PT-2026-99654

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.57-1.1 Description A security issue exists that allows attackers to affect the system. Recommendations Update to version 154.0.8037.57-1.1...

PT-2026-99619

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.57-1.1 Description A security issue exists that allows attackers to affect the system. Recommendations Update to version 154.0.8037.57-1.1...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000561 advisory. Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

PT-2026-96680

Name of the Vulnerable Software and Affected Versions VeloCloud Orchestrator versions 5.2.3.15 and earlier VeloCloud Orchestrator versions 6.1.3.7 and earlier VeloCloud Orchestrator versions 6.4.2.7 and earlier VeloCloud Orchestrator versions 7.0.0.2 and earlier Description An improper input...

amazon-cloudwatch-agent-1.300072.0-1.1 on GA media (moderate)

amazon-cloudwatch-agent-1.300072.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11828-1 Rating: moderate Cross-References: CVE-2026-37236 CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-37236 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-37236 SUSE : 6.3...

kyverno-1.19.1-1.1 on GA media (moderate)

kyverno-1.19.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11822-1 Rating: moderate Cross-References: CVE-2026-39821 CVE-2026-56853 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1...

apptainer-1.5.3-4.1 on GA media (moderate)

apptainer-1.5.3-4.1 on GA media Announcement ID: openSUSE-SU-2026:11830-1 Rating: moderate Cross-References: CVE-2026-56854 CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-56854 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-56854 SUSE : 8.6...

SUSE CVE-2026-93586

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. Exploitation may result in a limited availability impact e.g., a crash of the affected process. The issue is fixed in versions...

CVE-2026-49453

creationtimestamp| type| source ---|---|--- 2026-09-21 21:37:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7o2iomcsczvuf...

CVE-2026-89139 Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host

Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that module registers a compute provider named subprocess whose function is to launch a worker by running a command on the machine hosting the Worker Service. The program name and the argument vector that...

K000163350: Linux kernel vulnerability CVE-2026-31786

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c The build id returned by HYPERVISORxenversionXENVERbuildid is neither NUL terminated nor a string. The first causes a buffer overflow as sprintf in...

CVE-2026-89139: Improper Neutralization of Special Elements used in an OS Command

Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that module registers a compute provider named subprocess whose function is to launch a worker by running a command on the machine hosting the Worker Service. The program name and the argument vector that...

Oracle Linux 10 : yggdrasil-worker-package-manager (ELSA-2026-69099)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-69099 advisory. 0.2.3-8 - Rebuild against updated golang Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

CVE-2026-81654

The NextGEN Gallery WordPress plugin (versions before 4.5.0 ) is vulnerable to an authorization bypass because it fails to verify if a user possesses the options capability before saving image sizing settings. This allows users with only gallery-management privileges to modify settings that affec...

alloy-1.19.2-1.1 on GA media (moderate)

alloy-1.19.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11803-1 Rating: moderate Cross-References: CVE-2026-2303 CVE-2026-37236 CVE-2026-41178 CVE-2026-45679 CVE-2026-45680 CVE-2026-45681 CVE-2026-45683 CVE-2026-45684 CVE-2026-46600 CVE-2026-48496 CVE-2026-56852 CVE-2026-56854 CVE-2026-715...

CVE-2026-93993

creationtimestamp| type| source ---|---|--- 2026-09-19 23:52:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3icvx4mxz7fgm 2026-09-20 00:03:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvvvhuadsp2w 2026-09-20 12:20:06+00:00| seen|...

EUVD-2026-83431

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...

CVE-2026-93587

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD and, per the upstream advisory, CUBE and HALD coder: when a specific command line option is supplied, the decoder does not check a configured resource limit, which can result in extra memory allocation. A local...

PT-2026-95682

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...

CVE-2026-84078: Missing Authentication for Critical Function

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...