PT-2026-73395

A flaw in Node.js Permission Model enforcement allows trace events.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...

PT-2026-73398

A flaw in Node.js Permission Model enforcement allows process.report writes and overwrites files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and 26...

PT-2026-73408

A flaw in Node.js Permission Model enforcement allows process.report writes and overwrites files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and 26...

PT-2026-73320

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

PT-2026-73228

UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-73315

Vulnerability in Oracle Java SE component: Scripting. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful...

PT-2026-73352

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...

PT-2026-73326

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...

PT-2026-73314

Vulnerability in Oracle Java SE component: Scripting. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attack...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2026-100776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100776 advisory. Unity Link Advisory UTSA-2026-100776 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

PT-2026-73232

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A permission control issue exists within the notification module. Successful exploitation of this flaw may impact the availability of the system. Recommendations...

PT-2026-73388

An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a crafted Queryable Encryption find payload containing an unvalidated field used to control an internal computation loop. The resulting resource exhaustion degrades availability fo...

PT-2026-78300

Name of the Vulnerable Software and Affected Versions ProSolution WP Client versions prior to 2.0.11 Description Insufficient sanitization and escaping of several parameters before they are reflected into HTML attributes on public pages allow for reflected Cross-Site Scripting XSS. This issue can...

PT-2026-73355

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

PT-2026-73365

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Install. Supported versions that are affected are Oracle Java SE: 8u491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Orac...

CVE-2026-49303: Undefined Security Weakness

Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099478 advisory. Unity Link Advisory UTSA-2026-099478 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099486 advisory. libexpat before 2.8.2 has an integer overflow in addBinding. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Fedora 43 : pdns-recursor (2026-ac51ed6e75)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ac51ed6e75 advisory. Update to latest upstream version Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099503)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099503 advisory. Unity Link Advisory UTSA-2026-099503 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...