GO-2025-3839 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2025-3924 vulnerabilities

Vulnerabilities for packages: vault, splunk-otel-collector, splunk-otel-collector-fips...

GO-2024-2848 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2024-3223 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login-fips, crossplane-provider-aws-ecr, drone-fips, kubo, virt-handler-fips, nri-consul-fips, k8sgpt, kubernetes-csi-external-attacher, crossplane-provider-aws-sesv2, terraform, crossplane-provider-aws-lightsail-fips, cluster-autoscaler,...

GO-2026-5417 vulnerabilities

Vulnerabilities for packages: k8sgateway, juicefs, kubernetes-dns-node-cache...

CLSA-2026-1786690945 TuxCare security update for org.springframework.hateoas:spring-hateoas (1 CVE)

TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 1 CVE. Fixed in 2.4.1-tuxcare.2...

CVE-2026-19786

A vulnerability was found in francoisjacquet RosarioSIS up to 12.8. This issue affects some unknown processing of the file Modules.php. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. Upgrading to version 12.9 is capable of addressin...

CVE-2026-19785

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be...

Linux Distros Unpatched Vulnerability : CVE-2026-73251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - mongoose - None CVE-2026-73251 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

Linux Distros Unpatched Vulnerability : CVE-2026-73261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MGENABLETCPIP in src/netbuiltin.c does not reject a...

Linux Distros Unpatched Vulnerability : CVE-2026-63626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mongoose is an embedded web server and network library. Prior to 7.23, ppphandleipv6cp in src/l2ppp.c trusts the 16-bit IPv6CP len field without checking it...

Fedora 44 : flatpak (2026-6b83471b0e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6b83471b0e advisory. Update to 1.18.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

nodejs:22 security update

nodejs 1:22.23.1-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 1:22.23.1-3 - Backport patch: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 Resolves: RHEL-224135 RHEL-224144 1:22.23.1-2 -...

Linux Distros Unpatched Vulnerability : CVE-2026-73252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack selected by MGTLSBUILTIN in src/tlsbuiltin.c accepts a TLS 1.3...

Linux Distros Unpatched Vulnerability : CVE-2026-50626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-63318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/1f24066fc88d33455ee54a20f29994d9e69997ba v11.1.0-rc3NOTE: Fixed by: https://gitlab.com/qemu-...

Linux Distros Unpatched Vulnerability : CVE-2026-16457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - virtio: Malformed packed descriptor livelocks the device at 100% host CPU guest triggered DoS CVE-2026-16457 Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-73260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS certificate parser selected by MGTLSBUILTIN fails to verify that a...

Linux Distros Unpatched Vulnerability : CVE-2026-66021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...