CVE-2026-93568: Improper Input Validation

A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty's HTTP-object conversion path incorrectly processes these requests as regular HTTP/1.1 CONNECT requests, leading to a loss of critical...

The vulnerability of the dns.Msg.Unpack() function in the plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_grpc.go files of the coredns server allows a attacker to compromise the integrity of the protected information.

The vulnerability of the dns.Msg.Unpack function in the plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go files of the coredns server is related to the ability to bypass access control mechanisms. Exploiting this vulnerability allows a malicious actor to...

CVE-2026-91203: Race Condition Enabling Link Following

A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a symlink race condition, during privileged file operations such as changing file ownership or permissions. By manipulating directory entries and winning this race, the attacker can...

CVE-2026-93567: Improper Input Validation

A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form request-target for the tunnel authority. A remote attacker can exploit this by supplying a different Host header, leadi...

PT-2026-95420

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the HTTP/2 codec when converting HTTP/1 CONNECT requests to HTTP/2. The component incorrectly utilizes the Host header instead of the CONNECT authority-form request-target to...

ROS-20260918-73-0023

The vulnerability in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c module of Broadcom’s wireless adapter driver for the Linux operating system is related to an improper check of a specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

Fedora 45 : stb (2026-63e7be05c3)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-63e7be05c3 advisory. Patch stbsprintf: security fix for CVE-2026-79516 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 44 : chromium (2026-441ccd8509)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-441ccd8509 advisory. Update to 153.0.8010.36, it fixes 230 CVEs: CVE-2026-87429 - CVE-2026-87658 Tenable has extracted the preceding description block directly from the...

Fedora 43 : chromium (2026-a1a12d9b4f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a1a12d9b4f advisory. Update to 153.0.8010.36, it fixes 230 CVEs: CVE-2026-87429 - CVE-2026-87658 Tenable has extracted the preceding description block directly from the...

python313-aiosmtplib-5.1.3-1.1 on GA media (moderate)

python313-aiosmtplib-5.1.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11799-1 Rating: moderate Cross-References: CVE-2026-90467 CVSS scores: CVE-2026-90467 SUSE : 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N CVE-2026-90467 SUSE : 6.3...

CVE-2026-80442: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCertificate functionality. Successful exploitation could allow an attacker to execute unauthorized commands and impact the confidentiality, integrity, and availability of the affect...

ROS-20260918-73-0020

The vulnerability of the net/bluetooth/l2capcore.c component in the Linux operating system is related to incorrect checking of the data size at the input stage. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

Linux Distros Unpatched Vulnerability : CVE-2026-90052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow with keyed discard Since commit 68c5c42567bc dm-integrity:...

Fedora 44 : stb (2026-2a592f622a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2a592f622a advisory. Patch stbsprintf: security fix for CVE-2026-79516 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

The vulnerabilities in the backend files open_webui/routers/auths.py, backend/open_webui/utils/oauth.py, and backend/open_webui/socket/main.py of the Open WebUI artificial intelligence-based web interface allow a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability in the web interface based on artificial intelligence, namely backend/openwebui/routers/auths.py, backend/openwebui/utils/oauth.py, and backend/openwebui/socket/main.py, is related to incorrect session expiration times. Exploiting this vulnerability could allow a malicious actor...

CVE-2026-54648

CubeCart is an ecommerce software solution. Prior to 6.7.5, the GDPR tools in admin/sources/customers.gdpr.inc.php rely on page-level CCPERMREAD access and do not require CCPERMDELETE for the purge, noorderpurge, or deleteguests commands. An authenticated administrator with read-only customer...

grafana: Grafana: Unauthorized annotation deletion by editor users

A flaw was found in Grafana. An authenticated editor user could exploit this vulnerability to delete any annotation, even those for which they lack read permissions. This unauthorized action compromises the integrity of data by allowing deletion of information beyond their intended access scope...

grafana: Grafana: Unauthorized snapshot deletion via Broken Access Control in Snapshot API

A flaw was found in Grafana. An authenticated user with editor privileges could exploit a Broken Access Control BAC vulnerability in the Snapshot API. This flaw allows an editor to delete any dashboard snapshot, even those they do not have explicit read or write access to, leading to unauthorized...

grafana: Grafana: Unauthorized snapshot deletion via Broken Access Control in Snapshot API

A flaw was found in Grafana. An authenticated user with editor privileges could exploit a Broken Access Control BAC vulnerability in the Snapshot API. This flaw allows an editor to delete any dashboard snapshot, even those they do not have explicit read or write access to, leading to unauthorized...

grafana: Grafana: Unauthorized annotation deletion by editor users

A flaw was found in Grafana. An authenticated editor user could exploit this vulnerability to delete any annotation, even those for which they lack read permissions. This unauthorized action compromises the integrity of data by allowing deletion of information beyond their intended access scope...