Security update for kronosnet (moderate)

openSUSE Security Update: Security update for kronosnet Announcement ID: openSUSE-SU-2026:0268-1 Rating: moderate References: 1257258 1271923 1271924 1271925 Cross-References: CVE-2026-15811 CVE-2026-15812 CVE-2026-15813 CVSS scores: CVE-2026-15811 SUSE: 5.8...

Security update for python-nltk (important)

openSUSE Security Update: Security update for python-nltk Announcement ID: openSUSE-SU-2026:0269-1 Rating: important References: 1272667 Cross-References: CVE-2025-71408 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This...

Security update for yq (important)

openSUSE security update: security update for yq ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21500-1 Rating: important References: bsc1267199 bsc1271994 Cross-References: CVE-2026-39821 CVE-2026-56852 CVSS scores: CVE-2026-39821 SUSE : 7.4...

Security update for valkey (important)

openSUSE security update: security update for valkey ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21485-1 Rating: important References: bsc1272442 bsc1272443 Cross-References: CVE-2026-56684 CVE-2026-63639 CVSS scores: CVE-2026-56684 SUSE : 7.5...

Security update for ignition (important)

openSUSE security update: security update for ignition ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21482-1 Rating: important References: bsc1266606 bsc1272059 Cross-References: CVE-2026-39821 CVE-2026-56852 CVSS scores: CVE-2026-39821 SUSE : 7.4...

Security update for google-guest-agent (important)

openSUSE security update: security update for google-guest-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21476-1 Rating: important References: bsc1266603 bsc1272118 Cross-References: CVE-2026-39821 CVE-2026-56852 CVSS scores: CVE-2026-39821...

CVE-2026-38708

CVE-2026-38708 affects multiple TR/WR device variants (TR1200 v2.4.15; TR3000 v2.4.21; WR300 v2.4.25; WR1200 v2.4.23; WR1300 v2.4.22; WR1500 v2.3.10; WR3000 v2.4.19; WR3600 v2.3.16; WR6500 v2.3.15). The vulnerability is a command injection in the system.setclock interface that allows an attacker ...

CVE-2026-38708

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary...

EUVD-2026-51648

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the ipsecconn interface. This vulnerability allows attackers to execute arbitrary...

CVE-2026-38713

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the ipsecconn interface. This vulnerability allows attackers to execute arbitrary...

CVE-2026-38713

The CVE-2026-38713 vulnerability affects TR1200/TR3000/WR300/WR1200/WR1300/WR1500/WR3000/WR3600/WR6500 with software versions listed in the records, where the ipsec_conn interface contains a command injection flaw. A crafted input can allow an attacker to execute arbitrary commands as root, with ...

CVE-2026-38710

CVE-2026-38710 affects TR1200 v2.4.15 and TR3000 v2.4.21. The issue is a command injection in the system.setclock interface that allows an attacker to execute arbitrary commands as root via crafted input. Impact is described as root-level command execution; no exploitation details or mitigations ...

CVE-2026-38708

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary...

PT-2026-66851

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.upgrade check interface. This vulnerability allows attackers to execute...

EUVD-2026-51646

TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input...

EUVD-2026-51649

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the system.upgradecheck interface. This vulnerability allows attackers to execute...

PT-2026-66772

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 7.2 through 9.16 Description An issue exists in the MASTER PASSWORD HOOK setting where the application substitutes the username directly into a command string and executes it using subprocess.Popen..., shell=True. Since...

Fedora 44 : exim (2026-94678c4b6e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-94678c4b6e advisory. This is new version fixing command execution with alternate privilege. Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 43 : valkey (2026-9de44775c7)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9de44775c7 advisory. Valkey 8.1.9 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible...

The vulnerability of the dependencies_local_check() method in the application for setting the REBOOT OS redoswelcome allows a perpetrator to execute arbitrary code.

The vulnerability of the dependencieslocalcheck method in the application for setting the REBOOT OS parameter redoswelcome is related to the improper elimination of special elements used in the OS command. Exploiting this vulnerability allows a malicious actor to inject special symbols into the...