CVE-2026-1402 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner-fips, gitlab-cng, gitlab-cng-fips, gitlab-runner, gitlab-rails-ce-fips...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53recoverycontrolconfig-fips, helmfile, google-guest-agent, juicefs, crossplane-provider-aws-organizations-fips, sops-fips, crossplane-provider-aws-chime-fips, crossplane-provider-aws-cloudformation, crossplane-provider-azure-servicefabri...

CVE-2026-8723 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, saf, kibana, pelias-api, kubescape-grype-offline-db, tileserver-gl-fips, tileserver-gl, redisinsight, renovate, json-server, kubeflow-katib, py3-jupyterlab, py3-captum, arangodb, opensearch-dashboards, sqlpad, unleash, kubeflow-centraldashboard,...

GHSA-Q8MJ-M7CP-5Q26 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, saf, kibana, pelias-api, kubescape-grype-offline-db, tileserver-gl-fips, tileserver-gl, redisinsight, renovate, json-server, kubeflow-katib, py3-jupyterlab, py3-captum, arangodb, opensearch-dashboards, sqlpad, unleash, kubeflow-centraldashboard,...

CVE-2026-42151 vulnerabilities

Vulnerabilities for packages: mc-fips, prometheus-fips, aws-otel-collector, elastic-agent-fips, grafana-fips, trillian-fips, datadog-agent, jaeger, minio-fips, node-problem-detector, datadog-agent-fips, telegraf, nrdot-collector-k8s, trillian, elastic-agent, minio,...

GHSA-WG65-39GG-5WFJ vulnerabilities

Vulnerabilities for packages: mc-fips, prometheus-fips, aws-otel-collector, elastic-agent-fips, grafana-fips, trillian-fips, datadog-agent, jaeger, minio-fips, node-problem-detector, datadog-agent-fips, telegraf, nrdot-collector-k8s, trillian, elastic-agent, minio,...

SUSE SLES12 Security Update : openssh (SUSE-SU-2026:2025-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2025-1 advisory. This update for openssh fixes the following issues Tenable has extracted the preceding description block directly from the SUSE security...

GHSA-QJX8-664M-686J vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, saf, kibana, langfuse, opensearch-dashboards, opensearch-dashboards-fips, redisinsight, wazuh-dashboard-fips, drupal, langfuse-fips...

CVE-2026-46625 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, saf, kibana, langfuse, opensearch-dashboards, opensearch-dashboards-fips, redisinsight, wazuh-dashboard-fips, drupal, langfuse-fips...

SUSE CVE-2026-39829

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

GHSA-8RM2-7QQF-34QM vulnerabilities

Vulnerabilities for packages: mc-fips, prometheus-fips, aws-otel-collector, elastic-agent-fips, splunk-otel-collector-fips, grafana-fips, trillian-fips, datadog-agent, jaeger, minio-fips, node-problem-detector, datadog-agent-fips, telegraf, nrdot-collector-k8s, trillian, elastic-agent, minio,...

CVE-2026-42154 vulnerabilities

Vulnerabilities for packages: mc-fips, prometheus-fips, aws-otel-collector, elastic-agent-fips, splunk-otel-collector-fips, grafana-fips, trillian-fips, datadog-agent, jaeger, minio-fips, node-problem-detector, datadog-agent-fips, telegraf, nrdot-collector-k8s, trillian, elastic-agent, minio,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: envoy-gateway, gatekeeper, headlamp, kubevela, datadog-agent, cluster-api-helm-controller, tw, containerd, docker-cli-buildx, xeol, packer-fips, trivy-fips, helm-operator-fips, manifest-tool, consul-k8s, kubescape-operator-fips, consul-k8s-fips, kube-mgmt,...

USN-8281-2 linux-azure-4.15, linux-azure-fips vulnerabilities

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 Several security issues were discovered in th...

USN-8296-1: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Drivers core; - Null block device drive...

CVE-2026-42600 vulnerabilities

Vulnerabilities for packages: minio, minio-fips...

GHSA-XH8F-G2QW-GCM7 vulnerabilities

Vulnerabilities for packages: minio, minio-fips...

CVE-2026-39829

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

CVE-2026-39829 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

GO-2026-5018 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...