CentOS 9 : kernel-5.14.0-749.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-749.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate stamask before ffs in BA session...

RHEL 8 : libsoup (RHSA-2026:69863)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69863 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: SoupWebsocketExtensionDeflate: libsoup: libsoup:...

CVE-2026-6922: Incorrect Authorization

The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 2.2.1. This is due to an operator precedence bug in the post-type guard within the trashtablebulk and restoretablebulk functions that causes the gua...

CVE-2026-77254: Missing Authentication for Critical Function

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user identity are allowed to reach tool handlers, which then use globally configured Jira or Confluence credentials. A network caller c...

CVE-2026-9231: Improper Control of Filename for Include/Require Statement in PHP Program

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.8.0 via the wtegettemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, ...

CVE-2026-83602: Improper Access Control

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and HTTPACCESSANONYMOUSDATA, causing unauthenticated PUT requests handled by src/web/api/v3/apiv3settings.c to bypass operator-configured allo...

CVE-2026-17620: Unprotected Transport of Credentials

IBM Financial Transaction Manager FTM for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh Operator 4.4.6+20260807.0818004.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that...

CVE-2026-76802: Improper Neutralization of Special Elements used in an OS Command

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature check before accepting a template that contains both a fuzzing: block and an unsigned code: block. When an operator...

PT-2026-96720

Name of the Vulnerable Software and Affected Versions libstdc++ affected versions not specified mingw-gcc affected versions not specified compat-gcc-295/296/32 affected versions not specified Description An integer overflow occurs in the global aligned operator new when processing very large...

PT-2026-96680

Name of the Vulnerable Software and Affected Versions VeloCloud Orchestrator versions 5.2.0 through 5.2.3.15 VeloCloud Orchestrator versions 6.1.0 through 6.1.3.7 VeloCloud Orchestrator versions 6.4.0 through 6.4.2.7 VeloCloud Orchestrator versions 7.0.0 through 7.0.0.2 Description An improper...

PT-2026-96328

Name of the Vulnerable Software and Affected Versions Yonyou U8cloud versions 5.x Description A SQL injection issue exists within the OpenAPI component. A remote attacker can exploit this by manipulating the operator argument in the '/u8cloud/openapi/so.saleorder.sendaudit' endpoint. SQL injectio...

CVE-2026-76804: Improper Access Control

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loading path does not enforce the -file capability gate when resolving file: protocol templates referenced by a workflow. An untrusted unsigned workflow can therefore load a...

CVE-2026-77251: Hardware Child Block Incorrectly Connected to Parent System

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, Jira search accepts a forbidden project clause because it checks only for the presence of project syntax, Confluence search uses an incomplete case-sensitive space check, and Jira boa...

CVE-2026-95619: Integer Overflow or Wraparound

A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability...

Rouxii: Exploiting Honeypots with Deception-Aware AI Pentesters

Honeypots are designed to deceive attackers, and recent work shows they can also derail autonomous LLM-based pentesters. These evaluations, however, largely consider attackers unaware of the deception they face. We study the opposite setting: an autonomous attacker explicitly equipped to recogniz...

RHEL 9 : kernel (RHSA-2026:69908)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69908 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mm/slab: do not limit zeroing...

RHEL 8 : kernel-rt (RHSA-2026:70403)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70403 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

PT-2026-96943

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description In multi-user HTTP deployments using the --transport streamable-http configuration, the server exposes all tools to unauthenticated network clients. This occurs because the UserTokenMiddleware...

CVE-2026-95679: Server-Side Request Forgery (SSRF)

MISP's RequestHandlerComponent automatically decodes XML request bodies on all write requests. The underlying Xml::build library contains a logic error in its readFile guard condition readFile && http || https, where PHP operator precedence causes the https branch to bypass the readFile check...

RHEL 10 : postgresql16 (RHSA-2026:70186)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70186 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that...