PT-2026-64319

lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setup comm prefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name, and company after setup completion. Attackers can POST to this endpoint to...

PT-2026-64267

A critical architectural breakdown targeting enterprise secret storage engines has been disclosed over the last 24 hours. A severe Zero-Day flaw dubbed "VaultSmuggle" tracked as CVE-2026-93401, CVSS 9.8 has been publicly revealed, heavily impacting HashiCorp Vault and OpenBao core clusters. When...

PT-2026-64443

Summary The b64 extension inlines images referenced by as base64 data URIs. When resolving the src path it joins it onto the configured base path with os.path.normpath and opens the result directly, with no check that the resolved path stays inside base path. A src containing ../ sequences, or an...

Important: kmod-nvidia-latest-dkms

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

Important: nvidia-open

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

Important: nvidia-persistenced

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

SUSE SLES12 Security Update : gawk (SUSE-SU-2026:3211-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3211-1 advisory. This update for gawk fixes the following issue: - CVE-2026-40468: integer overflow in the builtin.c program file bsc1271352. Tenable has extracted the...

Photon OS 5.0: Nasm PHSA-2026-5.0-0925

An update of the nasm package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0925. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Critical Photon OS Security Update - PHSA-2026-5.0-0929

Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...

PT-2026-64404

Name of the Vulnerable Software and Affected Versions React Router versions 7.0.0 through 7.17.0 Description In Framework Mode applications, the manifest endpoint can be accessed through unauthenticated targeted requests. This can result in heavy server load and increased response times. This iss...

Security Updates for Microsoft .NET Framework (July 2026)

The Microsoft .NET Framework installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-47302 -...

Debian dla-4696 : imagemagick - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4696 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4696-1 [email protected]...

OPENSUSE-SU-2026:11359-1 MozillaThunderbird-140.13.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11361-1 ffmpeg-7-7.1.4-5.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.4-5.1 package on the GA media of openSUSE Tumbleweed...

Photon OS 5.0: Linux PHSA-2026-5.0-0928

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0928. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-0926

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0926. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

helm3-3.21.3-3.1 on GA media (moderate)

helm3-3.21.3-3.1 on GA media Announcement ID: openSUSE-SU-2026:11334-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

Security update for gh (important)

openSUSE Security Update: Security update for gh Announcement ID: openSUSE-SU-2026:0259-1 Rating: important References: 1266618 Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE: 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products: openSUSE...

kernel-devel-7.1.4-1.1 on GA media (moderate)

kernel-devel-7.1.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11339-1 Rating: moderate Cross-References: CVE-2026-53366 CVE-2026-53381 CVE-2026-53382 CVE-2026-53383 CVE-2026-53384 CVE-2026-53385 CVE-2026-53386 CVE-2026-53387 CVE-2026-53388 CVE-2026-53389 CVE-2026-53390 CVE-2026-53391...

java-11-openjdk-11.0.32.0-1.1 on GA media (moderate)

java-11-openjdk-11.0.32.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11335-1 Rating: moderate Cross-References: CVE-2026-41254 CVE-2026-46917 CVE-2026-46968 CVE-2026-47010 CVE-2026-47021 CVE-2026-47027 CVE-2026-47057 CVE-2026-47058 CVE-2026-47059 CVE-2026-47063 CVE-2026-60147 CVSS scores:...