Astra Linux – Vulnerability in libxml2

A vulnerability was discovered in libxml2 in versions prior to 2.9.11. This vulnerability allows errors to go unnoticed during the parsing of XML mixed content, resulting in a NULL dereference. If an untrusted XML document is parsed in recovery mode and after post-validation, this flaw could be...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. Spaces used in a string surrounding a domain name can, when ignored, cause invalid DN strings to write a zero-byte into out-of-bounds memory, resulting in a crash. The greatest threat of this vulnerability is to system availability...

CVE-2026-25832

A flaw was found in Mbed TLS. The Transport Layer Security TLS 1.3 client accepts a HelloRetryRequest that selects a cryptographic group not advertised by the client. This vulnerability could allow a remote attacker to cause a low integrity impact. Mitigation Mitigation for this issue is either n...

CVE-2026-25832

In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group...

Linux Distros Unpatched Vulnerability : CVE-2026-90996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero- length body to the Network Security Services NSS...

Oracle Linux 9 : ELSA-2026-67146-0: / python-tornado (ELSA-2026-671460)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-671460 advisory. 6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247281 Tenable has extracted the preceding description block directly from the Oracle Linux security...

PT-2026-94126

Уязвимость реализации технологий конфиденциальных вычислений Intel TDX, Intel Scalable SGX и AMD SEV-SNP микропрограммного обеспечения процессоров Intel и AMD связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...

SAP NetWeaver Application Server ABAP Data Compromise

The vulnerability of SAP NetWeaver Application Server ABAP software integration platforms is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

libBasicUsageEnvironment2-2026.08.25-1.1 on GA media (moderate)

libBasicUsageEnvironment2-2026.08.25-1.1 on GA media Announcement ID: openSUSE-SU-2026:11753-1 Rating: moderate Cross-References: CVE-2026-38998 CVSS scores: CVE-2026-38998 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-38998 SUSE : 8.2...

tomcat11-11.0.25-1.1 on GA media (moderate)

tomcat11-11.0.25-1.1 on GA media Announcement ID: openSUSE-SU-2026:11761-1 Rating: moderate Cross-References: CVE-2026-65182 CVE-2026-65183 CVE-2026-65637 CVE-2026-65905 CVE-2026-65927 CVE-2026-66299 CVE-2026-66422 CVE-2026-68525 CVE-2026-68569 CVE-2026-68763 CVE-2026-73180 CVSS scores:...

Fedora 45 : elixir (2026-688dc4a890)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-688dc4a890 advisory. Elixir ver. 1.20.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-89773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have a valid dmstreamctx that should skip configuring HDCP routine. The...

Fedora 43 : bluez (2026-6ed52ea50e)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6ed52ea50e advisory. This update fixes a number of security issues. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : mingw-expat (2026-4a2ee61320)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4a2ee61320 advisory. Update to expat-2.8.4. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : pdns-recursor (2026-6c1e0af917)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6c1e0af917 advisory. Update to 5.4.6 Resolves: rhbz2527899 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Linux Distros Unpatched Vulnerability : CVE-2026-89601

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext2: Fix lost inode updates for ISSYNC inodes ext2setsize and ext2xattrset2 had a construct like: if ISSYNCinode syncinodemetadatainode, 1 %NASLMINLEVEL 80900...

GHSA-H8M9-JGF8-VWVP

creationtimestamp| type| source ---|---|--- 2026-09-11 22:32:02+00:00| seen| https://gist.github.com/alon710/43186f210d41aaa752fb23f70074de25 2026-09-12 00:01:14+00:00| seen| https://gist.github.com/alon710/43186f210d41aaa752fb23f70074de25 2026-10-14 21:00:15+00:00| seen|...

CVE-2026-53952

creationtimestamp| type| source ---|---|--- 2026-09-11 20:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvbgfge4mw24 2026-09-11 22:02:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbkyb4rc62w 2026-09-11 22:07:55+00:00| seen|...

CVE-2026-87910

creationtimestamp| type| source ---|---|--- 2026-09-11 18:10:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gncnp22neuxiu 2026-09-14 14:00:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhrffde2c...

CVE-2026-3869

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC...