CVE Watch28 ago 2026

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication.

CVSS

8.1

Alto

EPSS

0.6%

p45

KEV

—

Exploit Today

0-100

Publicado: 25 ago 2026 · Última mod.: 28 ago 2026 · CWE-1390

EPSS · 30d

0.6%EPSS · 30 días0.6%

2026-08-262026-08-30

Descripción técnica

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-680679.8 CRÍ

23.8%

——7The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud accounts and access hormone record information and account settings.19d CVE-2026-591355.5 MED

24.4%

——7Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.15d CVE-2026-595547.5 ALT

35.6%

——11Unauthenticated Broken Authentication in Ziina <= 1.2.21 versions.39d CVE-2026-507567.5 ALT

41.2%

——12An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component40d CVE-2026-550409.1 CRÍ

98.5%

KEV—80Microsoft SharePoint Weak Authentication Vulnerability12d CVE-2026-10714—

1.6%

——0A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the algorithm to "none" and craft forged tokens. This could allow an authenticated low-privilege user to impersonate any authorized user on the FTSP server, resulting in unauthorized access to system configuration and the ability to grant permissions to other systems protected by FTSP.48d