CVE-2026-103086: Missing Authorization

Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through 1.2.74...

PT-2026-104698

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitatio...

PT-2026-106098

Name of the Vulnerable Software and Affected Versions RepairBuddy versions prior to 4.1226 Description A missing authorization flaw in the computer-repair-shop component allows the retrieval of embedded sensitive data. Recommendations Update to version 4.1226 or later...

PT-2026-106145

Name of the Vulnerable Software and Affected Versions WifiPermissionsUtil.java affected versions not specified Description A missing permission check in the isSystem function of WifiPermissionsUtil.java allows for a possible sandbox escape. This issue can lead to local escalation of privilege...

PT-2026-104681

Name of the Vulnerable Software and Affected Versions Video HAL affected versions not specified Description A missing bounds check in Video HAL allows for a local escalation of privilege. This issue can be exploited without requiring user interaction or additional execution privileges...

PT-2026-104810

A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authz filter.go of the component API Endpoint. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used...

CVE-2026-104675: Missing Authorization

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0...

PT-2026-104675

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add user.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-104962: Missing Authorization

Plane is an open-source project management tool. Prior to 1.4.0, GET /api/v1/workspaces/slug/projects/projectid/members/ returns the complete project-member roster, including each member's email address, first and last name, display name, avatar, and role. ProjectMemberPermission gates the...

CVE-2026-104388: Missing Authorization

Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Retrieve Embedded Sensitive Data.This issue affects PowerPress Podcasting: from n/a through 11.17.9...

CVE-2026-105306: Missing Authorization

A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issue occurs because the registration process fails to filter security-sensitive client attributes when a new client is created. An attacker with a valid Initial Access Token can...

CVE-2026-105179: Missing Encryption of Sensitive Data

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

PT-2026-104808

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

PT-2026-106170

Name of the Vulnerable Software and Affected Versions Kirillbdev WC Ukraine Shipping versions prior to 1.23.2 Description Kirillbdev WC Ukraine Shipping contains a missing authorization flaw that allows the exploitation of incorrectly configured access control security levels. Recommendations...

CVE-2026-105170: Missing Authentication for Critical Function

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...

Linux Distros Unpatched Vulnerability : CVE-2026-81841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shar...

Fedora 45 : openssl (2026-06c29a2cb4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-06c29a2cb4 advisory. Rebase to OpenSSL 4.0.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Cisco ASA Uncontrolled Resource Consumption (CVE-2018-15399)

A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service DoS condition. The...

PT-2026-106164

Name of the Vulnerable Software and Affected Versions Galaxy S26 series affected versions not specified Z Fold 8 affected versions not specified Z Flip 8 affected versions not specified Description A flaw in PduParser.java across multiple functions allows a remote persistent denial of service. Th...

CVE-2026-39783: Missing Authorization

Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7...