CVE-2026-83118: Improper Privilege Management

Vulnerability in the Applications DBA product of Oracle E-Business Suite component: AD Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise...

CVE-2026-83453: Improper Privilege Management

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2026-83257: Improper Privilege Management

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-58728: Concurrent Execution using Shared Resource with Improper Synchronization

In ARM64TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-40058: Time-of-check Time-of-use (TOCTOU) Race Condition

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through the Cloud Anti-malware for Microsoft...

PT-2026-92368

In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Fedora 45 : environment-modules (2026-972718725c)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-972718725c advisory. Update to 5.6.2 fix CVE-2026-85013 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

PT-2026-92859

Name of the Vulnerable Software and Affected Versions Oracle Middleware Common Libraries and Tools versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description A flaw in the Remote Diagnostic Agent component allows a low privileged attacker with access to the infrastructure where the...

PT-2026-91983

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description Privilege escalation exists within the Crash Reporting component. Recommendations Update Firefo...

CVE-2026-92010: Buffer Copy without Checking Size of Input

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

ALSA-2026:67528 Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

PT-2026-91989

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description Privilege escalation exists within the Graphics: CanvasWebGL component. CanvasWebGL is a...

CVE-2026-56973: Protection Mechanism Failure

In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

AlmaLinux 10 : rsync (ALSA-2026:67463)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67463 advisory. rsync: rsync 2.3.3 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink CVE-2026-70460 rsync: rsync: TLS Certificate Validation Bypass allows...

RHEL 10 : .NET 9.0 (RHSA-2026:67528)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67528 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

RockyLinux 9 : rsync (RLSA-2026:67462)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67462 advisory. rsync: rsync 2.3.3 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink CVE-2026-70460 rsync: rsync: TLS Certificate Validation Bypass allows...

CVE-2026-83254: Improper Privilege Management

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracl...

PT-2026-92579

Name of the Vulnerable Software and Affected Versions Oracle Internet Directory versions 12.2.1.4.0 Oracle Internet Directory versions 14.1.2.1.0 Description A flaw in the OID LDAP Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to...

PT-2026-92938

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Self-serv What-if Analysis. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-92907

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub...