Fedora 44 : corosync (2026-e97124c200)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e97124c200 advisory. Fix CVE-2026-81666 and CVE-2026-81665 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2026-76962: Missing Authorization

SAP S/4HANA Manage Bank Chains app does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on...

CVE-2026-76977: Improper Validation of Unsafe Equivalence in Input

SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated attacker could host a malicious page to bypass framing restrictions. If an authenticated victim visits the attacker's page and interacts with it, the attacker could trick the vict...

Security update for libidn (moderate)

openSUSE security update: security update for libidn ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21758-1 Rating: moderate References: bsc1268965 Cross-References: CVE-2026-57053 CVSS scores: CVE-2026-57053 SUSE : 4...

insighttoolkit-devel-5.4.7-1.1 on GA media (moderate)

insighttoolkit-devel-5.4.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11701-1 Rating: moderate Cross-References: CVE-2026-3650 CVSS scores: CVE-2026-3650 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-3650 SUSE : 8.7...

Security update for ucode-intel (important)

openSUSE security update: security update for ucode-intel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21736-1 Rating: important References: bsc1265189 bsc1274785 Cross-References: CVE-2025-31936 CVE-2025-31938 CVE-2025-35973 CVE-2025-35979...

hauler-2.1.0-3.1 on GA media (moderate)

hauler-2.1.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:11700-1 Rating: moderate Cross-References: CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-84303 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-84303 SUSE : 9.1...

GraphicsMagick-1.3.48-2.1 on GA media (moderate)

GraphicsMagick-1.3.48-2.1 on GA media Announcement ID: openSUSE-SU-2026:11692-1 Rating: moderate Cross-References: CVE-2025-55154 CVSS scores: CVE-2025-55154 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-55154 SUSE : 8.5...

cadvisor-0.60.5-3.1 on GA media (moderate)

cadvisor-0.60.5-3.1 on GA media Announcement ID: openSUSE-SU-2026:11695-1 Rating: moderate Cross-References: CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-84303 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-84303 SUSE : 9.1...

CVE-2026-16028

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a stream reaches the CLOSED state, streamstate returns the concurrency slot and clears most of the stream's keys, but the entry itself sta...

CVE-2026-84964

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlooa74k2r...

CVE-2026-84965

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlooa74k2r...

CVE-2025-52657

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability...

CVE-2026-81738

OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries...

CVE-2026-78043

The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

CVE-2026-84226

OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...

Linux Distros Unpatched Vulnerability : CVE-2026-78133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling. CVE-2026-78133 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-78131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser. CVE-2026-78131 No...

Linux Distros Unpatched Vulnerability : CVE-2026-78134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

Linux Distros Unpatched Vulnerability : CVE-2026-78127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser. CVE-2026-78127 Note that...