CVE-2026-91099: UNIX Symbolic Link (Symlink) Following

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

Malicious code in jexkcode (npm)

Versions 1.0.1 through 1.1.4 of jexkcode automatically follow a hard-coded WhatsApp newsletter whenever a WhatsApp connection opens. The package waits three seconds and calls newsletterFollow without obtaining user consent or exposing a configuration option. The README advertises newsletter suppo...

PT-2026-94099

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 commit e01e41ecc Description Cross-site request forgery occurs because the endpoint 'objects/videoAddNew.json.php' disables the automatic CSRF guard $global'skipAutoCSRFCheck' and the untrusted-request check...

PT-2026-93964

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description An unauthenticated remote attacker can perform SQL injection attacks on an affected device due to improper validation of user-supplied input. By sending a crafted request, an attacker could...

PT-2026-93971

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-si...

AlmaLinux 9 : firewalld (ALSA-2026:67585)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67585 advisory. firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis- authorization CVE-2026-4948 Tenable has extracted the preceding...

PT-2026-93906

Name of the Vulnerable Software and Affected Versions HPLIP affected versions not specified Description Multiple issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93926

Name of the Vulnerable Software and Affected Versions HPLIP affected versions not specified Description Multiple issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93907

Name of the Vulnerable Software and Affected Versions HPLIP versions prior to 3.26.6-1.1 Description Multiple security issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93923

Name of the Vulnerable Software and Affected Versions HPLIP versions prior to 3.26.6-1.1 Description Multiple security issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93924

Name of the Vulnerable Software and Affected Versions HPLIP affected versions not specified Description Multiple issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93268

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-87265

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

CVE-2026-87260

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication...

CVE-2026-87259

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

CVE-2026-87249

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87241

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-87232

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-87229

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87219

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...