TencentOS Server 4: libsoup3 (TSSA-2026:0839)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0839 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Amazon Linux 2 : tomcat, --advisory ALAS2-2026-3864 (ALAS-2026-3864)

The version of tomcat installed on the remote host is prior to 7.0.76-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3864 advisory. Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds usi...

RHEL 8 : redhat-ds:11 (RHSA-2026:56047)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:56047 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...

TencentOS Server 4: libsoup (TSSA-2026:0838)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0838 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

RockyLinux 10 : libssh (RLSA-2026:55855)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55855 advisory. libssh: libssh: information disclosure via short GSSAPI Curve25519 public key CVE-2026-59842 libssh: libssh: denial of service via zero advertised...

Linux Distros Unpatched Vulnerability : CVE-2026-68517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the corsorigins guard in glances/outputs/glancesrestfulapi.py uses exact list...

VMware vCenter Server 8.0 < 8.0 U3k / 9.0.x < 9.0.2.0100 / 9.1.x < 9.1.0.0200 Authentication Bypass (VMSA-2026-0006)

The version of VMware vCenter Server installed on the remote host is 8.0 prior to 8.0 Update 3k, or 9.0.x prior to 9.0.2.0100, or 9.1.x prior to 9.1.0.0200. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware vCenter contains an authentication...

PT-2026-77635

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via TCP can exploit this flaw to compromise the...

PT-2026-77303

Name of the Vulnerable Software and Affected Versions Froxlor versions 2.3.7 through 2.3.7 Description Certain API commands retrieve full database rows and return them without removing sensitive fields. An authenticated API caller with appropriate permissions can obtain password hashes and...

CVE-2021-43718

CVE-2021-43718 is an authentication bypass in the Web Control interface of the Epson EH-TW5350 projector (firmware 150075647YWWV110 ). A remote, unauthenticated attacker can send a specially crafted series of HTTP requests to cause a Denial of Service . The vulnerability was discovered by team B-...

PT-2026-77275

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs...

PT-2026-77213

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAX VALUE and allocate ...

PT-2026-77248

Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass...

PT-2026-77118

Name of the Vulnerable Software and Affected Versions Piraeus Bank WooCommerce Payment Gateway version 3.2.0 Description The software contains a broken authentication mechanism that allows unauthenticated access. Recommendations At the moment, there is no information about a newer version that...

PT-2026-77119

Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...

PT-2026-80784

This update for redis fixes the following issues: Changes in redis: - Update to 8.10.1 Update urgency: SECURITY: There are security fixes in the release. - Security fixes - CVE-2026-62356 Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write - Out-of-bounds access in TopK...

ROS-20260818-73-0006

The vulnerability of the HTTP/2 implementation in the Go programming language is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

AlmaLinux 10 : curl (ALSA-2026:55432)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:55432 advisory. curl: Information disclosure due to uncleared proxy authentication state CVE-2026-8927 Tenable has extracted the preceding description block directly from the...

The vulnerability of the Screen Sharing service in Apple macOS operating systems allows a perpetrator to gain full control over the system.

The vulnerability of the Screen Sharing service in Apple macOS operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain full control over the system...

AlmaLinux 10 : libssh (ALSA-2026:55855)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55855 advisory. libssh: libssh: information disclosure via short GSSAPI Curve25519 public key CVE-2026-59842 libssh: libssh: denial of service via zero advertised chann...