MiracleLinux 8 : gegl04-0.4.4-7.el8_10.1 (AXSA:2026-1747:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1747:02 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directl...

MiracleLinux 8 : gegl-0.2.0-40.el8_10.1 (AXSA:2026-1746:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1746:02 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directl...

AlmaLinux 8 : gimp:2.8 (ALSA-2026:62507)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:62507 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on...

SonicWall SMA 1000 Series <= 12.4.3-03453 / 12.5.x <= 12.5.0-02835 Multiple Vulnerabilities (SNWLID-2026-0016)

The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A pre-authentication server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote, unauthenticated attacker...

Next.js Framework 13.4 < 15.5.24 / 16.x < 16.3.3 RCE (Windows)

The Next.js Framework on the remote host is affected by a remote code execution vulnerability: - A vulnerability in applications using both the Pages Router and App Router without Cache Components can lead to unauthenticated remote code execution when the Next.js server uses a Windows filesystem...

Metabase 0.61.0 - Authenticated Remote Code Execution

Exploit Title: Metabase 0.61.0 - Authenticated Remote Code Execution Date: 2026-08-12 Exploit Author: Gutierre0x80 Vendor Homepage: https://www.metabase.com/ Software Link: https://github.com/metabase/metabase Version: = 0.58.0 = 0.59.0 = 0.60.0 = 0.61.0 Example: python3 exploit.py...

KLA91258 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can be...

CVE-2026-6071: Out-of-bounds Write

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerability, a legitimate user must visit a...

PT-2026-84973

Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admin info endpoint. The application validates files solely based on the name provided by the client, without properly checking their content or securely restricting the permitted file types. This allows...

CVE-2026-85439: Improper Neutralization of Special Elements used in an OS Command

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary...

Metabase 0.61.0 Remote Code Execution

Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects returned by native H2 queries in result columns of type OTHER without validation. An authenticated user with permission to execute native queries against an accessible H2...

CVE-2026-85049: Use After Free

Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-85125

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

CVE-2026-85047: Improper Input Validation

Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-85168: Improper Neutralization of Special Elements used in an OS Command

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-driver key families. A repository with...

Telerik UI for ASP.NET AJAX < 2026.3.812 Multiple Vulnerabilities

The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is prior to 2026.3.812. It is, therefore, affected by multiple vulnerabilities: - In Progress Telerik UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may...

Microsoft Exchange Server MRSProxy Pre-Auth NTLM Relay RCE (CVE-2026-62911)

Binary data exchangecve-2026-62911.nbin...

CVE-2026-71963: Improper Neutralization of Special Elements used in an OS Command

Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a malicious repository with a crafted .git/config that sets core.fsmonitor to an attacker-controlled command. When a user...

RockyLinux 8 : gegl04 (RLSA-2026:62420)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:62420 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directly fr...

RHEL 8 : gegl (RHSA-2026:62425)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:62425 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer...