Fedora 44 : antlr4-project (2026-619f648cde)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-619f648cde advisory. This update contains a fix for CVE-2026-13503. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2026-16198 Sipeed PicoClaw First Run Setup access_control.go authentication bypass

A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. The impacted element is an unknown function of the file web/backend/middleware/accesscontrol.go of the component First Run Setup. Performing a manipulation of the argument allowedcidrs results in authentication bypass using alternate...

CVE-2026-16198

The CVE affects Sipeed PicoClaw ≤ 0.2.9, specifically the First Run Setup’s web/backend/middleware/access_control.go where manipulation of the allowed_cidrs argument enables authentication bypass via an alternate channel. The issue can be triggered remotely and has high attack complexity with no ...

CVE-2026-16196 Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component webfetch. This manipulation causes server-side request forgery. The attack can be initiated remotely. The exploit has been made...

EUVD-2026-45391

A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validatepath of the file src/tools/builtin/pathutils.rs of the component writefile. The manipulation leads to link following. Local access is required to approach this attack. The exploit is...

CVE-2026-16127

The CVE-2026-16127 entry describes a vulnerability in zevorn rt-claw (up to version 0.2.0) affecting the http_request component, specifically claw_net_get and claw_net_post in claw/tools/tool_net.c. The issue arises from manipulation of the url argument, enabling server-side request forgery (SSRF...

CVE-2026-16084

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function webfetch of the file pkg/tools/integration/web.go. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made available to the public and...

CVE-2026-16081

A vulnerability was determined in Sipeed PicoClaw up to 0.2.9. The affected element is an unknown function of the file web/backend/api/auth.go. Executing a manipulation can lead to cross-site request forgery. The attack can be launched remotely. The exploit has been publicly disclosed and may be...

CVE-2026-58209 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58209 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

CVE-2025-44904 affecting package hdf5 for versions less than 1.14.6-3

CVE-2025-44904 affecting package hdf5 for versions less than 1.14.6-3. A patched version of the package is available...

CVE-2026-58250 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58250 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2026-47087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor revoked authorizer access. A URLAUTH URL minted while the authorizer...

CVE-2026-9537

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies with the number of...

ROOT-OS-DEBIAN-11-CVE-2026-61863 CVE-2026-61863 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-61863 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-23278 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-23278 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-46140 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46140 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-46054 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46054 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-52909 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-52909 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53138 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53138 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...