Oracle Linux 10 : nodejs22 (ELSA-2026-7080)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-7080 advisory. - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - patch for npm/braces CVE-2026-25547 Tenable has extracted the preceding...

RockyLinux 10 : ncurses (RLSA-2026:5913)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:5913 advisory. ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. CVE-2025-69720 Tenable has extracted the preceding description block direct...

RockyLinux 10 : firefox (RLSA-2026:5931)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:5931 advisory. firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR...

CVE-2023-6825

creationtimestamp| type| source ---|---|--- 2026-04-08 14:00:52+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-6825.yaml 2026-04-10 21:03:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67urtpyt27...

CVE-2026-39859

creationtimestamp| type| source ---|---|--- 2026-04-08 13:25:16+00:00| published-proof-of-concept| https://github.com/harttle/liquidjs/security/advisories/GHSA-v273-448j-v4qj 2026-04-08 13:25:16+00:00| published-proof-of-concept|...

CVE-2026-39714

creationtimestamp| type| source ---|---|--- 2026-04-08 10:28:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miy3ixmyap2g...

CVE-2026-4656

creationtimestamp| type| source ---|---|--- 2026-04-08 00:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwywfzpgf22...

CVE-2026-4631

creationtimestamp| type| source ---|---|--- 2026-04-07 19:34:21+00:00| seen| Telegram/OYPeMWdUc2Y5vftMssiNoDYA806NyVd6-qxnWxvkgzfQI 2026-04-07 19:34:38+00:00| seen| Telegram/H9-wLQyAW-fjKUXTN1LxHiROu7RUaGwpmVWmVHEm8VlmA 2026-04-10 15:35:02+00:00| seen|...

Oracle Linux 10 : rsync (ELSA-2026-6825)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-6825 advisory. - Resolves: RHEL-152885 - CVE-2025-10158 Out of bounds array access via negative index Tenable has extracted the preceding description block directly from the...

CVE-2026-31410

creationtimestamp| type| source ---|---|--- 2026-04-06 10:07:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3misze75pzi2g...

CVE-2026-5618

creationtimestamp| type| source ---|---|--- 2026-04-06 06:10:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mism5agop22d...

AlmaLinux 10 : grafana-pcp (ALSA-2026:6388)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:6388 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the AlmaLinux...

CVE-2026-4107

creationtimestamp| type| source ---|---|--- 2026-04-03 13:19:05+00:00| seen| Telegram/YV8cS3UbatxDTGe0fjayhbeNknefcE-s36BQ9lt853A06hI 2026-04-03 13:19:23+00:00| seen| Telegram/QqwQTSXFRfWkuAVwlsaqg6mFQm4R2dirgmJdEmZNl5G-CtQ 2026-04-04 02:40:10+00:00| seen|...

CVE-2026-29142

creationtimestamp| type| source ---|---|--- 2026-04-02 10:27:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miiynkpavh2o...

CVE-2026-34373

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.66 and 9.7.0-alpha.10, the GraphQL API endpoint does not respect the allowOrigin server option and unconditionally allows cross-origin requests from any website. This...

Oracle Linux 10 : grafana-pcp (ELSA-2026-6388)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-6388 advisory. 5.3.0-3 - Resolves RHEL-158459: CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

AlmaLinux 10 : python3.12 (ALSA-2026:6256)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:6256 advisory. python: Python: Command-line option injection in webbrowser.open via crafted URLs CVE-2026-4519 Tenable has extracted the preceding description block directly fro...

Oracle Linux 10 : grafana (ELSA-2026-6344)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-6344 advisory. 10.2.6-23 - Resolves RHEL-158458: CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

CVE-2026-34373

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.66 and 9.7.0-alpha.10, the GraphQL API endpoint does not respect the allowOrigin server option and unconditionally allows cross-origin requests from any website. This...

CVE-2026-34373 Parse Server: GraphQL API endpoint ignores CORS origin restriction

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.66 and 9.7.0-alpha.10, the GraphQL API endpoint does not respect the allowOrigin server option and unconditionally allows cross-origin requests from any website. This...