CVE-2025-61478

CVE-2025-61478 affects the Vanderbilt Industries Acre Security SPC5300.000 Main Board (v.3.14.1), a security access control component. A physically proximate attacker can trigger a denial of service by sending spoofed SYN packets , disrupting availability without compromising confidentiality or i...

OPENSUSE-SU-2026:11607-1 cloudflared-2026.8.2-1.1 on GA media

These are all security issues fixed in the cloudflared-2026.8.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11612-1 libIex-3_4-33-3.4.14-1.1 on GA media

These are all security issues fixed in the libIex-34-33-3.4.14-1.1 package on the GA media of openSUSE Tumbleweed...

MiracleLinux 9 : dotnet9.0-9.0.120-1.el9_8.ML.1 (AXSA:2026-1650:17)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1650:17 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

OPENSUSE-SU-2026:11609-1 distribution-registry-3.1.1-5.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11604-1 azure-storage-azcopy-10.32.7-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.32.7-1.1 package on the GA media of openSUSE Tumbleweed...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ksm: use range-walk function to jump over holes in scangetnextrmapitem CVE-2025-68211 kernel: ip6tunnel: use skbvlaninetprepare in ip6tnlrcv CVE-2026-23003 kernel: netfilter:...

SUSE SLES15 Security Update : kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3710-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3710-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed:...

EUVD-2025-210802

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers...

Tenable Security Center SCAP Audit File Command Injection

This is a Metasploit module that demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. This module requires Metasploit: https://metasploit.com/download Current...

CVE-2025-29419

CTFd v3.7.6 is vulnerable to a man-in-the-middle attack , allowing an adversary positioned on the adjacent network to intercept traffic. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N, indicating high confidentiality impact and low integrity impact with no r...

PT-2026-82233

Name of the Vulnerable Software and Affected Versions Spring Security version 7.1.0 Spring Security versions 7.0.0 through 7.0.6 Spring Security versions 6.5.0 through 6.5.11 Spring Security versions 6.4.0 through 6.4.18 Description An application using WebAuthn support may be vulnerable to user...

CVE-2025-61480

CVE-2025-61480 affects the Vanderbilt Industries, Acre Security SPC5300.000 Main Board (version 3.14.1 ). A physically proximate attacker can trigger a denial of service by sending spoofed TCP FIN packets that are accepted without validating the sequence or acknowledgment numbers, leading to a Hi...

EUVD-2025-210803

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...

Fedora 43 : python3.11 (2026-22170bd5c0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-22170bd5c0 advisory. Security release of Python 3.11 interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

OPENSUSE-SU-2026:11615-1 python313-GitPython-3.1.59-3.1 on GA media

These are all security issues fixed in the python313-GitPython-3.1.59-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11611-1 nodejs26-26.7.0-1.1 on GA media

These are all security issues fixed in the nodejs26-26.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-68525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access t...

Oracle Linux 8 : gstreamer1-plugins-base (ELSA-2026-59487)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59487 advisory. 1.16.1-6.0.1.el810.1 - Update origin URL Orabug: 36209826 1.16.1-6.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246576 Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-65182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specifi...