CVE-2026-35160

Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CGA-6899-V5V7-96P9

Bulletin has no description...

CVE-2026-74768

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery SSRF vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73600

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73600

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...

OPCFoundation OPC UA LocalDiscoveryServer (LDS)

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to take control of a high-privilege terminal during installation and run arbitrary commands. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

Fedora 43 : freerdp (2026-e0f5d28f57)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e0f5d28f57 advisory. Update to 3.31.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

PT-2026-85030

Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

PT-2026-84922

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery SSRF vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...

Fedora 44 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-e6ca27403f)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-e6ca27403f advisory. Update to 1.28.6. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

CVE-2026-75034: Authentication Bypass by Capture-replay

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

Oracle Linux 9 : ELSA-2026-62170-0: / gegl04 (ELSA-2026-621700)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-621700 advisory. 0.4.62-1.2 - Fix CVE-2026-18300: bounds check in rgbereadscanlines Tenable has extracted the preceding description block directly from the Oracle Linux securi...

VMware Fusion 25H2, 26H1.x < 26H1u1 Multiple Vulnerabilities (VMSA-2026-0007)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 25H2, 26H1.x prior to 26H1u1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Fedora 43 : gvfs (2026-571b7e1505)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-571b7e1505 advisory. Fix CVE-2026-84267, CVE-2026-84268, CVE-2026-84269, and CVE-2026-84270 Tenable has extracted the preceding description block directly from the Fedor...

Linux Distros Unpatched Vulnerability : CVE-2026-65109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix...

Linux Distros Unpatched Vulnerability : CVE-2026-80229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations...

CVE-2023-3360

The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog...

Security Bulletin: IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution

Summary IBM ContextForge MCP Gateway allows authenticated users with developer privileges to supply a jq program in the tool jsonpathfilter field that executes unrestricted built-in such as $ENV inside the server process, exposing environment variables including cryptographic keys and database...

DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Confluence Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.9, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

CVE-2026-84357

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...