CVE-2026-53138 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53138 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46252 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46252 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-46242 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46242 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-53157 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53157 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46331 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46331 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-53362 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53362 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53163 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53163 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-52928 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-52928 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-15395

The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'digitalSignature' Field Value in all versions up to, and including, 2.4.18 due to insufficient input sanitization and output escaping. This makes it possible for...

Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure

Impact The toabsolutenormalizedpath function security.lua:28-43 does not collapse redundant path separators // → /. On Linux, //etc/passwd is equivalent to /etc/passwd POSIX path semantics, but iscriticalpath fails to match the double-slash variant because //etc/passwd does not start with /etc/...

ROOT-APP-NPM-CVE-2025-66414 CVE-2025-66414 in @rootio/modelcontextprotocol__sdk - Patched by Root

Root has patched CVE-2025-66414 in the @rootio/modelcontextprotocolsdk package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-56368 CVE-2026-56368 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-56368 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-25983 CVE-2026-25983 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-25983 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-21509 CVE-2024-21509 in @rootio/mysql2 - Patched by Root

Root has patched CVE-2024-21509 in the @rootio/mysql2 package for Root:npm. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-43676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and...

Linux Distros Unpatched Vulnerability : CVE-2026-50659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. CVE-2026-50659 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-62389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers when fragment count reaches maxFragments,...

Linux Distros Unpatched Vulnerability : CVE-2026-61863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting i...

Linux Distros Unpatched Vulnerability : CVE-2026-46571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Please review the referenced CVE identifiers for details. CVE-2026-46571 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-59889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.18.0 until 2.18.9, 2.21.5, 2.22.1,...