PT-2026-82338

Name of the Vulnerable Software and Affected Versions disconf version 2.6.36 Description Incorrect Access Control allows anonymous attackers to read all configuration items and files managed by the config center. This occurs because the LoginInterceptor explicitly whitelists specific...

PT-2026-82327

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll System version 1.0 Description A flaw in the CRUD Operation Handler component allows remote attackers to bypass authentication. The issue exists within the create/read/update/delete function of the ajax.php file. By...

CVE-2026-75325

DWSurvey v6.14.0 contains an authentication bypass vulnerability exploitable via the /api/dwsurvey/none/ and /api/dwsurvey/up/** endpoints, allowing unauthenticated network access with low complexity and no privileges required . The CNA-assigned CVSS 3.1 score is 9.8 (Critical) with high impact o...

MiracleLinux 8 : 389-ds:1.4 (AXSA:2026-1661:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1661:01 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereferen...

Linux Distros Unpatched Vulnerability : CVE-2026-79776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can...

Linux Distros Unpatched Vulnerability : CVE-2026-80184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms OAuth1 access tokens, application credentials, trusts could be...

AlmaLinux 8 : kernel (ALSA-2026:59821)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59821 advisory. kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64 decode...

Linux Distros Unpatched Vulnerability : CVE-2026-16599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line ...

Linux Distros Unpatched Vulnerability : CVE-2026-79178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin...

VulnCheck KEV: CVE-2026-49869

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath.endsWith"/configs" to whitelist the public configuration endpoint from Basic Auth. Because the check is a suffix match rather than an exact path match...

CVE-2026-75325

DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/' parameters...

CVE-2025-56798

CVE-2025-56798 is a Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology's Unraid OS version 6.12.14 and earlier . The root cause is the Unraid authentication cookie's lax same-site policy , which allows remote attackers to escalate privileges after required user interaction. The CV...

EUVD-2025-210782

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

EUVD-2026-66661

DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/' parameters...

PT-2026-82320

Name of the Vulnerable Software and Affected Versions super-diamond-server versions prior to 1.3.4 Description The Netty configuration distribution service on port 8283 lacks an authentication mechanism. This allows an attacker to retrieve the complete configuration of any project, which may...

CVE-2026-75329

The Netty configuration distribution service port 8283 of super-diamond-server = 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of any project including database passwords, API keys, etc. by sending a TCP request without any credential...

Linux Distros Unpatched Vulnerability : CVE-2026-80522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: tegra - fix rctx-cryptlen calculation in tegragcmdoonereq Perform rctx-cryptlen calculation in tegragcmdoonereq the same way it is done in...

Linux Distros Unpatched Vulnerability : CVE-2026-34964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for...

Linux Distros Unpatched Vulnerability : CVE-2026-65905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a...

PT-2026-82233

Name of the Vulnerable Software and Affected Versions Spring Security version 7.1.0 Spring Security versions 7.0.0 through 7.0.6 Spring Security versions 6.5.0 through 6.5.11 Spring Security versions 6.4.0 through 6.4.18 Description An application using WebAuthn support may be vulnerable to user...