PT-2026-73327

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability ca...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099489 advisory. Unity Link Advisory UTSA-2026-099489 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2026-100777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100777 advisory. Unity Link Advisory UTSA-2026-100777 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

PT-2026-73321

Vulnerability in Oracle Java SE component: Installation. Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE...

PT-2026-73317

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...

PT-2026-73309

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...

PT-2026-73352

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...

wasm-bindgen-0.2.100-2.1 on GA media (moderate)

wasm-bindgen-0.2.100-2.1 on GA media Announcement ID: openSUSE-SU-2026:11528-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7...

Exploit for CVE-2026-73678

CVE-2026-73678 — MindsDB Minds Platform Unauthenticated RCE C...

MINI-CV3W-6J47-2FG8

Bulletin has no description...

Fedora 43 : libgsasl (2026-110274a705)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-110274a705 advisory. Fix for CVE-2026-48829 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 44 : libgsasl (2026-f2ced62115)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f2ced62115 advisory. Fix for CVE-2026-48829 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

kubeshark-cli-53.4.0-1.1 on GA media (moderate)

kubeshark-cli-53.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11519-1 Rating: moderate Cross-References: CVE-2026-49445 CVSS scores: CVE-2026-49445 SUSE : 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

Exploit for CVE-2026-20896

CVE-2026-20896 - Gitea ≤1.26.2 Authentication Bypass 1. What...

Security Bulletin: This Power System update is being released to address CVE-2026-18871

Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory...

Security Bulletin: This Power System update is being released to address CVE-2026-16661

Summary Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control over th...

Security Bulletin: This Power System update is being released to address CVE-2026-17100

Summary Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the BMC/FSP can exploit this vulnerability, allowing arbitrary code to be executed in the host firmware runtime, giving full control ove...

Security Bulletin: This Power System update is being released to address CVE-2026-18848

Summary Power Systems Firmware is affected by a vulnerability in the ASMI web interface. An attacker who can lure a logged-in ASMI administrator to visit a crafted web page can, under specific conditions, silently perform administrative actions on the FSP on behalf of that administrator, resultin...

Security Bulletin: This Power System update is being released to address CVE-2026-16835

Summary Power Systems Firmware is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state,...

Security Bulletin: This Power System update is being released to address CVE-2026-16687

Summary Power Systems Firmware is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code execution, giving the attacker full control over the managed system, resulting in a confidentialit...