BELL-CVE-2026-53173 CVE-2026-53173 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-53135

Bulletin has no description...

BELL-CVE-2026-53257

Bulletin has no description...

BELL-CVE-2026-53275

Bulletin has no description...

BELL-CVE-2026-53133

Bulletin has no description...

BELL-CVE-2026-53192

Bulletin has no description...

MINI-FXM7-7PVQ-67P6

Bulletin has no description...

MINI-7J52-CJCV-X28M

Bulletin has no description...

MINI-8333-C376-3CXC

Bulletin has no description...

MINI-MQXJ-6R57-R2M6

Bulletin has no description...

MINI-VRVF-P4G3-6CVJ

Bulletin has no description...

MINI-CFX9-JQ6G-G47X

Bulletin has no description...

MINI-7PWV-V949-P58H

Bulletin has no description...

MINI-4989-44FR-5J6V

Bulletin has no description...

CVE-2026-49342

creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:42+00:00| published-proof-of-concept| https://github.com/lsegal/yard/security/advisories/GHSA-pxcc-8665-phx8...

CVE-2026-49339

creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:09+00:00| published-proof-of-concept| https://github.com/sentriz/gonic/security/advisories/GHSA-2fp4-5v5c-4448...

Photon OS 4.0: Erlang PHSA-2026-4.0-1038

An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1038. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-53225

Name of the Vulnerable Software and Affected Versions mcp Python SDK versions prior to 1.27.2 Description Principal confusion exists in the HTTP transports of the mcp Python SDK. Specifically, the SSE and Streamable HTTP stateful mode routed sessions fail to verify if the principal matches the...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the id parameter in playlist operations. An attacker can access or delete other users' playlists, and probe for the existence of arbitrary files by supplying a crafted base64-encoded...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the ServeCreateOrUpdatePlaylist process. An attacker can overwrite or create arbitrary files on the host system by supplying a crafted playlist ID that resolves to an...