PT-2026-103464

Name of the Vulnerable Software and Affected Versions Move 4K 12X versions prior to 0.0.98 Move 4K 20X versions prior to 0.1.33 Move 4K 30X versions prior to 2.1.17 Link 4K 12X versions prior to 0.0.99 Link 4K 20X versions prior to 0.1.37 Link 4K 30X versions prior to 2.1.18 Move SE 12X versions...

CVE-2026-102150: Missing Authentication for Critical Function

A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use it to carry out a limited set of internal service operations on the Kiteworks platform; it did not permit access to user accounts, stored files, or form...

Linux Distros Unpatched Vulnerability : CVE-2026-47603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel...

CentOS Linux 7 [TuxCare] Security Update: pam / pam-devel (CENTOS7:CLSA-2025:1757532130)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1757532130 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CentOS Linux 8 [TuxCare] Security Update: pam / pam-devel (CENTOS-STREAM8:CLSA-2025:1753206853)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1753206853 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...

Kibana 8.x < 8.19.22 / 9.0.x < 9.4.7 / 9.5.x < 9.5.3 Missing Authorization (ESA-2026-139)

The version of Kibana installed on the remote host is 8.x prior to 8.19.22, or 9.0.x prior to 9.4.7, or 9.5.x prior to 9.5.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-139 advisory. - Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of da...

Fedora 44 : sngrep (2026-3ff086aa2a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3ff086aa2a advisory. Fixed CVE-2026-90558 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for th...

Rocky Linux 9.6 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc (ALMALINUX9.6:CLSA-2025:1764688910)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1764688910 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

AlmaLinux 9.2 [TuxCare] Security Update: pam / pam-devel / pam-docs (ALMALINUX9.2:CLSA-2025:1767001153)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1767001153 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Oracle Linux 10 : freerdp (ELSA-2026-73979)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73979 advisory. - Abort after PROTOCOLFAILEDNEGO CVE-2026-91949 Resolves: RHEL-264913 Tenable has extracted the preceding description block directly from the Oracle Linux...

Fedora 45 : gnucash / gnucash-docs (2026-a95c9d3b51)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a95c9d3b51 advisory. 5.17 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue but has...

AlmaLinux 9.2 [TuxCare] Security Update: redis / redis-devel / redis-doc (ALMALINUX9.2:CLSA-2025:1762244363)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762244363 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CVE-2026-103053: Missing Authentication for Critical Function

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOCDEVMODE is enabled and AISOCACTIONSSERVICETOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve...

PT-2026-103514

Name of the Vulnerable Software and Affected Versions OpenClaw Windows Node versions prior to 2026.7.1-3 Description NodeService capture handlers lack proper authorization, allowing connected gateways or agents to perform unauthorized captures without consent prompts. An attacker can use the node...

CVE-2026-102458: Missing Authentication for Critical Function

EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords through a specific API...

Linux Distros Unpatched Vulnerability : CVE-2026-102310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origi...

PT-2026-103305

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Missing authorization allows users with read-only permissions to access and read project settings. Recommendations Update to version 2026.2.18991...

PT-2026-103067

A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive information...

CVE-2026-93462: Missing Authentication for Critical Function

A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive information...

CVE-2026-100271: Missing Authorization

In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from other projects...