PT-2026-8220

Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description The Grafana monitoring and observation platform contains a flaw due to insufficient access control within a correlation function. Remote attackers may be able to gain unauthorized access to...

vCluster Platform security vulnerabilities

vCluster Platform is an open-source virtual cluster manager developed by vCluster. Vulnerabilities existed in versions prior to vCluster Platform 4.6.0, 4.5.4, 4.4.2, and 4.3.10. These vulnerabilities were due to a potential bypass of range restrictions, which could lead to access to resources th...

ROS-20260129-73-0081

Vulnerability in gitea related to inconsistent responses to incoming requests. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROS-20260129-73-0049

Vulnerability in nextcloud-app-calendar related to the use of insufficiently randomized values. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20260129-73-0056

Vulnerability in mariadb10.6 related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20260129-73-0058

Vulnerability in mariadb11.8 related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20260129-73-0059

Vulnerability in chromium related to flaws in authorization procedure. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

QRMenümPro Menu Panel security vulnerabilities

QRMenümPro Menu Panel is a backend management panel for the intelligent menu system developed by the Turkish company QRMenümPro. The QRMenümPro Menu Panel versions dated 29012026 and earlier contained security vulnerabilities. These vulnerabilities were caused by user-controllable keys that allow...

Bdtask SalesERP Authorization Issues Vulnerability

Bdtask SalesERP is a sales enterprise resource planning software developed by the Bangladeshi company Bdtask. Versions of Bdtask SalesERP from 20260116 onward have a licensing issue vulnerability. This vulnerability arises from incorrect operations with the parameter cisession, resulting in...

ROS-20260129-73-0046

Vulnerability in nextcloud related to flaws in access to personal information. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROS-20260129-73-0080

Vulnerability in gitea related to a flaw in the authorization mechanism. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROS-20260129-73-0057

Vulnerability in mariadb11.4 related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20260129-73-0018

A vulnerability in the GEGL image processing library is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to protected information and cause denial of service...

HCL AION Security Bypass Vulnerability (CNVD-2026-16404)

HCL AION is an AI lifecycle management platform from HCL India. HCL AION suffers from a security vulnerability that is caused by a JWT token that expires too long increasing the risk of token misuse. An attacker can exploit the vulnerability to cause unauthorized access...

The vulnerability of Tenda W30E wireless Wi-Fi routers’ microprogramming software lies in the insertion of confidential information into the transmitted data, allowing attackers to gain unauthorized access to the protected information.

The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E lies in the insertion of confidential information into the transmitted data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to the protected information...

ROS-20260129-73-0012

A vulnerability in the Audio Profile AVRCP component of the Bluetooth protocol stack for Linux BlueZ is related to reading outside the valid range. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROS-20260129-73-0002

Vulnerability in openstack-barbican related to lack of protection of proprietary data. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

Unity Linux 20.1070e Security Update: screen (UTSA-2026-005210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005210 advisory. For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session. Tenable has extracted the preceding description block...

CVE-2026-24835

Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The...

CVE-2026-24835 Podman Desktop Extension System Vulnerable to Authentication Bypass

Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The...