CVE-2026-80643

A flaw was found in the Linux kernel's EDAC/igen6 driver. When this driver is unloaded, a missing 'release' function for memory controller devices can lead to a system call trace. This issue indicates a system error and could potentially result in system instability or a denial of service DoS...

CVE-2026-82629 jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted upload

A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web/back/MyJwWebJwid3Controller.java of the component doUploa...

SUSE SLES15: kubernetes1.35-client / kubernetes1.35-client-bash-completion / etc (SUSE-SU-2026:3824-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3824-1 advisory. This update for kubernetes rebuilds it against the current go security release. Tenable has extracted the preceding description block direct...

Linux Distros Unpatched Vulnerability : CVE-2026-80691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE In the iblockexecuteprout function, PROPREEMPT, PROPREEMPTANDABORT, and PRORELEASE all...

PT-2026-83819

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the file aca.sql. Performing a manipulation results in use of default password. Remote exploitation of the attack is possible. The exploit is now...

The vulnerability of the xfrm_migrate_policy_find() function in the net/xfrm/xfrm_policy.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xfrmmigratepolicyfind function in the net/xfrm/xfrmpolicy.c module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE SLES15 Security Update : rootlesskit (SUSE-SU-2026:3822-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3822-1 advisory. This update for rootlesskit rebuilds it against the current go security release. Tenable has extracted the preceding description block...

The vulnerability of the mshv_handle_gpa_intercept() function in the drivers/hv/mshv_root_main.c file of the Linux operating system for Microsoft HyperV kernel driver allows a attacker to cause a service failure.

The vulnerability of the mshvhandlegpaintercept function in the drivers/hv/mshvrootmain.c file of the Microsoft HyperV Linux operating system kernel driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service...

SUSE SLES15 Security Update : buildah (SUSE-SU-2026:3817-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3817-1 advisory. This update for buildah rebuilds it against the current go security release. Tenable has extracted the preceding description block directly...

SUSE SLES15: kubernetes1.33-client / kubernetes1.33-client-bash-completion / etc (SUSE-SU-2026:3823-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3823-1 advisory. This update for kubernetes-old rebuilds it against the current go security release. Tenable has extracted the preceding description block...

SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:3818-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3818-1 advisory. This update for docker rebuilds it against the current go security release. Tenable has extracted the preceding...

Fedora 43 : kernel (2026-f04e0d4d9d)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f04e0d4d9d advisory. The 7.1.12 stable kernel update contains a single fix for CVE-2026-80590. ---- The 7.1.11 stable kernel updates contain a number of important fixes across th...

OPENSUSE-SU-2026:21696-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...

FreeBSD : net-p2p/c-lightning -- unknown vulnerability (d2e1db41-f7a7-45e9-ace3-b94038416545)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d2e1db41-f7a7-45e9-ace3-b94038416545 advisory. Core Lightning team reports: This point release includes fixes for vulnerabilities responsibly reported...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001434 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse the buffer of the extents path In ext4exttrytomergeup, set path1.pbh to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001454 advisory. In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001485 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code tries to release the...

EUVD-2026-42698

Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass...

SUSE CVE-2026-80643

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...

SUSE CVE-2026-80687

In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevicesize error path iommufdvdeviceallocioctl takes idev-igroup-lock, then validates the driver's vdevicesize against the core structure size with a WARNONONCE. On failure that gua...