Fedora 44 : grpcurl (2026-fc26634b91)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fc26634b91 advisory. Update to 1.9.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-68006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file CVE-2026-68006 Note that...

CVE-2026-80175

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this...

EUVD-2026-74767

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this...

CVE-2026-77186: Improper Neutralization of Input During Web Page Generation

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fallback' Shortcode Attribute in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

CVE-2026-77187: Improper Neutralization of Input During Web Page Generation

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

CVE-2026-69507

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

CVE-2026-69493

CVE-2026-69493 is a critical (CVSS 9.8) out-of-bounds read vulnerability in Windows Event Logging Service , as assigned by Microsoft . The flaw allows an unauthorized, network-based attacker to achieve remote code execution without user interaction, with high impact to confidentiality, integrity,...

CVE-2026-69507

CVE-2026-69507 affects the Microsoft Windows Search Component . The vulnerability stems from insertion of sensitive information into an externally-accessible file or directory, allowing an authorized attacker to disclose information over a network. The CNA-assigned CVSS 3.1 score is 5.7 (MEDIUM) ...

Microsoft Windows Search Component Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

PT-2026-87527

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-78131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser. CVE-2026-78131 No...

Fedora 44 : syncthing (2026-c33332bcf7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c33332bcf7 advisory. 2.1.3, fix for CVE-2026-40898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

Linux Distros Unpatched Vulnerability : CVE-2026-18924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in...

Malicious code in accessible-apricot-mollusk (npm)

Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Linux Distros Unpatched Vulnerability : CVE-2026-81493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - security update CVE-2026-81493 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite CVE-2026-67213, CVE-2026-67214, CVE-2026-59884, CVE-2026-59885, CVE-2026-59886, CVE-2026-56819, CVE-2026-15075, CVE-2026-50645, CVE-2026-9322, CVE-2026-9171, CVE-2026-11546, CVE-2026-11714,...

CVE-2026-18965: Missing Authorization

PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on the PayRange network to be publicly accessible, with or without an account...

CVE-2026-18965 Missing Authorization in PayRange API

PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on the PayRange network to be publicly accessible, with or without an account...

Fedora 44 : libxls (2026-73af37bdd0)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-73af37bdd0 advisory. - Backport CVE patches - fixes CVE-2026-26824 rhbz2484566 - fixes CVE-2026-26825 rhbz2484567 Tenable has extracted the preceding description block...