PT-2026-71869

Name of the Vulnerable Software and Affected Versions Tenda CH7 versions prior to 20260625 Tenda CH7G versions prior to 20260625 Tenda CH10 versions prior to 20260625 Tenda CP3 versions prior to 20260625 Tenda CP3 Pro versions prior to 20260625 Tenda CP7 versions prior to 20260625 Tenda TC3B14C...

ROS-20260813-73-0054

The vulnerability in portainer-ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...

PT-2026-71619

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges...

CVE-2026-12072

Unknown description...

PT-2026-71893

Name of the Vulnerable Software and Affected Versions mcp-rdf-explorer version 1.0.0 Description A server-side request forgery SSRF issue exists in the MCP Server component within the explore url function of the src/mcp-rdf-explorer/server.py file. A remote attacker can trigger this by manipulati...

PT-2026-71674

A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/view department.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

Linux Distros Unpatched Vulnerability : CVE-2026-70453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hashsearch function that allows a remote attacker to cause a denial of service by...

Linux Distros Unpatched Vulnerability : CVE-2026-53790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious...

PT-2026-71927

Name of the Vulnerable Software and Affected Versions Dromara lamp-cloud versions prior to 5.10.1 Description A path traversal issue exists in the Code Generator component within the DefGenProjectController.java file. A remote attacker can exploit this by manipulating the outputDir, parent, or...

PT-2026-71748

Name of the Vulnerable Software and Affected Versions Calix GigaSpire version 26.1.0 Description A remote denial of service issue exists within an unknown function of the traceroute.cmd file. Manipulation of this component allows a remote attacker to cause the system to become unavailable...

PT-2026-71747

Name of the Vulnerable Software and Affected Versions Calix GigaSpire version 26.1.0 Description A flaw in the Web Management Interface component allows a remote attacker to cause a denial of service. This is achieved by manipulating the sessionKey argument within the 'utilities...

PT-2026-71928

A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...

ROS-20260813-73-0049

The vulnerability in libucl is related to the execution of an operation outside the buffer in memory. This vulnerability can be exploited remotely...

PT-2026-71929

Name of the Vulnerable Software and Affected Versions dromara lamp-cloud versions prior to 5.10.1 Description A path traversal issue exists in the chunk-check endpoint within the FileChunkController.java file. A remote attacker can manipulate the Name argument to perform path traversal, which...

PT-2026-71429

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3 Description Authenticated users can achieve remote code execution in the Custom MCP node when the CUSTOM MCP PROTOCOL is set to stdio. This occurs through the manipulation of command arguments and environment...

ROS-20260813-73-0033

The vulnerability in Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-53798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferre...

MiracleLinux 8 : python-idna-2.5-8.el8_10 (AXSA:2026-1519:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1519:01 advisory. python-idna: idna: Denial of Service via specially crafted long inputs CVE-2026-45409 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-53788

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol...

Linux Distros Unpatched Vulnerability : CVE-2026-53797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent...