Amazon Linux 2 : runfinch-finch, --advisory ALAS2DOCKER-2026-106 (ALASDOCKER-2026-106)

"The version of runfinch-finch installed on the remote host is prior to 1.15.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-106 advisory. gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting fr...

Linux Distros Unpatched Vulnerability : CVE-2026-40169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an ou...

PT-2026-32617

Name of the Vulnerable Software and Affected Versions MCPHub versions prior to 0.11.0 Description An authentication bypass exists because some endpoints are not protected by authentication middleware. This allows an unauthenticated attacker to perform actions on behalf of other users using their...

CVE-2026-33905

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bounds read when an specific offset is set through the sample:offset define that could lead to an out of bounds read...

CVE-2026-5201 affecting package gdk-pixbuf2 for versions less than 2.42.10-5

CVE-2026-5201 affecting package gdk-pixbuf2 for versions less than 2.42.10-5. A patched version of the package is available...

CVE-2026-32776 affecting package expat for versions less than 2.6.4-5

CVE-2026-32776 affecting package expat for versions less than 2.6.4-5. A patched version of the package is available...

CVE-2026-40030

Technical details about CVE-2026-40030 are not provided in the connected documents. Public specifics (affected components, root cause, fixes) are unavailable here; monitor for updates.

EUVD-2026-20457

Unauthenticated functionality in CoolerControl/coolercontrold 4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests...

CVE-2026-39484 WordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...

WordPress Softlab Core plugin < 1.2.11 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Softlab Core versions 1.2.11...

CVE-2025-38426 affecting package kernel for versions less than 6.6.130.1-3

CVE-2025-38426 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2025-2915 affecting package hdf5 for versions less than 1.14.6-2

CVE-2025-2915 affecting package hdf5 for versions less than 1.14.6-2. A patched version of the package is available...

CVE-2025-39748 affecting package kernel for versions less than 6.6.130.1-3

CVE-2025-39748 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-25727 affecting package rust for versions less than 1.90.0-6

CVE-2026-25727 affecting package rust for versions less than 1.90.0-6. A patched version of the package is available...

CVE-2026-25541 affecting package trident for versions less than 0.22.0-1

CVE-2026-25541 affecting package trident for versions less than 0.22.0-1. A patched version of the package is available...

CVE-2026-35386

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in sshconfig...

GHSA-P6MR-XF3R-GHQ4 Payload has a CSRF Protection Bypass in Authentication Flow

Impact A Cross-Site Request Forgery CSRF vulnerability existed in the authentication flow. Under certain conditions, the configured CSRF protection could be bypassed, allowing cross-site requests to be made. Consumers are affected if ALL of these are true: - Payload version v3.79.1 - serverURL is...

CVE-2026-23324 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23324 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23397 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23397 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23365 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23365 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...