Fedora 44 : gh (2026-f07b3548d4)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f07b3548d4 advisory. Update to 2.94.0 ---- Update to 2.93.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

MINI-X365-594V-6VGH

Bulletin has no description...

CVE-2026-39830 affecting package gh for versions less than 2.62.0-16

CVE-2026-39830 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-42506 affecting package gh for versions less than 2.62.0-16

CVE-2026-42506 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-46597 affecting package gh for versions less than 2.62.0-16

CVE-2026-46597 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-39821 affecting package gh for versions less than 2.62.0-16

CVE-2026-39821 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-39829 affecting package gh for versions less than 2.62.0-16

CVE-2026-39829 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-39834 affecting package gh for versions less than 2.62.0-16

CVE-2026-39834 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-45803

GitHub CLI (gh) vulnerability: from v1.6.0 to before v2.92.0, terminal escape sequences could be injected via workflow logs when using gh run view --log or --log-failed, due to unsanitized raw log output. An attacker controlling Actions logs (e.g., PR-triggered workflows) could cause terminal man...

CVE-2026-32288 affecting package gh for versions less than 2.62.0-15

CVE-2026-32288 affecting package gh for versions less than 2.62.0-15. A patched version of the package is available...

CVE-2026-5160 affecting package gh for versions less than 2.62.0-15

CVE-2026-5160 affecting package gh for versions less than 2.62.0-15. A patched version of the package is available...

Fedora 44 : gh (2026-5df889949e)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5df889949e advisory. Update to 2.92.0 and make telemetry sending opt in. Tenable has extracted the preceding description block directly from the Fedora security advisory...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: trivy-operator, goreleaser, vexctl, zarf, docker-cli-buildx, flux-source-controller, witness, teleport, policy-controller, spire-server, ratify, falcoctl, crossplane, zot, tekton-chains, buildkitd, gh, neuvector-sigstore-interface, cosign, aactl, skaffold,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: trivy-operator, goreleaser, vexctl, zarf, docker-cli-buildx, flux-source-controller, witness, teleport, policy-controller, spire-server, ratify, falcoctl, crossplane, zot, tekton-chains, buildkitd, gh, neuvector-sigstore-interface, cosign, aactl, skaffold,...

Digital Photo Frame GH-WDF10A vulnerable to improper access restriction

Overview Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains the following vulnerability. Active debug code CWE-489 - CVE-2026-33201 Koki Takase reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

CVE-2026-33201

The Digital Photo Frame GH-WDF10A from GREEN HOUSE CO., LTD. contains an active debug code vulnerability. Exploitation can read/write files or configurations on the device, or arbitrarily execute files with root privileges. CVSS data from the connected CVE entry indicates high impact on confident...

CVE-2026-33201

Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains an active debug code vulnerability. If this vulnerability is exploited, files or configurations on the affected device may be read or written, or arbitrary files may be executed with root privileges...

CVE-2025-47911 affecting package gh for versions less than 2.62.0-13

CVE-2025-47911 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

CVE-2025-58190 affecting package gh for versions less than 2.62.0-13

CVE-2025-58190 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

CVE-2025-11065 affecting package gh for versions less than 2.62.0-13

CVE-2025-11065 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...