JetBrains IntelliJ IDEA < 2026.1.5 Git Credential Disclosure

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.1.5. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains IntelliJ IDEA before 2026.1.5 Git credentials were written in plaintext to the IDE log. CVE-2026-75057 Note that Nessus h...

Keycloak 26.6.x < 26.6.6 Multiple Vulnerabilities

The version of Keycloak installed on the remote host is 26.6.x prior to 26.6.6. It is, therefore, affected by multiple vulnerabilities: - A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak. The mechanism used to protect the account-linking process from unauthoriz...

PT-2026-78932

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions prior to 2.33.4 n8n versions prior to 2.34.1 Description The GraphQL node fails to properly handle connection-level errors, re-throwing the underlying HTTP client error without wrapping it in the...

PT-2026-80770

Name of the Vulnerable Software and Affected Versions Wagtail versions prior to 7.0.9 Wagtail versions prior to 7.3.4 Wagtail versions prior to 7.4.3 Wagtail versions prior to 8.0rc2 Description The internal Pages admin API returns page fields declared in api fields without sufficient access...

PT-2026-79203

Name of the Vulnerable Software and Affected Versions Azure Data Factory affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to disclose information over a network. SSRF is a flaw where a server is tricked into making requests to an...

PT-2026-79205

Name of the Vulnerable Software and Affected Versions Mailpit versions 1.29.0 through 1.30.5 Description An issue exists where the origin middleware in server/server.go checks the raw RequestURI for the /api/ prefix, while Go's ServeMux routes using the percent-decoded URL path. Additionally,...

JetBrains YouTrack < 2026.2.18112 Information Disclosure (CVE-2026-75046)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18112. It is, therefore, affected by an information disclosure vulnerability: - An authenticated user could enumerate accounts via the users search endpoint. CVE-2026-75046 Note that Nessus has not tested for this...

OMEN Gaming Hub – Potential Escalation of Privilege & Information Disclosure

A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls. HP has identified affected versions and the minimum version tha...

CVE-2026-52021

100xdevs CMS v1.0 (by code100xDevs) contains an information disclosure vulnerability in the src/middleware.ts and src/app/api/mobile/search/route.ts components, allowing a remote, unauthenticated attacker to obtain sensitive information with no user interaction required. The vulnerability is rate...

PT-2026-79040

Uncontrolled Resource Consumption vulnerability in Apache InLong. Non-template responsible persons can view template information. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...

CVE-2025-52182

The Library Corporation LS2 Admin versions v5.7 through v5.8.0 are affected by an information disclosure vulnerability . The CVSS 3.1 score is 7.5 (HIGH) , reflecting network-accessible exploitation with no required privileges and a high confidentiality impact. The provided references point to an...

Oracle Linux 10 : php8.4 (ELSA-2026-56969)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56969 advisory. 8.4.24-2 - rebase to 8.4.24 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

CVE-2025-52182

The Library Corporation LS2 Admin v5.7 to v5.8.0 was discovered to contain an information disclosure vulnerability...

cve-2026-47844 - MEDIUM - Reactor Netty HTTP Server Leaks Exception Details

cve-2026-47844 - MEDIUM - Reactor Netty HTTP Server Leaks Exception Details...

cve-2026-47894 - MEDIUM - Spring Cloud Config Server Native Environment Repository Exposure

cve-2026-47894 - MEDIUM - Spring Cloud Config Server Native Environment Repository Exposure...

cve-2026-47893 - LOW - Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService

cve-2026-47893 - LOW - Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService...

cve-2026-59271 - MEDIUM - Admin password disclosed in BrokerNotAliveException message

cve-2026-59271 - MEDIUM - Admin password disclosed in BrokerNotAliveException message...

MiracleLinux 8 : dotnet9.0-9.0.120-1.el8_10 (AXSA:2026-1581:16)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1581:16 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

PT-2026-79124

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management affected versions not specified Description A flaw in the multicloud-operators-subscription component allows a tenant with HelmRelease create permissions to manipulate the secretRef.Namespace field. This...

The vulnerability of the picksplit function in the PostgreSQL database management system allows a hacker to disclose sensitive information that should be protected.

The vulnerability of the picksplit function in the PostgreSQL database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system...