PT-2026-70708

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

PT-2026-70474

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free condition in Windows Win32K allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

PT-2026-70982

Name of the Vulnerable Software and Affected Versions Parallels RAS Client affected versions not specified Description A local privilege escalation issue exists in the RAS RDP Backend Service due to an exposed dangerous function. An attacker who has already obtained the ability to execute...

PT-2026-70758

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an...

PT-2026-70197

Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain an arbitrary file read vulnerability. The create Twig function restricts class instantiation using a 5-entry blocklist that does not include SplFileObject, allowing an authenticated administrator with allowAdminChanges=true to...

PT-2026-70734

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

PT-2026-70583

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use-after-free condition in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...

PT-2026-70512

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description A heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-70141

Name of the Vulnerable Software and Affected Versions Friendica versions prior to 2026.08-dev Description An authenticated user with a self-registered account can perform a server-side request forgery SSRF through the link-preview endpoint. This occurs because the endpoint fetches user-supplied...

PT-2026-70683

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A use-after-free condition exists that allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

Linux Distros Unpatched Vulnerability : CVE-2026-72694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a...

Linux Distros Unpatched Vulnerability : CVE-2026-73142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-5xr9-fmm8-7p8x: remotetrx NetUplink: connection object leak DoS CVE-2026-73142 Note that Nessus relies on the...

CVE-2026-62871

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

PT-2026-70571

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An out-of-bounds write occurs in .NET, which could allow an unauthorized attacker to execute code locally. An out-of-bounds write is a memory corruption error that happens when a program writes...

PT-2026-70845

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss ogs diam s6a air cb/hss ogs diam s6a ulr cb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is...

PT-2026-70465

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow occurs in Windows NTFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...

Linux Distros Unpatched Vulnerability : CVE-2026-73154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow CVE-2026-73154 Note that Nessus relies on the presence of...

PT-2026-70942

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.2 Description A heap-based buffer overflow exists in the Diameter S6a Interface component within the mme s6a subscription data from avp function of the src/mme/mme-fd-path.c file. This issue can be triggered...

Fedora 43 : mingw-gstreamer1-plugins-good (2026-1e22d3b0bf)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1e22d3b0bf advisory. Backport fix for CVE-2026-5056. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

SonicWall SMA1000 Server-Side Request Forgery / Remote Command Execution

This Metasploit module exploits a server-side request forgery vulnerability in the SonicWall SMA1000 WorkPlace wsproxy service to access the internal Erlang distribution service. After authenticating using the known Erlang distribution cookie, the module invokes os:cmd/1 through Erlang RPC to...