RHSA-2026:54512 Red Hat Security Advisory: gnome-remote-desktop security update

Bulletin has no description...

RHSA-2026:54486 Red Hat Security Advisory: freerdp security update

Bulletin has no description...

GO-2025-3924 vulnerabilities

Vulnerabilities for packages: vault, splunk-otel-collector-fips, splunk-otel-collector...

GO-2025-3839 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, splunk-otel-collector...

GO-2024-2848 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2024-3223 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: nri-rabbitmq, crossplane-provider-azure-securityinsights, rancher, trident-fips, kubescape-server-fips, gitea-fips, gatekeeper-fips, slsa-verifier, monstache, istio, hugo-fips, perses-fips, crossplane-provider-aws-ram, quic-go-fips, crossplane-provider-aws-ram-fips,...

GO-2026-5417 vulnerabilities

Vulnerabilities for packages: k8sgateway, juicefs, kubernetes-dns-node-cache...

CLSA-2026-1786690945 TuxCare security update for org.springframework.hateoas:spring-hateoas (1 CVE)

TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 1 CVE. Fixed in 2.4.1-tuxcare.2...

CVE-2026-19786

A vulnerability was found in francoisjacquet RosarioSIS up to 12.8. This issue affects some unknown processing of the file Modules.php. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. Upgrading to version 12.9 is capable of addressin...

CVE-2026-19785

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be...

Linux Distros Unpatched Vulnerability : CVE-2026-73251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - mongoose - None CVE-2026-73251 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

nodejs:22 security update

nodejs 1:22.23.1-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 1:22.23.1-3 - Backport patch: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 Resolves: RHEL-224135 RHEL-224144 1:22.23.1-2 -...

Linux Distros Unpatched Vulnerability : CVE-2026-73260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS certificate parser selected by MGTLSBUILTIN fails to verify that a...

Linux Distros Unpatched Vulnerability : CVE-2026-16457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - virtio: Malformed packed descriptor livelocks the device at 100% host CPU guest triggered DoS CVE-2026-16457 Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-63626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mongoose is an embedded web server and network library. Prior to 7.23, ppphandleipv6cp in src/l2ppp.c trusts the 16-bit IPv6CP len field without checking it...

CVE-2026-72838: Allocation of Resources Without Limits or Throttling

FileBrowser versions before 2.63.19 fail to enforce the declared Upload-Length in the TUS resumable-upload PATCH endpoint, allowing authenticated users to write arbitrary data to disk. Attackers can send oversized request bodies that exceed the declared upload length to exhaust available disk spa...

Linux Distros Unpatched Vulnerability : CVE-2026-66021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-73261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MGENABLETCPIP in src/netbuiltin.c does not reject a...

Fedora 44 : flatpak (2026-6b83471b0e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6b83471b0e advisory. Update to 1.18.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...