Chromium: CVE-2026-14088 Uninitialized Use in Canvas

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-14025 Use after free in Views

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: haproxy: haproxy-3.0.25-0.1.hum1 aarch64, x8664 haproxy-3.0.25-0.1.hum1.src src...

ROOT-OS-DEBIAN-13-CVE-2026-45031 CVE-2026-45031 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-45031 in the rootio-imagemagick package for Root:Debian:13. Multiple fixed versions available...

@devpodio/github-extension (1.0.0), @eclipse-glsp-examples/workflow-theia (>=1.0.0-theia1.27.0, <=1.1.0-next.e29c96e.130) +119 more potentially affected by CVE-2026-10055 via @theia/request (>=1.26.0, <=1.72.3)

@theia/request NPM version =1.26.0, =1.0.0-theia1.27.0, =1.0.0, =0.7.1, =1.58.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.57.0-next.37, =1.46.0-next.241, =1.72.3 and more Source cves: CVE-2026-10055 Source advisory: SNYK:JS-THEIAREQUEST-17810719...

RHSA-2026:35111 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:32963 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

CVE-2026-8921

External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message. Refer to the ' Security Update for ASUS Business Manager ' section on the ASUS Security Advisory for more information...

CVE-2026-12960

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App ' section on the ASUS...

Apple Security Advisory 06-29-2026-1

Apple Security Advisory 06-29-2026-1 - iOS 26.5.2 and iPadOS 26.5.2 addresses double free, out of bounds access, out of bounds write, and use-after-free vulnerabilities...

Fedora 44 : leptonica / openqa / os-autoinst (2026-a72f110dcd)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a72f110dcd advisory. This update includes new upstream snapshots of openQA and os-autoinst, with the usual mix of fixes and improvements. See upstream changelogs for details. For...

Fedora 43 : apptainer (2026-f8ab642466)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f8ab642466 advisory. Update to upstream 1.5.2. Also fixes CVE-2026-27145 because golang was new enough. Tenable has extracted the preceding description block directly from the...

openSUSE 16 Security Update : python-mistune (openSUSE-SU-2026:21191-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21191-1 advisory. This update for python-mistune fixes the following issue - CVE-2026-49851: potential DoS via quadratic-time parsing in parselinktext bsc1269091. Tenable...

Ubuntu 25.10 / 26.04 LTS : libyang vulnerability (USN-8485-1)

The remote Ubuntu 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8485-1 advisory. It was discovered that libyang incorrectly handled certain metadata list pointers. An attacker could use this issue to cause libyang to crash, resulting i...

openSUSE 16: jline3 / jline3-builtins / jline3-console / jline3-console-ui / etc (openSUSE-SU-2026:21221-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21221-1 advisory. Changes in jline3: unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables bsc1269021 Tenable has extracted the preceding...

Debian dla-4666 : openvpn - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4666 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4666-1 [email protected]...

Fedora 45 : hplip (2026-c5b6bb47c5)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c5b6bb47c5 advisory. Automatic update for hplip-3.26.4-7.fc45. Changelog Fri Jul 3 2026 Zdenek Dohnal - 3.26.4-7 - fix CVE-2026-14544 - incomplete fix after CVE-2026-863...

PHP 8.3.x < 8.3.32 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.3.32. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.32 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Fedora 44 : pdns (2026-f6ac0db764)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f6ac0db764 advisory. - Update to 5.0.6 - CVE-2026-42005 Security Advisory: https://doc.powerdns.com/authoritative/security-advisories/powerdns- advisory-2026-07.html Tenable has...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-168-03)

The version of mozilla-firefox installed on the remote host is prior to 140.12.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-168-03 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...