PT-2026-134224

Name of the Vulnerable Software and Affected Versions uhttpd affected versions not specified Description A flaw in the application-layer body-handler occurs when a POST /ubus request arrives in multiple TCP segments. The function uh ubus data send in ubus.c can desynchronize HTTP request boundari...

CentOS Linux 7 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1793088226)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1793088226 advisory. - Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to...

PT-2026-133679

Name of the Vulnerable Software and Affected Versions DBHub versions prior to 0.22.6 Description Read-only SQL validation can be bypassed on the MySQL and MariaDB connectors. The scanSingleLineComment function in src/utils/sql-parser.ts incorrectly treats every double dash as the start of a...

PT-2026-134200

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, bit TV to utf8 in src/bits.c can write to the caller-provided src buffer despite accepting const input. On an iconv error other than E2BIG, the function frees its output buffer and passes the original input alias to bit u...

Libredwg resource management error vulnerability

Versions of libredwg prior to 0.14 contain a resource management error vulnerability. This vulnerability stems from the decodeR13R2000 function in src/decode.c failing to validate the numclasses field. When parsing specially crafted R13-R2000 DWG files, the function repeatedly calls realloc,...

PT-2026-134231

Name of the Vulnerable Software and Affected Versions sevenz-rust2 versions prior to 0.21.1 Description Extracting a malicious 7z archive allows writing or overwriting files outside the intended destination directory. In src/util/decompress.rs, the decompress impl function calculates the...

WordPress Content Egg authorization issue vulnerability

WordPress Content Egg versions 12.0.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from the absence of permission checks for each article within the ajaxUpdateProducts function. Although static nonces and the general editposts permission are validated,...

Element Labs LM Studio path traversal vulnerability

Element Labs LM Studio versions prior to 0.4.22+1 contain a path traversal vulnerability. This vulnerability stems from a path traversal flaw in the resolveDownloadRequest function within the model downloader. It allows attackers to write files outside the models directory by using backslashes to...

PipesHub trust management issue vulnerability

Versions of PipesHub prior to 0.10.0 contain a trust management vulnerability. This vulnerability stems from rate limiting bypass in the getClientIp function, allowing unauthenticated attackers to circumvent IP-based throttling by spoofing X-Forwarded-For or X-Real-IP headers. They can also obtai...

PT-2026-134481

Name of the Vulnerable Software and Affected Versions Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress versions prior to 1.2.0 Description Insufficient file path validation in the post delete assessment file by id function allows for arbitrary file deletion on the server...

PT-2026-133557

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.8.0 Description An unauthenticated attacker with adjacent network access can exploit a missing authentication for critical function, leading to Server-side request forgery SSRF, which is a techniq...

PT-2026-134141

Summary On targets that do not have a conditional move/select operations, LLVM compiles the internal conditional sub u32 function, into one that will contain a conditional jump on secret-dependent data, which could leak information about encapsulation and signing keys. conditional sub u32 is used...

PT-2026-133553

Name of the Vulnerable Software and Affected Versions AFFLIB versions prior to 3.7.23 Description A heap out-of-bounds write occurs in the af get page function. This happens when crafted AFF images are provided with mismatched page and sector sizes, specifically when the page size is larger than...

CVE-2026-119408: n8n-io n8n: n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via…

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden...

n8n permission and access control issue vulnerability

Versions prior to n8n 2.42.6, versions 2.43.x prior to 2.43.3, and versions 3.x prior to 3.0.1 contain a permission and access control vulnerability. This vulnerability arises because the deprecated Function, Function Item, and LangChain Code nodes run outside the isolation of the task runner...

Juniper SSR < 7.0.5 / 7.1.x < 7.1.7 / 7.2.x < 7.2.3 Multiple Vulnerabilities (JSA112183)

The version of Juniper Session Smart Router SSR or Session Smart Conductor installed on the remote host is prior to 7.0.5, 7.1.x prior to 7.1.7, or 7.2.x prior to 7.2.3. It is, therefore, affected by multiple vulnerabilities as referenced in the JSA112183 advisory. - An Improper Neutralization of...

SUSE SLES16: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:24446-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24446-1 advisory. The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: -...

CentOS Linux 6 [TuxCare] Security Update: patch (CENTOS6:CLSA-2026:1793083677)

The CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793083677 advisory. - A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6. CVE-2018-6952 Note that Nessus has not tested for this...

RHEL 9 : kernel (RHSA-2026:92993)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92993 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ata: ahci: Match EMMAXSLOTS...

Amazon Linux 2 : thunderbird (ALAS-2026-4057)

The version of thunderbird installed on the remote host is prior to 153.5.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4057 advisory. Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefo...