Microsoft SharePoint - Remote Code Execution

Microsoft SharePoint is vulnerable to a remote code execution when the software fails to check the source markup of an application package. id: CVE-2020-16952 info: name: Microsoft SharePoint - Remote Code Execution author: dwisiswant0 severity: high description: Microsoft SharePoint is vulnerabl...

Oracle Linux 8 : webkit2gtk3 (ELSA-2026-96080)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-96080 advisory. 2.54.2-2 - Update bundled Skia to aa789d9bd566 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Rocky Linux 9.6 [CIQ] Security Update: ca-certificates (ciqsa-2026_1770)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261770 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-114406. Tenable has extracted the preceding...

CentOS Linux 7.9 [CIQ] Security Update: ca-certificates (ciqsa-2026_1773)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261773 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2026-114406. Tenable has extracted the...

October 13, 2026—KB5127646 (OS Build 28000.3231)

October 13, 2026—KB5127646 OS Build 28000.3231 Applies To Windows 11 version 26H1, all editions This cumulative update for Windows 11, version 26H1 KB5127646 includes the latest security fixes and improvements, along with non-security updates from last month's optional preview release. Visit the...

November 10, 2026—KB5131090 (OS Build 20348.5870)

November 10, 2026—KB5131090 OS Build 20348.5870 Applies To Windows Server 2022 This cumulative update for Windows Server 2022 KB5131090, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. Visit the Windows release healt...

October 13, 2026—KB5127648 (OS Builds 26300.9711, 26200.9711 and 26100.9711)

October 13, 2026—KB5127648 OS Builds 26300.9711, 26200.9711 and 26100.9711 Applies To Windows 11 version 26H2, all editions Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions Want a quick overview?: Watch the Windows 11 release note video for this update. --- Announcement...

September 8, 2026—KB5124008 (OS Builds 26200.9445 and 26100.9445)

September 8, 2026—KB5124008 OS Builds 26200.9445 and 26100.9445 Applies To Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions Want a quick overview?: Watch the Windows 11 release note video for this update. --- Announcements and messages This section provides key...

September 8, 2026—KB5124012 (OS Build 28000.2954)

September 8, 2026—KB5124012 OS Build 28000.2954 Applies To Windows 11 version 26H1, all editions This cumulative update for Windows 11, version 26H1 KB5124012 includes the latest security fixes and improvements, along with non-security updates from last month's optional preview release. Visit the...

September 8, 2026—KB5122882 (OS Build 20348.5622)

September 8, 2026—KB5122882 OS Build 20348.5622 Applies To Windows Server 2022 This cumulative update for Windows Server 2022 KB5122882, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. Visit the Windows release healt...

November 10, 2026 — KB5132059 (OS Build 28000.3501)

November 10, 2026 — KB5132059 OS Build 28000.3501 Applies To Windows 11 version 26H1, all editions This cumulative update for Windows 11, version 26H1 KB5132059 includes the latest security fixes and improvements, along with non-security updates from last month's optional preview release. Visit t...

EUVD-2026-120864

Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...

Fedora 45 : python3-docs / python3.15 (2026-f3fe9323aa)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-f3fe9323aa advisory. Bugfix Python release 3.15.2 https://www.python.org/downloads/release/python-3152/ Tenable has extracted the preceding description block directly fr...

CVE-2026-104619: PackageKit: Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing…

Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...

PT-2026-141566

Untrusted users could roll back security updates when using the PackageKit Zypp Backend before 1.4.1, allowing privilege escalation...

Fedora 43 : mingw-freetype (2026-2e919836ea)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2e919836ea advisory. Backport fix for CVE-2026-49919. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : mingw-qt5-qtdeclarative (2026-587a1cec32)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-587a1cec32 advisory. Backport fix for CVE-2025-12385. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 43 : mingw-qt5-qtdeclarative (2026-29e4b8a289)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-29e4b8a289 advisory. Backport fix for CVE-2025-12385. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150632 advisory. Unity Link Advisory UTSA-2026-150632 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting

Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. id: CVE-2021-41349 info: name: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting author: rootxharsh,iamnoooob severity: medium description: Microsoft Exchange...