CVE-2026-55304: Protection Mechanism Failure

In addrremapaddressmap of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56958: Out-of-bounds Read

In gfalgogetcacheddumpdata of gfalgo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux Distros Unpatched Vulnerability : CVE-2026-90828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elforphancompatible of the file ld/ldelf.c of the component EL...

Linux Distros Unpatched Vulnerability : CVE-2026-90684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfieldcount of the file scenegraph/basescenegraph.c of the...

CVE-2026-83253: Improper Privilege Management

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the...

PT-2026-92681

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

Linux Distros Unpatched Vulnerability : CVE-2026-90830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function bfdwritemergedsection of the file bfd/merge.c of the component Section...

Oracle Linux 10 : ELSA-2026-67267-0: / libkcapi (ELSA-2026-672670)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-672670 advisory. 1.5.1-1.0.1 - Change distronameext in spec file to oracle 1.5.1-1 - Rebase to 1.5.1 Tenable has extracted the preceding description block directly...

Fedora 45 : environment-modules (2026-972718725c)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-972718725c advisory. Update to 5.6.2 fix CVE-2026-85013 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 44 : environment-modules (2026-c419d5048d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c419d5048d advisory. Update to 5.6.2 fix CVE-2026-85013 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

gimp-3.2.6-1.1 on GA media (moderate)

gimp-3.2.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11771-1 Rating: moderate Cross-References: CVE-2026-18301 CVE-2026-18302 CVE-2026-18306 CVE-2026-18309 CVE-2026-78465 CVE-2026-78475 CVE-2026-79902 CVE-2026-80101 CVE-2026-82330 CVSS scores: CVE-2026-18301 SUSE : 7.8...

CVE-2026-58721: Use of Uninitialized Variable

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92858

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition Analytics Server version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition Analytics Server version 26.01.0.0.0 Description A flaw in the Analytics Server component allows a low privilege...

CVE-2026-82992: Improper Access Control

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Installation. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise...

Fedora 45 : sblim-sfcb (2026-d613369130)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d613369130 advisory. Fix CVE-2026-73583 and CVE-2026-73584 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

PT-2026-92673

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description An unauthenticated attacker with access to the infrastructure where the software executes can compromise the system. This issue requires human interaction from a person other than t...

docker-29.7.2_ce-41.1 on GA media (moderate)

docker-29.7.2ce-41.1 on GA media Announcement ID: openSUSE-SU-2026:11765-1 Rating: moderate Cross-References: CVE-2026-31431 CVSS scores: CVE-2026-31431 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now b...

PT-2026-92812

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Platform Security component allows a low privileged attacker with access to the...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the elforphancompatible function. An attacker can cause a crash or potentially impact confidentiality and integrity by triggering a null pointer dereference through crafted input processed locally. Remediatio...

DEBIAN-CVE-2026-90830

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function bfdwritemergedsection of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed...