13518 matches found
PT-2026-3741
Impact If Windows MDM is enabled, an attacker can enroll rogue devices by submitting a forged JWT containing arbitrary identity claims. Due to missing JWT signature verification, Fleet accepts these claims without validating that the token was issued by Azure AD, allowing enrollment under any Azu...
MiracleLinux 9 : dotnet6.0-6.0.126-1.el9_3.ML.1 (AXSA:2024-7413:03)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7413:03 advisory. dotnet: Information Disclosure: MD.SqlClientMDS & System.data.SQLClient SDS CVE-2024-0056 dotnet: X509 Certificates - Validation Bypass across Azure...
MiracleLinux 9 : grafana-9.0.9-3.el9 (AXSA:2023-6225:07)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6225:07 advisory. grafana: account takeover possible when using Azure AD OAuth CVE-2023-3128 Tenable has extracted the preceding description block directly from the MiracleLin...
PT-2026-3750
Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.53.3 Fleet versions 4.53.3 through 4.75.2 Fleet versions 4.75.2 through 4.76.2 Fleet versions 4.76.2 through 4.77.1 Fleet versions 4.77.1 through 4.78.3 Description A critical authentication issue exists in Fleet Devi...
Insertion of Sensitive Information into Log File
Overview apache-airflow-providers-microsoft-azure is a Provider package apache-airflow-providers-microsoft-azure for Apache Airflow Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the proxies and proxy fields in a Connection. An attacker ca...
ABB Ability OPTIMAX
SUMMARY ABB became aware of severe vulnerability in the products versions listed as affected in the advisory, if the optional integration with Azure Active Directory for Single-Sign On is enabled. We have not received any reports of this vulnerability being exploited. An attacker who...
PT-2026-3085
Name of the Vulnerable Software and Affected Versions Agentflow versions affected versions not specified Windows Admin Center versions affected versions not specified Description Agentflow, developed by Flowring, exhibits a Missing Authentication issue. This allows unauthenticated remote attacker...
New China Linked VoidLink Linux Malware Targets Major Cloud Providers
Researchers have discovered VoidLink, a sophisticated new Linux malware framework designed to infiltrate AWS, Google Cloud, and Azure. Learn how this Chinese-affiliated toolkit uses adaptive stealth to stay hidden...
CVE-2026-21226
Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execute code over a network...
CVE-2026-21224
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
GHSA-P55C-M7RF-5552 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-H4GM-C37Q-GJJR vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2025-39830 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2025-38605 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2025-38029 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-6Q42-8X5P-5C72 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2025-38284 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-WPG2-262C-J98F vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...