PT-2026-104202

An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provi...

Linux Distros Unpatched Vulnerability : CVE-2026-94485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protoco...

RockyLinux 10 : freerdp (RLSA-2026:73979)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:73979 advisory. freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass CVE-2026-91949 Tenable has extracted the preceding description block directly from the...

SUSE SLES16 Security Update : perl-Protocol-HTTP2 (SUSE-SU-2026:23945-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:23945-1 advisory. This update for perl-Protocol-HTTP2 fixes the following issue: - CVE-2026-16028: memory exhaustion leading to denial of service due to clos...

openSUSE 16 Security Update : perl-Protocol-HTTP2 (openSUSE-SU-2026:21972-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21972-1 advisory. This update for perl-Protocol-HTTP2 fixes the following issue: - CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams...

RHEL 10 : freerdp (RHSA-2026:73979)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73979 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP...

CVE-2026-86326: Improper Verification of Cryptographic Signature

An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provi...

GO-2026-6496 RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go

RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go...

GO-2026-6574 Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei

Nuclei: Local File Read via Workflow File-Protocol Gate Bypass in github.com/projectdiscovery/nuclei...

CVE-2026-82357

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

CVE-2026-82357

The RT-Labs AB C-Open CANopen software contains a NULL pointer dereference vulnerability occurring when the LSS protocol is utilized to configure the device. The root cause is triggered if a user-defined application object lacks all required subindexes for object 0x1018 . An unauthenticated, remo...

EUVD-2026-91022

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

CVE-2026-82357 RT-Labs AB C-Open CANopen NULL pointer dereference

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

CVE-2026-82357 RT-Labs AB C-Open CANopen NULL pointer dereference

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

agora-protocol (0.2.0), athina (>=1.6.24, <=1.6.33) +14 more potentially affected by CVE-2026-76825 via restrictedpython (7.4.0)

restrictedpython PYPI version 7.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - agora-protocol 0.2.0 - athina =1.6.24, =0.1.5, =0.1.0, =0.38.0, =0.0.86, =0.0.43a23, =0.1.24, =0.2.0, =0.2.0, =0.3.2 and more...

freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

A flaw was found in FreeRDP server. This vulnerability allows unauthenticated attackers to bypass server policies that disable Remote Desktop Services over Transport Layer Security RDSTLS connections. By sending incompatible protocol requests and then completing a TLS handshake, attackers can...

CVE-2026-103754

A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...

BIT-RABBITMQ-2026-67411 RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, native MQTT and MQTT over WebSocket behind a trusted PROXY Protocol frontend could lose the proxy-derived client address before the MQTT authentication path checked loopbackusers, causing th...

BIT-RABBITMQ-2026-66067 RabbitMQ: Stream protocol skips per vhost per user connection limits

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only checkvhostaccess; it omits the node/vhost/user connection-limit checks that rabbitreader performs for AMQP. A developer %% FIXME comment at the cited line explicitly acknowledges th...

CLEANSTART-2024-AM41653 SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9

CVE-2023-48795 affects multiple packages. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9. See references for individual vulnerability details...