PT-2026-119169

Name of the Vulnerable Software and Affected Versions Oracle Secure Backup versions 19.1.0.0.0 through 19.1.0.1.0 Description An issue exists in the Device Management and Support component that allows a low privileged attacker with access to the infrastructure where the software executes to...

PT-2026-118619

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 153.5.1 Thunderbird versions prior to 158.0.1 Description Thunderbird fails to escape attribute values when serializing outgoing XMPP stanzas. Since values from incoming requests are echoed back in automatic...

PT-2026-120046

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

PT-2026-119144

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM component: Configuration Tools. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Development executes to...

PT-2026-119642

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Installation Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where JD Edwards...

Google Chrome Vulnerability: CVE-2026-113128

Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-119556

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.1 through 12.2 Description A remote attacker could obtain sensitive information because the software uses a hard-coded cryptographic key. A hard-coded cryptographic key is a fixed key embedded directly...

PT-2026-119997

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology Outside In Clean Content SDK version 8.5.8 Description A flaw in the Oracle Outside In Technology product of Oracle Fusion Middleware allows a low privileged attacker with access to the execution infrastructure to...

Azul Zulu: CVE-2026-91453: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM fo...

Azul Zulu: CVE-2026-91373: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability...

PT-2026-119867

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Utility component allows a low-privileged attacker with local access to the infrastructure to compromise the system. This issue can lead to unauthorized creation, deletion, or modification ...

MySQL 26.7 -- Multiple vulnerabilities, no fix available

Oracle reports: The October 2026 Critical Patch Update contains 98 new security patches for Oracle MySQL, 29 of which may be remotely exploitable without authentication. MySQL 26.7 is an Innovation release. It reached its end of life on 2026-10-20, when MySQL 26.10 was released, and Oracle ships ...

PT-2026-119971

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23364)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp with the correct function, cryptomemneq. This plugin only works with Tenable.ot. Please visit...

Siemens Software Center Uncontrolled Search Path Element Vulnerability

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application...

PT-2026-119939

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1 Oracle GraalVM for JDK versions 17.0.20.1, 21.0.12.1 Oracle GraalVM Enterprise Edition version 21.3.19.1.1 Description An issue exists in the Libraries...

CentOS Linux 8.5 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS8.5:CLSA-2026:1791960930)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791960930 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

Linux Distros Unpatched Vulnerability : CVE-2026-70197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70197 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2026-96224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-96224 Note that Nessus relies on the presence of the packag...

PT-2026-120061

Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft component: Inventory. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...