalama extension affected versions no...

CVE-2026-115456

A flaw was found in gcc. An attacker could cause a Denial of Service DoS by passing a string that is not null-terminated to the std::fromchars function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or a...

PT-2026-133523

Name of the Vulnerable Software and Affected Versions HTTP::Parser::XS versions prior to 0.18 Description An issue exists in the parse http request function where the XS parser URL-decodes the request path and measures the result using strlen. This causes the PATH INFO variable to be truncated at...

AdminNeo: version-cache array injection causes persistent denial of service

AdminNeo v5.4.1 gets the latest version from GitHub API in a browser JavaScript function. Version number is then sent by POST request to ?script=version. This endpoint lacks origin validation and accepts POST data from any source. An attacker can POST version parameter which PHP converts to an...

OpenWRT uhttpd input validation error vulnerability

OpenWRT uhttpd contains an input validation error vulnerability. This vulnerability arises because the uhubusdatasend function in ubus.c fails to synchronize the HTTP request boundaries when multiple TCP segments of the JSON request body arrive for POST /ubus. As a result, the remaining...

PT-2026-134196

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.4 Description The ReadAdaptedClass function in src/classify/adaptive.cpp reads an ADAPT CLASS STRUCT from a pre-adapted-template .a file without neutralizing TempProtos and Config pointer fields before any...

MONAI Project code injection vulnerability

Project MONAI: Versions prior to MONAI 1.6.0 and 1.6.1 contain a code injection vulnerability. This vulnerability stems from improper handling by the auto3dseg algofromjson function of algoobject.json located in a specially crafted working directory, as well as malicious algorithmtemplates module...

GNU GCC buffer error vulnerability

GNU GCC contains a buffer error vulnerability. This vulnerability arises when a string that does not end with a null character is passed to the std::fromchars function in the libstdc++ library, causing an out-of-bounds read of an allocated buffer. This may result in denial of service, invalid dat...

PT-2026-134216

In Trail of Bits fickling through 0.1.12, a pickle STACK GLOBAL operand carrying a dotted qualname for example "Values.read file" is resolved by pickle's find class through getattribute to an arbitrary attribute path rather than to a module-level function. Fickling records only the leading...

CVE-2026-63377: fctr-id okta-ai-agent: TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, POST /api/auth/setup in src/api/routers/auth.py allows an unauthenticated network attacker to create the first administrator account before the legitimate...