Oracle Linux 10 : pcs (ELSA-2026-19008)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19008 advisory. - Fixed CVE-2026-4800 by updating HA Cluster Management add-on to 0.1.24.3 Resolves: RHEL-164079 Tenable has extracted the preceding description block directl...

OPENSUSE-SU-2026:11306-1 kbfs-6.6.3-3.1 on GA media

These are all security issues fixed in the kbfs-6.6.3-3.1 package on the GA media of openSUSE Tumbleweed...

gomuks-26.03+git.1780250926.564a8707-1.1 on GA media (moderate)

gomuks-26.03+git.1780250926.564a8707-1.1 on GA media Announcement ID: openSUSE-SU-2026:11290-1 Rating: moderate Cross-References: CVE-2026-25681 CVE-2026-27136 CVE-2026-33809 CVE-2026-39821 CVE-2026-42502 CVE-2026-42506 CVSS scores: CVE-2026-25681 SUSE : 6.1...

PT-2026-61511

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.6 Description An issue was identified in Suricata that requires a security update. Recommendations Update to version 8.0.6...

OPENSUSE-SU-2026:11305-1 containerized-data-importer1.65-api-1.65.0-2.1 on GA media

These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-50525

A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service DoS. An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash...

EUVD-2026-45131

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.0.13 via the 'family' parameter. This makes it possible for authenticated attackers, with editor-level access and above, to delete...

CVE-2026-62220 OpenClaw 2026.2.25 < 2026.5.26 WebSocket Rate Limit Bypass

OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limits on WebSocket authentication attempts. When the affected feature is enabled and reachable by lower-trust input, this can consume gateway resources and reduce service availabili...

CVE-2026-62220

OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limits on WebSocket authentication attempts. When the affected feature is enabled and reachable by lower-trust input, this can consume gateway resources and reduce service availabili...

CVE-2026-62220 OpenClaw 2026.2.25 < 2026.5.26 WebSocket Rate Limit Bypass

OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limits on WebSocket authentication attempts. When the affected feature is enabled and reachable by lower-trust input, this can consume gateway resources and reduce service availabili...

ROS-20260717-73-0027

The vulnerability of Google Chrome’s WebRTC technology relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...

OPENSUSE-SU-2026:11304-1 system-user-zabbix-7.0.28-1.1 on GA media

These are all security issues fixed in the system-user-zabbix-7.0.28-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11288-1 blender-5.2-5.2.0-1.1 on GA media

These are all security issues fixed in the blender-5.2-5.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260717-73-0019

The vulnerability in the rendering mode of Microsoft Edge and Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

OPENSUSE-SU-2026:11297-1 oras-1.3.3-2.1 on GA media

These are all security issues fixed in the oras-1.3.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11294-1 lux-0.24.1-1.1 on GA media

These are all security issues fixed in the lux-0.24.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11293-1 joe-4.6-4.1 on GA media

These are all security issues fixed in the joe-4.6-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11301-1 runc-1.4.3-1.1 on GA media

These are all security issues fixed in the runc-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11298-1 perl-DBI-1.651.0-1.1 on GA media

These are all security issues fixed in the perl-DBI-1.651.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-21729

Loki queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy...