Splunk Enterprise authorization issue vulnerability

Versions of Splunk Enterprise prior to 10.4.4 contain an authorization issue vulnerability. This vulnerability arises because the Data Management REST API only validates the required permissions; it does not verify whether the preview job is owned by the requester. As a result, users with...

WSO2 API Manager input validation error vulnerability

Versions prior to WSO2 API Manager 3.1.0.313; versions prior to 3.2.0.406 for 3.2.0; versions prior to 3.2.1.30 for 3.2.1; versions prior to 4.0.0.324 for 4.0.0; versions prior to 4.1.0.185 for 4.1.0; versions prior to 4.2.0.124 for 4.2.0; versions prior to 4.3.0.36 for 4.3.0 and versions prior t...

PT-2026-120512

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the Settings component of Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to compromise the integrity of protected data...

PT-2026-120845

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview data management pipeline capability or edit data management pipeline job capability could read or delete Data Management SPL2 preview jobs and results outside their ownership scope. The vulnerability is possible...

Rocky Linux 9.6 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792600325)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792600325 advisory. - A flaw was found in libsoup. The soupuridecodedatauri function incorrectly treated base64 data-URI payloads as NUL-terminated...

Linux Distros Unpatched Vulnerability : CVE-2026-87290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions tha...

Linux Distros Unpatched Vulnerability : CVE-2026-91381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle...

RHEL 10 : cockpit-machines (RHSA-2026:86971)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:86971 advisory. Cockpit component for managing libvirt virtual machines. Security Fixes: cockpit-machines: cockpit-machines: Sensitive data exposure via...

Linux Distros Unpatched Vulnerability : CVE-2026-103119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request...

Linux Distros Unpatched Vulnerability : CVE-2026-91398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versio...

Linux Distros Unpatched Vulnerability : CVE-2026-91333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to exploit...

RHEL 9 : cockpit-machines (RHSA-2026:86970)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:86970 advisory. Cockpit component for managing libvirt virtual machines. Security Fixes: cockpit-machines: cockpit-machines: Sensitive data exposure via...

Splunk Enterprise authorization issue vulnerability

Versions prior to Splunk Enterprise 10.4.4, 10.2.8, 10.0.11, and 9.4.16, as well as versions prior to Splunk Secure Gateway 3.10.12, 3.9.26, and 3.8.73 are affected by an authorization issue vulnerability. This vulnerability arises because the Splunk Secure Gateway App Key Value Store fails to...

AlmaLinux 9.2 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.2:CLSA-2026:1792571502)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792571502 advisory. - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcoremodule module. When asynchronous file I/O AIO is enabled in certain...

RHEL 8 : postgresql:12 (RHSA-2026:79027)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79027 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via...

RockyLinux 9 : cockpit-machines (RLSA-2026:86970)

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:86970 advisory. cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments CVE-2026-92768 cockpit-machines: cockpit-machines: Sensitive Data...

Linux Distros Unpatched Vulnerability : CVE-2026-91375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1,...

Linux Distros Unpatched Vulnerability : CVE-2026-91461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions tha...

Linux Distros Unpatched Vulnerability : CVE-2026-83374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions...