CLSA-2026-1787812038 TuxCare security update for setuptools (1 CVE)

TuxCare rebuilt setuptools to address 1 CVE. Fixed in 60.0.0.post1+tuxcare...

CLSA-2026-1787796805 TuxCare security update for axios (5 CVEs)

TuxCare rebuilt axios to address 5 CVEs. Fixed in 0.18.1-tuxcare.5...

SUSE CVE-2026-19685

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

SUSE CVE-2026-65637

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...

OpenSovix

CVE-2025-46285 – Tiefgehende Sicherheitslückenanalyse und Proof-of-Concept Wichtiger Haftungsausschluss: Die folgenden Inhalte dienen ausschließlich der Sicherheitsbildung, defensiven Forschung und der Analyse von Sicherheitslücken. Testen oder nutzen Sie diese Sicherheitslücke nicht in nicht...

PT-2026-82835

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.4.0 through 4.14.6 Description A flaw in the cluster file synchronization process allows an entity possessing the cluster key to write, overwrite, or delete arbitrary files within the /var/ossec directory on worker nodes,...

PT-2026-86497

TuxCare rebuilt 9 @nestjs packages to address 2 CVEs. Fixed in 10.4.22-tuxcare.1...

OPENSUSE-SU-2026:11621-1 java-25-openjdk-25.0.4.1-1.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11617-1 coturn-4.17.2-1.1 on GA media

These are all security issues fixed in the coturn-4.17.2-1.1 package on the GA media of openSUSE Tumbleweed...

golang security, bug fix, and enhancement update

1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1...

Fedora 43 : knot (2026-4857ca6db8)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4857ca6db8 advisory. New upstream release with security fixes. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

OPENSUSE-SU-2026:11625-1 python313-djangorestframework-3.18.0-2.1 on GA media

These are all security issues fixed in the python313-djangorestframework-3.18.0-2.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-76844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpack-dev-middleware resolves a request to a local file in getFilenameFromUrl by testing the request pathname against a traversal guard and then slicing it at...

OPENSUSE-SU-2026:11622-1 libvirt-12.6.0-2.1 on GA media

These are all security issues fixed in the libvirt-12.6.0-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3770-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3770-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues: The following security issues were fixed: -...

CVE-2026-61792

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...

CLSA-2026-1787777604 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 2 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.4...

EUVD-2026-66716

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...

CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...

CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...