CentOS Linux 6 [TuxCare] Security Update: patch (CENTOS6:CLSA-2026:1793083677)

The CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793083677 advisory. - A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6. CVE-2018-6952 Note that Nessus has not tested for this...

Avada | Website Builder For WordPress & WooCommerce < 7.16.4 - Unauthenticated Arbitrary File Upload via Avada Form Upload Field

Description The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convertpaletteimagestotruecolor function. This is due to insufficient file type validation before processing uploaded...

free5gc v4.2.3+ Root CA Private Key Exposure

free5gc versions v1.0.0 through v4.2.3+ contain a publicly committed Root CA private key that can be used to forge trusted network function certificates in deployments using its shipped TLS trust anchor. A proof of concept is provided. https://packetstorm.news/download/238561...

PT-2026-134217

In Trail of Bits fickling through 0.1.12, the process import method in fickle.py adds an imported name to the likely safe imports set whenever the source module is present in sys.stdlib module names and the name is absent from the UNSAFE IMPORTS denylist, without inspecting what the name resolves...

SUSE SLES16: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:24446-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24446-1 advisory. The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: -...

Nessus Network Monitor < 6.6.0 Multiple Vulnerabilities (TNS-2026-32)

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.6.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-32 advisory. - In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree ...

PT-2026-134478

Name of the Vulnerable Software and Affected Versions Uncanny Toolkit for LearnDash versions prior to 3.8.3 Description An authentication bypass exists due to a parser-differential flaw. The account-verification gate uses the raw email parameter passed to the uo login action function via get user...

PT-2026-133553

Name of the Vulnerable Software and Affected Versions AFFLIB versions prior to 3.7.23 Description A heap out-of-bounds write occurs in the af get page function. This happens when crafted AFF images are provided with mismatched page and sector sizes, specifically when the page size is larger than...

CVE-2026-119408: n8n-io n8n: n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via…

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden...

n8n permission and access control issue vulnerability

Versions prior to n8n 2.42.6, versions 2.43.x prior to 2.43.3, and versions 3.x prior to 3.0.1 contain a permission and access control vulnerability. This vulnerability arises because the deprecated Function, Function Item, and LangChain Code nodes run outside the isolation of the task runner...

Juniper SSR < 7.0.5 / 7.1.x < 7.1.7 / 7.2.x < 7.2.3 Multiple Vulnerabilities (JSA112183)

The version of Juniper Session Smart Router SSR or Session Smart Conductor installed on the remote host is prior to 7.0.5, 7.1.x prior to 7.1.7, or 7.2.x prior to 7.2.3. It is, therefore, affected by multiple vulnerabilities as referenced in the JSA112183 advisory. - An Improper Neutralization of...

CentOS Linux 7 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1793088226)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1793088226 advisory. - Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to...

PT-2026-134459

Name of the Vulnerable Software and Affected Versions UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress versions prior to 1.2.79 Description Unauthorized account access is possible due to the use of predictable passwords for built-in dummy us...

PT-2026-134196

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.4 Description The ReadAdaptedClass function in src/classify/adaptive.cpp reads an ADAPT CLASS STRUCT from a pre-adapted-template .a file without neutralizing TempProtos and Config pointer fields before any...

PT-2026-134463

Name of the Vulnerable Software and Affected Versions Popup Builder versions prior to 4.4.6 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows unauthenticated attackers to move all published popup...

Juspay Technologies Composable Open-Source Payments Infrastructure input validation error vulnerability

Versions prior to 1.128.0 and 2026.10.01.0 of Juspay Technologies’ Composable Open-Source Payments Infrastructure contain an input validation error vulnerability. This vulnerability arises because the verifywebhooksource function within the Worldpayxml connector always returns true without...

PT-2026-133281

The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capability check on the ajaxUpdateProducts function in versions up to, and including, 12.0.0. The handler verifies a static nonce 'contentegg metabox' and the generic 'edit posts'...

PT-2026-133610

Name of the Vulnerable Software and Affected Versions SOCFortress CoPilot versions prior to 0.1.77 Description The application allows admin and analyst users to upload content via the 'POST /api/scoutsuite/generate-gcp-report' endpoint. The system validates the content as GCPScoutSuiteJSON but...

PT-2026-134194

Name of the Vulnerable Software and Affected Versions Metalama versions 2023.0.101-rc through 2025.1.17 Metalama versions 2026.0.x through 2026.0.24 Metalama versions 2026.1.0 through 2026.1.18 Metalama + PostSharp extension versions 2024.1 through 2026.1.4 Metalama extension affected versions no...

CVE-2026-115456

A flaw was found in gcc. An attacker could cause a Denial of Service DoS by passing a string that is not null-terminated to the std::fromchars function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or a...