PT-2026-111818

Name of the Vulnerable Software and Affected Versions Shopware version 6.7 Description Shopware allows the upload of attacker-controlled HTML files which are served as text/html without effective security headers, such as Content-Security-Policy or X-Content-Type-Options: nosniff. This leads to...

PT-2026-111824

Name of the Vulnerable Software and Affected Versions Mistral Vibe versions prior to 2.25.4 Description A command permission gate bypass allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value. This technique evades detection by...

PT-2026-111813

🚨 CVE-2026-104342 Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 🎖@cveNotify...

PT-2026-111809

🚨 CVE-2026-103966 Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 🎖@cveNotify...

PT-2026-111815

🚨 CVE-2026-104344 Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 🎖@cveNotify...

SAML IDP and SAML SP Controllers NetScaler ADC NetScaler Gateway

The vulnerability of SAML IDP and SAML SP authentication mechanisms in NetScaler ADC formerly Citrix ADC and NetScaler Gateway virtual environment access control systems is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to...

Cisco NX-OS Python Sandbox Bypass Command Execution

The vulnerability of the built-in Python interpreter in the Cisco NX-OS operating system is related to insufficient spatial separation. Exploiting this vulnerability could allow an attacker to bypass the sandboxing protection mechanisms and execute arbitrary commands...

Qualcomm Embedded Authentication Bypass File Write

The vulnerability of embedded Qualcomm software lies in the lack of authentication for critical functions. Exploiting this vulnerability allows attackers to write arbitrary files...

Cisco License On-Prem Web Interface Arbitrary File Write DoS

The vulnerability in the web interface for managing Cisco License On-Prem previously known as Cisco Smart Software Manager On-Prem is related to deficiencies in the processing of relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files or caus...

Storage Spaces Driver Code Execution

The vulnerability of the Storage Spaces Driver Spaceport.sys in the Windows operating system is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Graphics Kernel Subsystem Code Execution

The vulnerability of the Graphics Kernel subsystem in Windows operating systems is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ndsudo Code Execution

The vulnerability of the ndsudo component of the Netdata monitoring software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Cisco Application Policy Infrastructure Controller Web Interface Command Execution

The vulnerability of the Cisco Application Policy Infrastructure Controller APIC web interface management interface is related to the lack of a standardized mechanism for error handling. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

NGOAM Protocol SRv6 Cisco NX-OS Code Execution

The vulnerability of the NGOAM protocol and the SRv6 technology of the Cisco NX-OS operating system for Cisco Nexus 9000 Series network devices relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenSSL vulnerabilities (USN-8678-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8678-1 advisory. It was discovered that OpenSSL incorrectly handled the QUIC server incoming channel queue. A remote attacker could possibly use...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : FFmpeg vulnerabilities (USN-8680-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8680-1 advisory. Adrian Junge discovered that FFmpeg incorrectly handled certain subtitle data. An attacker could possibly use this...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : BlueZ vulnerabilities (USN-8908-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8908-1 advisory. Michael Bommarito discovered that BlueZ incorrectly handled codec capability storage in the...

MiracleLinux 8 : dovecot-2.3.16-16.el8_10 (AXSA:2026-2032:07)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2032:07 advisory. dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters CVE-2026-42391 dovecot: Dovecot: Authentication bypass via incorre...

Fortinet FortiAnalyzer Multiple Arbitrary File Read/Write via SQLi (FG-IR-26-178)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-26-178 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libgit2 vulnerabilities (USN-8628-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8628-1 advisory. It was discovered that libgit2 incorrectly handled the Git Smart Protocol. A remote attacker...