GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubescape-operator, knative-eventing, tetragon, rekor, crossplane-provider-family-azure, crossplane-provider-aws-route53, rancher-fleet, sftpgo-plugin-auth, omnibump, crossplane-provider-aws-rds, continuity, promxy, container-object-storage-interface,...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: kine, grype, melange, wolfictl, syft, helm, chezmoi, pulumi-language-java, openbao, prometheus, external-secrets-operator, flux-source-controller, cilium, gomplate, kyverno, nuclei, gitea, aactl, docker-machine-driver-harvester, gptscript, podman, falco-no-driver, k3...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, crossplane-provider-aws-route53, kine, crossplane-provider-aws-rds, grype, crossplane-provider-keycloak, cert-manager, gatus, melange, cosign, mods, wal-g, wolfictl, crossplane-provider-aws-eks, crossplane-provider-aws-dynamodb, syft...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, kine, grype, cert-manager, gatus, melange, cosign, mods, wal-g, wolfictl, syft, helm, chezmoi, pulumi-language-java, openbao, glab, prometheus, external-secrets-operator, buildkitd, flux-source-controller, rancher-machine, cilium,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: git-lfs, cert-manager-istio-csr, dex, kubescape-operator, tetragon, kine, sftpgo-plugin-auth, postgres-operator, crossplane-provider-aws-rds, yunikorn-k8shim, container-object-storage-interface, kubernetes-csi-external-attacher, kapp, cert-manager-cmctl, gatus,...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-54542)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54542 advisory. 10.0.111-1.0.1 - Add support for Oracle Linux 10.0.111-1 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235478 Tenable has extract...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-54574)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54574 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 Tenable has extracted t...

Security Updates for Microsoft Dynamics 365 (on-premises) (August 2026)

The Microsoft Dynamics 365 on-premises is missing security updates. It is,therefore, affected by the following vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network. CVE-2026-65815 - Exposure of...

Linux Distros Unpatched Vulnerability : CVE-2026-67986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially...

PT-2026-72129

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A flaw exists when the SECURITY SCANNER V4 PSK pre-shared key is not configured. A remote unauthenticated attacker can send POST requests to the security scanner notification endpoint,...

CVE-2026-17177: Uncontrolled Recursion

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-16708: External Control of System or Configuration Setting

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration...

CVE-2026-19639: Improper Validation of Specified Quantity in Input

An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...

CVE-2026-74243: Missing Authentication for Critical Function

A flaw was found in Red Hat Quay. When the SECURITYSCANNERV4PSK pre-shared key is not set, a remote unauthenticated attacker can send POST requests to the security scanner notification endpoint. This allows the attacker to flood the notification queue and inject path traversal characters into Cla...

CVE-2025-7639: Deserialization of Untrusted Data

The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group "DNA Apps"...

CVE-2026-19680: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database...

Linux Distros Unpatched Vulnerability : CVE-2026-73624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through...

Linux Distros Unpatched Vulnerability : CVE-2026-63298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrar...

CVE-2025-71405: URL Redirection to Untrusted Site

chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...

CVE-2026-19636: Generation of Incorrect Security Tokens

An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation...