Linux Distros Unpatched Vulnerability : CVE-2026-79146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app...

Debian dla-4756 : openjdk-11-dbg - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4756 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4756-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-79030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: obs-server (UTSA-2026-093681)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093681 advisory. A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093564 advisory. An exploitable information disclosure vulnerability exists in the initnodemanager functionality of F2fs- Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesyste...

MiracleLinux 9 : python-urwid-2.1.2-4.el9_8.1 (AXSA:2026-1663:02)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1663:02 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description...

Linux Distros Unpatched Vulnerability : CVE-2026-79287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-78957

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2026-79181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2026-79147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain...

Linux Distros Unpatched Vulnerability : CVE-2026-79028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-78895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium securi...

Linux Distros Unpatched Vulnerability : CVE-2026-79274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross- origin data via a crafted HTML page. Chromium securit...

Linux Distros Unpatched Vulnerability : CVE-2026-79242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromi...

PT-2026-82296

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 2026.7 Description Several endpoints perform object lookups using a global scope instead of restricting the search to projects the user is authorized to access. Consequently, the system returns an HTTP 403 Forbidden...

PT-2026-82211

Name of the Vulnerable Software and Affected Versions DebugKit versions prior to 4.10.3 DebugKit versions prior to 5.2.4 Description The MailPreview feature in src/Controller/MailPreviewController.php fails to properly validate the previewName value in the findPreview function. The application...

DXPR Builder: The AI Visual Page Builder for Drupal - Moderately critical - Information Disclosure - SA-CONTRIB-2026-112

The DXPR Builder module provides a visual / AI page builder for Drupal. The module uses a JSON Web Token for licensing, user license management, AI services, and subscription metadata. The 2.x version of the module does not sufficiently restrict access to API credentials in JavaScript settings...

CVE-2025-61164

Cohere North AI v1.1.5 was found to contain an information leak via its WebSocket Endpoint . The vulnerability requires no authentication and is exploitable over the network with low complexity, resulting in a high impact on confidentiality with no integrity or availability impact (CVSS 3.1 score...

CVE-2025-61164

Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint...

PT-2026-81927

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...