171345 matches found
ROOT-OS-DEBIAN-12-CVE-2024-26461 CVE-2024-26461 in krb5 - Patched by Root
Root has patched CVE-2024-26461 in the krb5 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-66046 CVE-2026-66046 in expat - Patched by Root
Root has patched CVE-2026-66046 in the expat package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-28387 CVE-2026-28387 in openssl - Patched by Root
Root has patched CVE-2026-28387 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-34180 CVE-2026-34180 in openssl - Patched by Root
Root has patched CVE-2026-34180 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-34182 CVE-2026-34182 in openssl - Patched by Root
Root has patched CVE-2026-34182 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-7383 CVE-2026-7383 in openssl - Patched by Root
Root has patched CVE-2026-7383 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-45447 CVE-2026-45447 in openssl - Patched by Root
Root has patched CVE-2026-45447 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-4438 CVE-2026-4438 in glibc - Patched by Root
Root has patched CVE-2026-4438 in the glibc package for Root:Ubuntu:22.04. Multiple fixed versions available...
CVE-2026-111312: Missing Authentication for Critical Function
OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/id GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData record id can read another user's medic...
MiracleLinux 9 : flatpak-builder-1.2.3-1.el9_8.1 (AXSA:2026-2052:01)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2052:01 advisory. flatpak-builder: Host code execution via git am hook execution in patch source extraction use-git- am CVE-2026-86320 Tenable has extracted the preceding...
Rocky Linux 8 [CIQ] Security Update: flatpak-builder / flatpak-builder-debuginfo / etc (crlsa-2026_80973)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202680973 advisory. flatpak-builder: Host code execution via git am hook execution in patch source extraction use-git- am CVE-2026-86320 Tenable has extracted the preceding descriptio...
RHEL 10 : kpatch-patch-6_12_0-211_16_1 and kpatch-patch-6_12_0-211_49_1 (RHSA-2026:82326)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:82326 advisory. This is a kernel live patch module that can be loaded by the kpatch command-line utility to modify the code of a running kernel. This patc...
CVE-2026-110623
Papermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API that allows authenticated users to share other users' documents by supplying arbitrary node UUIDs. Attackers can call POST /shared-nodes or PATCH /shared-nodes/access/nodeid to grant themselves an...
CVE-2026-110623
Papermerge Core versions up to and including 3.5.3 are vulnerable to a missing authorization flaw in the shared nodes API . By supplying arbitrary node UUIDs, authenticated users can exploit the POST /shared-nodes or PATCH /shared-nodes/access/{node_id} endpoints to grant themselves roles over ot...
CVE-2026-110623 Papermerge Core through 3.5.3 Missing Authorization in Shared Nodes API
Papermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API that allows authenticated users to share other users' documents by supplying arbitrary node UUIDs. Attackers can call POST /shared-nodes or PATCH /shared-nodes/access/nodeid to grant themselves an...
EUVD-2026-101251
Papermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API that allows authenticated users to share other users' documents by supplying arbitrary node UUIDs. Attackers can call POST /shared-nodes or PATCH /shared-nodes/access/nodeid to grant themselves an...
CVE-2026-110623 Papermerge Core through 3.5.3 Missing Authorization in Shared Nodes API
Papermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API that allows authenticated users to share other users' documents by supplying arbitrary node UUIDs. Attackers can call POST /shared-nodes or PATCH /shared-nodes/access/nodeid to grant themselves an...
ROOT-APP-NUGET-CVE-2026-40894 CVE-2026-40894 in OpenTelemetry.Api - Patched by Root
Root has patched CVE-2026-40894 in the OpenTelemetry.Api package for Root:NuGet. Multiple fixed versions available...
TruConfidence: Why Your Patch Automation Can Finally Be Autonomous
TruConfidence: The AI-Powered Remediation Intelligence & Orchestration engine powering TruRisk Eliminate 2.0 delivers autonomous remediation at scale with proof at every step. Executive Summary Vulnerabilities are now discovered faster than enterprises can remediate them. Patch automation has bee...