CVE-2026-96265: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory,...

Fedora 44 : markdownlint-cli2 (2026-2c004657ff)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2c004657ff advisory. Update ---- CVE fix Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowError

Summary When LZ4BlockInputStream is configured with stopOnEmptyBlock = false the mode for reading concatenated block streams, it handles each empty block by calling refill recursively. A long run of empty blocks exhausts the thread stack and throws StackOverflowError out of read or skip. Details ...

CVE-2026-102158 Security Advisory 0190

Improper validation of selected CloudVision CUE application programming interface API request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability...

Rocky Linux 9.2 [CIQ] Security Update: python3-urllib3 (ciqsa-2026_1584)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261584 advisory. This advisory aggregates security fixes for the python-urllib3 SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2026-44432. Tenable has extracted the preceding...

Astra Linux – Vulnerability in openjpeg2

There is a flaw in the src/lib/openjp2/pi.c file of openjpeg in versions prior to 2.4.0. If an attacker can provide untrusted input to openjpeg’s conversion/encoding functionality, they could cause an out-of-bounds read. The most significant impact of this flaw is the application’s availability...

Astra Linux – Vulnerability in Linux

A flaw was discovered in the JFS filesystem code within the Linux kernel, which allows a local attacker to cause the system to panic by enabling the ability to set extended attributes. This can lead to memory corruption or an escalation of privileges. The most significant threat posed by this...

Astra Linux – Vulnerability in PostgresSQL 11

A flaw was discovered in PostgreSQL versions prior to 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20, and before 9.5.24. An attacker who has permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The...

Astra Linux – Vulnerability in imagemagick

A vulnerability was discovered in ImageMagick, causing a value of type ‘unsigned char’ to fall outside the representable value range when crafted or untrusted input is processed in the coders/psd.c file. This results in a negative impact on the availability of the application or other problems...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick’s MagickCore/segment.c file. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, specifically a division by zero in mathematics. This likely results in a disruption to the application’s functionality, but it may al...

Fedora 45 : cri-o1.36 (2026-77abfa2cdd)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-77abfa2cdd advisory. - Update to release v1.36.6 - Resolves: rhbz2537559 - Resolves CVE-2026-17113: rhbz2523493 - Resolves: rhbz2540885 Tenable has extracted the preceding...

Fedora 43 : nanosvg (2026-aa32e385dc)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-aa32e385dc advisory. Apply fix for CVE-2026-88367. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-53352)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505967; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-52970)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505981; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-43085)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506025; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-64370)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506021; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-46037)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505962; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-53219)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506006; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-52998)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505951; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

AlmaLinux 9.2 [TuxCare] Security Update: glusterfs / glusterfs-api / glusterfs-api-devel / glusterfs-cli / etc (ALMALINUX9.2:CLSA-2026:1781177494)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1781177494 advisory. - In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dhtsetxattrmdscbk use- after-free. CVE-2022-48340 Note that...