CGI abuses Family for Nessus

IDNameSeverity
346269GitLab 15.3 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-78252)
medium
346268GitLab 18.4.6 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-1168)
high
346267GitLab 18.7 < 18.11.12 / 19.0 < 19.0.9 / 19.1 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-85706)
critical
346266GitLab 18.3 < 18.11.12 / 19.0 < 19.0.9 / 19.1 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-87719)
critical
346265GitLab 10.1.0 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-82837)
medium
346264GitLab 12.3 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-88765)
high
346263GitLab 18.6 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-12910)
medium
346262GitLab 15.7 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-13210)
high
344716EcoStruxure IT Data Center Expert < 9.1.2 Multiple Vulnerabilities (SEVD-2026-251-01)
high
344715Apache ActiveMQ < 5.19.11 / 6.x < 6.3.2 clientId Spoofing
high
344324Kibana 9.1.x < 9.4.6 / 9.5.x < 9.5.2 Incorrect Authorization (ESA-2026-130)
medium
344323Kibana 9.3.x < 9.4.6 DoS (ESA-2026-84)
medium
344322Kibana 7.x / 8.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 Missing Authorization (ESA-2026-144)
medium
344321Kibana 8.x < 8.19.18 / 9.0.x < 9.3.6 / 9.4.x < 9.4.3 Path Traversal (ESA-2026-158)
high
344320Kibana 9.4.x < 9.4.5 Missing Authorization (ESA-2026-147)
medium
344319Kibana 9.3.x < 9.4.3 Privilege Escalation (ESA-2026-61)
high
344318Kibana 8.x < 8.19.16 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 DoS (ESA-2026-163)
medium
344315Kibana 8.x < 8.19.17 / 9.0.x < 9.3.0 DoS (ESA-2026-31)
medium
344314Kibana 8.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 Incorrect Authorization (ESA-2026-169)
medium
344313Kibana 9.4.x < 9.4.4 Information Disclosure (ESA-2026-161)
medium
344312Kibana 9.4.x < 9.4.5 / 9.5.x < 9.5.1 Information Disclosure (ESA-2026-168)
medium
344311Kibana 9.4.x < 9.4.6 / 9.5.x < 9.5.1 Incorrect Authorization (ESA-2026-122)
medium
344310Kibana 8.x < 8.19.19 / 9.0.x < 9.3.8 / 9.4.x < 9.4.4 Incorrect Authorization (ESA-2026-156)
medium
344309Kibana 8.19.11 < 8.19.21 / 9.3.x < 9.4.6 / 9.5.x < 9.5.2 Incorrect Authorization (ESA-2026-142)
medium
344308Kibana 8.19.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 DoS (ESA-2026-125)
medium
344307Kibana 8.x < 8.19.19 / 9.0.x < 9.3.5 DoS (ESA-2026-48)
medium
344306Kibana 8.x < 8.19.18 / 9.x < 9.4.3 Path Traversal (ESA-2026-157)
medium
344305Kibana 9.1.7 < 9.4.5 / 9.5.x < 9.5.1 DoS (ESA-2026-115)
medium
344303Kibana 7.x / 8.x < 8.19.16 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 Path Traversal (ESA-2026-160)
high
344302Kibana 8.x < 8.19.21 / 9.0.3 < 9.4.6 Missing Authorization (ESA-2026-155)
medium
344301Kibana 8.x < 8.19.17 / 9.0.x < 9.3.6 / 9.4.x < 9.4.3 Path Traversal (ESA-2026-159)
medium
344300Kibana 9.0.x < 9.4.6 / 9.5.x < 9.5.1 Missing Authorization (ESA-2026-149)
medium
342663SonicWall SMA 1000 Series <= 12.4.3-03453 / 12.5.x <= 12.5.0-02835 Multiple Vulnerabilities (SNWLID-2026-0016)
critical
342639Dell iDRAC9 7.0.x < 7.00.00.182 / 7.20.x < 7.20.30.50 Improper Access Control (DSA-2026-374)
medium
342634Dell PowerProtect Cyber Recovery < 20.3.0.0 Multiple Vulnerabilities (DSA-2026-370)
high
342633ManageEngine PAM360 < Build 8561 SQLi (CVE-2026-14828)
high
342632ManageEngine Access Manager Plus < Build 4405 SQLi (CVE-2026-14828)
high
342631ManageEngine Password Manager Pro < Build 13235 SQLi (CVE-2026-14828)
high
342614Roundcube Webmail 1.6.x < 1.6.18 / 1.7.x < 1.7.3 Multiple Vulnerabilities
critical
342361Jenkins plugins Multiple Vulnerabilities (2026-09-02)
high
342360Jenkins LTS < 2.568.3 / Jenkins weekly < 2.580 Multiple Vulnerabilities
high
342267ServiceNow Platform Unauthenticated Blind SQL Injection (CVE-2024-8924)
high
341085GitLab 18.3 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-4398)
medium
340724GitLab 12.8 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-77801)
medium
340723GitLab 11.3 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-3035)
medium
340688GitLab 13.1 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-7487)
low
340157GitLab 18.9 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-18252)
high
340156GitLab 19.1 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-15387)
medium
339647Dotnetnuke < 10.3.3 Unauthorized likes on private journal posts (GHSA-r4c4-vmqp-vxf2)
high
339646Dotnetnuke < 10.3.3 User registration approval authorization bypass (GHSA-fpr5-67pq-3hf5)
high