CVE-2026-72834: Exposure of Sensitive Information to an Unauthorized Actor

filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint. The checksum ?checksum= branch of resourceGetHandler reads the entire file to compute a digest and returns it without performing a Perm.Download check unlike the sibling raw, preview, and subtitle paths. As a...

The vulnerability of the Oracle Net Services component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to confidential information or cause service failures.

The vulnerability of the Oracle Net Services component of the Oracle Database Server management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or cause service failures...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-54542)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54542 advisory. 10.0.111-1.0.1 - Add support for Oracle Linux 10.0.111-1 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235478 Tenable has extract...

Oracle Linux 10 : iscsi-initiator-utils (ELSA-2026-53845)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-53845 advisory. - fix IQN name validation to prevent path traversal CVE-2026-44943 - fix iscsiuio control-socket credential verification CVE-2026-44944 - fix IQN nam...

Oracle Linux 9 : kernel (ELSA-2026-54443)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54443 advisory. - net/sched: actapi: use RCU with deferred freeing for action lifecycle CKI Backport Bot RHEL-218181 CVE-2026-53264 Tenable has extracted the precedin...

Oracle Linux 10 : dracut (ELSA-2026-54576)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-54576 advisory. 107-9.0.1 - Suppress stderr for btrfs subvolume check Orabug: 39059254 - fips: add logic for /boot subvolume on BTRFS Orabug: 36028061 - Skip unneeded FIPS...

Oracle Linux 10 : kernel (ELSA-2026-36956)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36956 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

.NET 9.0 security, bug fix, and enhancement update

9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235473...

Oracle Linux 9 : openssh (ELSA-2026-47756)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47756 advisory. - CVE-2026-59996: Fix remote glob result of '..' causing files to be placed in unintended parent directories when scp performs remote-to-remote copy v...

Oracle Linux 10 : .NET / 9.0 (ELSA-2026-54590)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54590 advisory. 9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 Tenable has extracted...

Oracle Linux 8 : .NET / 8.0 (ELSA-2026-54538)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54538 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235468 Tenable has extracted t...

Oracle Linux 9 : grafana (ELSA-2026-54184)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-54184 advisory. - fix CVE-2026-42127: cap request body size and validate public dashboard access Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 : gnome-remote-desktop (ELSA-2026-54512)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-54512 advisory. 49.3-4 - Backport connection throttling Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

CVE-2026-74241: Improper Neutralization of Special Elements used in an LDAP Query

A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling...

The vulnerability of the Internal Operations component of the Oracle Enterprise Asset Management application, a part of the Oracle E-Business Suite automation system for enterprise activities, allows a perpetrator to gain full control over the application.

The vulnerability of the Internal Operations component of the Oracle Enterprise Asset Management application, a part of the Oracle E-Business Suite automation system for enterprise activities, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker...

The vulnerability of the RIB Kernal component in the XML-based asynchronous messaging integration platform of Oracle Retail Integration Bus allows a attacker to gain full control over the application.

The vulnerability of the RIB Kernal component in the XML-based asynchronous messaging integration platform of Oracle Retail Integration Bus is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain full control over the application using the HT...

The vulnerability of the RIB Kernal component in the XML-based asynchronous messaging integration platform of Oracle Retail Integration Bus allows a attacker to gain full control over the application.

The vulnerability of the RIB Kernal component in the XML-based asynchronous messaging integration platform of Oracle Retail Integration Bus is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP...

The vulnerability of the Load Testing module for Web apps within the Oracle Application Testing Suite allows a hacker to gain full control over the application.

The vulnerability of the Load Testing module for web apps within the Oracle Application Testing Suite relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the TCP protocol...

The vulnerability of the OpenScript package in the Oracle Application Testing Suite allows a hacker to gain full control over the application.

The vulnerability of the OpenScript package in the Oracle Application Testing Suite software automation suite is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the TCP protocol...

The vulnerability of the UI Framework component of the Oracle Enterprise Manager Base Platform allows a malicious actor to gain unauthorized access to read, modify, or delete data, thereby causing a service failure.

The vulnerability of the UI Framework component of the Oracle Enterprise Manager Base Platform is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, modify, or delete data, as well as cause service failures usin...