RockyLinux 10 : sudo (RLSA-2026:10758)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:10758 advisory. sudo: Sudo: Privilege escalation due to failure in privilege drop calls CVE-2026-35535 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-6778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. CVE-2026-6778 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2026-6774

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. CVE-2026-6774 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-6781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. CVE-2026-6781 Note that Nessus relies...

EDySec: A Deep Learning-Based Explainable Dynamic Analysis Framework for Detecting Malicious Packages in PyPI Ecosystem

The security of open-source software repositories is increasingly threatened by next-gen software supply chain attacks. These attacks include multiphase malware execution, remote access activation, and dynamic payload generation. Traditional Machine Learning ML detectors struggle to detect these...

PT-2026-35818

Name of the Vulnerable Software and Affected Versions Elastic Package Registry affected versions not specified Description Improper Verification of Cryptographic Signature occurs in the Elastic Package Registry. This issue allows an attacker who can intercept network traffic or influence the...

Linux Distros Unpatched Vulnerability : CVE-2026-6755

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: postMessage component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. CVE-2026-6755 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2026-6783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150...

RHEL 8 : python3 (RHSA-2026:11077)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:11077 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.8 contained security vulnerabilities. These vulnerabilities stemmed from the failure to perform integrity checks on downloaded plugin archives. This could allow attackers to...

Linux Distros Unpatched Vulnerability : CVE-2026-6773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. CVE-2026-6773 Note...

Linux Distros Unpatched Vulnerability : CVE-2026-6760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. CVE-2026-6760 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2026-6768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. CVE-2026-6768 Note that Nessus relies o...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libxslt: libxslt-1.1.45-0.1.hum1 aarch64, x8664 libxslt-devel-1.1.45-0.1.hum1 aarch64, x8664 python3-libxslt-1.1.45-0.1.hum1 aarch64, x8664 libxslt-1.1.45-0.1.hum1.src src...

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware

Cybersecurity researchers have flagged dozens of Microsoft Visual Studio Code VS Code extensions on the Open VSX repository that are linked to a persistent information-stealing campaign dubbed GlassWorm. The cluster of 73 extensions has been identified as cloned versions of their legitimate...

@akoskm/create-mcp-server-stdio (>=0.0.5, <=0.0.14), @bazel/create (8.0.2) +43 more potentially affected by CVE-2026-11572 via degit (>=2.1.3, <=2.8.5)

degit NPM version =2.1.3, =0.0.5, =3.0.3, =1.1.0-alpha.0, =1.4.0, =1.0.1, =2.0.5, =1.0.0, =1.5.0, =0.1.0, =17.7.1-alpha.173, =17.7.1-alpha.176, =0.1.1, =1.2.7, =1.3.6 and more Source cves: CVE-2026-11572 Source advisory: SNYK:JS-DEGIT-17116207...

Linux Distros Unpatched Vulnerability : CVE-2026-31590

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Drop WARN on large size for KVMMEMORYENCRYPTREGREGION Drop the WARN in sevpinmemory on npages overflowing an int, as the WARN is comically trivially ...

Important: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-4800 For more details about the security issues, including the impact, a CVSS score,...

Critical Photon OS Security Update - PHSA-2026-5.0-0833

Updates of 'mesa' packages of Photon OS have been released...

RHEL 10 : pcs (RHSA-2026:10713)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:10713 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: lodash: lodash: Arbitrary co...