MiracleLinux 9 : ldns-1.7.1-12.el9_8.1 (AXSA:2026-1603:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1603:02 advisory. ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching CVE-2026-10846 Tenable has extracted the preceding description block...

MiracleLinux 9 : fence-agents-4.10.0-110.el9_8.5 (AXSA:2026-1605:15)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1605:15 advisory. httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies CVE-2026-59939 Tenable has extracted the preceding description bloc...

SUSE SLED15 / SLES15 Security Update : sccache (SUSE-SU-2026:3674-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3674-1 advisory. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes...

CVE-2026-69225

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69224

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69225

Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier are affected by an information disclosure vulnerability that allows a remote, unauthenticated attacker to reflect sensitive information in an HTTP response body. The NVD scores this CVSS 7.5 (HIGH) with high confidentiality impact, whi...

EUVD-2026-64154

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69225 information disclosure vulnerability in Esri Portal for ArcGIS

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69225 information disclosure vulnerability in Esri Portal for ArcGIS

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

EUVD-2026-64152

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69224 information disclosure vulnerability in Esri Portal for ArcGIS

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69224 information disclosure vulnerability in Esri Portal for ArcGIS

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69224

Esri Portal for ArcGIS versions 12.0 and earlier are affected by an information disclosure vulnerability that may allow a remote, unauthenticated attacker to reflect sensitive information in an HTTP response body under difficult-to-reproduce circumstances. The primary impact is confidentiality (h...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty

Summary IBM i is vulnerable to denial of service CVE-2026-11897, CVE-2026-15057, CVE-2026-14981, CVE-2026-64958, CVE-2026-57819, CVE-2026-54225, HTTP response smuggling CVE-2026-15064, CVE-2026-15328, CVE-2026-15325, and bypassing of security constraints CVE-2026-10842 in WebSphere Application...

EUVD-2026-64122

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3...

CVE-2026-27462

Combodo iTop , a web-based IT service management tool, is vulnerable to user enumeration via its password reset mechanism prior to version 3.2.3. The root cause is that the application returns different responses for valid and invalid usernames depending on multiple factors during the reset proce...

Wazuh and AI For Enhanced SOC Workflows

Artificial Intelligence AI has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making...

Malicious code in requests-crypt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f971c743a8c6661c9078bdb6486843bb50831fadf9a9a6943e8231fac374ac2f requests-crypt wraps an HTTP client so that every JSON response passes through a DataProcessor that reads a configurable field default 'cos' from the...

Security update for sccache

This update for sccache fixes the following issues: CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274146. CVE-2026-66746: rouille: HTTP Response Splitting via Unvalidated Response Header Values bsc1273881. CVE-2026-66754: rouille:...

SUSE-SU-2026:3674-1 Security update for sccache

This update for sccache fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274146. - CVE-2026-66746: rouille: HTTP Response Splitting via Unvalidated Response Header Values bsc1273881. - CVE-2026-66754: rouill...