PT-2026-102914

Name of the Vulnerable Software and Affected Versions Pgpool-II versions prior to 4.7.3 Description An improper certificate validation issue exists that may allow an unauthenticated attacker to bypass client certificate authentication. Approximately 101 instances have been identified globally...

PT-2026-102895

ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download file and scrape web agent tools. Authenticated users can bypass hostname validation and IPv6 transition address filtering to make the server request internal services and cloud instance metadata...

PT-2026-102415

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A weakness exists in the PSL Wildcard Handler component within the opendmarc get tld function of the libopendmarc/opendmarc tld.c file. A remote attacker can perform a manipulation that leads to an...

PT-2026-102664

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client and Host for Linux versions prior to 15.82 Description An improper path validation issue exists in the Cloud Session Recording CSR functionality. A local authenticated attacker can exploit a race condition during path...

PT-2026-102510

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description An improper certificate validation issue exists where an unauthenticated attacker with adjacent network access can exploit the flaw. This may result in protectio...

PT-2026-102695

Name of the Vulnerable Software and Affected Versions Joomla! Core versions 4.0.0 through 5.4.8 Joomla! Core versions 6.0.0 through 6.1.3 Description Various core extensions contain Server-Side Request Forgery SSRF vectors. This occurs because URLs used for server-side requests are improperly...

thunderbird security update

140.16.0-1.0.1 - Add Oracle prefs 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227...

CVE-2026-100830: Origin Validation Error

Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

Linux Distros Unpatched Vulnerability : CVE-2026-47679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged- in GLPI user can exploit insufficient path validation...

CVE-2026-97687: Improper Certificate Validation

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

Oracle Linux 10 : python-cryptography (ELSA-2026-71658)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71658 advisory. 43.0.0-4 - Fix CVE-2026-69249: add X.509 signature validation budget Tenable has extracted the preceding description block directly from the Oracle Linux...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95364): chromium -- security fixes

Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95381): chromium -- security fixes

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95276: Improper Input Validation

Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: Medium...

PT-2026-108435

Security vulnerability affects the argo-workflows package. shell-quote's quote function did not validate object-token inputs against the operator model used by parse...

Debian dsa-6529 : libwebsockets-dev - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6529 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6529-1 [email protected] https://www.debian.org/security/ Moritz...

Ubuntu 18.04 LTS / 24.04 LTS : Booth vulnerability (USN-8832-1)

The remote Ubuntu 18.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8832-1 advisory. It was discovered that Booth did not properly validate message authentication codes under certain circumstances. A remote attacker could possibly use...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-3114)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3114 advisory. Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to...

RHEL 8 : git-lfs (RHSA-2026:72737)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:72737 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...

RHEL 8 : git-lfs (RHSA-2026:72805)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:72805 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...