PT-2026-95607

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...

PT-2026-95511

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the HTTP/2 stack allows a remote attacker to inject prohibited characters, including NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient validatio...

CVE-2026-10841: Inconsistent Interpretation of HTTP Requests

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling...

Fedora 44 : python-django5 (2026-301e6e2983)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-301e6e2983 advisory. Update python-django5 to the latest 5.x release 5.2.17 - Fixes CVE-2026-15307 high: Server-side file-write and request forgery via spatial lookups -...

EulerOS Virtualization 2.11.1 : perl-HTTP-Tiny (EulerOS-SA-2026-3451)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.The...

PT-2026-95515

Name of the Vulnerable Software and Affected Versions Semantic MediaWiki versions prior to 7.2.0 Description Semantic MediaWiki is an open-source extension for MediaWiki used to store and query data. The software fails to sanitize the sep variable when it is inserted into the HTML that joins tabl...

Fedora 43 : python-django5 (2026-6b28b4e483)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6b28b4e483 advisory. Update python-django5 to the latest 5.x release 5.2.17 - Fixes CVE-2026-15307 high: Server-side file-write and request forgery via spatial lookups -...

Cisco Identity Services Engine (cisco-sa-ise-rce-se7bYU57)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must...

Cisco Identity Services Engine (cisco-sa-ise-RADIUS-dos-wR3hYPMw)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the RADIUS feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is d...

Tenda CX12L Wi-Fi Router DoS

The vulnerability of the fromNatStaticSetting function /goform/NatStaticSetting in the Tenda CX12L Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST request...

EulerOS 2.0 SP15 : libsoup (EulerOS-SA-2026-3785)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the soupbodyinputstreamreadchunked functio...

CVE-2026-82982: Undefined Security Weakness

The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing an approver from approving or rejecting a file whose contents changed after they reviewed it. The backend only enforced this check when the etag parameter was present and...

Tenda CX12L Wi-Fi Router DoS

The vulnerability of the fromAddressNat function /goform/addressNat in Tenda CX12L Wi-Fi routers is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST request...

Tenda HG3 formTracert() Code Execution

The vulnerability of the formTracert function in Tenda HG3 router microprogramming software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code by sending a specially crafted HTTP request...

Tenda A18 Router DoS

The vulnerability of the formfastsettingwifiset function /goform/fastsettingwifiset in the Tenda A18 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST...

Tenda CX12L Wi-Fi router DoS

The vulnerability of the fromwebExcptypemanFilter function /goform/webExcptypemanFilter in the Tenda CX12L Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST reque...

Tenda F451 Router httpd Heap Buffer Overflow DoS

The vulnerability of the fromwebExcptypemanFilter function /goform/webExcptypemanFilter in the httpd component of the Tenda F451 router microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the page parameter. Exploiting this...

WP < 7.1.1 - Contributor+ Arbitrary Post Modification

Description WordPress does not properly verify that a user is allowed to edit a post when handling a post creation request that names an existing post in some cases, which could allow users with a role as low as contributor to overwrite the title, content and author of any post, including those...

PT-2026-95419

Name of the Vulnerable Software and Affected Versions gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8 Description A weakness allows for cross-site request forgery, which can be initiated remotely. Cross-site request forgery is a type of attack that tricks a...

PT-2026-95698

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the netty-codec-http component allows a remote attacker to perform HTTP request smuggling. This occurs due to incorrect parsing of the HTTP/1.1 chunk-size token when it contains...