Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-multiauth-bypass-sgD2HbL4)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. CVE-2026-76446 - A...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libkcapi (UTSA-2026-124529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124529 advisory. A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle...

LibreNMS XSS

The vulnerability of the LibreNMS network monitoring system is related to deficiencies in the blocking procedures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Security Component Unauthorized Access

The vulnerability of the Security component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker operating remotely to gain...

Oracle Java SE JSE Unauthenticated Access Disclosure

The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

Fedora 46 : patool (2026-d38857d084)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d38857d084 advisory. Automatic update for patool-4.1.0-1.fc46. Changelog Sun Sep 13 2026 Federico Pellegrin - 4.1.0-1 - Bump to 4.1.0 rhbz2421500 and rhbz2508373 Tenable has...

CVE-2026-97152: Heap-based Buffer Overflow

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...

Linux Distros Unpatched Vulnerability : CVE-2026-95625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which...

ROS-20260924-73-0051

The vulnerability of the buserror030 function in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20260924-73-0053

The vulnerability of the isertwaitconn function in the drivers/infiniband/ulp/isert/ibisert.c module of the RTRS server and client kernel driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow a remote attacker to compromise the...

Linux Distros Unpatched Vulnerability : CVE-2026-95897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function fromnpystack of the file dask/array/core.py of the component Loader...

Linux Distros Unpatched Vulnerability : CVE-2026-75432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent, and Scanner::PushIndentTo...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124431)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124431 advisory. Unity Link Advisory UTSA-2026-124431 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124429 advisory. Unity Link Advisory UTSA-2026-124429 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-97404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticate...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124430 advisory. Unity Link Advisory UTSA-2026-124430 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

PHP dns_get_record SSRF

The vulnerability of the dnsgetrecord function in the PHP programming language is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...

OpenTofu DoS

The vulnerability of the OpenTofu infrastructure management tool is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to cause service failures...

Kibana Workflows SSRF

The vulnerability of the Workflows interface of the Kibana data visualization service is related to insufficient testing of queries on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

CVE-2026-62286: Exposure of Sensitive Information to an Unauthorized Actor

Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go applies a restricted user's label filter to container lists but not to the container-stat and container-event channels returned by GET /api/events/stream. In a simple-auth deployment usi...