EUVD-2026-17983

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose...

PT-2026-29576

Name of the Vulnerable Software and Affected Versions Himmelblau versions 2.0.0-alpha through 2.3.8 and 3.0.0-alpha through 3.1.0 Description Himmelblau, an interoperability suite for Microsoft Azure Entra ID and Intune, contains a conditional local privilege escalation issue due to an edge-case...

[SECURITY] Fedora 42 Update: nss-3.121.0-1.fc42

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

[SECURITY] Fedora 44 Update: nss-3.121.0-1.fc44

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Fedora 42 : firefox / nss (2026-49237e1ced)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-49237e1ced advisory. Update NSS to 3.121.0 Update to Firefox 149.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 44 : nss (2026-367d9a0b61)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-367d9a0b61 advisory. Update NSS to 3.121.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Oracle Linux 10 : firefox (ELSA-2026-5931)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-5931 advisory. 140.9.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Re...

Linux Distros Unpatched Vulnerability : CVE-2026-4727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149. CVE-2026-4727 Note that Nessus relies on t...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0801

Updates of 'mozjs', 'nss' packages of Photon OS have been released...

Fedora 43 : firefox / nss (2026-d8099dd719)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-d8099dd719 advisory. Update NSS to 3.121.0 Update to Firefox 149.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Debian: Security Advisory (DLA-4508-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463 The principle is fairly simple: the -R option i...

Debian dla-4508 : libnss3 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4508 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4508-1 [email protected] https://www.debian.org/lts/security/...

CVE-2026-4727 Denial-of-service in the Libraries component in NSS

Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

CVE-2026-4727: Uncontrolled Resource Consumption

Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

ROOT-OS-UBUNTU-2404-CVE-2026-2781 CVE-2026-2781 in rootio-nss - Patched by Root

Root has patched CVE-2026-2781 in the rootio-nss package for Root:Ubuntu:24.04. Multiple fixed versions available...

Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2026-1447)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.12.0 : nss (EulerOS-SA-2026-1504)

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash...

Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2026-1504)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for glibc

This update for glibc fixes the following issues: CVE-2026-0861: memalign: reinstate alignment overflow check bsc1256766 CVE-2026-0915: resolv: Fix NSS DNS backend for getnetbyaddr bsc1256822 CVE-2025-15281: posix: Reset wordexpt fields with WRDEREUSE bsc1257005 CVE-2025-8058: posix: Fix...