CVE-2026-58209 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58209 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58252 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

[SECURITY] Fedora 44 Update: python-django5-5.2.16-1.fc44

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

PT-2026-61509

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.6 Description An issue was identified in Suricata that requires a security update. Recommendations Update to version 8.0.6...

SUSE SLES15 Security Update : joe (SUSE-SU-2026:3108-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3108-1 advisory. This update for joe fixes the following issue - CVE-2026-13412: arbitrary command execution via malicious tags file bsc1269379. Tenable has extracted t...

Linux Distros Unpatched Vulnerability : CVE-2026-47183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming.logexceptiondebug and the four QuietLogger...

PT-2026-61512

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.6 Description An issue was identified in Suricata that requires a security update. Recommendations Update to version 8.0.6...

Linux Distros Unpatched Vulnerability : CVE-2026-13082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling...

Fedora 43 : yq (2026-990cdd8329)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-990cdd8329 advisory. Update to 4.53.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-7701

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file...

Fedora 44 : yq (2026-710adfa806)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-710adfa806 advisory. Update to 4.53.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : ruby (2026-32d5a3d450)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-32d5a3d450 advisory. Ruby 4.0.6 is released. This new ruby contains several security fixes in net-snmp. Tenable has extracted the preceding description block directly fr...

Debian dla-4688 : ata-modules-6.1.0-48-armmp-di - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4688 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4688-1 [email protected]...

MAL-2026-10773 Malicious code in telemetry-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f21f282e7349c68d7ff17d0b5c452fb51c3bab106ffb6f56dc80f108c4b0800 The package's Control.plugin entry point calls PluginOptions, which fetches a binary payload from...

Malicious code in axios-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d01cf6414d6896b4f60ac6e2ecc238d33c049b6f6f5add44bd7700de32a906 The package presents itself as a drop-in replacement for axios identical name shape, README, and API but adds a top-level import of a separate npm...

MAL-2026-10772 Malicious code in axios-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d01cf6414d6896b4f60ac6e2ecc238d33c049b6f6f5add44bd7700de32a906 The package presents itself as a drop-in replacement for axios identical name shape, README, and API but adds a top-level import of a separate npm...

Malicious code in telemetry-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f21f282e7349c68d7ff17d0b5c452fb51c3bab106ffb6f56dc80f108c4b0800 The package's Control.plugin entry point calls PluginOptions, which fetches a binary payload from...

MAL-2026-10915 Malicious code in dwh-kafka-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f8759150fd0f4909a75613b1311c70c44b514bee2142ed4c67e0ef580afdbe The pypi package dwh-kafka-client 0.0.1 presents itself as a Kafka client but ships no Kafka functionality — the advertised DwhKafkaClient class in...

Malicious code in dwh-kafka-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f8759150fd0f4909a75613b1311c70c44b514bee2142ed4c67e0ef580afdbe The pypi package dwh-kafka-client 0.0.1 presents itself as a Kafka client but ships no Kafka functionality — the advertised DwhKafkaClient class in...

Malicious code in trongridme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 04117292d543eae5a1d22c78d8a4507cc196c8770c9fb0a09ae2f9a10a8009d4 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...