CVE-2026-84387

creationtimestamp| type| source ---|---|--- 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r...

BIT-TOMCAT-2026-55957 Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind

Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct password. This issue affects Apache Tomcat: from 11.0.0 through 11.0.4, from 10.1.0 through...

BIT-TOMCAT-2026-43513 Apache Tomcat: LockOutRealm treats user names as case-sensitive

Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.21, from 10.1.0 through 10.1.54, from 9.0.0 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also...

CVE-2026-89162

A flaw was found in PCRE2. The pcre2serializeencode function might disclose two bytes of information to an attacker. This vulnerability typically occurs in scenarios where the attacker already has unsafe access to the system, making exploitation difficult. The primary impact is a limited...

CVE-2026-16338

creationtimestamp| type| source ---|---|--- 2026-09-11 03:29:04+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv7mrtrurl2y 2026-09-14 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvj3pffm7d2t 2026-09-14 22:08:10+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-89087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cstruct package before 6.3.0 for OCaml mishandles indexes. CVE-2026-89087 Note that Nessus relies on the presence of the package as reported by the vendor...

ansible-creator-26.8.0-1.1 on GA media (moderate)

ansible-creator-26.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11729-1 Rating: moderate Cross-References: CVE-2026-31899 CVSS scores: CVE-2026-31899 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-31899 SUSE : 6.8...

Fedora 44 : bluez (2026-d4156b5fc5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d4156b5fc5 advisory. This update fixes a number of security issues. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

RockyLinux 10 : kernel (RLSA-2026:66355)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66355 advisory. kernel: net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 Tenable has extracted the preceding description block directly from the RockyLin...

Fedora 45 : python-pip (2026-d083cbcc1a)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d083cbcc1a advisory. Security fix for CVE-2026-13346 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : mingw-expat (2026-9e9244744d)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9e9244744d advisory. Update to expat-2.8.4. ---- Update to expat-2.8.3. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 45 : tar (2026-ee1eb89e7b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ee1eb89e7b advisory. Fix CVE-2026-5704, CVE-2026-18508, CVE-2026-18477, and a regression in the fix for CVE-2025-45582. Tenable has extracted the preceding description...

Fedora 43 : corosync (2026-c0427570d6)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c0427570d6 advisory. Fix CVE-2026-81666 and CVE-2026-81665 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 45 : libsoup3 (2026-ce24b84bb1)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ce24b84bb1 advisory. Fixes lots of CVEs: see the fixes section for details Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 45 : corosync (2026-ef5ca6ecf7)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ef5ca6ecf7 advisory. Fix CVE-2026-81666 and CVE-2026-81665 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Oracle Linux 8 : osbuild-composer (ELSA-2026-48790)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48790 advisory. - CVE-2026-32280 - CVE-2026-32282 - CVE-2026-32283 - CVE-2026-33186 Tenable has extracted the preceding description block directly from the Oracle Lin...

Fedora 44 : rest (2026-df38653cf2)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-df38653cf2 advisory. Fix for https://access.redhat.com/security/cve/cve-2026-16615 Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 45 : bluez (2026-9e011ac6ed)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9e011ac6ed advisory. This update fixes a number of security issues. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Oracle Linux 10 : ELSA-2026-66349-0: / freerdp (ELSA-2026-663490)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-663490 advisory. 2:3.10.3-12.11 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247346 Tenable has extracted the preceding description block...

Fedora 45 : syncthing (2026-bd6debcfb6)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bd6debcfb6 advisory. 2.1.3, fix for CVE-2026-40898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...