CVE-2026-3494 affecting package mariadb for versions less than 10.6.25-1

CVE-2026-3494 affecting package mariadb for versions less than 10.6.25-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-33412 affecting package vim for versions less than 9.2.0240-1

CVE-2026-33412 affecting package vim for versions less than 9.2.0240-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-25541 affecting package rust for versions less than 1.72.0-15

CVE-2026-25541 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...

CVE-2026-29111 affecting package systemd for versions less than 250.3-24

CVE-2026-29111 affecting package systemd for versions less than 250.3-24. A patched version of the package is available...

EUVD-2025-209433

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges...

CVE-2025-13822

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges...

CVE-2025-13822 Authentication bypass in MCPHub

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges...

CVE-2025-13822 Authentication bypass in MCPHub

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges...

CVE-2026-27668

CVE-2026-27668 affects RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) with all versions below v5.8. The issue allows an authenticated User Administrator to escalate their own privileges by administering groups they belong to, enabling access to any device group at any access level. Docu...

CVE-2026-24032

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3 with UMC. The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component. This could allow an unauthenticated remote attacker to bypass authentication and gain...

CVE-2026-21715 affecting package nodejs24 for versions less than 24.14.1-1

CVE-2026-21715 affecting package nodejs24 for versions less than 24.14.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21716 affecting package nodejs24 for versions less than 24.14.1-1

CVE-2026-21716 affecting package nodejs24 for versions less than 24.14.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-40025 affecting package sleuthkit for versions less than 4.12.1-2

CVE-2026-40025 affecting package sleuthkit for versions less than 4.12.1-2. A patched version of the package is available...

CVE-2026-40026 affecting package sleuthkit for versions less than 4.12.1-2

CVE-2026-40026 affecting package sleuthkit for versions less than 4.12.1-2. A patched version of the package is available...

CVE-2026-33810 affecting package golang for versions less than 1.25.9-1

CVE-2026-33810 affecting package golang for versions less than 1.25.9-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-33810 affecting package golang for versions less than 1.26.2-1

CVE-2026-33810 affecting package golang for versions less than 1.26.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-35388 affecting package openssh for versions less than 9.8p1-6

CVE-2026-35388 affecting package openssh for versions less than 9.8p1-6. A patched version of the package is available...

CVE-2026-21714 affecting package nodejs24 for versions less than 24.14.1-1

CVE-2026-21714 affecting package nodejs24 for versions less than 24.14.1-1. An upgraded version of the package is available that resolves this issue...

Amazon Linux 2 : runfinch-finch, --advisory ALAS2DOCKER-2026-106 (ALASDOCKER-2026-106)

"The version of runfinch-finch installed on the remote host is prior to 1.15.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-106 advisory. gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting fr...

Slackware Linux 15.0 / current libexif Multiple Vulnerabilities (SSA:2026-104-01)

The version of libexif installed on the remote host is prior to 0.6.26. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-104-01 advisory. New libexif packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...