Oracle Linux 9 : ELSA-2026-61247-0: / libxml2 (ELSA-2026-612470)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-612470 advisory. - Fix CVE-2026-11979 RHEL-215568 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Fedora 44 : gdk-pixbuf2 (2026-001de57d4f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-001de57d4f advisory. Fixes https://access.redhat.com/security/cve/CVE-2026-81893 Tenable has extracted the preceding description block directly from the Fedora security advisory...

PT-2026-84868

Name of the Vulnerable Software and Affected Versions sigoden aichat versions prior to 0.30.5 Description A flaw in the API Endpoint component, specifically within the src/serve.rs file, allows for uncontrolled memory allocation. This issue can be triggered remotely, potentially leading to system...

Linux Distros Unpatched Vulnerability : CVE-2026-82209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute...

CVE-2026-84334

CVE-2026-84334 is an incorrect authorization vulnerability in the Chromoting component of Google Chrome on Windows , prior to version 152.0.7977.75 . A local attacker can exploit it to execute arbitrary code outside the Chrome sandbox via a local program. The flaw was reported by Google on 2026-0...

CVE-2026-84332

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84326

CVE-2026-84326 is a High-severity uninitialized resource vulnerability in the V8 JavaScript engine of Google Chrome, fixed in version 152.0.7977.75 . A remote attacker can execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. The CVSS 3.1 score is 8.8 (AV:N/...

CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84423

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-84423 Casdoor upload-resource API resource.go missing authentication

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-84423 Casdoor upload-resource API resource.go missing authentication

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-84289

A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function listtools of the file tools/mcptool.py of the component MCP Tool. Performing a manipulation results in uncontrolled memory allocation. It is possible to initiate the attack remotely. The...

CVE-2026-84288

A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acpadapter/session.py of the component ACP Prompt Workflow. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has...

CVE-2026-84289

A vulnerability in NousResearch hermes-agent up to version 0.18.2 affects the list_tools function in tools/mcp_tool.py (MCP Tool component). The root cause is uncontrolled memory allocation , which can lead to a resource amplification denial-of-service when manipulated remotely. The CVSS 4.0 scor...

CVE-2026-84289 NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation

A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function listtools of the file tools/mcptool.py of the component MCP Tool. Performing a manipulation results in uncontrolled memory allocation. It is possible to initiate the attack remotely. The...

EUVD-2026-66381

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...

CVE-2026-73781

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's...

CVE-2026-73779

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

CVE-2026-73763

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility...

CVE-2026-73766

Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating...