164496 matches found
PT-2026-116385
CVE ID :CVE-2026-106006 Published : Oct. 14, 2026, 10:26 p.m. | 20 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2026-114420
Name of the Vulnerable Software and Affected Versions curl versions prior to 8.23.0-1.1 Description An ftp:// transfer configured with CURLUSESSL NONE may reuse a pooled FTP control connection previously upgraded with STARTTLS and authenticated via a client certificate. Because the subsequent...
PT-2026-116386
CVE ID :CVE-2026-106068 Published : Oct. 14, 2026, 10:26 p.m. | 20 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2026-113771
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.pre social login in...
CVE-2026-110261: Inefficient Algorithmic Complexity
OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTEFRAMES. Attackers can craft methods that make the unbounded MethodWriter.computeAllFrames fix point algorithm converge slowly,...
SUSE SLES12: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2026:4633-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4633-1 advisory. - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage...
CVE-2026-100169: Improper Authentication
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...
Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm (CVE-2026-21718)
An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achieve pre-authenticated code execution on the system. This plugin only works with Tenable.ot. Please visit...
CVE-2026-104939: Incorrect Implementation of Authentication Algorithm
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external...
Exploit for CVE-2026-110025
CVE-2026-110025 — phpwcms unrestricted upload to RCE Englis...
Exploit for CVE-2026-108924
CVE-2026-108924 — Kirby dynamic field-option authorization byp...
CVE-2026-86063
A flaw was found in Claude Code. When installing a plugin pinned to a specific commit hash, the application does not verify that the checked-out version matches the expected Secure Hash Algorithm SHA identifier. A remote attacker controlling a repository can create a branch named after the review...
Patch Tuesday - October 2026
Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course...
Security Bulletin: IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH [CVE-2026-17491]
Summary IBM i is vulnerable to bypassing security restrictions due to improper enforcement of ChrootDirectory CVE-2026-17491 in OpenSSH as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17491 DESCRIPTION: IBM i could allow a remote authenticated attacker to...
Security Bulletin: IBM i is Affected By An Improper Authentication Vulnerability in SST / DST [CVE-2026-17488]
Summary IBM i is vulnerable to bypassing security restrictions due to improper authentication CVE-2026-17488 in System Service Tools SST / Dedicated Service Tools DST as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17488 DESCRIPTION: IBM i could allow a...
K000163699: OpenSSL vulnerability CVE-2026-75803
Security Advisory Description Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on ...
K000163698: OpenSSL vulnerability CVE-2026-63075
Security Advisory Description Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer...
K000163697: OpenSSL vulnerability CVE-2026-63076
Security Advisory Description Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then...
CLSA-2026-1791919907 python3.9: Fix of 4 CVEs
CVE-2026-8328: stop ftplib.ftpcp trusting the IPv4 address the source server advertises in its PASV reply, completing the CVE-2021-4189 fix - CVE-2026-15806: scope HTTPPasswordMgr credentials by URL scheme, so a credential stored for an https URI is no longer sent to the matching http URI -...
