Windows Package Manager (WinGet) < 1.29.280 Elevation of Privilege (CVE-2026-68821)

The version of Windows Package Manager WinGet installed on the remote host is prior to 1.29.280. It is, therefore, affected by an elevation of privilege vulnerability: - An elevation of privilege vulnerability exists in Windows Package Manager that allows a local attacker with low privileges to...

Blocksy Companion 2.1.46 - RCE

!/usr/bin/env python3 Exploit Title: Blocksy Companion 2.1.46 - RCE CVE: CVE-2026-58480 Date: 2026-07-13 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/mbanyamer Author Blog : https://banyamersecurity.com/blog/ Vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-71193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate- zone DB constraint are scoped to the target pool only. An...

Linux Distros Unpatched Vulnerability : CVE-2026-73149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-mh75-5pr3-qv2p: NetRx: out-of-bounds read via unvalidated MsgAudio length CVE-2026-73149 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2026-73148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-6wgq-wg3w-jgvx: svxreflector: use-after-free write via dangling JSON reference CVE-2026-73148 Note that Nessus...

Oracle Linux 7 : libarchive (ELSA-2026-8517)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-8517 advisory. - Fix CVE-2026-4424 CVE-2026-5121 Orabug: 39219508 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Linux Distros Unpatched Vulnerability : CVE-2026-19349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2...

Linux Distros Unpatched Vulnerability : CVE-2026-73153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-624p-cp8x-6hp6: EchoLink RTCP/SDES: out-of-bounds read CVE-2026-73153 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2026-73151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-x5r8-rq62-q9cj: remotetrx: unvalidated audio length + exposed transceiver control CVE-2026-73151 Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-73154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow CVE-2026-73154 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-71194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the sa...

Oracle Linux 7 : evince (ELSA-2026-41904)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-41904 advisory. 3.28.2-10.0.1 - Fix CVE-2026-46529 Orabug: 39757172 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Security Update for Microsoft Power BI Report Server (August 2026)

The Microsoft Power BI Report Server on the remote host is missing the February 2026 security update. It is, therefore, affected by an RCE vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...

Planyo Online Reservation System 3.0 SSRF / Arbitrary File Read

Planyo Online Reservation System versions 3.0 and below suffer from an arbitrary file read vulnerability that is leveraged by a server-side request forgery flaw. Exploit Title: PlanyoOnlineReservationSystem 3.0 - Arbitrary File Read via SSRF Date: 12-07-2026 Exploit Author: Balachandar Gowrisanka...

Intel® Xeon® 6 processor with Intel® TDX Advisory

Summary: A potential security vulnerability in some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow information disclosure. Intel is releasing a microcode update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31938 Description:...

pt-esign__Damn-vulnerable-sca

SCA Goat Navigating SCA Vulnerabilities, Empowering Mastery...

Security Bulletin: Vulnerability in marshmallow bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage include the marshmallow library, which is affected by a denial of service vulnerability. CVE-2025-68480. Vulnerability Details CVEID:CVE-2025-68480 DESCRIPTION: Marshmallow is a lightweight library for converting complex...

Security Bulletin: IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution (CVE-2026-13361)

Summary A remote code execution vulnerability exists in the SQL Interface component of IBM Informix Dynamic Server. An admitted SQL Interface client can send a specially crafted request to cause a stack-based buffer overflow. Vulnerability Details CVEID:CVE-2026-13361 DESCRIPTION: IBM Informix...

Important: Red Hat Security Advisory: mariadb:10.11 security update

An update for the mariadb:10.11 module is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Security Bulletin:Vulnerability in jackson-databind affects IBM Netezza Appliance

Summary The jackson-databind package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518 Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION:...