Password component Code Execution

The vulnerability of the Password component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Device Trust Component Code Execution

The vulnerability of the Device Trust component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

SXP Platform DoS

The vulnerability of the Cisco Identity Services Engine ISE policy management platform’s SXP service is related to improper elimination of special elements in data requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

.NET and the Visual Privilege Escalation

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of checking for the return value. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Proxmox.inc.php XSS

The vulnerability of the proxmox.inc.php script in the LibreNMS network monitoring system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

.NET Visual Studio Code Critical Data Deletion DoS

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ANGLE Privilege Escalation

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2026-92928: Use of Hard-coded Credentials

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account...

PyPart Set Deep Slice Data Unauthorized Access

The vulnerability of the PyPart::setDeepSliceData function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access t...

CVE-2026-96676: Stack-based Buffer Overflow

A vulnerability was identified in Fast FAC1900R 201908272.0.2. The impacted element is the function getaliasname of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendo...

Linux Distros Unpatched Vulnerability : CVE-2026-91740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-91720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page...

Oracle Linux 8 : unbound (ELSA-2026-69120)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69120 advisory. - Backport additional fix from 1.26.0 CVE-2026-50252 - Correct new warning in previous change CVE-2026-44690 Tenable has extracted the preceding description...

Oracle Linux 8 : libtiff (ELSA-2026-69095)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69095 advisory. 4.0.9-39 - fix CVE-2026-52490: integer overflow in tiffcrop subdivision calculation RHEL-248298 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : libxml2 (ELSA-2026-69655)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69655 advisory. 2.9.7-21.8 - Lower xpath recursion limits RHEL-249282 2.9.7-21.8 - Fix CVE-2026-6653 RHEL-215616 Tenable has extracted the preceding description block directly...

PT-2026-104838

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

CVE-2026-96678: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file src/main/java/com/qingwenwei/util/NewUserFormValidator.java of the component Avatar Upload. The manipulation of the argument...

CVE-2026-96258: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unknown part of the file /forgotpasswd.html of the component Public Password Reset Endpoint. The manipulation of the argument email leads to cross site scripting. The attack is...

CVE-2026-95676: Improper Authentication

A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply...

PT-2026-97332

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An issue exists involving the use of non-canonical URL paths for authorization decisions. This allows an unauthenticated remote attacker to potentially...