Fedora 43 : corosync (2026-c0427570d6)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c0427570d6 advisory. Fix CVE-2026-81666 and CVE-2026-81665 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 45 : libsoup3 (2026-ce24b84bb1)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ce24b84bb1 advisory. Fixes lots of CVEs: see the fixes section for details Tenable has extracted the preceding description block directly from the Fedora security...

ansible-creator-26.8.0-1.1 on GA media (moderate)

ansible-creator-26.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11729-1 Rating: moderate Cross-References: CVE-2026-31899 CVSS scores: CVE-2026-31899 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-31899 SUSE : 6.8...

Fedora 45 : mingw-expat (2026-9e9244744d)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9e9244744d advisory. Update to expat-2.8.4. ---- Update to expat-2.8.3. Tenable has extracted the preceding description block directly from the Fedora security advisory...

RockyLinux 10 : kernel (RLSA-2026:66355)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66355 advisory. kernel: net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 Tenable has extracted the preceding description block directly from the RockyLin...

Fedora 44 : rest (2026-df38653cf2)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-df38653cf2 advisory. Fix for https://access.redhat.com/security/cve/cve-2026-16615 Tenable has extracted the preceding description block directly from the Fedora security advisor...

Oracle Linux 10 : ELSA-2026-66349-0: / freerdp (ELSA-2026-663490)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-663490 advisory. 2:3.10.3-12.11 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247346 Tenable has extracted the preceding description block...

Fedora 45 : tar (2026-ee1eb89e7b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ee1eb89e7b advisory. Fix CVE-2026-5704, CVE-2026-18508, CVE-2026-18477, and a regression in the fix for CVE-2025-45582. Tenable has extracted the preceding description...

Fedora 45 : syncthing (2026-bd6debcfb6)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bd6debcfb6 advisory. 2.1.3, fix for CVE-2026-40898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

Fedora 45 : bluez (2026-9e011ac6ed)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9e011ac6ed advisory. This update fixes a number of security issues. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 44 : bluez (2026-d4156b5fc5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d4156b5fc5 advisory. This update fixes a number of security issues. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 45 : python-pip (2026-d083cbcc1a)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d083cbcc1a advisory. Security fix for CVE-2026-13346 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2022-26xx9

CVE-2022-26xx9 CVE-2022-26xx9...

PYSEC-2026-3827 Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

Summary While investigating Django REST Framework's request parsing behavior, I identified that DRF's high-level request.data parsing appears to bypass Django's configured DATAUPLOADMAXMEMORYSIZE protection for application/json and application/x-www-form-urlencoded request bodies. In the tested...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Improper Caching

Spring Cloud Stream is vulnerable to improper caching of the original content type. The vulnerability is due to the Avro handling component caching the original content type, where the cached value is reused for subsequent messages and an attacker can supply a crafted content type to cause...

Fedora 46 : ruby (2026-fbf03424ec)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fbf03424ec advisory. Update resolv gem in ruby.src to resolve security issues. Tenable has extracted the preceding description block directly from the Fedora security...

Oracle Linux 9 : ELSA-2026-66347-0: / freerdp (ELSA-2026-663470)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-663470 advisory. 2:2.11.7-7.7 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247356 Tenable has extracted the preceding description block...

Fedora 44 : freerdp2 (2026-d91338eea8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d91338eea8 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 44 : darktable (2026-2719c6cac1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2719c6cac1 advisory. 5.6.1 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...