GO-2026-5052 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storagecache, crossplane-provider-azure-search, crossplane-provider-azure-signalrservice, crossplane-provider-azure-synapse, crossplane-provider-azure-resources, crossplane-provider-azure-security, crossplane-provider-azure-sql, traefik,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: beats-fips, beats, rancher-security-scan, neuvector-sigstore-interface-fips, pluto-fips, tkn-fips, jitsucom-bulker, istio-fips, ratify-fips, zitadel, kyverno-notation-aws-fips, bank-vaults, boring-registry-fips, docker-compose-fips, k9s-fips, kyverno, mattermost-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: crossplane, kube-mgmt, kgateway, cert-manager-cmctl-fips, kargo, xeol, ocm-cli, cloudbeat, chartmuseum, trivy-operator, ratify-fips, zarf-fips, eksctl, consul-k8s, jfrog-cli, envoy-gateway, gitlab-operator, rancher-fleet, falcoctl-fips, helm-mapkubeapis, vcluster-fip...

GO-2024-2748 vulnerabilities

Vulnerabilities for packages: tekton-chains, azure-aad-pod-identity-mic, argo-workflows-fips, slsa-verifier, metrics-server-fips, request-1279, velero-plugin-for-aws-fips, thanos-operator-fips, sonobuoy, rabbitmq-cluster-operator, kube-state-metrics-fips, hubble-ui-backend-fips, kine,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-codestarnotifications, crossplane-provider-aws-s3, metrics-server, crossplane-provider-sql-fips, crossplane-provider-aws-servicediscovery, percona-backup-mongodb-fips, crossplane-provider-aws-athena, crossplane-provider-aws-ec2-fips, coder-fip...

GO-2026-5506 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, crossplane-provider-aws-s3, influxd, crossplane-provider-sql-fips, cert-manager-cmctl-fips, crossplane-provider-aws-servicediscovery, crossplane-provider-gitlab-fips, slsa-verifier, crossplane-provider-aws-appflow-fips,...

GO-2026-4512 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2025-4043 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: kots, gitness, portieris, argocd-image-updater, envoy-gateway, zot...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: yunikorn-web, docker-credential-ecr-login, trust-manager, splunk-otel-collector, linkerd2-proxy-init, podman, sbomqs, prometheus-operator, newrelic-fluent-bit-output, sftpgo, lvm-driver, wazero, aws-signer-notation-plugin, argo-events, promxy,...

WordPress WP Photo Album Plus plugin < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo vulnerability

Unauthenticated Option Disclosure via gettogo vulnerability discovered by Erwan LR WPScan in WordPress Plugin WP Photo Album Plus versions 9.2.07.002...

CVE-2026-72832: Improper Neutralization of Input During Web Page Generation

Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. The event-handler scan is anchored at ?, which cannot cross the first literal ; when a appears inside a quoted attribute value the...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-54574)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54574 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 Tenable has extracted t...

JLSEC-2026-1284

An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port. This potentially makes curl extract information about services that are otherwise...

PT-2026-80526

An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port. This potentially makes curl extract information about services that are otherwise...

DEBIAN-CVE-2026-73433

A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...

GitLab 19.2 < 19.2.2 (CVE-2026-16627)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2... CVE-2026-16627 Note that Nessus has not tested for this issue but has instead relied only on the...

Linux Distros Unpatched Vulnerability : CVE-2026-68126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mac802154: hold an interface reference across the scan worker mac802154scanworker captures the scanning sub-interface under RCU and then keeps dereferencing...

GitLab 17.6 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-8667)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.0.6, 19... CVE-2026-8667 Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2026-68412

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the cfg80211 component. This vulnerability, located in the cfg80211wextsiwscan function, can lead to a memory leak. A local attacker could exploit this by sending a crafted Wi-Fi scan request with an Extended Service Set...