Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

CVE-2026-54477

CVE-2026-54477: Admin Panel Missing Security Headers clickjacking / XSS Advisory Field| Value ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 Medium Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Vector 4.0|...

Oracle Linux 8 : webkit2gtk3 (ELSA-2026-91636)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-91636 advisory. 2.54.2-1 - Update to 2.54.2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 7 : php (ELSA-2026-88693)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-88693 advisory. 5.4.16-48.0.1 - Backport fix for CVE-2026-109619 Orabug: 40200805 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora 44 : python3.12 (2026-e102eccf7f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e102eccf7f advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Oracle Linux 8 : libXi (ELSA-2026-91268)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91268 advisory. 1.7.10-2 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270049 Tenable has extracted the preceding description block directly from...

Oracle Linux 10 : libXi (ELSA-2026-91004)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91004 advisory. 1.8.1-7.1 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270054 Tenable has extracted the preceding description block directly fr...

SUSE SLES15 Security Update : container-suseconnect (SUSE-SU-2026:4902-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4902-1 advisory. This update for container-suseconnect rebuilds it against the current go security release. Tenable has extracted the preceding description...

SUSE SLES15: kubernetes1.37-client / kubernetes1.37-client-bash-completion / etc (SUSE-SU-2026:4901-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4901-1 advisory. This update for kubernetes rebuilds it against the current go security release. Tenable has extracted the preceding description block direct...

Oracle Linux 10 : flatpak (ELSA-2026-89849)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89849 advisory. - Use fd-relative operations for files/etc during runtime deploy CVE-2026-97024 Resolves: RHEL-272185 Tenable has extracted the preceding description...

Oracle Linux 10 : oci-seccomp-bpf-hook (ELSA-2026-89752)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-89752 advisory. - Rebuild for CVE-2026-111943 - rebuild with golang to fix CVE-2026-33811 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : lrzsz (ELSA-2026-89755)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-89755 advisory. - Backport tightened path handling from 0.13.1 CVE-2026-105840 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : flatpak (ELSA-2026-89850)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89850 advisory. - Use fd-relative operations for files/etc during runtime deploy CVE-2026-97024 Resolves: RHEL-272190 Tenable has extracted the preceding description...

Oracle Linux 10 : nodejs22 (ELSA-2026-500516)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500516 advisory. - Backport upstream fix for CVE-2026-111497 in the bundled Brotli decoder Tenable has extracted the preceding description block directly from the Oracle Linu...

Fedora 45 : brotli / perl-Alien-Brotli (2026-6a639d1308)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-6a639d1308 advisory. Fixes CVE-2026-111497 in new upstream release of brotli-1.2.1 Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 46 : live555 / vlc (2026-cad2480b8a)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-cad2480b8a advisory. Latest upstream release of live555. Multiple security-relevant bug fixes, see: https://download.live555.com/changelog.txt . Tenable has extracted the precedi...

Fedora 43 : pgbouncer (2026-343329cfec)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-343329cfec advisory. Update to 1.26.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : pgbouncer (2026-20b7549bd1)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-20b7549bd1 advisory. Update to 1.26.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Oracle Linux 10 : grafana-pcp (ELSA-2026-88316)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-88316 advisory. 5.3.0-8.2 - Rebuilt against updated golang - Resolves RHEL-287474, RHEL-279348, RHEL-278699 Tenable has extracted the preceding description block...

Oracle Linux 10 : podman (ELSA-2026-88336)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88336 advisory. - Rebuild for CVE-2026-111943 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...