CVE-2026-68956: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are never assigned a handler. The "session" clause of sshconnection:handlemsg/4 checks only...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: librabbitmq (UTSA-2023-002168)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002168 advisory. An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for...

Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

Arista VeloCloud Orchestrator VCO on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the...

Insecure access controls on internal service ports in Brocade SANnav

Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches...

Multiple Apache Tomcat vulnerabilities

Moderate: Apache Tomcat: Fix for CVE-2025-66614 is incomplete CVE-2026-32990 The validation of SNI name and host name did not take account of possible differences in case allowing the strict SNI checks to be bypassed. Important: Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attac...

CVE-2026-68956

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are never assigned a handler. The "session" clause of sshconnection:handlemsg/4 checks only...

VulnCheck KEV: CVE-2026-93952

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000560)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000560 advisory. Use After Free in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS : libssh2 vulnerabilities (USN-8799-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8799-1 advisory. It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A...

ROS-20260922-73-0091

The vulnerability of the modhdcpreadrxidlist function in the drivers/gpu/drm/amd/display/modules/hdcp/hdcpddc.c driver module of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the execution of operations outside of the buffer...

ROS-20260922-73-0104

The vulnerability in the 389-ds-base is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002715 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.1858. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

ROS-20260922-73-0124

The vulnerability in golang-x-crypto is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpq (UTSA-2024-000295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-000295 advisory. A flaw was found in PostgreSQL involving the pgcancelbackend role that signals background workers, including the logical replication launcher, autovacuum workers, an...

CVE-2026-95270: Observable Timing Discrepancy

A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the function checkpassword of the file changedetectionio/flaskapp.py of the component Hash Comparison. This manipulation of the argument Password causes observable timing discrepancy. The attack is possible...

PT-2026-97083

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper authentication and missing authorization may allow a remote attacker to perform unauthorized actions. Recommendations At the moment...

PT-2026-97082

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A server-side request forgery SSRF issue exists, which could allow a local attacker to obtain sensitive information and trigger unauthorized...

CVE-2026-75432

An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information . The vulnerability originates from the src/scanner.cpp file, specifically within the Scanner::PopIndent() and Scanner::PushIndentTo() components. No details regarding specific remediation or in-the-wild exploitat...

CVE-2026-95862: Out-of-bounds Write

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

UBUNTU-CVE-2026-55567

BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning does not lock and validate a target's parent directory before deletion. A local unprivileged user can replace that directory with a Windows junction and use a native symlink to redirect...