CVE-2023-3360

The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog...

Security Bulletin: IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution

Summary IBM ContextForge MCP Gateway allows authenticated users with developer privileges to supply a jq program in the tool jsonpathfilter field that executes unrestricted built-in such as $ENV inside the server process, exposing environment variables including cryptographic keys and database...

DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Confluence Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.9, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

CVE-2026-84357

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...

Fedora 44 : openvkl / rkcommon (2026-9f32915b09)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-9f32915b09 advisory. Update to the latest version to fix CVE-2026-21399 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Oracle Linux 9 : ELSA-2026-61247-0: / libxml2 (ELSA-2026-612470)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-612470 advisory. - Fix CVE-2026-11979 RHEL-215568 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-84639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-84129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Security update for gegl (important)

openSUSE security update: security update for gegl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21731-1 Rating: important References: bsc1276229 Cross-References: CVE-2026-18300 CVSS scores: CVE-2026-18300 SUSE : 7.8...

Linux Distros Unpatched Vulnerability : CVE-2026-84117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155. CVE-2026-84117 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2026-84357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy...

Linux Distros Unpatched Vulnerability : CVE-2026-84141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Fedora 44 : python-llm (2026-4f3301f569)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4f3301f569 advisory. Update to latest upstream release python llm 0.33 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-82209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute...

Fedora 44 : openssl (2026-51251b4657)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-51251b4657 advisory. Rebase to OpenSSL 3.5.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Slackware Linux 15.0 / current pcre2 Vulnerability (SSA:2026-244-01)

The version of pcre2 installed on the remote host is prior to 10.48. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-244-01 advisory. New pcre2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding descriptio...

Linux Distros Unpatched Vulnerability : CVE-2026-82208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached...

Linux Distros Unpatched Vulnerability : CVE-2026-84136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Using High-Energy Laser, US Shoots Down Drones Near Mexico Border

The US Army’s laser system is part of a new generation of directed-energy weapons capable of detecting, tracking, and destroying drones with a concentrated beam of light...

CVE-2026-40018

A flaw was found in Dovecot. A remote attacker with high attack complexity could exploit this vulnerability to gain access to sensitive information and modify data without requiring any user interaction or privileges. Mitigation Mitigation for this issue is either not available or the currently...