Linux Distros Unpatched Vulnerability : CVE-2026-73147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-pc2g-2p95-4cr5: TCL command injection in reflector client CVE-2026-73147 Note that Nessus relies on the presen...

Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service (cisco-sa-iosxe-bing-MGHrFAkd)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A denial of service DoS vulnerability exists in the Blocks Extensible Exchange Protocol BEEP feature of Cisco IOS XE Software due to improper handling of BEEP SOAP requests. An unauthenticated, remote...

Linux Distros Unpatched Vulnerability : CVE-2026-73142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-5xr9-fmm8-7p8x: remotetrx NetUplink: connection object leak DoS CVE-2026-73142 Note that Nessus relies on the...

Fedora 43 : python-webob (2026-cd35233572)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cd35233572 advisory. Update to upstream - CVE-2024-42353. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

PT-2026-70731

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

PT-2026-70141

Name of the Vulnerable Software and Affected Versions Friendica versions prior to 2026.08-dev Description An authenticated user with a self-registered account can perform a server-side request forgery SSRF through the link-preview endpoint. This occurs because the endpoint fetches user-supplied...

PT-2026-70485

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Bind Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

PT-2026-70526

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use-after-free condition in the Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs...

PT-2026-70708

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

PT-2026-70419

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use-after-free condition in the Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs...

PT-2026-70583

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use-after-free condition in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...

PT-2026-70465

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow occurs in Windows NTFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...

PT-2026-70982

Name of the Vulnerable Software and Affected Versions Parallels RAS Client affected versions not specified Description A local privilege escalation issue exists in the RAS RDP Backend Service due to an exposed dangerous function. An attacker who has already obtained the ability to execute...

PT-2026-70305

Out-of-bounds read for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local...

CVE-2026-62871

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

RockyLinux 10 : nodejs-nodemon (RLSA-2026:52841)

The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:52841 advisory. brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays CVE-2026-69152 Tenable has extracted the preceding description block...

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally...

PT-2026-70845

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss ogs diam s6a air cb/hss ogs diam s6a ulr cb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is...

PT-2026-70641

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70673

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...