PT-2026-72044

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...

AlmaLinux 8 : .NET 10.0 (ALSA-2026:54542)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54542 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Deni...

PT-2026-72074

Name of the Vulnerable Software and Affected Versions Emlog versions prior to 2.6.27 Description The install.php endpoint allows the action parameter to be set to reinstall without authentication. This bypasses the installation check because the security guard only executes when the $act variable...

The vulnerability of the drm/display/dp_mst component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drm/display/dpmst component in Linux kernel is related to an incorrect bit offset for a integer value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

FreeBSD : Gitlab -- vulnerabilities (2c73b6d5-971c-11f1-bdc8-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2c73b6d5-971c-11f1-bdc8-2cf05da270f3 advisory. Gitlab reports: Cross-site Scripting issue in Analytics Dashboards table field configuration...

ansible-lint-26.8.0-1.1 on GA media (moderate)

ansible-lint-26.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11503-1 Rating: moderate Cross-References: CVE-2026-11332 CVSS scores: CVE-2026-11332 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

dracut-112+suse.29.gc0c5e1d-1.1 on GA media (moderate)

dracut-112+suse.29.gc0c5e1d-1.1 on GA media Announcement ID: openSUSE-SU-2026:11504-1 Rating: moderate Cross-References: CVE-2026-15816 CVSS scores: CVE-2026-15816 SUSE : 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

PT-2026-72073

Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant execute tool action in admin/ai.php lets a remote unauthenticated attacker submit a forged cross-site request from an attacker-controlled page to a recently logged-in administrator...

The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dma/qcom/gpi.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dma/qcom/gpi.c component in the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-72080

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...

Microsoft PowerShell 7.4.x < 7.4.19 / 7.5.x < 7.5.10 / 7.6.x < 7.6.5 Multiple Vulnerabilities (August 2026)

The version of Microsoft PowerShell installed on the remote host is 7.4.x prior to 7.4.19, 7.5.x prior to 7.5.10, or 7.6.x prior to 7.6.5. It is, therefore, affected by multiple vulnerabilities: - Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code...

PT-2026-71974

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 7.0.4 Description An authenticated user with Author level privileges or higher can achieve remote code execution by uploading a malicious Postscript file. This issue occurs when the server utilizes Imagick and...

Oracle Linux 10 : iscsi-initiator-utils (ELSA-2026-53845)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-53845 advisory. - fix IQN name validation to prevent path traversal CVE-2026-44943 - fix iscsiuio control-socket credential verification CVE-2026-44944 - fix IQN nam...

SAP NetWeaver AS ABAP Privilege Escalation (3772411)

The version of SAP NetWeaver AS ABAP detected on the remote host is affected by a privilege escalation vulnerability as referenced in SAP Security Note 3772411: - SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low...

RockyLinux 10 : .NET 8.0 (RLSA-2026:54541)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54541 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

Linux Distros Unpatched Vulnerability : CVE-2026-73624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through...

The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...