CVE-2026-81497

security update...

PT-2026-83667

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash ai allows a caller of an identity-configured tool to update or destroy records it never identified, including every row in the table. In AshAi.Tool.Execution, identity filter/3 built the update/destroy filter direct...

CVE-2026-51739

The TOTOLINK T6 wireless dual-band Mesh router is vulnerable to an incorrect access control flaw in the CloudSrvVersionCheck function. This vulnerability affects version 4.1.5cu.748_B20211015 . An unauthenticated attacker can exploit this by sending a crafted POST request to the /cgi-bin/cstecgi....

CVE-2026-51734

The TOTOLINK T6 wireless dual-band Mesh router, specifically version 4.1.5cu.748_B20211015 , is vulnerable to an improper access control flaw in the informSlaveUpdate function. An unauthenticated attacker can exploit this by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. Thi...

Fedora 43 : epiphany (2026-e205f21e0d)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e205f21e0d advisory. Automatic update for epiphany-49.9.1-1.fc43. Changelog for epiphany Thu Aug 13 2026 Packit - 1:49.9.1-1 - Update to 49.9.1 upstream release Tenable...

Certain HP DeskJet All in One – Potential Information Disclosure

Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs. Update your printer firmware...

OPENSUSE-SU-2026:11649-1 Botan-3.13.0-1.1 on GA media

These are all security issues fixed in the Botan-3.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-51739

Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger cloud update checks via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83978

Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to trigger cloud update checks via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

UBUNTU-CVE-2026-81495

security update...

UBUNTU-CVE-2026-81497

security update...

Fedora 44 : python-pip (2026-397c391da2)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-397c391da2 advisory. Security fixes for CVE-2026-13346 and CVE-2026-8643 Tenable has extracted the preceding description block directly from the Fedora security advisory...

SUSE SLED15 / SLES15 Security Update : go1.27 (SUSE-SU-2026:3830-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3830-1 advisory. - go1.27.0 released 2026-08-19 is a major release of Go. go1.27.x minor releases will be provided through Augu...

Oracle Linux 10 : ELSA-2026-60306-0: / golang (ELSA-2026-603060)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-603060 advisory. 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 Tenable has extracted the preceding...

Security update for postgresql14 (important)

openSUSE security update: security update for postgresql14 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21699-1 Rating: important References: bsc1275001 bsc1275002 bsc1275042 bsc1275043 bsc1275044 bsc1275046 bsc1275047 bsc1275048 bsc1275049...

owasp-modsecurity-crs-4.29.0-1.1 on GA media (moderate)

owasp-modsecurity-crs-4.29.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11632-1 Rating: moderate Cross-References: CVE-2026-33691 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

istioctl-1.30.4-1.1 on GA media (moderate)

istioctl-1.30.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11630-1 Rating: moderate Cross-References: CVE-2026-48521 CVE-2026-50572 CVE-2026-73511 CVE-2026-73512 CVE-2026-73513 CVE-2026-73546 CVE-2026-73547 CVE-2026-73548 CVE-2026-73549 CVE-2026-73550 CVE-2026-73551 CVE-2026-73552...

chromedriver-152.0.7977.64-1.1 on GA media (moderate)

chromedriver-152.0.7977.64-1.1 on GA media Announcement ID: openSUSE-SU-2026:11628-1 Rating: moderate Cross-References: CVE-2026-78891 CVE-2026-78892 CVE-2026-78893 CVE-2026-78894 CVE-2026-78895 CVE-2026-78896 CVE-2026-78897 CVE-2026-78898 CVE-2026-78899 CVE-2026-78900 CVE-2026-78901 CVE-2026-789...

python313-djangorestframework-3.18.0-2.1 on GA media (moderate)

python313-djangorestframework-3.18.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11625-1 Rating: moderate Cross-References: CVE-2026-73228 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0318-1 Rating: critical References: 1276225 1276749 Cross-References: CVE-2026-78891 CVE-2026-78892 CVE-2026-78893 CVE-2026-78894 CVE-2026-78895 CVE-2026-78896 CVE-2026-78897 CVE-2026-78898 CVE-2026-78899...