PT-2026-115448

Name of the Vulnerable Software and Affected Versions Search Regex version 3.5 Description An issue exists where authenticated users with subscriber-level access and above can perform PHP Object Injection. This occurs through the deserialization of untrusted input within the replace all function...

Astra Linux – Vulnerability in sudo

In Sudo version 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a non-existent user by executing sudo with a numerical UID that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability, as executing a command via sudo a...

Astra Linux – Vulnerability in sudo

In Sudo version 1.8.29, the fact that a user has been blocked for example, by using the “!” character in the shadow file instead of a password hash was not taken into consideration. This allows an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The...

cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption

A flaw was found in cjose. When encrypting a JSON Web Encryption JWE object using AES-CBC-HMAC algorithms, the library initializes the encryption key with all-zero bytes instead of generating a secure random key. As a result, an attacker who intercepts the encrypted message can decrypt sensitive...

Critical: Red Hat Security Advisory: cjose security update

An update for cjose is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CLEANSTART-2026-UF72074 authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users

CVE-2026-39827 affects multiple packages. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. See references for individual vulnerability details...

RHEL 10 : cjose (RHSA-2026:83224)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83224 advisory. CJose is C library implementing the Javascript Object Signing and Encryption JOSE. Security Fixes: cjose: OpenIDC/cjose uses all-zero Content...

CVE-2026-110773

GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authenticated user to list users across all organizations because the IsSuperAdmin guard is absent. Attackers with a self-registered low-privilege account can send an empty or short...

CVE-2026-110773 GrowChief through 0.3.0 Missing Authorization via /users/all-users Endpoint

GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authenticated user to list users across all organizations because the IsSuperAdmin guard is absent. Attackers with a self-registered low-privilege account can send an empty or short...

CVE-2026-110773

GrowChief versions through 0.3.0 are affected by a missing authorization vulnerability in the getAllUsers handler. The root cause is the absence of the IsSuperAdmin guard, which allows any authenticated user—including those with low-privilege, self-registered accounts—to access the GET /users/all...

CVE-2026-110773 GrowChief through 0.3.0 Missing Authorization via /users/all-users Endpoint

GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authenticated user to list users across all organizations because the IsSuperAdmin guard is absent. Attackers with a self-registered low-privilege account can send an empty or short...

CVE-2026-110624

Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to list other groups' tags and document types by supplying a groupid parameter. Attackers who know a group's UUID can query GET /tags/all or GET /document-types/all, which skip the...

CVE-2026-110624 Papermerge Core through 3.5.3 Missing Authorization via /tags/all and /document-types/all

Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to list other groups' tags and document types by supplying a groupid parameter. Attackers who know a group's UUID can query GET /tags/all or GET /document-types/all, which skip the...

CVE-2026-110624 Papermerge Core through 3.5.3 Missing Authorization via /tags/all and /document-types/all

Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to list other groups' tags and document types by supplying a groupid parameter. Attackers who know a group's UUID can query GET /tags/all or GET /document-types/all, which skip the...

CVE-2026-110624

Papermerge Core versions through 3.5.3 are vulnerable to a missing authorization flaw (CWE-862). The issue exists because the GET /tags/all and GET /document-types/all endpoints fail to perform the necessary user_belongs_to check when a group_id parameter is supplied. Consequently, authenticated ...

CVE-2026-110624: Missing Authorization

Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to list other groups' tags and document types by supplying a groupid parameter. Attackers who know a group's UUID can query GET /tags/all or GET /document-types/all, which skip the...

PT-2026-114114

libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2 decode file all info that allows malicious SMB servers to crash clients by sending an unchecked FileNameLength. Attackers controlling the server or performing man-in-the-middle on unsigned sessions can return crafted...

Rocky Linux 10.2 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel (crlsa-2026_80605)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202680605 advisory. cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption CVE-2026-53939 Tenable has extracted the preceding description block...

PT-2026-114137

Name of the Vulnerable Software and Affected Versions GrowChief versions prior to 0.3.1 Description An authorization flaw exists in the getAllUsers handler due to the absence of the IsSuperAdmin guard. This allows any authenticated user, including those with low-privilege self-registered accounts...

CVE-2026-78632 Insecure Default File Permissions in Okta RADIUS Agent Windows Installer

The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...