CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

CVE-2026-48120

Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, autorestore.kak script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Kakoune 2026.05.21 fixes the issue. As a workaround, a...

CVE-2026-68086

In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when collapsing There is no upstream commit, as this code was removed by upstream commit 044925f9b565 "mm: fs: remove filemapnrthps functions and their users" As-is, khugepaged and...

OpenSSH 10.5p1

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. It encrypts all traffic to eliminate eavesdropping, connection hijacking, and other attacks. In addition, OpenSSH provides a large suite of secure tunneling capabilities, several authentication methods, and...

CVE-2026-51583

The connected sources confirm a concrete vulnerability: in usememos up to v0.30.0, an authenticated remote user can leverage a flaw in the Webhook validation (internal/webhook/validate.go) to perform SSRF by targeting internal addresses. This is a server-side issue that arises from how webhook ta...

KB5120240: Windows 11 version 23H2 Security Update (August 2026)

The remote Windows host is missing security update 5120240. It is, therefore, affected by multiple vulnerabilities - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-62815 - Improper neutralization of special elements used in a command...

SUSE SLED15 / SLES15 Security Update : python-ujson (SUSE-SU-2026:3539-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3539-1 advisory. This update for python-ujson fixes the following issue: - CVE-2026-44660: memory leak in ujson.dump on write failure ca...

2026.3 IPU, Intel® Xeon® Processor Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Xeon® Processors may allow escalation of privilege. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20713 Description: Always-incorrect control flow implementation i...

Intel® Xeon® processor with Alias Checking Trusted Module Advisory

Summary: A potential security vulnerability in the Alias Checking Trusted Module for some Intel® Xeon® processor may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20898 Description: Improper acce...

Security Updates for Microsoft SharePoint Server 2016 (August 2026)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. CVE-2026-62827 -...

Security Updates for Microsoft Access Products (August 2026)

The Microsoft Access Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. CVE-2026-64906, CVE-2026-64908, CVE-2026-64914, CVE-2026-64920 -...

Fedora 44 : chromium (2026-eebdfdf5ba)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-eebdfdf5ba advisory. chromium-151.0.7922.108 security release fix 41 CVE CVE-2026-19137: Use after free in WebGL CVE-2026-19138: Heap buffer overflow in CrashReporting...

Fedora 43 : libcupsfilters (2026-1ed9130cea)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1ed9130cea advisory. fixes CVE-2026-64611 and CVE-2026-64612 fedora2506364 Tenable has extracted the preceding description block directly from the Fedora security...

Security Updates for Microsoft Word Products (August 2026)

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-63527, CVE-2026-64907 - Use after free in Microsoft Office...

MiracleLinux 9 : nginx:1.24 (AXSA:2026-1509:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1509:01 advisory. nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Tenable has extracted t...

Apache Tomcat 9.0.40 < 9.0.117 Improper Encoding or Escaping of Output Vulnerability (CVE-2026-34483)

The version of Tomcat installed on the remote host is 9.0.40 prior to 9.0.117. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.117security-9 advisory. - Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache...

KB5121000: Windows 11 Version 26H1 Security Update (August 2026)

The remote Windows host is missing security update 5121000. It is, therefore, affected by multiple vulnerabilities - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-62815 - Improper neutralization of special elements used in a command...

Fedora 44 : emacs (2026-b4d966ae0a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b4d966ae0a advisory. This mitigates a vulnerability that allowed a specially crafted file to trigger execution of attacker- controlled arbitrary Emacs Lisp code immediately when...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:3535-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3535-1 advisory. - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713. Tenable has extracted the preceding description block directly fro...