PT-2026-72961

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci sync: Fix advertising data UAFs hci find adv instance returns an adv info pointer that is valid only while hdev-lock is held. The advertising command-sync paths perform instance lookups without that lock and, in so...

PT-2026-72362

In the Linux kernel, the following vulnerability has been resolved: fs/proc/task mmu: fix hugetlb self-deadlock in pagemap scan pte hole A PAGEMAP SCAN ioctl requesting PM SCAN WP MATCHING on a hugetlb VMA hangs the calling thread, unkillably, as soon as the scan reaches an unpopulated part of th...

CVE-2026-10768

creationtimestamp| type| source ---|---|--- 2026-08-14 18:00:14+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-10768.yaml 2026-08-15 00:00:14+00:00| confirmed|...

GO-2025-3699 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-fips, docker-compose, neuvector, docker-compose-fips...

GO-2026-6007 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: nfpm, grafana-fips, cert-manager, crossplane-provider-azure-securityinsights, crossplane-provider-family-azure, crossplane-provider-azure-spring, crossplane-provider-azure-operationalinsights, crossplane-provider-azure-servicebus, crossplane-provider-azure-solutions,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: grafana-fips, gitlab-cng, gitlab-cng-fips, beats-fips, tkn-fips, kyverno, kyverno-notation-aws-fips, jitsucom-bulker, k9s-fips, istio-fips, beats, bank-vaults, pluto-fips, ratify-fips, grafana, rancher-security-scan, mattermost-fips, zitadel, boring-registry-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: chaos-mesh, drone-fips, eksctl, helm-exporter, consul-k8s, zarf-fips, redpanda-operator, tigera-operator-fips, cloudbeat-fips, argocd-image-updater-fips, chaos-mesh-fips, kyverno, trivy, k9s-fips, trivy-fips, tigera-operator, jfrog-cli, steampipe, vcluster-fips,...

GO-2024-2748 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, prometheus-adapter-fips, eksctl, vertical-pod-autoscaler-fips, spark-operator, velero-plugin-for-csi-fips, tigera-operator-fips, multus-cni-fips, addon-resizer-fips, step-issuer-fips, tekton-chains, thanos-operator-fips, tigera-operator, kine,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: drone-fips, timestamp-authority-fips, consul-k8s, gomplate, crossplane-provider-aws-xray-fips, crossplane-provider-aws-grafana-fips, crossplane-provider-aws-ssoadmin-fips, hydra, external-secrets-operator-fips, steampipe, trufflehog-fips, helm-mapkubeapis,...

GO-2026-5506 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-emr, consul, podman-fips, consul-k8s, gitlab-cng, beats-fips, kyverno, step-issuer-fips, kubernetes-event-exporter, prometheus-fips, kyverno-policy-reporter-plugins-trivy-fips, external-secrets-operator-fips, cadvisor,...

GO-2026-4512 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2025-4043 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: kots, portieris, envoy-gateway, zot, gitness, argocd-image-updater...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: multus-cni, kubernetes-dashboard-api, go-bindata, flux, trust-manager, promxy, gitea, flux-source-controller, terraform-docs, elvish, croc, wazero, scorecard, aws-flb-kinesis, pdfcpu, nri-f5, cert-manager-webhook-pdns, cfssl, kuberlr, karma, tfsec, bom,...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-54574)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54574 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 Tenable has extracted t...

DEBIAN-CVE-2026-73433

A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...

GitLab 17.6 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-8667)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.0.6, 19... CVE-2026-8667 Note that Nessus has not tested for this issue but has instead relied only on the...

Linux Distros Unpatched Vulnerability : CVE-2026-68126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mac802154: hold an interface reference across the scan worker mac802154scanworker captures the scanning sub-interface under RCU and then keeps dereferencing...

GitLab 19.2 < 19.2.2 (CVE-2026-16627)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2... CVE-2026-16627 Note that Nessus has not tested for this issue but has instead relied only on the...