PT-2026-90863

Description Nimbus validated topology.blobstore.map against the calling subject at submission time only. The rebalance operation accepts configuration overrides and stripped a small set of keys from them, but never re-ran that validation, so a caller authorised to rebalance a topology could...

python313-modelscope-hub-0.4.2-1.1 on GA media (moderate)

python313-modelscope-hub-0.4.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11746-1 Rating: moderate Cross-References: CVE-2026-84202 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

python315-3.15.0~rc2-1.1 on GA media (moderate)

python315-3.15.0rc2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11748-1 Rating: moderate Cross-References: CVE-2026-15310 CVE-2026-15806 CVE-2026-17084 CVE-2026-18503 CVE-2026-19672 CVE-2026-6879 CVE-2026-9669 CVSS scores: CVE-2026-15310 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A...

perl-HTML-FormHandler-0.410.2-1.1 on GA media (moderate)

perl-HTML-FormHandler-0.410.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11745-1 Rating: moderate Cross-References: CVE-2022-4993 CVE-2026-19872 CVE-2026-85484 CVE-2026-85485 CVE-2026-85630 Affected Products: openSUSE Tumbleweed An update that solves 5 vulnerabilities can now be installed...

Fedora 44 : PackageKit (2026-6cf9691266)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6cf9691266 advisory. Update to 1.4.0 to fix CVE-2026-19816, GHSA-pwvr-2q5v-xvw4, GHSA-6759-8c43-4xrv, GHSA-6695-qjj5-533m, GHSA-gmhf-fxfx-m2w9 Tenable has extracted the preceding...

chromedriver-153.0.8010.36-1.1 on GA media (moderate)

chromedriver-153.0.8010.36-1.1 on GA media Announcement ID: openSUSE-SU-2026:11750-1 Rating: moderate Cross-References: CVE-2026-87429 CVE-2026-87430 CVE-2026-87431 CVE-2026-87432 CVE-2026-87433 CVE-2026-87434 CVE-2026-87435 CVE-2026-87436 CVE-2026-87437 CVE-2026-87438 CVE-2026-87439 CVE-2026-874...

CVE-2026-77101

creationtimestamp| type| source ---|---|--- 2026-09-12 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdkxjy6zv24...

CVE-2026-86218-N-central-IOC-Toolkit

CVE-2026-86218 — N-able N-central 사전 인증 RCE | IOC 및 탐지 툴킷 CVSS 10.0 치명적 · 사전 인증 원격 코드 실행 · 정적 코드 주입 CWE-96 · 실제 악용 중 · CISA KEV -yellow 유지관리자: @jithinkrishnanrs · 저장소: github.com/jithinkrishnanrs/CVE-2026-86218-N-central-IOC-Toolkit CVE-2026-86218 — 관리형 서비스 제공업체MSP가 널리 사용하는 온프레미스 및 호스팅 원격 모니터링 및...

PT-2026-90936

These are all security issues fixed in the bson-devel-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

389-ds-3.3.1+8c2711bd6-1.1 on GA media (moderate)

389-ds-3.3.1+8c2711bd6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11739-1 Rating: moderate Cross-References: CVE-2026-11770 CVE-2026-15722 CVE-2026-18355 CVE-2026-18453 CVE-2026-18663 CVE-2026-18922 CVE-2026-19843 CVE-2026-76560 CVSS scores: CVE-2026-11770 SUSE : 7.5...

perl-Authen-SASL-2.210.0-1.1 on GA media (moderate)

perl-Authen-SASL-2.210.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11734-1 Rating: moderate Cross-References: CVE-2026-86219 CVSS scores: CVE-2026-86219 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-86219 SUSE : 9.1...

sshamble-0.3.12-1.1 on GA media (moderate)

sshamble-0.3.12-1.1 on GA media Announcement ID: openSUSE-SU-2026:11737-1 Rating: moderate Cross-References: CVE-2026-67279 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

python313-modelscope-1.40.0-1.1 on GA media (moderate)

python313-modelscope-1.40.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11736-1 Rating: moderate Cross-References: CVE-2026-84202 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

Fedora 45 : PackageKit (2026-95d69295a4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-95d69295a4 advisory. Update to 1.4.0 to fix CVE-2026-19816, GHSA-pwvr-2q5v-xvw4, GHSA-6759-8c43-4xrv, GHSA-6695-qjj5-533m, GHSA-gmhf-fxfx-m2w9 Tenable has extracted the preceding...

CVE-2026-56829

creationtimestamp| type| source ---|---|--- 2026-09-11 22:37:09+00:00| published-proof-of-concept| https://github.com/shopperlabs/shopper/security/advisories/GHSA-g3f9-g5vj-p62f...

GHSA-H8M9-JGF8-VWVP

creationtimestamp| type| source ---|---|--- 2026-09-11 22:32:02+00:00| seen| https://gist.github.com/alon710/43186f210d41aaa752fb23f70074de25 2026-09-12 00:01:14+00:00| seen| https://gist.github.com/alon710/43186f210d41aaa752fb23f70074de25 2026-10-14 21:00:15+00:00| seen|...

CVE-2026-81915 In Concrete CMS below 9.5.3, Page Type update omits object-level authorization

Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::submit dashboard controller loaded and saved the Page Type identified by a user-supplied ptID without calling canEditPageType, so a signed-in dashboard user permitted to edit one...

GHSA-V39V-59XW-J98G

creationtimestamp| type| source ---|---|--- 2026-09-11 14:31:53+00:00| seen| https://gist.github.com/alon710/e350315aab7316ce10d2d2056b580adf...

GHSA-2P48-J3QC-RX9F

creationtimestamp| type| source ---|---|--- 2026-09-11 12:32:14+00:00| seen| https://gist.github.com/alon710/51fe1c5c2b206d4c1fc4589bae05ba41...

RLSA-2026:66392 Moderate: apr-util security update

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...