Linux Distros Unpatched Vulnerability : CVE-2026-76925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerabili...

Governing Bring Your Own AI: A Parameterized Maturity Model

Employees are increasingly using personally owned generative AI tools such as ChatGPT, Gemini, and Claude for their daily work. This practice is known as Bring Your Own AI BYOAI, which is a distinct form of Shadow AI in which employee-authenticated personal accounts are used outside of enterprise...

Fedora 43 : memcached (2026-38d8cd1c52)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-38d8cd1c52 advisory. Rebase to 1.6.45 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

EUVD-2026-52273

SiYuan: Cross-boundary metadata disclosure via getBlockInfo publish mode: reader-reachable document title/root info for publish-forbidden docs; sibling getDocInfo is filtered...

iocx v0.7.6.1

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

Risk-Analysis-Editor v3.0.0

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

ActBench v0.1.0

ActBench ActBench is a self-evolving benchmark of behavioral safety in cowork agents. It defines behavioral safety as whether an agent's execution remains within the permissions and state changes required by a benign task, and evaluates realized behavioral risk from execution trajectories rather...

How Developers Prevent Production Risk at the Source

Fixing security vulnerabilities in code takes seconds, while patching in production creates high operational costs and risk. Discover how empowering developers as your first line of defense eliminates exposure across every phase of your software pipeline...

Fedora 43 : freerdp (2026-e0f5d28f57)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e0f5d28f57 advisory. Update to 3.31.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-65109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix...

Can Risk-Based Alerting Mitigate Cybersecurity Alert Fatigue?

Security operations centers SOCs face large numbers of false alerts, making detection of cyberattacks difficult under typical resource constraints. Risk-based alerting RBA has been proposed as a means to reduce false alerts and has reportedly succeeded in doing so in various enterprise deployment...

Slackware Linux 15.0 / current pcre2 Vulnerability (SSA:2026-244-01)

The version of pcre2 installed on the remote host is prior to 10.48. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-244-01 advisory. New pcre2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding descriptio...

Fedora 44 : openssl (2026-51251b4657)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-51251b4657 advisory. Rebase to OpenSSL 3.5.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

CVE-2026-80616

A flaw was found in the Linux kernel's ieee802154 component. An unnecessary warning message WARNON can be triggered when memory allocation fails in the cfg802154switchnetns function. This can lead to diagnostic messages being logged due to deliberate fault injections, but does not pose a direct...

PT-2026-84512

CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe...

PT-2026-84511

CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe...

PT-2026-84513

CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe...

ASB-A-524767048

In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

krane v0.1.6

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

SUSE SLES15: kubernetes1.35-client / kubernetes1.35-client-bash-completion / etc (SUSE-SU-2026:3824-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3824-1 advisory. This update for kubernetes rebuilds it against the current go security release. Tenable has extracted the preceding description block direct...