Oracle Linux 10 : python3.12 (ELSA-2026-77020)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77020 advisory. - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fi...

Fedora 43 : hcloud (2026-6d4a64a6b0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6d4a64a6b0 advisory. Update to 1.69.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

CLSA-2026-1791493683 TuxCare security update for com.fasterxml.jackson.core:jackson-core (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 5 CVEs. Fixed in 2.14.2-tuxcare.3...

SecureShopProj

SecureShop - Vulnerable E-Commerce Application Security Lab S...

CLEANSTART-2026-CP07297 In Bouncy Castle for Java before 1

CVE-2026-59643 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-ZK50778 In Bouncy Castle for Java before 1

CVE-2026-59649 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-SS30538 Echo is a Go web framework

CVE-2026-55677 affects multiple packages. Echo is a Go web framework. See references for individual vulnerability details...

Fedora 43 : 7zip (2026-626a028878)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-626a028878 advisory. Some bugs and vulnerabilities were fixed Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Oracle Linux 9 : firefox (ELSA-2026-76761)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76761 advisory. 140.17.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

Security Bulletin: Due to use of Golang Go, multiple vulnerabilities affect IBM Cloud Pak System

Summary Due to use of Golang Go multiple vulnerabilities affect IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2026-39827 DESCRIPTION: An authenticated SSH client that repeatedly opened channels which were rejected by the server...

Security Bulletin: Due to use of NodeJS, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Due to use of NodeJS libraries, IBM Cloud Pak System Software is affected by multiple vulnerabilities. These have been addressed in IBM Cloud Pak System Software version 2.3.5.1. Vulnerability Details CVEID:CVE-2026-22036 DESCRIPTION: Undici is an HTTP/1.1 client for Node.js. Prior to...

Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, has conducted a comprehensive internal security review. This review resulted in software hardening releases...

DEBIAN-CVE-2026-46571

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...

Google issues Android security updates: who can get them and how

Google has published security fixes for Android. The October updates are available for Android operating system versions 14, 15, 16, 16-qpr2, and 17 where “qpr” stands for Quarterly Platform Release. QPRs are interim updates Google pushes out between major yearly cycles. These Android security...

CLSA-2026-1791369358 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 4.0.post23+tuxcare...

Security Bulletin: Multiple Vulnerabilities in Axios affect IBM Cloud Pak System

Summary Due to the use of Axios, multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2026-42264 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config...

Fedora 44 : golang-x-mod (2026-9626645a48)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9626645a48 advisory. Rebuild for security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Kernel Live Patch Security Notice LSN-0122-1

Ubuntu Linux kernel livepatch updates version 122.1, 122.2, and 122.4 fix multiple vulnerabilities affecting supported Ubuntu LTS releases...

CVE-2026-76285: Improper Adherence to Coding Standards

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

Oracle Linux 10 : nodejs24 (ELSA-2026-73428)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73428 advisory. 24.21.0-1.0.1 - Add c-ares as dependency orabug 39781256 - Update upstream references 1:24.21.0-1 - Update to version 24.21.0 Tenable has extracted t...