Fedora 45 : goose (2026-cb99e9b2ac)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cb99e9b2ac advisory. Update to 1.45.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 43 : pgadmin4 (2026-dddd2792e3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dddd2792e3 advisory. Update to pgadmin-9.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

obs-service-cargo-7.2.2-3.1 on GA media (moderate)

obs-service-cargo-7.2.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11861-1 Rating: moderate Cross-References: CVE-2026-93599 CVSS scores: CVE-2026-93599 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-93599 SUSE : 8.7...

Fedora 45 : forgejo (2026-b1ae715f03)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b1ae715f03 advisory. This is an upstream security fix release. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CVE-2026-97869

A flaw has been found in langchain4j up to 1.5.3-beta10/1.11.10-beta18/1.18.1-beta27. This vulnerability affects the function AgenticScopeSerializer.fromJson of the file AgenticScopeJsonSerializationIT.java of the component LangChain4j-agentic. This manipulation causes deserialization. Remote...

AZL-104081 CVE-2026-53493 affecting package moby-containerd-cc 1.7.7-17

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...

AZL-105123 CVE-2026-53493 affecting package containerd2 2.3.4-1

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...

EUVD-2026-86486

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...

Security update for gimp (important)

openSUSE security update: security update for gimp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21959-1 Rating: important References: bsc1276230 bsc1276231 bsc1276232 bsc1276233 bsc1276234 bsc1276235 bsc1276236 bsc1276237 bsc1280511 bsc1280512...

Security update for perl-Mojolicious (important)

openSUSE security update: security update for perl-mojolicious ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21956-1 Rating: important References: bsc1281637 bsc1281638 Cross-References: CVE-2026-68914 CVE-2026-77568 CVSS scores: CVE-2026-68914 SU...

PT-2026-105016

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...

CVE-2026-53493: Uncontrolled Resource Consumption

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...

PT-2026-105032

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...

Fedora 45 : rust-cryptoki (2026-b9e02a8684)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b9e02a8684 advisory. New upstream release. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 45 : squid (2026-9e8f1c83d0)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9e8f1c83d0 advisory. - new version 7.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124429 advisory. Unity Link Advisory UTSA-2026-124429 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

CVE-2026-96548 sfturing hosp_order jdbc.properties hard-coded credentials

A flaw has been found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects an unknown part of the file ssmpro/src/main/resources/jdbc.properties. This manipulation causes hard-coded credentials. It is possible to initiate the attack remotely. The attack's complexity ...

CVE-2026-96548

A flaw in sfturing hosp_order (up to commit 627f426331da8086ce8fff2017d65b1ddef384f8) involves an issue within the ssm_pro/src/main/resources/jdbc.properties file. This manipulation results in hard-coded credentials that can be accessed via a remote attack vector. While the attack complexity is r...

CVE-2026-59284

A flaw was found in Spring Cloud Commons. A remote attacker with high privileges could exploit a missing allow list for property keys in the writable /actuator/env endpoint. This vulnerability allows the attacker to modify environment properties, resulting in a high integrity impact and a low...

SUSE CVE-2026-81736

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through...