CVE-2026-20683

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...

EUVD-2026-77880

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication...

CVE-2026-43674

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication...

CVE-2026-20683

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...

About the security content of visionOS 27

About the security content of visionOS 27 This document describes the security content of visionOS 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2026-65400

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials...

CVE-2026-65400

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials...

CVE-2026-65400

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials...

CVE-2026-65400

An authentication bypass in the screensharingd daemon on macOS allows a network attacker to authenticate to Screen Sharing without valid credentials. The vulnerability stems from a stale success status returned by the SRP (Secure Remote Password) frame-length validator, meaning the connection is ...

CVE-2026-65400

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials...

macOS 26.x < 26.6.1 (148170)

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6.1. It is, therefore, affected by a vulnerability: - An authentication issue was addressed with improved state management. CVE-2026-65400 Note that Nessus has not tested for this issue but has instead relied only o...

About the security content of macOS Sonoma 14.8.9

About the security content of macOS Sonoma 14.8.9 This document describes the security content of macOS Sonoma 14.8.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

About the security content of macOS Sequoia 15.7.9

About the security content of macOS Sequoia 15.7.9 This document describes the security content of macOS Sequoia 15.7.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of macOS Tahoe 26.6.1

About the security content of macOS Tahoe 26.6.1 This document describes the security content of macOS Tahoe 26.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

macOS 14.x < 14.8.9 (148172)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8.9. It is, therefore, affected by a vulnerability: - An authentication issue was addressed with improved state management. CVE-2026-65400 Note that Nessus has not tested for this issue but has instead relied only o...

Important: Red Hat Security Advisory: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Allocation of Resources Without Limits or Throttling

Overview pterodactyl/panel is a game management panel. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the use of a shared global rate-limit key in the authentication. An attacker can cause a denial of service for all users by sendin...

CVE-2026-12383

A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...

CVE-2026-66028

Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnerability that allows authenticated administrators to create duplicate client accounts with identical email and password credentials. Attackers can exploit the lack of email field uniqueness enforcement t...

CVE-2026-17568

Improper access control in the role membership management endpoint of Devolutions Server allows an authenticated non-administrative user to escalate privileges to administrator . This vulnerability is triggered by sending a crafted API request by a user who already holds the user-group membership...