CVE-2026-85103 - ASN.1 decoding heap overflow leading to a remote code execution

Symptoms - Issue: A heap overflow in the VPN certificate ASN.1 decoding flow may allow an attacker to remotely execute arbitrary code on the Security Management Server and Security Gateway. Clarification: All Security Management Server deployments are vulnerable, regardless of configuration, and...

OPENSUSE-SU-2026:11708-1 perl-Net-DNS-1.570.0-1.1 on GA media

These are all security issues fixed in the perl-Net-DNS-1.570.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11700-1 hauler-2.1.0-3.1 on GA media

These are all security issues fixed in the hauler-2.1.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11702-1 jsoup-1.23.2-1.1 on GA media

These are all security issues fixed in the jsoup-1.23.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11695-1 cadvisor-0.60.5-3.1 on GA media

These are all security issues fixed in the cadvisor-0.60.5-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11712-1 python313-jwcrypto-1.6.0-1.1 on GA media

These are all security issues fixed in the python313-jwcrypto-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11705-1 kimi-code-0.41.0-1.1 on GA media

These are all security issues fixed in the kimi-code-0.41.0-1.1 package on the GA media of openSUSE Tumbleweed...

Slackware Linux 15.0 libxml2 Vulnerability (SSA:2026-249-02)

The version of libxml2 installed on the remote host is prior to 2.11.9. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-249-02 advisory. New libxml2 packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the preceding description block...

PT-2026-88199

These are all security issues fixed in the bson-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik allows a hacker to bypass security restrictions and gain read-only access to data.

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik is related to errors in verifying the cryptographic signature during the incorrect comparison of the RSA public key assigned to the user. Exploiting this vulnerability allows a malicious actor to...

PT-2026-86670

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

OPENSUSE-SU-2026:11699-1 google-guest-agent-20260903.00-1.1 on GA media

These are all security issues fixed in the google-guest-agent-20260903.00-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11706-1 bson-devel-2.5.2-1.1 on GA media

These are all security issues fixed in the bson-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

APSB26-146 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical vulnerability that could result in arbitrary code execution...

OPENSUSE-SU-2026:11713-1 trivy-0.74.0-4.1 on GA media

These are all security issues fixed in the trivy-0.74.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11697-1 distribution-registry-3.1.1-6.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11707-1 libopenslide-devel-4.0.1-1.1 on GA media

These are all security issues fixed in the libopenslide-devel-4.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

Adobe ColdFusion - Pre-Auth Remote Code Execution

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...

MOVEit Transfer - Remote Code Execution

In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...

CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...