ROS-20260924-73-0050

The vulnerability of the net FailoverSelectQueue function in the drivers/net/net Failover.c module of the Linux kernel network device driver is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-19492: Use of Uninitialized Variable

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...

CVE-2026-17511: Improper Removal of Sensitive Information Before Storage or Transfer

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service...

PT-2026-97810

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions 1120.00 through 1120.01 IBM PowerVM Hypervisor versions 1110.00 through 1110.31 IBM PowerVM Hypervisor versions 1060.00 through 1060.81 IBM PowerVM Hypervisor versions 950.00 through 950.H3 Description A flaw...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124430 advisory. Unity Link Advisory UTSA-2026-124430 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Fedora 45 : bcm283x-firmware / uboot-tools (2026-313e66c007)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-313e66c007 advisory. Update to the latest U-Boot 2026.10 RC4 fixes Display fixes from sleep for some generations of Raspberry Pi Tenable has extracted the preceding description...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124429 advisory. Unity Link Advisory UTSA-2026-124429 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

ROS-20260924-73-0076

The vulnerability of the hcievent component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

UBUNTU-CVE-2026-66069

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

Important: Red Hat Security Advisory: VolSync v0.15 security fixes and container updates

VolSync v0.15 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

EUVD-2026-85632

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

CVE-2026-66069 RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

CVE-2026-66069

RabbitMQ , a messaging and streaming broker, is vulnerable to a flaw where the is_authorized/2 function incorrectly uses is_authorized_monitor for all methods prior to versions 4.1.13, 4.2.7, and 4.3.0 . This allows a user with a monitoring tag to reset per-node authentication-attempt counters vi...

CVE-2026-96807

A flaw was found in Flatpak. A malicious sandboxed application can manipulate a symlink, causing the regenerateldcache function to write files to an unintended location. While the attacker cannot control the content or filenames, this vulnerability could lead to a low impact on system integrity o...

CVE-2026-59284

A flaw was found in Spring Cloud Commons. A remote attacker with high privileges could exploit a missing allow list for property keys in the writable /actuator/env endpoint. This vulnerability allows the attacker to modify environment properties, resulting in a high integrity impact and a low...

Security Bulletin: This Power System update is being released to address CVE-2026-19492

Summary Power Systems Firmware is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing sensitive data belonging to the hypervisor or other guest partitions hosted on the...

Security Bulletin: This Power System update is being released to address CVE-2026-17511

Summary Power Systems Firmware is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a...

Security Bulletin: This Power System update is being released to address CVE-2026-17503

Summary Power Systems Firmware is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot. This condition persists until operator intervention —...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.48 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.48 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

ROS-20260923-73-0006

The vulnerability of the sctpgetsockoptpeerauthchunks function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a attacker to compromise the...