CVE-2026-62899: Inconsistent Interpretation of HTTP Requests

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-70593

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists where unchecked input for a loop condition allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information abo...

PT-2026-70549

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buff...

PT-2026-70556

Name of the Vulnerable Software and Affected Versions Reliable Multicast Transport Driver RMCAST affected versions not specified Description A heap-based buffer overflow occurs in the Reliable Multicast Transport Driver RMCAST, which is a driver used for transmitting data to multiple recipients...

PT-2026-70780

Name of the Vulnerable Software and Affected Versions Microsoft Azure Attestation service affected versions not specified Device Health Attestation Service affected versions not specified Description An integer overflow or wraparound occurs in the Microsoft Azure Attestation service and Device...

PT-2026-70534

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description An out-of-bounds read in the Windows SMB Client allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. An...

PT-2026-70371

Improper neutralization of special elements used in a command 'command injection' in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-73146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion CVE-2026-73146 Note that Nessus...

Photon OS 5.0: Protobuf PHSA-2026-5.0-92-0949

An update of the protobuf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0949. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-62912: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network...

CVE-2026-65769: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network...

PT-2026-70700

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

The vulnerability of the Windows Server Update Service (WSUS) for Windows operating systems allows a hacker to make changes to the system via the network.

The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-69186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker- controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming...

Photon OS 5.0: Keepalived PHSA-2026-5.0-90-0921

An update of the keepalived package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0921. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2024-5.0-91-0223

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0223. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libtasn1 PHSA-2025-5.0-91-0473

An update of the libtasn1 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0473. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Curl PHSA-2024-5.0-91-0345

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0345. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Samba PHSA-2025-5.0-92-0648

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0648. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Rubygem PHSA-2024-5.0-91-0405

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0405. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...