PT-2026-65026

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-65179

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Tahoe versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an application to access sensitive user data. Recommendations Update macOS...

PT-2026-65164

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.8 macOS versions prior to 14.8.8 macOS versions prior to 26.6 watchOS versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an application to access...

Xerox AltaLink Missing Authorization (CVE-2021-28669)

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights. This plugin only works with Tenable.ot. Please visit...

PT-2026-64904

Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster affected versions not specified Progress ECS Connection Manager affected versions not specified Progress Object Scale Connection Manager affected versions not specified Progress MOVEit WAF affected versions not...

PT-2026-65283

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an application to access sensitive user data. Recommendations Update iOS to version 26.6...

PT-2026-65187

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6 macOS Tahoe versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an application to access sensitive user data. Recommendations Update Safari to versi...

PT-2026-64974

A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/core/astr main agent.py. The manipulation of the argument req.func tool leads to incorrect authorization. The attack may be initiated remotely. The exploit is publicly available...

PT-2026-65010

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network...

About the security content of Safari 26.6

About the security content of Safari 26.6 This document describes the security content of Safari 26.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Exploit for Improper Authorization in Microsoft

Certighost Slidev deck This directory contains the Slidev pre...

CVE-2026-17434

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component addmcpserver. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been...

CVE-2026-17433

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached...

CVE-2026-17434 nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component addmcpserver. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been...

CVE-2026-17434 nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component addmcpserver. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been...

CVE-2026-17434

The CVE-2026-17434 affects nanocoai NanoClaw up to version 2.0.64, specifically the function handleAddMcpServer in src/modules/self-mod/request.ts of the add_mcp_server component. The underlying issue leads to improper authorization when a manipulation is executed, with potential for remote explo...

CVE-2026-17434

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component addmcpserver. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been...

EUVD-2026-49049

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component addmcpserver. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been...

CVE-2026-17433

CVE-2026-17433 affects nanocoai NanoClaw up to v2.0.64 in MCP Server Approval, specifically the createChatSdkBridge.setup function in src/channels/chat-sdk-bridge.ts. Root cause: improper authorization due to manipulation of the function. Local attack vector; exploit publicly available. The provi...

CVE-2026-17433

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached...