PT-2026-136438

Name of the Vulnerable Software and Affected Versions node-opcua versions 2.42.0 through 2.179.0 Description Namespace-level access control configured via setDefaultRolePermissions is not honored by the runtime enforcement path for nodes lacking explicit per-node RolePermissions. The...

CVE-2026-85428

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...