CVE-2026-44584

Paymenter documents describe a vulnerability where the email update flow does not reset or revalidate the existing email verification status. In versions prior to 1.5.0, a user can change their email while remaining marked as verified, potentially misrepresenting email ownership and bypassing ver...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the email update process. An attacker can retain a verified status on an account after changing the associated email address to one they do not control by updating the email without triggering a new verificati...

PT-2026-51440

Name of the Vulnerable Software and Affected Versions Paymenter versions prior to 1.5.0 Description The email update functionality fails to invalidate the existing verification state when a user changes their email address. This allows a verified account to retain its verified status after...

NuGet Package 'ModelContextProtocol' Detection

The remote host has a 'ModelContextProtocol' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...