CVE-2026-90499: Improper Authorization

A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Password Update Handler. The manipulation of the argument hrid results in improper authorization. The attack can be executed remotely. The...

Fedora 44 : kernel (2026-9ce2715225)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9ce2715225 advisory. The 7.2.5 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000581 advisory. Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. Tenable has extracted the preceding description block directly from the Unity Linu...

perl-HTML-FormHandler-0.410.2-1.1 on GA media (moderate)

perl-HTML-FormHandler-0.410.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11745-1 Rating: moderate Cross-References: CVE-2022-4993 CVE-2026-19872 CVE-2026-85484 CVE-2026-85485 CVE-2026-85630 Affected Products: openSUSE Tumbleweed An update that solves 5 vulnerabilities can now be installed...

chromedriver-153.0.8010.36-1.1 on GA media (moderate)

chromedriver-153.0.8010.36-1.1 on GA media Announcement ID: openSUSE-SU-2026:11750-1 Rating: moderate Cross-References: CVE-2026-87429 CVE-2026-87430 CVE-2026-87431 CVE-2026-87432 CVE-2026-87433 CVE-2026-87434 CVE-2026-87435 CVE-2026-87436 CVE-2026-87437 CVE-2026-87438 CVE-2026-87439 CVE-2026-874...

python315-3.15.0~rc2-1.1 on GA media (moderate)

python315-3.15.0rc2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11748-1 Rating: moderate Cross-References: CVE-2026-15310 CVE-2026-15806 CVE-2026-17084 CVE-2026-18503 CVE-2026-19672 CVE-2026-6879 CVE-2026-9669 CVSS scores: CVE-2026-15310 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A...

CLSA-2026-1789228568 TuxCare security update for io.netty (2 CVEs)

TuxCare rebuilt 47 io.netty packages to address 2 CVEs. Fixed in 4.1.119.Final-tuxcare.3...

CLSA-2026-1789228075 TuxCare security update for io.micrometer (1 CVE)

TuxCare rebuilt 33 io.micrometer packages to address 1 CVE. Fixed in 1.13.15-tuxcare.1...

CLSA-2026-1789225570 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.3.13-tuxcare.6...

CLSA-2026-1789220666 TuxCare security update for 40 packages (2 CVEs)

TuxCare rebuilt 40 packages to address 2 CVEs. Fixed in 10.1.42-tuxcare.10...

CLSA-2026-1789219944 TuxCare security update for io.netty (2 CVEs)

TuxCare rebuilt 47 io.netty packages to address 2 CVEs. Fixed in 4.1.108.Final-tuxcare.2...

CLSA-2026-1789219941 TuxCare security update for io.netty (1 CVE)

TuxCare rebuilt 47 io.netty packages to address 1 CVE. Fixed in 4.1.117.Final-tuxcare.4...

CLSA-2026-1789219285 TuxCare security update for 123 packages (4 CVEs)

TuxCare rebuilt 123 packages to address 4 CVEs. Fixed in 11.0.32.tuxcare0001...

CLSA-2026-1789218209 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.13...

CLSA-2026-1789214678 TuxCare security update for io.netty (2 CVEs)

TuxCare rebuilt 47 io.netty packages to address 2 CVEs. Fixed in 4.1.122.Final-tuxcare.4...

CLSA-2026-1789213301 TuxCare security update for org.bouncycastle (1 CVE)

TuxCare rebuilt 39 org.bouncycastle packages to address 1 CVE. Fixed in 1.78.1-tuxcare.6...

CLSA-2026-1789211588 TuxCare security update for io.netty (1 CVE)

TuxCare rebuilt 47 io.netty packages to address 1 CVE. Fixed in 4.1.111.Final-tuxcare.2...

CLSA-2026-1789206834 TuxCare security update for com.rabbitmq:amqp-client (3 CVEs)

TuxCare rebuilt com.rabbitmq:amqp-client to address 3 CVEs. Fixed in 5.21.0-tuxcare.1...

CLSA-2026-1789201689 TuxCare security update for commons-configuration:commons-configuration (1 CVE)

TuxCare rebuilt commons-configuration:commons-configuration to address 1 CVE. Fixed in 1.10-tuxcare.2...

CVE-2026-85681 WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated attackers to overwrite any of the site'...