CVE-2026-26897

CVE-2026-26897 is a deep link validation bypass in the EcoOnline EHS Android application (com.airsweb.v10), affecting version 0.2.499 . The exported MainActivity handles the custom ehs-app:// scheme via a scheme-only intent-filter (no host or path constraint). The deep-link branch performs a naïv...

PT-2026-82688

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

PT-2026-82806

A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function s fetch page/s fetch pattern of the file src/scrapling fetch mcp/ fetcher.py. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely...

CVE-2026-26456

A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...

PT-2026-82521

An issue in the ModifyAMFEventSubscriptionProcedure function processor/event exposure.go of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted PATCH request...

TencentOS Server 3: frr (TSSA-2026:0894)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0894 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

MiracleLinux 8 : kernel-4.18.0-553.153.1.el8_10 (AXSA:2026-1646:66)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1646:66 advisory. kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 Tenable has extracted the preceding description block...

SUSE SLES12 Security Update : librest (SUSE-SU-2026:3796-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3796-1 advisory. This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically...

TencentOS Server 3: dracut (TSSA-2026:0902)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0902 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 3: bind9.16 (TSSA-2026:0925)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0925 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2026:3792-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3792-1 advisory. This update for rmt-server fixes the following issue: Update to version 3.1 bsc1274715. - CVE-2026-42256: net-imap: hostile server can perfo...

SUSE SLES12: libipa_hbac-devel / libipa_hbac0 / libsss_certmap0 / etc (SUSE-SU-2026:3797-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3797-1 advisory. This update for sssd fixes the following issue: - CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds...

TencentOS Server 3: nodejs:22 (TSSA-2026:0922)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0922 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Dell Client BIOS Arbitrary Write (DSA-2026-280)

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write. Note that Nessus has not tested for this issue but has instead relied only...

Oracle Linux 8 : ELSA-2026-60329-0: / mingw-openssl (ELSA-2026-603290)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-603290 advisory. - Fix CVE-2024-5535 SSLselectnextproto buffer overread Resolves: RHEL-45673 Tenable has extracted the preceding description block directly from the Oracle Lin...

TencentOS Server 3: attr (TSSA-2026:0908)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0908 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

PT-2026-82617

Name of the Vulnerable Software and Affected Versions nltk PorterStemmer versions prior to 3.10.3 Description The PorterStemmer contains an inefficient-algorithmic-complexity issue that can lead to a denial of service. The is consonant helper function walks backward over trailing 'y' characters o...

CVE-2026-36102

An issue in the inviteController.js component in Bluewave Labs Checkmate =3.3.0 allows remote authenticated administrators to escalate privileges to superadmin via the role parameter to the /api/v1/invite endpoint...

PT-2026-82593

openssl encrypt pip: openssl-encrypt versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total samples field of FLAC files before using it to size an allocation np.random.randintsize=total samples, channels. A 50-byte crafted FLAC file declaring 100 million samples causes a...

TencentOS Server 3: python-idna (TSSA-2026:0900)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0900 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...