North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT

Cybersecurity researchers have disclosed a new iteration of the ongoing Contagious Interview campaign, where the North Korean threat actors have published a set of 26 malicious packages to the npm registry. The packages masquerade as developer tools, but contain functionality to extract the actua...

Moderate Photon OS Security Update - PHSA-2026-5.0-91-0779

Updates of 'linux', 'linux-esx', 'python3-filelock' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2026-2806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. CVE-2026-2806 Note that Nessus relies on...

RHEL 9 : golang (RHSA-2026:3473)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3473 advisory. The golang packages provide the Go programming language compiler. Security Fixes: golang: archive/zip: Excessive CPU consumption when buildi...

Oracle Linux 10 : buildah (ELSA-2026-3297)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3297 advisory. - Rebuild for new golang to address CVE-2025-61726 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Ubuntu: Security Advisory (USN-8059-6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2026-2797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. CVE-2026-2797 Note that Nessus relies on the...

Important Photon OS Security Update - PHSA-2026-5.0-0779

Updates of 'python3-filelock', 'linux-esx', 'linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-4.0-0972

Updates of 'linux' packages of Photon OS have been released...

SUSE: Security Advisory (SUSE-SU-2026:0693-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2026-5.0-92-0779

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2026-3201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service CVE-2026-3201 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2026-2794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148. CVE-2026-2794 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2026-3203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service CVE-2026-3203 Note that Nessus relies on the...

MAL-2026-1085 Malicious code in ctf-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e47981485066b674150cc4d9d3709e41707e69111f188e54e772becc7349ab89 The package states to contain a modified curl library to allow low-level request modifications. However, there is also undisclosed malicious behavior: 1. The...

@internxt/cli (>=1.0.5, <=1.2.2), @latitude-data/cli (>=0.0.29, <=1.11.0-canary.8) +10 more potentially affected by unknown CVE via serialize-javascript (>=7.0.0, <=7.0.2)

serialize-javascript NPM version =7.0.0, =1.0.5, =0.0.29, =0.7.5, =1.3.0, =0.1.0, =1.0.7, =0.2.0, =0.7.0-alpha.6 Source cves: unknown CVE Source advisory: OSV:GHSA-5C6J-R48X-RMVQ...

RockyLinux 9 : protobuf (RLSA-2026:3095)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:3095 advisory. python: protobuf: Protobuf: Denial of Service due to recursion depth bypass CVE-2026-0994 Tenable has extracted the preceding description block directly from the...

@ama-sdk/create (>=14.1.0-prerelease.11, <=14.1.0-prerelease.39), @gen-epix/generate-api (0.0.19) +21 more potentially affected by CVE-2026-2293 via @nestjs/core (11.1.13)

@nestjs/core NPM version 11.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on @nestjs/core and may be impacted: - @ama-sdk/create =14.1.0-prerelease.11, =1.0.41, =1.2.0, =1.2.1, =11.14.0, =2.28.1, =0.1.1, =0.15.1 and more Source cves: CVE-2026-2293...

RHSA-2026:2973 Red Hat Security Advisory: OpenShift Container Platform 4.14.62 packages and security update

Bulletin has no description...

RockyLinux 8 : munge (RLSA-2026:3032)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:3032 advisory. MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery CVE-2026-25506 Tenable has extracted the preceding description...