CVE-2026-64711

CVE-2026-64711 affects Apple platforms where improper entitlement checks could allow an app to leak sensitive user information. Concrete details in the initial record specify the affected software versions and fixes: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Taho...

Openfire Administration Console - Authentication Bypass

Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...

Oracle Linux 9 : LibRaw (ELSA-2026-19345)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19345 advisory. 0.21.1-2 - Fix CVE-2026-21413 and CVE-2026-24450 Resolves: RHEL-165374, RHEL-165461 Tenable has extracted the preceding description block directly fro...

HPESBNW05085 rev.1 - HPE Unified Correlation Analyzer (UCA), Multiple Vulnerabilities

Potential Security Impact: Local: Compromise of System Integrity, XML External Entity XXE; Remote: Compromise of System Integrity, XML External Entity XXE SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified Correlation Analyzer UCA All versions prior to 4.4.11 CVSS Scores:...

ASUS AURA SYNC driver local privilege escalation

RISK EVALUATION Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation. 2. RECOMMENDED PRACTICES ASUS recommends that users check whether a newer version of...

Important: Red Hat Security Advisory: RHOAI 2.25.9 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 2.25.9 provides these changes:...

PT-2026-61704

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.27.0 Description Gitea allows a token with public-only,write:repository restrictions to update a private pull request head branch. This occurs because the system validates the token's public-only restriction against t...

Important: libtiff

Issue Overview: A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leadin...

SUSE SLED15: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-tools / etc (SUSE-SU-2026:3097-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3097-1 advisory. This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the xmlcatalog...

Oracle Linux 10 : glib2 (ELSA-2026-19148)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19148 advisory. 2.80.4-13 - Fix CVE-2025-14087 and CVE-2025-14512 Tenable has extracted the preceding description block directly from the Oracle Linux security...

[SECURITY] Fedora 44 Update: python-bcrypt-4.3.0-14.fc44

Modern password hashing for your software and your servers...

Oracle Linux 9 : cifs-utils (ELSA-2026-39576)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39576 advisory. 7.6-2 - resolves: RHEL-192982 - fix krb5 mount regression 7.6-1 - Update to version 7.6 - resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spneg...

Oracle Linux 10 : grafana (ELSA-2026-19027)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19027 advisory. 10.2.6-25 - Resolves RHEL-158484: CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

SUSE SLED15 / SLES15 Security Update : python-urllib3 (SUSE-SU-2026:2854-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2854-1 advisory. This update for python-urllib3 fixes the following issue - egression introduced by CVE-2025-66471 fix during file...

python-multipart affected by Denial of Service via large multipart preamble or epilogue data

SummaryA denial of service vulnerability exists when parsing crafted multipart/form-data requests with large preamble or epilogue sections. DetailsTwo inefficient multipart parsing paths could be abused with attacker-controlled input.Before the first multipart boundary, the parser handled leading...

RHSA-2026:37250 Red Hat Security Advisory: libreoffice security update

Bulletin has no description...

TencentOS Server 4: grafana (TSSA-2026:0525)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0525 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

RHSA-2026:36315 Red Hat Security Advisory: python3.14-pip security update

Bulletin has no description...

[SECURITY] Fedora 44 Update: rust-busd-0.5.0-3.fc44

A D-Bus bus broker implementation...

[SECURITY] Fedora 43 Update: python-jupyter-server-2.20.0-1.fc43

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila...