CVE-2026-51026

Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request...

Important: sssd

Issue Overview: A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a...

PT-2026-61602

Name of the Vulnerable Software and Affected Versions Menyoo 2.0 versions prior to commit 729aa48 Description A directory traversal issue allows a local attacker to execute arbitrary code. This occurs through the Spooner file management, the save, folder, and rename functions of the VehicleSpawne...

ALSA-2026:41937 Important: sssd security update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

TencentOS Server 2: 389-ds-base (TSSA-2026:0641)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0641 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

TencentOS Server 3: 389-ds:1.4 (TSSA-2026:0654)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0654 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:42079)

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42079 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

RHEL 8 : javapackages-tools:201801 (RHSA-2026:41948)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:41948 advisory. The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fixes: org.codehaus.plexus:plexus-utils: Plexus-utils...

EUVD-2026-45946

Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute arbitrary code via the Spooner file management, VehicleSpawner save/folder/rename functionality, WeaponOptions save/folder/rename functionality,...

Nimux 1.0.2

Nimux is a native command surface for authorized security assessments. It combines network enumeration, credential validation, Active Directory operations, Kerberos workflows, remote execution, file movement, secrets collection, DCSync, GPO operations, database clients, and SOCKS routing into one...

RockyLinux 8 : javapackages-tools:201801 (RLSA-2026:41948)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:41948 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...

sssd security update

2.12.0-3.0.1.el102.1 - Restore default debug level for ssscache Orabug: 32810448 2.12.0-3.1 - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole - Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via...

CVE-2026-51026

CVE-2026-51026 affects FileThingie v2.5.7 with a directory traversal vulnerability that allows a remote attacker to obtain sensitive information via a crafted request. CVSSv3.1 metrics show AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (base score 6.5, MEDIUM). No remediation details are provided in the su...

CVE-2026-52349

CVE-2026-52349 : Directory traversal vulnerability in Menyoo 2.0 (pre-commit 729aa48). A local attacker could exploit Spooner file management, VehicleSpawner, WeaponOptions, and PedComponentChanger operations to achieve arbitrary code execution. Root cause is path handling in save/folder/rename/c...

EUVD-2026-45990

Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request...

CVE-2026-51026

Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request...

CVE-2026-52349

Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute arbitrary code via the Spooner file management, VehicleSpawner save/folder/rename functionality, WeaponOptions save/folder/rename functionality,...

plexus-utils security update

3.3.0-14 - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165350...

ALSA-2026:41948 Important: javapackages-tools:201801 security update

The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fixes: org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 For more details about the security issues, including the impact, a CVSS score,...

Important: javapackages-tools:201801 security update

The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fixes: org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 For more details about the security issues, including the impact, a CVSS score,...