CVE-2026-111489: TPC Software Matchpoint: A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint…

A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services...

CVE-2026-33971: Samsung Semiconductor: In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a…

In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition...

CVE-2026-82894: Use of Externally-Controlled Input to Select Classes or Code

Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to trigger arbitrary OFBiz service invocation with attacker-controlled parameters, resulting in arbitrary file write, arbitrary file deletion, and server-side...

CVE-2026-73578: Authentication Bypass Using an Alternate Path or Channel

Missing authorization enforcement in RequestHandler.renderView in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to bypass the request-map authentication policy for protected views by supplying a crafted LASTVIEWNAME value, which is stored as saved-vi...

CVE-2026-100228: Apache Software Foundation Apache OFBiz: Improper Input Validation in Order Returns in Apache OFBiz 24.09.07 on all platforms allows an authenticated user…

Improper Input Validation in Order Returns in Apache OFBiz 24.09.07 on all platforms allows an authenticated user without the ORDERMGRCREATE permission to persist an arbitrary price on a return item via the createReturnItem service, bypassing the intended server-computed price ceiling. Users are...

SUSE SLES15 Security Update : rootlesskit (SUSE-SU-2026:5074-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:5074-1 advisory. This update for rootlesskit rebuilds it against the current go security release. Tenable has extracted the preceding description block...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:22215-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22215-1 advisory. Changes in chromium: - Chromium 156.0.8078.79 boo1288840: CVE-2026-76024: Memory corruption in MediaStream CVE-2026-76025: Use after free in...

CVE-2026-49393: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the core server protects HTTP POST requests to /rpc with bearer middleware but exposes Socket.IO rpc:request and chat:start handlers without equivalent transport or handler-level...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc (crlsa-2026_93414)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202693414 advisory. kernel: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Tenable has extracted the preceding description block directly from the CIQ securit...

CVE-2026-110930: OpenAI: Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer

Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an attacker-controlled library's child item, the path can add application startup arguments. These arguments can run attacker-controlled code...

CVE-2026-116571: signalwire freeswitch: FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to…

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmprtp2rtmpH264 built an AVC decoder configuration record in a fixed stack buffer by copying...

CVE-2026-77604: vitali87 code-graph-rag: Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing…

Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-language codebases. Prior to 0.0.345, the MCPToolsRegistry.readfile implementation in codebaserag/mcp/tools.py joins attacker-controlled filepath input to projectroot without...

CVE-2026-116573: signalwire freeswitch: FreeSWITCH is an open-source software telecommunications platform

FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 until 1.11.1, a stack-based buffer overflow in modsofia when generating dialog-event notifications. A peer can establish a dialog with an excessively long SIP To-header user part and subsequently subscribe to that...

CVE-2026-54913: bytecodealliance wasm-micro-runtime: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. Prior to 2.4.5, loadinitexpr in core/iwasm/interpreter/wasmloader.c accepts a non-reference heap-type byte for ref.null when WASMENABLEGC=0, while the local WASMValue curvalue union is not zero-initialized and...

Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux (ALMALINUX9.6:CLSA-2026:1793884447)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793884447 advisory. - Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker...

AlmaLinux 9.6 [TuxCare] Security Update: cjose / cjose-devel (ALMALINUX9.6:CLSA-2026:1793880785)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793880785 advisory. - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decrypti...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libsoup (UTSA-2026-150450)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150450 advisory. A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlle...

CVE-2026-103019: openemr: OpenEMR is a free and open source electronic health records and medical practice management application

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, userSessionLogout in src/RestControllers/AuthorizationController.php uses decodeToken to process an idtokenhint without verifying its signature and, when the referenced trusted...

Linux Distros Unpatched Vulnerability : CVE-2026-18376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-18376 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...

SUSE SLED15 / SLES15 Security Update : guava, j2objc-annotations (SUSE-SU-2026:5061-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5061-1 advisory. This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without...