Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the device-pair approval. An attacker can perform unauthorized actions by exploiting misconfigured input paths when the affected feature is enabled and...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62223 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62223 Source advisory: SNYK:JS-OPENCLAW-18017828...

@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-62229 via openclaw (>=2026.3.22, <=2026.5.7)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62229 Source advisory: SNYK:JS-OPENCLAW-18017826...

GHSA-VWJC-V7X7-CM6G

creationtimestamp| type| source ---|---|--- 2026-07-17 00:31:31+00:00| seen| https://gist.github.com/alon710/aa823e4042d20db07abf6864647f71af...

GHSA-48QW-824M-86PR

creationtimestamp| type| source ---|---|--- 2026-07-17 00:31:31+00:00| seen| https://gist.github.com/alon710/aa823e4042d20db07abf6864647f71af...

Oracle Linux 10 : grafana (ELSA-2026-19134)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19134 advisory. - Resolves: RHEL-183694: CVE-2026-39821 - Resolves RHEL-161791: CVE-2026-27877 - Resolves RHEL-166459: CVE-2026-32282 Tenable has extracted the...

Oracle Linux 10 : mod_http2 (ELSA-2026-34355)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-34355 advisory. - Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913 - Resolves: RHEL-182410 - modhttp2: HTTP/2: Remote Denial of Service via compression...

Oracle Linux 10 : grafana-pcp (ELSA-2026-19136)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19136 advisory. - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-166460: CVE-2026-32282 Tenable has extracted the...

Oracle Linux 10 : delve (ELSA-2026-23102)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-23102 advisory. 1.26.1-2.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-2 - Bump Tenable has extracted the preceding description block direct...

RHEL 10 : pacemaker (RHSA-2026:41041)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:41041 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in...

Oracle Linux 10 : rrdtool (ELSA-2026-33731)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33731 advisory. 1.8.0-21 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173264 Tenable has extracted the preceding description block...

Oracle Linux 10 : php (ELSA-2026-23388)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-23388 advisory. 8.3.31-1 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode Tenable has extracted the preceding description block directly from the...

Fedora 43 : firefox (2026-365cce949c)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-365cce949c advisory. - New upstream release 152.0.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Oracle Linux 10 : cockpit-image-builder (ELSA-2026-24331)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-24331 advisory. 94.3-1.0.1 - Switch to old frotend Orabug: 38011073 Orabug: 37856296 Orabug: 37856375 - Replaced additional upstream url Orabug: 37856187 - Replaced...

RockyLinux 8 : hplip (RLSA-2026:40894)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:40894 advisory. HPLIP: Incomplete Fix for CVE-2026-8631 CVE-2026-14544 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note...

RockyLinux 9 : hplip (RLSA-2026:40831)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:40831 advisory. HPLIP: Incomplete Fix for CVE-2026-8631 CVE-2026-14544 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note...

Oracle Linux 10 : python3.14-pip (ELSA-2026-36193)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36193 advisory. 25.2-5 - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pipinstallupgrade to run pip-3.14 - fix bash completion +...

Oracle Linux 10 : grafana (ELSA-2026-35827)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-35827 advisory. - Resolves: RHEL-183694: CVE-2026-39821 - Resolves RHEL-161791: CVE-2026-27877 - Resolves RHEL-166459: CVE-2026-32282 Tenable has extracted the preceding...

Oracle Linux 10 : grafana-pcp (ELSA-2026-35826)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-35826 advisory. - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-166460: CVE-2026-32282 Tenable has extracted the preceding...

Oracle Linux 10 : samba (ELSA-2026-22963)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22963 advisory. - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933...