Slackware Linux 15.0 / current php82 Multiple Vulnerabilities (SSA:2026-127-03)

The version of php82 installed on the remote host is prior to 8.2.31 / 8.4.21. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-127-03 advisory. New php packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

CVE-2026-7992

creationtimestamp| type| source ---|---|--- 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260507 2026-05-06 23:03:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7spinzvu2l 2026-05-07 18:00:00+00:00|...

PT-2026-38217

Name of the Vulnerable Software and Affected Versions ZTE H8102E affected versions not specified ZTE H168N affected versions not specified ZTE H167A affected versions not specified ZTE H199A affected versions not specified ZTE H288A affected versions not specified ZTE H198A affected versions not...

CVE-2022-24424

creationtimestamp| type| source ---|---|--- 2026-05-03 22:00:29+00:00| seen| https://bsky.app/profile/lbtoday1.bsky.social/post/3mky5smwc5s2f...

CVE-2026-5063

creationtimestamp| type| source ---|---|--- 2026-05-03 21:24:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116512750014975316 2026-05-06 05:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml5xzr7ehn2g 2026-05-16 11:02:06+00:00| seen|...

CVE-2026-5299

creationtimestamp| type| source ---|---|--- 2026-05-03 10:37:15+00:00| seen| https://t.me/itarmyofrussianews/379...

MAL-2026-3139 Malicious code in robase-start (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 827cc431e55560fd4944d6b7fa6c47e6adb5027a75fe949642630843b0c8702e During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...

Malicious code in robase-gui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ffbeda05758af4fb3c32de434df674102718336d499124f08b158271e4a08f7e During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...

Malicious code in rosolver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0904af239ce7e030d9cde78de066412fb3942a4b12ea8be5c5d45681417230fc During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2026-111-03)

The version of mozilla-thunderbird installed on the remote host is prior to 140.10.0esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-111-03 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

CVE-2026-35251

creationtimestamp| type| source ---|---|--- 2026-04-21 22:03:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjzyevy2gx2g 2026-04-21 23:30:36+00:00| published-proof-of-concept| Telegram/ITN0hTjNGfPMK-REHkV5qJBsGo4t4-tf1bJT5aod5DHh0UQ 2026-04-22 12:50:29+00:00| seen|...

CVE-2026-40489

creationtimestamp| type| source ---|---|--- 2026-04-18 03:03:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqhbpuspf26 2026-04-18 03:16:49+00:00| seen| Telegram/pg0pMMwJv5FTHbXxc3MO00N2B5ehQq9biiv2KNNNK0Va5Yk...

PT-2026-33346

Name of the Vulnerable Software and Affected Versions Microchip IStaX versions prior to 2026.03 Description An authenticated low-privileged user can recover a shared per-device cookie secret from their own webstax auth session cookie. This allows the user to forge a new cookie with administrative...

CVE-2026-35582

creationtimestamp| type| source ---|---|--- 2026-04-10 21:36:34+00:00| published-proof-of-concept| https://github.com/NationalSecurityAgency/emissary/security/advisories/GHSA-3p24-9x7v-7789 2026-04-18 03:08:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqhkocgeg2f 2026-04-18...

MAL-2026-2542 Malicious code in databasetrace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 144ff96bc84711f9be4c580e9d4b4cdcc650d9faf2f6ca9008ca34234d888805 During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...

EUVD-2026-21108

OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permissions from operator.read to operator.admin. Attackers can exploit this by triggering local reconnection to silently...

EUVD-2026-19607

Weaver Fanwei E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint that allows attackers to execute arbitrary commands by invoking exposed debug functionality. Attackers can craft PO...

CVE-2026-34841 Axios npm Supply Chain Incident Impacting @usebruno/cli

Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack involving compromised versions of the axios npm package, which introduced a hidden dependency deploying a cross-platform Remote Access Trojan RAT. Users of @usebruno/cli who ran...

BIT-MINIO-2026-34204 MinIO is Vulnerable to SSE Metadata Injection via Replication Headers

MinIO is a high-performance object storage system. Prior to version 2026.03.26, a flaw in extractMetadataFromMime allows any authenticated user with s3:PutObject permission to inject internal server-side encryption metadata into objects by sending crafted X-Minio-Replication- headers on a normal...

MAL-2026-2490 Malicious code in databaserotacos (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 04d640be20e9d2ff55f7682d535f6fd56b67b50008307c2e41986d6b31d4bfa4 During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...