CVE-2026-76795: Server-Side Request Forgery (SSRF)

A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the component REST API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to th...

PT-2026-80315

Summary The structure-board endpoint render object structure renders a page's plugin structure without verifying that the requesting user is allowed to view the page. The edit and preview endpoints enforce this via render page, but the structure endpoint does not, allowing a low-privileged staff...

PT-2026-80272

Impact Pipelines-as-Code installations using the GitHub App provider are vulnerable to GitHub App credential exfiltration through the webhook endpoint. Affected versions accepted the X-GitHub-Enterprise-Host request header as the GitHub Enterprise API host during GitHub App token generation. For...

cve-2026-47837 - MEDIUM - Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests

cve-2026-47837 - MEDIUM - Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests...

Missing Authentication for Critical Function

Overview org.springframework.cloud:spring-cloud-config-server is a library that provides an HTTP resource-based API for external configuration. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the monitor endpoint, which does not validate incomi...

CVE-2026-76764: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the env actuator endpoint when no allow list is enforced for property keys. An attacker can modify arbitrary environment properties by sending crafted requests to the writable endpoint. Note: This is only...

PT-2026-78918

Name of the Vulnerable Software and Affected Versions FreeIPA affected versions not specified Description A remote, unauthenticated attacker can cause service disruption or a denial of service by sending oversized form POST requests to the '/ipa/migration/migration.py' endpoint. This action force...

PT-2026-78919

Name of the Vulnerable Software and Affected Versions FreeIPA affected versions not specified Description A remote, unauthenticated attacker can cause a denial of service DoS condition by sending an arbitrarily large request body to the /ipa/i18n messages endpoint. This action leads to excessive...

VulnCheck KEV: CVE-2026-15780

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utmcampaign' parameter in all versions up to, and including, 14.16.8 due to insufficient input sanitization and output escaping. This makes it...

JetBrains YouTrack < 2026.2.18177 DoS (CVE-2026-75047)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18177. It is, therefore, affected by a denial of service vulnerability: - A DoS attack was possible via a decompression bomb in the import endpoint. CVE-2026-75047 Note that Nessus has not tested for this issue but...

Keycloak 26.6.x < 26.6.6 Multiple Vulnerabilities

The version of Keycloak installed on the remote host is 26.6.x prior to 26.6.6. It is, therefore, affected by multiple vulnerabilities: - A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak. The mechanism used to protect the account-linking process from unauthoriz...

PT-2026-79138

Name of the Vulnerable Software and Affected Versions Mailpit versions prior to 1.30.4 Description Mailpit decodes image attachments into a full raster before verifying decoded dimensions, pixel count, or memory usage. This occurs in the GET '/api/v1/message/id/part/partID/thumb' endpoint. The...

JetBrains YouTrack < 2025.3.156085 / 2026.1.x < 2026.1.13914 / 2026.2.x < 2026.2.18095 Missing Authorization (CVE-2026-75044)

The version of JetBrains YouTrack installed on the remote host is prior to 2025.3.156085, 2026.1.x prior to 2026.1.13914, or 2026.2.x prior to 2026.2.18095. It is, therefore, affected by a missing authorization vulnerability: - Missing authorisation allowed an authenticated user to delete arbitra...

JetBrains YouTrack < 2026.2.18112 Information Disclosure (CVE-2026-75046)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18112. It is, therefore, affected by an information disclosure vulnerability: - An authenticated user could enumerate accounts via the users search endpoint. CVE-2026-75046 Note that Nessus has not tested for this...

PT-2026-78873

Name of the Vulnerable Software and Affected Versions code-projects Employee Management System version 1.0 Description A SQL injection flaw exists in the Admin Login Endpoint within the /process/aprocess.php file. The issue occurs when the mailuid argument is manipulated, allowing for remote...

Cross-site Request Forgery (CSRF)

Overview org.springframework.graphql:spring-graphql is a GraphQL Support for Spring Applications Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the GraphiQL process. An attacker can access confidential information by enticing a victim with an active sessio...

PT-2026-79105

Frappe is a full-stack web application framework. In version 16.31.0 and earlier, frappe.client.set value in frappe/client.py checks a dictionary supplied through the fieldname parameter against forbidden standard and child-table fields before parsing the dictionary into individual field names. A...

JetBrains YouTrack < 2026.1.13903 / 2026.2.x < 2026.2.17950 Information Disclosure (CVE-2026-75049)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.1.13903, or 2026.2.x prior to 2026.2.17950. It is, therefore, affected by an information disclosure vulnerability: - An authenticated user could read restricted articles from other projects via the draft creation...

CVE-2026-76402

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API could configure a non-secure Hypertext Transfer Protocol HTTP Event Collector endpoint in Splunk Enterprise that causes the connector to send...