RHEL 8 : .NET 8.0 (RHSA-2026:41901)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41901 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Logto Identity Platform has authentication and authorization failures in core protocol handling

Overview The Logto platform contains multiple vulnerabilities affecting the identity‑processing pipeline. These flaws reduce the reliability of authentication and authorization decisions and may allow attackers to bypass account‑ownership checks, skip MFA, replay externally issued SSO responses, ...

Fedora 43 : fractal (2026-9630be304f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9630be304f advisory. 14.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

firefox-esr-140.13.0-1.1 on GA media (moderate)

firefox-esr-140.13.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11329-1 Rating: moderate Cross-References: CVE-2026-15718 CVE-2026-15719 CVE-2026-16349 CVE-2026-16350 CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354 CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358...

[SECURITY] [DSA 6394-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6394-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 22, 2026 https://www.debian.org/security/faq -...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ds, crossplane-provider-azure-security, crossplane-provider-aws-workspaces, crossplane-provider-aws-elasticache-fips, crossplane-provider-aws-rds, crossplane-provider-gcp-beta-cloudplatform, crossplane-provider-azure-notificationhubs,...

GHSA-94PJ-82F3-465W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-G446-98W2-8P5W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

Oracle Critical Patch Update, July 2026 Security Update Review

Oracle released its third quarterly edition of this year’s Critical Patch Update. The update received patches for 1449 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families,...

Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager is vulnerable to multiple vulnerabilities

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM Tivoli Application Dependency Discovery Manager TADDM. These issues were disclosed as part of the Java Technology Edition Quarterly CPU - Apr 2026. Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION:...

httpd security, bug fix, and enhancement update

An update is available for httpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

GHSA-GCFJ-64VW-6MP9 vulnerabilities

Vulnerabilities for packages: nextcloud-server, opensearch-dashboards, lerna, kubeflow-centraldashboard, langfuse, prism, jitsucom-jitsu...

CLEANSTART-2026-FV79231 Netty is a network application framework for development of protocol servers and clients

Multiple security vulnerabilities affect the s3proxy package. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

CLEANSTART-2026-EP65920 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-BF01272 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the knative-serving package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

Photon OS 5.0: Libxml2 PHSA-2026-5.0-0855

An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Glib PHSA-2026-5.0-0855

An update of the glib package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

IssueTrojanBench: Benchmarking AI Coding Agents against Malicious Issue Requests

AI coding agents powered by LLMs are increasingly integrated into real-world software development, where they generate, edit, and execute code with autonomous access to local files and tools. Coding agents inherit security risks from both the LLM backbone, where adversarial prompts, poisoned...

Oracle Linux 7 : python3 (ELSA-2026-35838)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-35838 advisory. - Security update CVE-2026-4786 Orabug: 39695277 - Security update CVE-2026-4519 Orabug: 39246828 - Security update CVE-2025-15366, CVE-2025-15367, CVE-2026-12...

RHEL 10 / 8 / 9 : Red Hat JBoss Web Server 6.2.4 (RHSA-2026:43401)

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:43401 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised ...