CVE-2026-86851: Missing Authorization

The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acting on request parameters on the order confirmation page, allowing unauthenticated users to change the status of arbitrary orders, store arbitrary data and notes on them, and...

CVE-2026-62042: Missing Authorization

Missing Authorization vulnerability in unFocus Projects Scripts n Styles scripts-n-styles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scripts n Styles: from n/a through 3.5.8...

CVE-2026-39779: Missing Authorization

Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asgaros Forum: from n/a through 3.4.0...

CVE-2026-97075: Missing Authorization

Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rocket: from n/a before 3.23.5...

PT-2026-108924

A missing authorization check in the illumos IP management daemon ipmgmtd allows a local user to change the persistent IP multipathing IPMP configuration. The ipmgmtd door dispatch table in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmt door.c does not require the solaris.network.interface.config...

CVE-2026-62028: Missing Authorization

Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Before After Image Comparison – Image comparison for WP: from n/a through...

Fedora 43 : cockpit (2026-9ff25022c1)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9ff25022c1 advisory. Automatic update for cockpit-368-1.fc43. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

CVE-2026-62040: Missing Authorization

Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1...

CVE-2026-105281: Missing Authentication for Critical Function

The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system...

Linux Distros Unpatched Vulnerability : CVE-2026-105399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a denial of service vulnerability in the MVG decoder caused by a missing limit check. Attackers ca...

Slackware Linux 15.0 / current mutt Vulnerability (SSA:2026-282-01)

The version of mutt installed on the remote host is prior to 2.4.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-282-01 advisory. New mutt packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding description...

Fedora 44 : barman (2026-0b3030633b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0b3030633b advisory. Update to 3.20.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Splunk Enterprise 10.2.0 < 10.2.7, 10.4.0 < 10.4.3 (SVD-2026-1001)

The version of Splunk Enterprise installed on the remote host is 10.2.x prior to 10.2.7 or 10.4.x prior to 10.4.3. Splunk Enterprise 9.4.x and 10.0.x are not affected. It is, therefore, affected by a missing authentication vulnerability as referenced in the SVD-2026-1001 advisory. An...

CVE-2026-83947

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network...

CVE-2026-106323

A missing authorization flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553114676...

CVE-2026-84249

IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function...

CVE-2026-107792

Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToForumAction that allows authenticated users to move other users' threads. Attackers can send crafted threadId and forumId values to /message/threadToForum/save to relocate any...

CVE-2026-107725

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary code on a Hazelcast cluster member...

CVE-2026-83947

A missing authorization vulnerability in Azure Event Grid allows an authorized attacker to perform spoofing over a network. The issue is classified under CWE-862 and carries a HIGH base severity score of 7.7. While the specific root cause and affected versions are not detailed in the provided doc...

CVE-2026-77900

A critical vulnerability in Azure App Service (CVE-2026-77900) stems from missing authentication for a critical function. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 9.8 . No specific explo...